last executing test programs: 11.002547825s ago: executing program 3 (id=2947): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff00", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f00000003c0)=""/182, &(0x7f0000000080)=0xb6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x50, r10, 0x5, 0x70bd27, 0x6, {{}, {@void, @val={0xc, 0x99, {0x3, 0x43}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x7, 0x0, 0xfffe, 0x55c5}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x0, 0x2, 0x0, {0x3c84, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3}, 0xb06, 0x5, 0x19}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x488c0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000280"], 0x34}}, 0x0) 10.847515139s ago: executing program 3 (id=2948): unshare(0x20000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000300), 0x4) unshare(0x40000000) socket(0x0, 0x5, 0x1) 10.055437s ago: executing program 3 (id=2954): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0xfffffce6, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000006dc0)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8081) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r11, 0x1, 0x23, &(0x7f0000000000)=0xf7, 0x4) bind$inet(r11, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) 8.783822355s ago: executing program 3 (id=2964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa06"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 8.058310855s ago: executing program 3 (id=2968): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) r2 = epoll_create(0x2) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r2, 0x220}, {r2, 0x42c1}], 0x3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x8000000}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000180)={0xd53, {0x38, 0x2, 0x80000000, 0xffffffff, 0x7f}}) (async) write(r2, &(0x7f00000000c0)="f974ed5d4847c530479748a090a2565378ec9bbec2fff3e9385b04eac626cf1484bd35023caec46dc09d1ddb0a809fdc08502af27db226c570f43537be8356585449839378873f56689cc78b302f28bfef98c53e226670d7bd5535c5929b3eb34d5905f44f146a3e8583e177aff9935a97c4fbc3af12ae767cfff433c70360a33319c90d9c573b63187fd4098cf8298a2e1efdbfe9cf1d6bf2c7797f82e967fa360140ee5d5a803739ee83", 0xab) shutdown(r0, 0x1) 7.833119309s ago: executing program 3 (id=2979): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) listen(r0, 0x8) listen(0xffffffffffffffff, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r7, 0x0, 0x20000253) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r8, 0x1, 0x7, 0x0, &(0x7f0000001640)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x6, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x57, 0x5e55b37311de6d89, 0x0, @loopback, @multicast2}}}}) 5.105730667s ago: executing program 0 (id=2995): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r0, 0x20, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a00)=""/56, 0x38}}, 0x10) 4.959844689s ago: executing program 0 (id=2998): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x7}], 0x1, 0x12020, 0x0) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) accept$unix(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.343892419s ago: executing program 0 (id=3001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x4, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x8}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x20, 0x100c}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) 3.371423387s ago: executing program 0 (id=3007): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1f4}}, 0x50) 3.37097683s ago: executing program 2 (id=3008): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xa, [@var={0xc, 0x0, 0x0, 0xe, 0x4}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x1}, {0xc, 0x6}, {0x4, 0xb2a}, {0xc, 0xfffffff8}, {0x9, 0x6}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x2}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x6d, 0x0, 0x37, 0x4}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @float={0x7, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x0, 0x5f, 0x2e, 0x2e, 0x61, 0x61, 0x61]}}, &(0x7f0000000340)=""/122, 0x9e, 0x7a, 0x1, 0x740, 0x10000, @value}, 0x28) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) 3.179611966s ago: executing program 2 (id=3009): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) listen(r0, 0x8) listen(0xffffffffffffffff, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000253) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r8, 0x1, 0x7, 0x0, &(0x7f0000001640)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x6, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x57, 0x5e55b37311de6d89, 0x0, @loopback, @multicast2}}}}) 3.128364595s ago: executing program 0 (id=3010): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x4010004, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0xe03}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000800002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0312da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d4270640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca6bbfe4ba8c215129a7bccb223222ff1a43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b463890ace6cb23d4f82f398ba2944ddaba606cd163246c455d642ffb22a4b9055c4dd3d16f69587e6083df4bc6dec75713b5465c4aad1e18cc443e300"/4521], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcec, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='6'], 0x20) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) getpeername$packet(r0, 0x0, 0x0) 2.701747064s ago: executing program 4 (id=3013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x4000000000000005}]}]}, 0x38}, 0x1, 0x7000000}, 0xc000) 2.700274478s ago: executing program 1 (id=3014): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 2.639639078s ago: executing program 0 (id=3015): unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}, {0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x2b, 0x78, &(0x7f0000000300)="c83fc909407a4a7e6eb4faa4611b36d23d4f75fd73d67b021abc1c75acf8942549e7993afe0238b3be6522", &(0x7f0000000380)=""/120, 0x3ff, 0x0, 0x81, 0x1037, &(0x7f00000004c0)="c488808e6633dbd06b1f9cd0eedbae35c1f10a310fc0a010444d067834990b4c7e4458ee85338f5de5c7f18527d22fe950667163f226158f78b2231ee66b4c5638e9adca30250d3ffcd401e570ccc1667876a176224e4825b7824597a4ad76bc9524ac17f1e7b1f659da5934c78c378ac5138a22dc92e5a82f30e6ed6d97cbba35", &(0x7f0000001880)="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", 0x4, 0x0, 0x80000001}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="8500000008000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x40f00, 0x8f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="6f8f108aa8c22215e7a284aacab973bd808d4634a4ec4685737dbc1eeb5902cc9dba153e9d1cf90adb37fe9982130aa513624cefe016ced12ad75684b634bd25e55c603fef4cb2e82756ae0ec3abd813191b7a954ab4066b29b671fa60d31a4c4c9eae6b3845d75e582a5a058cf3195e7888c66bf7129679ca4b7867e826bf5b51977cba60fa7b9b1788b3b4d07cf9732f97218614b1681e1121bc250d2abfea9b843efa54d51c167d4bd5398ae331131f12c2b2b44aa97646f5bed7ce3283f366926ec8c2c6835a187a179a", @ANYRES64=r1, @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x840) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='btrfs_sync_file\x00'}, 0x18) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.563046184s ago: executing program 4 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\r\x00', @ANYRES16=r1, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) 2.500979988s ago: executing program 1 (id=3017): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001300add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.383722447s ago: executing program 4 (id=3018): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xa, [@var={0xc, 0x0, 0x0, 0xe, 0x4}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x1}, {0xc, 0x6}, {0x4, 0xb2a}, {0xc, 0xfffffff8}, {0x9, 0x6}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x2}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x6d, 0x0, 0x37, 0x4}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @float={0x7, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x0, 0x5f, 0x2e, 0x2e, 0x61, 0x61, 0x61]}}, &(0x7f0000000340)=""/122, 0x9e, 0x7a, 0x1, 0x740, 0x10000, @value}, 0x28) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) 2.353705514s ago: executing program 1 (id=3019): socket$inet6(0xa, 0x5, 0xfffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.233952168s ago: executing program 2 (id=3020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7, 0x0) close(r4) writev(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)='h', 0x1}], 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x50, r6, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x50}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800fd74458aa4faa0f4110000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf250100000008000100030000002400048005000300010000000500030000000000050003000100000005000300010000000800020002000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.144689535s ago: executing program 4 (id=3021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha1-avx2)\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0xc0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmmsg$alg(r1, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b100f4661504be508b7065d2f6645766dc27d58a5b95c59b6347e126556a5485fb463cd253f62db7af4f59c7c64c64e9b22b1a210fe3a6653b2f8d7da5d347d61279c22300fe0fd9b2e297c578ccf41b27f047e994fead9f8317550ea4e2769", 0x80}, {&(0x7f0000000800)="5e5a45d6b445610d2473a730c39556403713aa66556383eb7aa66993412fe68b182613587fc34e5f65b961e63f08c7689816ba618a8feee0ae5abecca5bdb56cffae039aef5f4067faf9e39d30a4670035bec738e800004f79c14b4699773ff829c637884310372d75975e77f51941d14e7bc5b996a1a4452d0b9a16181dfe7c1ed68a3850dca0dbc236e2cc02e3d8a1aa62869dafaf14533f34a2e8a2ed19f6c7fbae45772d9db3592bb99223bc471ff5a6101a2b3f75dbf422baafff2a9ab32d9055da", 0xc4}, {&(0x7f0000000340)="b4abc39e98609540014d02b6c143faecf4206078bb0d", 0x16}, {&(0x7f0000000400)="6656dbeed0f8273517d23792e94254ad9f55397023fe071fb48bbf7976e1219a99c220c798baf3c8146d9ba4b757a0b11b65d0b50b2dd30db54af346c057c34361e5f6c08adc46dc5fd1bca5b2a6ee8527758a29", 0x54}, {&(0x7f0000000300)="1b385f11fcb13aa8807cc5e4567a69934d8c78540c7d7c4c51e2260efad685f3a4dc046d04eee6e955d808dcc6398d5bcfda426b8cc9a4b1d7b96c0395060cde", 0x40}, {&(0x7f0000000380)="d0ea5f4d272901aa9bfadbfed5c82f32b5a68216a8108c3f0ebb0a06f79f284facb25bf779074f9c65cf303e5c2ae0f17a7458b0a54cdc1dc2bd6eb7c16dbc21494a531a9771458693372ab595ead33317ae48a9baececa34576", 0x5a}], 0x6}], 0x1, 0x4c8d0) 2.091787972s ago: executing program 1 (id=3022): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 673.794566ms ago: executing program 2 (id=3023): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, 0xffffffffffffffff, 0x15, 0x0, 0x4000, @void, @value}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "a279b6a5ab0ecaaffb6646e766644f2ba3"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) unshare(0x400) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000001c0)=@tcp6=r2}, 0x20) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"69766cfff5c3a63bbd25c72d8400", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x3, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 547.446935ms ago: executing program 4 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) socket$inet_dccp(0x2, 0x6, 0x0) 533.682472ms ago: executing program 1 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (fail_nth: 11) 107.145606ms ago: executing program 2 (id=3026): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="03"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 106.065909ms ago: executing program 4 (id=3027): syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@broadcast, 0xffffaa7e}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x7, 0xc, "0990ec742f779f8fa6a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, r0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000004c0)={"6957608d76c817f5c3a665bd121a2d89", r1, r2, {0xfffffffffffffffd, 0x40000a}, {0x7, 0x8}, 0x5, [0xfffffffffffffffe, 0x373622c4, 0xb4, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x4, 0x3, 0x80000000, 0x7e, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb, 0x3fffffffffffffe]}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3ff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x3f5, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x60084}, 0xb1661b6486c78e8b) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000006580)=""/4111, 0x100f}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000000a00)=""/154, 0x9a}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x6}, 0x0) close(r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000400), 0x0}, 0x20) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r9, 0x0, 0x0, 0x80000) poll(&(0x7f0000000000), 0x0, 0x2000009) 64.874285ms ago: executing program 1 (id=3028): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="85000000610000003500000000000020850000000500000095000000000000000001000000000000200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b0800000000000000087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c31a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed"], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200a143000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = socket$inet6(0xa, 0x4, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400bc0002379c89d271f8463a9099af06028879635d2c5f9e26c9f0fc472212dc86c9ec9414b664c13c14a4a6d0d8d0934df014f6aada2f4d0ddc6ef3a1c6891d84eda26dd18063615cac7a328404a74fec1b6b473d25c95401b097a39931365fefd9a13ac8c53fc90ecb8f961910f2b3a7d01581a8abed5a7536c4900ab12968971aaf460a6b21aff1cbb56554680f3546f2013cbf82c8c7a7bafeba2e614af4d3f67c9507c58393dd6c562d6796e0e526dd5b57f7e16cc9328bfed13389ab"], 0xc4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r11}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=3029): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) listen(r0, 0x8) listen(0xffffffffffffffff, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000253) r8 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r8, 0x1, 0x7, 0x0, &(0x7f0000001640)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x6, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x57, 0x5e55b37311de6d89, 0x0, @loopback, @multicast2}}}}) kernel console output (not intermixed with test programs): ware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.472935][T12892] Call Trace: [ 301.472942][T12892] [ 301.472949][T12892] dump_stack_lvl+0x241/0x360 [ 301.472977][T12892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.472996][T12892] ? __pfx__printk+0x10/0x10 [ 301.473015][T12892] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 301.473038][T12892] ? __pfx___might_resched+0x10/0x10 [ 301.473064][T12892] should_fail_ex+0x40a/0x550 [ 301.473103][T12892] should_failslab+0xac/0x100 [ 301.473126][T12892] kmem_cache_alloc_node_noprof+0x77/0x380 [ 301.473146][T12892] ? __alloc_skb+0x1c3/0x440 [ 301.473161][T12892] ? genl_rcv_msg+0x894/0xec0 [ 301.473181][T12892] __alloc_skb+0x1c3/0x440 [ 301.473196][T12892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.473224][T12892] ? __pfx___alloc_skb+0x10/0x10 [ 301.473250][T12892] netlink_dump+0x239/0xe10 [ 301.473284][T12892] ? __pfx_netlink_dump+0x10/0x10 [ 301.473319][T12892] ? __asan_memset+0x23/0x50 [ 301.473335][T12892] ? genl_start+0x4ae/0x6d0 [ 301.473360][T12892] __netlink_dump_start+0x5a2/0x790 [ 301.473391][T12892] genl_rcv_msg+0x894/0xec0 [ 301.473419][T12892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.473443][T12892] ? __pfx_genl_start+0x10/0x10 [ 301.473458][T12892] ? __pfx_genl_dumpit+0x10/0x10 [ 301.473472][T12892] ? __pfx_genl_done+0x10/0x10 [ 301.473507][T12892] ? __pfx_lock_acquire+0x10/0x10 [ 301.473529][T12892] ? __pfx_fou_nl_get_dumpit+0x10/0x10 [ 301.473552][T12892] ? __pfx___might_resched+0x10/0x10 [ 301.473583][T12892] netlink_rcv_skb+0x206/0x480 [ 301.473608][T12892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.473626][T12892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.473672][T12892] genl_rcv+0x28/0x40 [ 301.473687][T12892] netlink_unicast+0x7f6/0x990 [ 301.473713][T12892] ? __pfx_netlink_unicast+0x10/0x10 [ 301.473729][T12892] ? __virt_addr_valid+0x45f/0x530 [ 301.473745][T12892] ? __phys_addr_symbol+0x2f/0x70 [ 301.473760][T12892] ? __check_object_size+0x47a/0x730 [ 301.473784][T12892] netlink_sendmsg+0x8de/0xcb0 [ 301.473818][T12892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.473843][T12892] ? aa_sock_msg_perm+0x91/0x160 [ 301.473871][T12892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.473891][T12892] __sock_sendmsg+0x221/0x270 [ 301.473915][T12892] ____sys_sendmsg+0x53a/0x860 [ 301.473942][T12892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.473959][T12892] ? __fget_files+0x2a/0x410 [ 301.473984][T12892] ? __fget_files+0x2a/0x410 [ 301.474015][T12892] __sys_sendmsg+0x269/0x350 [ 301.474039][T12892] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.474092][T12892] ? trace_sys_enter+0x74/0x120 [ 301.474110][T12892] ? __pfx_lock_release+0x10/0x10 [ 301.474142][T12892] ? trace_sys_enter+0x74/0x120 [ 301.474157][T12892] ? rcu_is_watching+0x15/0xb0 [ 301.474173][T12892] ? trace_sys_enter+0x25/0x120 [ 301.474192][T12892] do_syscall_64+0xf3/0x230 [ 301.474211][T12892] ? clear_bhb_loop+0x35/0x90 [ 301.474234][T12892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.474252][T12892] RIP: 0033:0x7f917e18d169 [ 301.474267][T12892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.474282][T12892] RSP: 002b:00007f917f09a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.474301][T12892] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18d169 [ 301.474313][T12892] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 301.474324][T12892] RBP: 00007f917f09a090 R08: 0000000000000000 R09: 0000000000000000 [ 301.474334][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.474343][T12892] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 301.474370][T12892] [ 302.248266][T12898] ip6tnl2: entered promiscuous mode [ 302.283376][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 302.283780][T12898] ip6tnl2: entered allmulticast mode [ 302.294409][T12902] FAULT_INJECTION: forcing a failure. [ 302.294409][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 302.357873][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.367651][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 302.368280][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.382814][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.2.2617 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 302.382839][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.382850][T12902] Call Trace: [ 302.382857][T12902] [ 302.382864][T12902] dump_stack_lvl+0x241/0x360 [ 302.382891][T12902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.382909][T12902] ? __pfx__printk+0x10/0x10 [ 302.382928][T12902] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 302.382958][T12902] ? __pfx___might_resched+0x10/0x10 [ 302.382983][T12902] should_fail_ex+0x40a/0x550 [ 302.383010][T12902] should_failslab+0xac/0x100 [ 302.383032][T12902] kmem_cache_alloc_node_noprof+0x77/0x380 [ 302.383053][T12902] ? __alloc_skb+0x1c3/0x440 [ 302.383067][T12902] ? genl_rcv_msg+0x894/0xec0 [ 302.383092][T12902] __alloc_skb+0x1c3/0x440 [ 302.383106][T12902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.383132][T12902] ? __pfx___alloc_skb+0x10/0x10 [ 302.383158][T12902] netlink_dump+0x239/0xe10 [ 302.383189][T12902] ? __pfx_netlink_dump+0x10/0x10 [ 302.383222][T12902] ? __asan_memset+0x23/0x50 [ 302.383238][T12902] ? genl_start+0x4ae/0x6d0 [ 302.383262][T12902] __netlink_dump_start+0x5a2/0x790 [ 302.383292][T12902] genl_rcv_msg+0x894/0xec0 [ 302.383317][T12902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.383339][T12902] ? __pfx_genl_start+0x10/0x10 [ 302.383354][T12902] ? __pfx_genl_dumpit+0x10/0x10 [ 302.383368][T12902] ? __pfx_genl_done+0x10/0x10 [ 302.383399][T12902] ? __pfx_lock_acquire+0x10/0x10 [ 302.383420][T12902] ? __pfx_smc_nl_dump_hs_limitation+0x10/0x10 [ 302.383445][T12902] ? __pfx___might_resched+0x10/0x10 [ 302.383474][T12902] netlink_rcv_skb+0x206/0x480 [ 302.383495][T12902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.383514][T12902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.383562][T12902] genl_rcv+0x28/0x40 [ 302.383577][T12902] netlink_unicast+0x7f6/0x990 [ 302.383609][T12902] ? __pfx_netlink_unicast+0x10/0x10 [ 302.383626][T12902] ? __virt_addr_valid+0x45f/0x530 [ 302.383642][T12902] ? __phys_addr_symbol+0x2f/0x70 [ 302.383656][T12902] ? __check_object_size+0x47a/0x730 [ 302.383679][T12902] netlink_sendmsg+0x8de/0xcb0 [ 302.383710][T12902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.383735][T12902] ? aa_sock_msg_perm+0x91/0x160 [ 302.383762][T12902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.383781][T12902] __sock_sendmsg+0x221/0x270 [ 302.383805][T12902] ____sys_sendmsg+0x53a/0x860 [ 302.383830][T12902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.383846][T12902] ? __fget_files+0x2a/0x410 [ 302.383871][T12902] ? __fget_files+0x2a/0x410 [ 302.383900][T12902] __sys_sendmsg+0x269/0x350 [ 302.383923][T12902] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.383962][T12902] ? do_sys_openat2+0x17a/0x1d0 [ 302.384010][T12902] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.384034][T12902] ? do_syscall_64+0x100/0x230 [ 302.384055][T12902] ? do_syscall_64+0xb6/0x230 [ 302.384076][T12902] do_syscall_64+0xf3/0x230 [ 302.384094][T12902] ? clear_bhb_loop+0x35/0x90 [ 302.384117][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.384137][T12902] RIP: 0033:0x7f9d3458d169 [ 302.384152][T12902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.384166][T12902] RSP: 002b:00007f9d323d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.384183][T12902] RAX: ffffffffffffffda RBX: 00007f9d347a6080 RCX: 00007f9d3458d169 [ 302.384195][T12902] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000005 [ 302.384205][T12902] RBP: 00007f9d323d5090 R08: 0000000000000000 R09: 0000000000000000 [ 302.384215][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.384225][T12902] R13: 0000000000000000 R14: 00007f9d347a6080 R15: 00007ffe43976fb8 [ 302.384252][T12902] [ 302.426168][T12898] team0: Device ip6tnl2 is of different type [ 302.544323][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.780523][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.788425][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.795809][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.944514][T12903] lo speed is unknown, defaulting to 1000 [ 303.171920][T12913] lo speed is unknown, defaulting to 1000 [ 303.391550][T12903] chnl_net:caif_netlink_parms(): no params data found [ 303.567150][T12927] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:19997 [ 303.577077][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.587472][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.608453][T12903] bridge_slave_0: entered allmulticast mode [ 303.632398][T12903] bridge_slave_0: entered promiscuous mode [ 303.659054][T12921] lo speed is unknown, defaulting to 1000 [ 303.660573][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.680908][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.699343][T12903] bridge_slave_1: entered allmulticast mode [ 303.708243][T12903] bridge_slave_1: entered promiscuous mode [ 304.005737][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.030189][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.200224][T12903] team0: Port device team_slave_0 added [ 304.256378][T12903] team0: Port device team_slave_1 added [ 304.454414][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.461391][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.541826][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.552910][T12945] __nla_validate_parse: 2 callbacks suppressed [ 304.552927][T12945] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2630'. [ 304.581680][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.603754][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.673708][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.787060][T12951] FAULT_INJECTION: forcing a failure. [ 304.787060][T12951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.790730][T12903] hsr_slave_0: entered promiscuous mode [ 304.811262][T12903] hsr_slave_1: entered promiscuous mode [ 304.818028][T12903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.832108][T12903] Cannot create hsr debugfs directory [ 304.834782][T12951] CPU: 0 UID: 0 PID: 12951 Comm: syz.2.2631 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 304.834806][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.834817][T12951] Call Trace: [ 304.834824][T12951] [ 304.834831][T12951] dump_stack_lvl+0x241/0x360 [ 304.834857][T12951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.834875][T12951] ? __pfx__printk+0x10/0x10 [ 304.834895][T12951] ? validate_chain+0x11e/0x5920 [ 304.834919][T12951] should_fail_ex+0x40a/0x550 [ 304.834946][T12951] prepare_alloc_pages+0x1da/0x5b0 [ 304.834971][T12951] __alloc_frozen_pages_noprof+0x16f/0x710 [ 304.834993][T12951] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 304.835017][T12951] ? __lock_acquire+0x1397/0x2100 [ 304.835042][T12951] ? __pfx_lock_acquire+0x10/0x10 [ 304.835068][T12951] alloc_pages_mpol+0x311/0x660 [ 304.835093][T12951] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 304.835122][T12951] vma_alloc_folio_noprof+0x12b/0x260 [ 304.835144][T12951] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 304.835173][T12951] folio_prealloc+0x2e/0x170 [ 304.835191][T12951] __handle_mm_fault+0x3e4b/0x70f0 [ 304.835212][T12951] ? mark_lock+0x9a/0x360 [ 304.835252][T12951] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.835283][T12951] ? mt_find+0x2a9/0x920 [ 304.835302][T12951] ? __pfx_lock_release+0x10/0x10 [ 304.835334][T12951] ? mt_find+0x2a9/0x920 [ 304.835353][T12951] ? mt_find+0x6c8/0x920 [ 304.835371][T12951] ? mt_find+0x2a9/0x920 [ 304.835394][T12951] ? __pfx_mt_find+0x10/0x10 [ 304.835429][T12951] ? find_vma+0xf9/0x170 [ 304.835443][T12951] ? __pfx_find_vma+0x10/0x10 [ 304.835464][T12951] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.835489][T12951] handle_mm_fault+0x3e5/0x8d0 [ 304.835520][T12951] exc_page_fault+0x2b9/0x8b0 [ 304.835544][T12951] asm_exc_page_fault+0x26/0x30 [ 304.835564][T12951] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 304.835586][T12951] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 304.835600][T12951] RSP: 0018:ffffc9001a0af4d8 EFLAGS: 00050206 [ 304.835616][T12951] RAX: ffff88805f678601 RBX: 0000400000001a00 RCX: 0000000000000168 [ 304.835629][T12951] RDX: 0000000000000000 RSI: ffff88805f678680 RDI: 0000400000001a00 [ 304.835640][T12951] RBP: ffffc9001a0af658 R08: ffff88805f6787e7 R09: 1ffff1100becf0fc [ 304.835653][T12951] R10: dffffc0000000000 R11: ffffed100becf0fd R12: 1ffff92003415eb0 [ 304.835665][T12951] R13: dffffc0000000000 R14: ffff88805f678680 R15: 0000000000000168 [ 304.835692][T12951] _copy_to_iter+0x4a8/0x1c40 [ 304.835725][T12951] ? __pfx__copy_to_iter+0x10/0x10 [ 304.835752][T12951] ? __virt_addr_valid+0x183/0x530 [ 304.835768][T12951] ? __virt_addr_valid+0x183/0x530 [ 304.835781][T12951] ? __virt_addr_valid+0x45f/0x530 [ 304.835799][T12951] ? __check_object_size+0x47a/0x730 [ 304.835823][T12951] __skb_datagram_iter+0x107/0x900 [ 304.835844][T12951] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 304.835870][T12951] skb_copy_datagram_iter+0xd1/0x250 [ 304.835892][T12951] netlink_recvmsg+0x2d1/0x11a0 [ 304.835922][T12951] ? __pfx_netlink_recvmsg+0x10/0x10 [ 304.835958][T12951] ? __import_iovec+0x3bf/0x830 [ 304.835977][T12951] ? __pfx_netlink_recvmsg+0x10/0x10 [ 304.835999][T12951] sock_recvmsg_nosec+0x18e/0x1d0 [ 304.836023][T12951] ____sys_recvmsg+0x3cd/0x480 [ 304.836048][T12951] ? __pfx_____sys_recvmsg+0x10/0x10 [ 304.836077][T12951] ? do_recvmmsg+0x44e/0xab0 [ 304.836094][T12951] ? __might_fault+0xaa/0x120 [ 304.836114][T12951] do_recvmmsg+0x426/0xab0 [ 304.836142][T12951] ? __pfx_do_recvmmsg+0x10/0x10 [ 304.836179][T12951] ? ksys_write+0x22a/0x2b0 [ 304.836195][T12951] ? __pfx_lock_release+0x10/0x10 [ 304.836224][T12951] ? sb_end_write+0xe9/0x1c0 [ 304.836244][T12951] ? vfs_write+0x7fa/0xd10 [ 304.836263][T12951] ? __mutex_unlock_slowpath+0x227/0x800 [ 304.836290][T12951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.836308][T12951] ? __fget_files+0x2a/0x410 [ 304.836342][T12951] __x64_sys_recvmmsg+0x199/0x250 [ 304.836362][T12951] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 304.836381][T12951] ? do_syscall_64+0x100/0x230 [ 304.836402][T12951] ? do_syscall_64+0xb6/0x230 [ 304.836422][T12951] do_syscall_64+0xf3/0x230 [ 304.836440][T12951] ? clear_bhb_loop+0x35/0x90 [ 304.836463][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.836483][T12951] RIP: 0033:0x7f9d3458d169 [ 304.836496][T12951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.836510][T12951] RSP: 002b:00007f9d323d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 304.836526][T12951] RAX: ffffffffffffffda RBX: 00007f9d347a6080 RCX: 00007f9d3458d169 [ 304.836539][T12951] RDX: 0000000000000003 RSI: 00004000000086c0 RDI: 0000000000000003 [ 304.836549][T12951] RBP: 00007f9d323d5090 R08: 0000000000000000 R09: 0000000000000000 [ 304.836560][T12951] R10: 000000004001a122 R11: 0000000000000246 R12: 0000000000000001 [ 304.836570][T12951] R13: 0000000000000001 R14: 00007f9d347a6080 R15: 00007ffe43976fb8 [ 304.836596][T12951] [ 304.893818][ T5838] Bluetooth: hci1: command tx timeout [ 305.582776][T12965] ip6tnl1: entered promiscuous mode [ 305.592547][T12965] ip6tnl1: entered allmulticast mode [ 305.606918][T12965] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 306.419642][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 306.820378][T13000] netlink: 'syz.1.2647': attribute type 75 has an invalid length. [ 306.832972][T13002] smc: net device wlan1 applied user defined pnetid SYZ0 [ 306.844589][T13002] netlink: 'syz.2.2650': attribute type 11 has an invalid length. [ 306.895023][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 306.915488][T13004] No such timeout policy "syz0" [ 306.958865][T13004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.095145][T12903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.124909][T12903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.174693][T12903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.211632][T12903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.413789][ T5838] Bluetooth: hci1: command tx timeout [ 307.438551][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.456093][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.471623][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.478772][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.528102][T13029] FAULT_INJECTION: forcing a failure. [ 307.528102][T13029] name failslab, interval 1, probability 0, space 0, times 0 [ 307.543215][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.550371][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.600783][T13029] CPU: 0 UID: 0 PID: 13029 Comm: syz.0.2656 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 307.600809][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.600820][T13029] Call Trace: [ 307.600826][T13029] [ 307.600834][T13029] dump_stack_lvl+0x241/0x360 [ 307.600861][T13029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.600879][T13029] ? __pfx__printk+0x10/0x10 [ 307.600898][T13029] ? __kmalloc_cache_noprof+0x48/0x390 [ 307.600920][T13029] ? __pfx___might_resched+0x10/0x10 [ 307.600947][T13029] should_fail_ex+0x40a/0x550 [ 307.600973][T13029] should_failslab+0xac/0x100 [ 307.600994][T13029] __kmalloc_cache_noprof+0x70/0x390 [ 307.601011][T13029] ? xfrm_policy_alloc+0x77/0x2a0 [ 307.601034][T13029] xfrm_policy_alloc+0x77/0x2a0 [ 307.601053][T13029] xfrm_policy_construct+0x2f/0x6a0 [ 307.601078][T13029] ? verify_newpolicy_info+0x340/0x4b0 [ 307.601100][T13029] xfrm_add_acquire+0x4ec/0xdc0 [ 307.601125][T13029] ? rcu_is_watching+0x15/0xb0 [ 307.601140][T13029] ? __pfx_xfrm_add_acquire+0x10/0x10 [ 307.601158][T13029] ? __nla_parse+0x40/0x60 [ 307.601177][T13029] xfrm_user_rcv_msg+0x975/0xc20 [ 307.601200][T13029] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 307.601246][T13029] ? __mutex_trylock_common+0x183/0x2e0 [ 307.601265][T13029] ? __pfx___might_resched+0x10/0x10 [ 307.601286][T13029] ? __pfx___mutex_trylock_common+0x10/0x10 [ 307.601311][T13029] netlink_rcv_skb+0x206/0x480 [ 307.601331][T13029] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 307.601348][T13029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.601389][T13029] xfrm_netlink_rcv+0x79/0x90 [ 307.601406][T13029] netlink_unicast+0x7f6/0x990 [ 307.601432][T13029] ? __pfx_netlink_unicast+0x10/0x10 [ 307.601449][T13029] ? __virt_addr_valid+0x45f/0x530 [ 307.601464][T13029] ? __phys_addr_symbol+0x2f/0x70 [ 307.601478][T13029] ? __check_object_size+0x47a/0x730 [ 307.601502][T13029] netlink_sendmsg+0x8de/0xcb0 [ 307.601558][T13029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.601582][T13029] ? aa_sock_msg_perm+0x91/0x160 [ 307.601610][T13029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.601628][T13029] __sock_sendmsg+0x221/0x270 [ 307.601653][T13029] ____sys_sendmsg+0x53a/0x860 [ 307.601678][T13029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.601693][T13029] ? __fget_files+0x2a/0x410 [ 307.601718][T13029] ? __fget_files+0x2a/0x410 [ 307.601746][T13029] __sys_sendmsg+0x269/0x350 [ 307.601767][T13029] ? __pfx___sys_sendmsg+0x10/0x10 [ 307.601794][T13029] ? do_sys_openat2+0x17a/0x1d0 [ 307.601841][T13029] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.601862][T13029] ? do_syscall_64+0x100/0x230 [ 307.601879][T13029] ? do_syscall_64+0xb6/0x230 [ 307.601899][T13029] do_syscall_64+0xf3/0x230 [ 307.601918][T13029] ? clear_bhb_loop+0x35/0x90 [ 307.601941][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.601962][T13029] RIP: 0033:0x7f917e18d169 [ 307.601977][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.601991][T13029] RSP: 002b:00007f917f09a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.602010][T13029] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18d169 [ 307.602022][T13029] RDX: 0000000000000000 RSI: 0000400000000880 RDI: 0000000000000003 [ 307.602032][T13029] RBP: 00007f917f09a090 R08: 0000000000000000 R09: 0000000000000000 [ 307.602042][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.602051][T13029] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 307.602072][T13029] [ 307.965467][T12903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.975949][T12903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.265523][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.575959][T13065] sctp: [Deprecated]: syz.2.2664 (pid 13065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.575959][T13065] Use struct sctp_sack_info instead [ 308.827878][T12903] veth0_vlan: entered promiscuous mode [ 308.869475][T12903] veth1_vlan: entered promiscuous mode [ 308.953383][T12903] veth0_macvtap: entered promiscuous mode [ 308.991223][T12903] veth1_macvtap: entered promiscuous mode [ 309.051750][T13080] lo speed is unknown, defaulting to 1000 [ 309.074197][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.141822][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.166117][T12903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.183690][T12903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.192503][T12903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.233696][T12903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.431190][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.453944][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.493776][ T5838] Bluetooth: hci1: command tx timeout [ 309.542610][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.574099][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.910515][T13110] netlink: 'syz.4.2614': attribute type 4 has an invalid length. [ 310.001960][T13114] netlink: 'syz.4.2614': attribute type 4 has an invalid length. [ 310.093845][T13118] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 310.141417][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2676'. [ 310.283835][T13124] FAULT_INJECTION: forcing a failure. [ 310.283835][T13124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.304035][T13124] CPU: 0 UID: 0 PID: 13124 Comm: syz.4.2678 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 310.304064][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.304075][T13124] Call Trace: [ 310.304082][T13124] [ 310.304090][T13124] dump_stack_lvl+0x241/0x360 [ 310.304116][T13124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.304135][T13124] ? __pfx__printk+0x10/0x10 [ 310.304154][T13124] ? __pfx_lock_release+0x10/0x10 [ 310.304185][T13124] should_fail_ex+0x40a/0x550 [ 310.304214][T13124] _copy_from_user+0x2d/0xb0 [ 310.304235][T13124] __sys_bpf+0x1be/0x820 [ 310.304272][T13124] ? __pfx___sys_bpf+0x10/0x10 [ 310.304305][T13124] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 310.304331][T13124] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.304355][T13124] ? do_syscall_64+0x100/0x230 [ 310.304379][T13124] __x64_sys_bpf+0x7c/0x90 [ 310.304401][T13124] do_syscall_64+0xf3/0x230 [ 310.304419][T13124] ? clear_bhb_loop+0x35/0x90 [ 310.304444][T13124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.304465][T13124] RIP: 0033:0x7f2bba58d169 [ 310.304480][T13124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.304496][T13124] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.304514][T13124] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 310.304527][T13124] RDX: 0000000000000020 RSI: 00004000000001c0 RDI: 0000000000000001 [ 310.304539][T13124] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 310.304550][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.304561][T13124] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 310.304589][T13124] [ 310.625113][T13133] netlink: 'syz.1.2680': attribute type 3 has an invalid length. [ 310.632889][T13133] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2680'. [ 310.744193][T13137] FAULT_INJECTION: forcing a failure. [ 310.744193][T13137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.825545][T13137] CPU: 0 UID: 0 PID: 13137 Comm: syz.4.2682 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 310.825573][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.825583][T13137] Call Trace: [ 310.825590][T13137] [ 310.825597][T13137] dump_stack_lvl+0x241/0x360 [ 310.825624][T13137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.825642][T13137] ? __pfx__printk+0x10/0x10 [ 310.825660][T13137] ? __pfx_lock_release+0x10/0x10 [ 310.825691][T13137] should_fail_ex+0x40a/0x550 [ 310.825718][T13137] _copy_from_iter+0x1df/0x1c40 [ 310.825736][T13137] ? __virt_addr_valid+0x183/0x530 [ 310.825754][T13137] ? __pfx_lock_release+0x10/0x10 [ 310.825782][T13137] ? __alloc_skb+0x28f/0x440 [ 310.825798][T13137] ? __pfx__copy_from_iter+0x10/0x10 [ 310.825818][T13137] ? __virt_addr_valid+0x183/0x530 [ 310.825833][T13137] ? __virt_addr_valid+0x183/0x530 [ 310.825847][T13137] ? __virt_addr_valid+0x45f/0x530 [ 310.825864][T13137] ? __phys_addr_symbol+0x2f/0x70 [ 310.825878][T13137] ? __check_object_size+0x47a/0x730 [ 310.825904][T13137] netlink_sendmsg+0x742/0xcb0 [ 310.825938][T13137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.825963][T13137] ? aa_sock_msg_perm+0x91/0x160 [ 310.825990][T13137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.826010][T13137] __sock_sendmsg+0x221/0x270 [ 310.826035][T13137] ____sys_sendmsg+0x53a/0x860 [ 310.826060][T13137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.826077][T13137] ? __fget_files+0x2a/0x410 [ 310.826102][T13137] ? __fget_files+0x2a/0x410 [ 310.826132][T13137] __sys_sendmsg+0x269/0x350 [ 310.826155][T13137] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.826185][T13137] ? do_sys_openat2+0x17a/0x1d0 [ 310.826237][T13137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.826262][T13137] ? do_syscall_64+0x100/0x230 [ 310.826284][T13137] ? do_syscall_64+0xb6/0x230 [ 310.826305][T13137] do_syscall_64+0xf3/0x230 [ 310.826324][T13137] ? clear_bhb_loop+0x35/0x90 [ 310.826348][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.826368][T13137] RIP: 0033:0x7f2bba58d169 [ 310.826383][T13137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.826398][T13137] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.826417][T13137] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 310.826429][T13137] RDX: 0000000020040040 RSI: 0000400000000600 RDI: 0000000000000003 [ 310.826441][T13137] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 310.826452][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.826461][T13137] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 310.826488][T13137] [ 311.218763][T13149] netlink: 'syz.4.2686': attribute type 2 has an invalid length. [ 311.580904][ T5838] Bluetooth: hci1: command tx timeout [ 311.690080][T13164] FAULT_INJECTION: forcing a failure. [ 311.690080][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 311.746074][T13164] CPU: 0 UID: 0 PID: 13164 Comm: syz.2.2691 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 311.746101][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.746112][T13164] Call Trace: [ 311.746119][T13164] [ 311.746126][T13164] dump_stack_lvl+0x241/0x360 [ 311.746152][T13164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.746170][T13164] ? __pfx__printk+0x10/0x10 [ 311.746188][T13164] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 311.746210][T13164] ? __pfx___might_resched+0x10/0x10 [ 311.746237][T13164] should_fail_ex+0x40a/0x550 [ 311.746263][T13164] should_failslab+0xac/0x100 [ 311.746284][T13164] __kmalloc_node_noprof+0xe1/0x4d0 [ 311.746304][T13164] ? __kvmalloc_node_noprof+0x72/0x190 [ 311.746331][T13164] __kvmalloc_node_noprof+0x72/0x190 [ 311.746355][T13164] alloc_netdev_mqs+0xac6/0x1210 [ 311.746382][T13164] rtnl_create_link+0x2f9/0xc90 [ 311.746413][T13164] rtnl_newlink_create+0x2e1/0xbd0 [ 311.746441][T13164] ? __pfx_aa_get_newest_label+0x10/0x10 [ 311.746468][T13164] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.746494][T13164] ? __pfx___mutex_lock+0x10/0x10 [ 311.746522][T13164] ? ns_capable+0x8a/0xf0 [ 311.746545][T13164] rtnl_newlink+0x167a/0x1d90 [ 311.746568][T13164] ? __lock_acquire+0x1397/0x2100 [ 311.746602][T13164] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.746624][T13164] ? __pfx_validate_chain+0x10/0x10 [ 311.746662][T13164] ? validate_chain+0x11e/0x5920 [ 311.746679][T13164] ? __pfx_lock_acquire+0x10/0x10 [ 311.746705][T13164] ? __pfx_lock_release+0x10/0x10 [ 311.746730][T13164] ? __pfx_validate_chain+0x10/0x10 [ 311.746750][T13164] ? mark_lock+0x9a/0x360 [ 311.746770][T13164] ? __lock_acquire+0x1397/0x2100 [ 311.746824][T13164] ? __pfx_lock_release+0x10/0x10 [ 311.746861][T13164] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.746885][T13164] rtnetlink_rcv_msg+0x791/0xcf0 [ 311.746906][T13164] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 311.746928][T13164] ? __lock_acquire+0x1397/0x2100 [ 311.746952][T13164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.747032][T13164] netlink_rcv_skb+0x206/0x480 [ 311.747055][T13164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.747080][T13164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.747120][T13164] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.747142][T13164] netlink_unicast+0x7f6/0x990 [ 311.747169][T13164] ? __pfx_netlink_unicast+0x10/0x10 [ 311.747187][T13164] ? __virt_addr_valid+0x45f/0x530 [ 311.747205][T13164] ? __phys_addr_symbol+0x2f/0x70 [ 311.747221][T13164] ? __check_object_size+0x47a/0x730 [ 311.747247][T13164] netlink_sendmsg+0x8de/0xcb0 [ 311.747281][T13164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.747306][T13164] ? aa_sock_msg_perm+0x91/0x160 [ 311.747332][T13164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.747352][T13164] __sock_sendmsg+0x221/0x270 [ 311.747377][T13164] ____sys_sendmsg+0x53a/0x860 [ 311.747409][T13164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.747425][T13164] ? __fget_files+0x2a/0x410 [ 311.747450][T13164] ? __fget_files+0x2a/0x410 [ 311.747481][T13164] __sys_sendmsg+0x269/0x350 [ 311.747505][T13164] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.747536][T13164] ? do_sys_openat2+0x17a/0x1d0 [ 311.747586][T13164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.747610][T13164] ? do_syscall_64+0x100/0x230 [ 311.747633][T13164] ? do_syscall_64+0xb6/0x230 [ 311.747656][T13164] do_syscall_64+0xf3/0x230 [ 311.747674][T13164] ? clear_bhb_loop+0x35/0x90 [ 311.747699][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.747720][T13164] RIP: 0033:0x7f9d3458d169 [ 311.747735][T13164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.747749][T13164] RSP: 002b:00007f9d323f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.747768][T13164] RAX: ffffffffffffffda RBX: 00007f9d347a5fa0 RCX: 00007f9d3458d169 [ 311.747780][T13164] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 311.747791][T13164] RBP: 00007f9d323f6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.747802][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.747813][T13164] R13: 0000000000000000 R14: 00007f9d347a5fa0 R15: 00007ffe43976fb8 [ 311.747842][T13164] [ 312.459772][T13177] FAULT_INJECTION: forcing a failure. [ 312.459772][T13177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.540909][T13177] CPU: 1 UID: 0 PID: 13177 Comm: syz.4.2696 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 312.540937][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.540948][T13177] Call Trace: [ 312.540955][T13177] [ 312.540963][T13177] dump_stack_lvl+0x241/0x360 [ 312.540989][T13177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.541008][T13177] ? __pfx__printk+0x10/0x10 [ 312.541027][T13177] ? __pfx_lock_release+0x10/0x10 [ 312.541058][T13177] should_fail_ex+0x40a/0x550 [ 312.541087][T13177] _copy_from_iter+0x1df/0x1c40 [ 312.541115][T13177] ? __virt_addr_valid+0x183/0x530 [ 312.541132][T13177] ? __pfx_lock_release+0x10/0x10 [ 312.541159][T13177] ? __alloc_skb+0x28f/0x440 [ 312.541175][T13177] ? __pfx__copy_from_iter+0x10/0x10 [ 312.541196][T13177] ? __virt_addr_valid+0x183/0x530 [ 312.541211][T13177] ? __virt_addr_valid+0x183/0x530 [ 312.541225][T13177] ? __virt_addr_valid+0x45f/0x530 [ 312.541241][T13177] ? __phys_addr_symbol+0x2f/0x70 [ 312.541257][T13177] ? __check_object_size+0x47a/0x730 [ 312.541282][T13177] netlink_sendmsg+0x742/0xcb0 [ 312.541316][T13177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.541341][T13177] ? aa_sock_msg_perm+0x91/0x160 [ 312.541369][T13177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.541389][T13177] __sock_sendmsg+0x221/0x270 [ 312.541413][T13177] sock_write_iter+0x2d7/0x3f0 [ 312.541436][T13177] ? __pfx_sock_write_iter+0x10/0x10 [ 312.541476][T13177] do_iter_readv_writev+0x71a/0x9d0 [ 312.541501][T13177] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 312.541525][T13177] ? bpf_lsm_file_permission+0x9/0x10 [ 312.541548][T13177] ? rw_verify_area+0x243/0x630 [ 312.541568][T13177] vfs_writev+0x38b/0xbc0 [ 312.541603][T13177] ? __pfx_vfs_writev+0x10/0x10 [ 312.541636][T13177] ? do_sys_openat2+0x17a/0x1d0 [ 312.541657][T13177] ? __fget_files+0x2a/0x410 [ 312.541680][T13177] ? __fget_files+0x395/0x410 [ 312.541700][T13177] ? __fget_files+0x2a/0x410 [ 312.541729][T13177] do_writev+0x1b6/0x360 [ 312.541755][T13177] ? __pfx_do_writev+0x10/0x10 [ 312.541777][T13177] ? do_syscall_64+0x100/0x230 [ 312.541799][T13177] ? do_syscall_64+0xb6/0x230 [ 312.541820][T13177] do_syscall_64+0xf3/0x230 [ 312.541838][T13177] ? clear_bhb_loop+0x35/0x90 [ 312.541861][T13177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.541882][T13177] RIP: 0033:0x7f2bba58d169 [ 312.541897][T13177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.541912][T13177] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 312.541931][T13177] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 312.541948][T13177] RDX: 0000000000000001 RSI: 0000400000000000 RDI: 0000000000000003 [ 312.541959][T13177] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 312.541970][T13177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.541981][T13177] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 312.542008][T13177] [ 313.157241][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2703'. [ 313.401569][T13205] FAULT_INJECTION: forcing a failure. [ 313.401569][T13205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.421782][T13205] CPU: 1 UID: 0 PID: 13205 Comm: syz.0.2709 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 313.421807][T13205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.421817][T13205] Call Trace: [ 313.421824][T13205] [ 313.421831][T13205] dump_stack_lvl+0x241/0x360 [ 313.421858][T13205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.421876][T13205] ? __pfx__printk+0x10/0x10 [ 313.421896][T13205] ? __pfx_lock_release+0x10/0x10 [ 313.421926][T13205] should_fail_ex+0x40a/0x550 [ 313.421953][T13205] _copy_from_user+0x2d/0xb0 [ 313.421974][T13205] copy_msghdr_from_user+0xae/0x680 [ 313.421994][T13205] ? __pfx___might_resched+0x10/0x10 [ 313.422017][T13205] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 313.422037][T13205] ? __fget_files+0x2a/0x410 [ 313.422063][T13205] ? __sys_sendmmsg+0x392/0x720 [ 313.422081][T13205] ? __might_fault+0xaa/0x120 [ 313.422103][T13205] __sys_sendmmsg+0x32b/0x720 [ 313.422131][T13205] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.422161][T13205] ? __pfx_lock_release+0x10/0x10 [ 313.422181][T13205] ? kstrtouint_from_user+0x128/0x190 [ 313.422221][T13205] ? ksys_write+0x22a/0x2b0 [ 313.422245][T13205] ? __pfx_lock_release+0x10/0x10 [ 313.422274][T13205] ? sb_end_write+0xe9/0x1c0 [ 313.422297][T13205] ? vfs_write+0x7fa/0xd10 [ 313.422314][T13205] ? __mutex_unlock_slowpath+0x227/0x800 [ 313.422348][T13205] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.422368][T13205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.422386][T13205] ? do_syscall_64+0x100/0x230 [ 313.422403][T13205] __x64_sys_sendmmsg+0xa0/0xb0 [ 313.422419][T13205] do_syscall_64+0xf3/0x230 [ 313.422434][T13205] ? clear_bhb_loop+0x35/0x90 [ 313.422453][T13205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.422469][T13205] RIP: 0033:0x7f917e18d169 [ 313.422482][T13205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.422493][T13205] RSP: 002b:00007f917f09a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.422509][T13205] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18d169 [ 313.422519][T13205] RDX: 04924924924925c6 RSI: 0000400000000680 RDI: 0000000000000005 [ 313.422528][T13205] RBP: 00007f917f09a090 R08: 0000000000000000 R09: 0000000000000000 [ 313.422536][T13205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.422544][T13205] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 313.422564][T13205] [ 313.836187][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2715'. [ 314.163775][T13234] FAULT_INJECTION: forcing a failure. [ 314.163775][T13234] name failslab, interval 1, probability 0, space 0, times 0 [ 314.180702][T13232] netlink: 'syz.2.2718': attribute type 7 has an invalid length. [ 314.195880][T13234] CPU: 0 UID: 0 PID: 13234 Comm: syz.3.2719 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 314.195904][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.195921][T13234] Call Trace: [ 314.195928][T13234] [ 314.195936][T13234] dump_stack_lvl+0x241/0x360 [ 314.195962][T13234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.195981][T13234] ? __pfx__printk+0x10/0x10 [ 314.196001][T13234] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 314.196025][T13234] ? __pfx___might_resched+0x10/0x10 [ 314.196051][T13234] should_fail_ex+0x40a/0x550 [ 314.196079][T13234] should_failslab+0xac/0x100 [ 314.196101][T13234] kmem_cache_alloc_node_noprof+0x77/0x380 [ 314.196122][T13234] ? __alloc_skb+0x1c3/0x440 [ 314.196145][T13234] __alloc_skb+0x1c3/0x440 [ 314.196166][T13234] ? __pfx___alloc_skb+0x10/0x10 [ 314.196186][T13234] ? lockdep_hardirqs_on+0x99/0x150 [ 314.196210][T13234] rtmsg_ifa+0x1f0/0x3b0 [ 314.196236][T13234] ? __pfx_rtmsg_ifa+0x10/0x10 [ 314.196271][T13234] inet_rtm_newaddr+0x16a0/0x1bc0 [ 314.196312][T13234] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 314.196351][T13234] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 314.196376][T13234] rtnetlink_rcv_msg+0x791/0xcf0 [ 314.196396][T13234] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 314.196419][T13234] ? __lock_acquire+0x1397/0x2100 [ 314.196442][T13234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.196481][T13234] netlink_rcv_skb+0x206/0x480 [ 314.196504][T13234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.196528][T13234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.196572][T13234] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.196597][T13234] netlink_unicast+0x7f6/0x990 [ 314.196625][T13234] ? __pfx_netlink_unicast+0x10/0x10 [ 314.196642][T13234] ? __virt_addr_valid+0x45f/0x530 [ 314.196661][T13234] ? __phys_addr_symbol+0x2f/0x70 [ 314.196676][T13234] ? __check_object_size+0x47a/0x730 [ 314.196702][T13234] netlink_sendmsg+0x8de/0xcb0 [ 314.196736][T13234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.196762][T13234] ? aa_sock_msg_perm+0x91/0x160 [ 314.196791][T13234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.196811][T13234] __sock_sendmsg+0x221/0x270 [ 314.196836][T13234] ____sys_sendmsg+0x53a/0x860 [ 314.196863][T13234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.196879][T13234] ? __fget_files+0x2a/0x410 [ 314.196910][T13234] ? __fget_files+0x2a/0x410 [ 314.196942][T13234] __sys_sendmsg+0x269/0x350 [ 314.196965][T13234] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.196997][T13234] ? do_sys_openat2+0x17a/0x1d0 [ 314.197046][T13234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.197071][T13234] ? do_syscall_64+0x100/0x230 [ 314.197094][T13234] ? do_syscall_64+0xb6/0x230 [ 314.197116][T13234] do_syscall_64+0xf3/0x230 [ 314.197134][T13234] ? clear_bhb_loop+0x35/0x90 [ 314.197157][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.197178][T13234] RIP: 0033:0x7f3fac38d169 [ 314.197194][T13234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.197208][T13234] RSP: 002b:00007f3fad2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.197227][T13234] RAX: ffffffffffffffda RBX: 00007f3fac5a5fa0 RCX: 00007f3fac38d169 [ 314.197240][T13234] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 314.197251][T13234] RBP: 00007f3fad2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 314.197262][T13234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.197272][T13234] R13: 0000000000000000 R14: 00007f3fac5a5fa0 R15: 00007ffc9a839008 [ 314.197310][T13234] [ 314.622273][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 314.701985][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'. [ 314.748386][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 314.760292][T13238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2721'. [ 314.770532][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 314.841751][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'. [ 314.891864][T13254] netlink: 'syz.4.2729': attribute type 18 has an invalid length. [ 314.938026][T13260] netlink: 'syz.0.2730': attribute type 1 has an invalid length. [ 315.000002][T13260] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 315.049033][T13260] tipc: Invalid UDP bearer configuration [ 315.049077][T13260] tipc: Enabling of bearer rejected, failed to enable media [ 315.076779][T13267] FAULT_INJECTION: forcing a failure. [ 315.076779][T13267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.110375][T13267] CPU: 0 UID: 0 PID: 13267 Comm: syz.2.2734 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 315.110404][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.110415][T13267] Call Trace: [ 315.110422][T13267] [ 315.110430][T13267] dump_stack_lvl+0x241/0x360 [ 315.110457][T13267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.110476][T13267] ? __pfx__printk+0x10/0x10 [ 315.110498][T13267] ? snprintf+0xda/0x120 [ 315.110522][T13267] should_fail_ex+0x40a/0x550 [ 315.110548][T13267] _copy_to_user+0x31/0xb0 [ 315.110572][T13267] simple_read_from_buffer+0xca/0x150 [ 315.110596][T13267] proc_fail_nth_read+0x1e9/0x250 [ 315.110620][T13267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.110645][T13267] ? rw_verify_area+0x243/0x630 [ 315.110662][T13267] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.110684][T13267] vfs_read+0x1f8/0xb40 [ 315.110703][T13267] ? fdget_pos+0x254/0x320 [ 315.110726][T13267] ? __pfx___mutex_lock+0x10/0x10 [ 315.110746][T13267] ? __pfx_vfs_read+0x10/0x10 [ 315.110766][T13267] ? __fget_files+0x2a/0x410 [ 315.110787][T13267] ? __fget_files+0x395/0x410 [ 315.110807][T13267] ? __fget_files+0x2a/0x410 [ 315.110848][T13267] ksys_read+0x18f/0x2b0 [ 315.110867][T13267] ? __pfx_ksys_read+0x10/0x10 [ 315.110885][T13267] ? do_syscall_64+0x100/0x230 [ 315.110907][T13267] ? do_syscall_64+0xb6/0x230 [ 315.110929][T13267] do_syscall_64+0xf3/0x230 [ 315.110948][T13267] ? clear_bhb_loop+0x35/0x90 [ 315.110972][T13267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.110993][T13267] RIP: 0033:0x7f9d3458bb7c [ 315.111008][T13267] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.111024][T13267] RSP: 002b:00007f9d323f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.111044][T13267] RAX: ffffffffffffffda RBX: 00007f9d347a5fa0 RCX: 00007f9d3458bb7c [ 315.111056][T13267] RDX: 000000000000000f RSI: 00007f9d323f60a0 RDI: 0000000000000008 [ 315.111068][T13267] RBP: 00007f9d323f6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.111078][T13267] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 315.111089][T13267] R13: 0000000000000000 R14: 00007f9d347a5fa0 R15: 00007ffe43976fb8 [ 315.111117][T13267] [ 315.393035][T13269] __nla_validate_parse: 5 callbacks suppressed [ 315.393053][T13269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2736'. [ 315.662378][T13271] lo speed is unknown, defaulting to 1000 [ 315.668367][T13279] batadv_slave_1: entered promiscuous mode [ 315.721945][T13276] SET target dimension over the limit! [ 315.731480][T13276] xt_policy: neither incoming nor outgoing policy selected [ 316.075994][T13299] FAULT_INJECTION: forcing a failure. [ 316.075994][T13299] name failslab, interval 1, probability 0, space 0, times 0 [ 316.089032][T13299] CPU: 0 UID: 0 PID: 13299 Comm: syz.4.2745 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 316.089056][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.089067][T13299] Call Trace: [ 316.089074][T13299] [ 316.089082][T13299] dump_stack_lvl+0x241/0x360 [ 316.089107][T13299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.089126][T13299] ? __pfx__printk+0x10/0x10 [ 316.089155][T13299] should_fail_ex+0x40a/0x550 [ 316.089183][T13299] should_failslab+0xac/0x100 [ 316.089204][T13299] ? skb_clone+0x20c/0x390 [ 316.089221][T13299] kmem_cache_alloc_noprof+0x70/0x380 [ 316.089248][T13299] skb_clone+0x20c/0x390 [ 316.089264][T13299] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 316.089288][T13299] dev_queue_xmit_nit+0x249/0xca0 [ 316.089313][T13299] ? dev_queue_xmit_nit+0x2b/0xca0 [ 316.089336][T13299] ? validate_xmit_skb+0x9b8/0xff0 [ 316.089358][T13299] dev_hard_start_xmit+0x15f/0x7d0 [ 316.089378][T13299] ? __pfx_validate_xmit_skb+0x10/0x10 [ 316.089407][T13299] __dev_queue_xmit+0x1b73/0x3f40 [ 316.089425][T13299] ? kasan_save_track+0x51/0x80 [ 316.089448][T13299] ? ____sys_sendmsg+0x53a/0x860 [ 316.089470][T13299] ? __dev_queue_xmit+0x2f4/0x3f40 [ 316.089493][T13299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 316.089526][T13299] ? __copy_skb_header+0xa7/0x5a0 [ 316.089545][T13299] ? __asan_memcpy+0x40/0x70 [ 316.089581][T13299] ? skb_clone+0x240/0x390 [ 316.089601][T13299] __netlink_deliver_tap+0x561/0x7f0 [ 316.089633][T13299] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.089652][T13299] netlink_deliver_tap+0x19d/0x1b0 [ 316.089673][T13299] netlink_unicast+0x7c4/0x990 [ 316.089701][T13299] ? __pfx_netlink_unicast+0x10/0x10 [ 316.089717][T13299] ? __virt_addr_valid+0x45f/0x530 [ 316.089734][T13299] ? __phys_addr_symbol+0x2f/0x70 [ 316.089749][T13299] ? __check_object_size+0x47a/0x730 [ 316.089775][T13299] netlink_sendmsg+0x8de/0xcb0 [ 316.089806][T13299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.089830][T13299] ? aa_sock_msg_perm+0x91/0x160 [ 316.089860][T13299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.089878][T13299] __sock_sendmsg+0x221/0x270 [ 316.089902][T13299] ____sys_sendmsg+0x53a/0x860 [ 316.089927][T13299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.089942][T13299] ? __fget_files+0x2a/0x410 [ 316.089966][T13299] ? __fget_files+0x2a/0x410 [ 316.090001][T13299] __sys_sendmsg+0x269/0x350 [ 316.090023][T13299] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.090054][T13299] ? do_sys_openat2+0x17a/0x1d0 [ 316.090098][T13299] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.090123][T13299] ? do_syscall_64+0x100/0x230 [ 316.090145][T13299] ? do_syscall_64+0xb6/0x230 [ 316.090166][T13299] do_syscall_64+0xf3/0x230 [ 316.090185][T13299] ? clear_bhb_loop+0x35/0x90 [ 316.090208][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.090226][T13299] RIP: 0033:0x7f2bba58d169 [ 316.090242][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.090256][T13299] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.090274][T13299] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 316.090287][T13299] RDX: 0000000000000040 RSI: 0000400000000140 RDI: 0000000000000003 [ 316.090297][T13299] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 316.090308][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.090318][T13299] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 316.090347][T13299] [ 316.474522][T13270] batadv_slave_1: left promiscuous mode [ 316.648804][T13309] netlink: 'syz.0.2748': attribute type 10 has an invalid length. [ 316.661937][T13311] netlink: 'syz.1.2751': attribute type 10 has an invalid length. [ 316.711716][T13309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2748'. [ 316.724446][T13311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2751'. [ 316.748182][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 316.786227][T13309] batman_adv: batadv0: Adding interface: virt_wifi0 [ 316.793479][T13309] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.831345][T13309] batman_adv: batadv0: Interface activated: virt_wifi0 [ 316.842190][T13311] batman_adv: batadv0: Adding interface: virt_wifi0 [ 316.863917][T13311] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.892015][T13311] batman_adv: batadv0: Interface activated: virt_wifi0 [ 316.945089][T13321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2753'. [ 317.031822][T13323] FAULT_INJECTION: forcing a failure. [ 317.031822][T13323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.066148][T13323] CPU: 1 UID: 0 PID: 13323 Comm: syz.0.2754 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 317.066176][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.066187][T13323] Call Trace: [ 317.066195][T13323] [ 317.066203][T13323] dump_stack_lvl+0x241/0x360 [ 317.066228][T13323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.066247][T13323] ? __pfx__printk+0x10/0x10 [ 317.066267][T13323] ? __pfx_lock_release+0x10/0x10 [ 317.066298][T13323] should_fail_ex+0x40a/0x550 [ 317.066325][T13323] set_fd_set+0x3a/0xa0 [ 317.066345][T13323] core_sys_select+0x87d/0xa40 [ 317.066376][T13323] ? __pfx_core_sys_select+0x10/0x10 [ 317.066400][T13323] ? ktime_get_ts64+0x9f/0x440 [ 317.066419][T13323] ? seqcount_lockdep_reader_access+0x157/0x220 [ 317.066465][T13323] ? __pfx_set_user_sigmask+0x10/0x10 [ 317.066486][T13323] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.066506][T13323] ? put_files_struct+0x23d/0x310 [ 317.066552][T13323] __se_sys_pselect6+0x321/0x3e0 [ 317.066580][T13323] ? __pfx___se_sys_pselect6+0x10/0x10 [ 317.066601][T13323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 317.066626][T13323] ? do_syscall_64+0x100/0x230 [ 317.066648][T13323] ? __x64_sys_pselect6+0x21/0xf0 [ 317.066671][T13323] do_syscall_64+0xf3/0x230 [ 317.066691][T13323] ? clear_bhb_loop+0x35/0x90 [ 317.066714][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.066735][T13323] RIP: 0033:0x7f917e18d169 [ 317.066750][T13323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.066765][T13323] RSP: 002b:00007f917f09a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 317.066785][T13323] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18d169 [ 317.066798][T13323] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000040 [ 317.066810][T13323] RBP: 00007f917f09a090 R08: 0000400000000600 R09: 0000000000000000 [ 317.066822][T13323] R10: 00004000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 317.066833][T13323] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 317.066860][T13323] [ 317.341810][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.348599][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552535][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2760'. [ 317.727620][T13353] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2762'. [ 317.753902][T13353] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 317.885647][T13365] Bluetooth: MGMT ver 1.23 [ 318.101628][T13374] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 318.131751][T13374] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 318.142919][T13374] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 318.154228][T13378] FAULT_INJECTION: forcing a failure. [ 318.154228][T13378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.174139][T13374] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 318.182532][T13378] CPU: 0 UID: 0 PID: 13378 Comm: syz.2.2773 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 318.182556][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.182567][T13378] Call Trace: [ 318.182574][T13378] [ 318.182582][T13378] dump_stack_lvl+0x241/0x360 [ 318.182608][T13378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.182627][T13378] ? __pfx__printk+0x10/0x10 [ 318.182656][T13378] should_fail_ex+0x40a/0x550 [ 318.182683][T13378] _copy_to_user+0x31/0xb0 [ 318.182705][T13378] generic_map_lookup_batch+0x92a/0xf20 [ 318.182740][T13378] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 318.182765][T13378] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 318.182786][T13378] bpf_map_do_batch+0x288/0x660 [ 318.182820][T13378] __sys_bpf+0x653/0x820 [ 318.182843][T13378] ? __pfx___sys_bpf+0x10/0x10 [ 318.182877][T13378] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.182903][T13378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.182927][T13378] ? do_syscall_64+0x100/0x230 [ 318.182952][T13378] __x64_sys_bpf+0x7c/0x90 [ 318.182973][T13378] do_syscall_64+0xf3/0x230 [ 318.182992][T13378] ? clear_bhb_loop+0x35/0x90 [ 318.183016][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.183037][T13378] RIP: 0033:0x7f9d3458d169 [ 318.183053][T13378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.183067][T13378] RSP: 002b:00007f9d323f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.183086][T13378] RAX: ffffffffffffffda RBX: 00007f9d347a5fa0 RCX: 00007f9d3458d169 [ 318.183099][T13378] RDX: 0000000000000038 RSI: 00004000000003c0 RDI: 0000000000000018 [ 318.183111][T13378] RBP: 00007f9d323f6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.183123][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.183132][T13378] R13: 0000000000000000 R14: 00007f9d347a5fa0 R15: 00007ffe43976fb8 [ 318.183158][T13378] [ 318.439125][T13386] FAULT_INJECTION: forcing a failure. [ 318.439125][T13386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.490154][T13386] CPU: 1 UID: 0 PID: 13386 Comm: syz.1.2774 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 318.490181][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.490192][T13386] Call Trace: [ 318.490199][T13386] [ 318.490207][T13386] dump_stack_lvl+0x241/0x360 [ 318.490234][T13386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.490252][T13386] ? __pfx__printk+0x10/0x10 [ 318.490271][T13386] ? __pfx_lock_release+0x10/0x10 [ 318.490294][T13386] ? __lock_acquire+0x1397/0x2100 [ 318.490321][T13386] should_fail_ex+0x40a/0x550 [ 318.490349][T13386] _copy_from_user+0x2d/0xb0 [ 318.490371][T13386] kstrtouint_from_user+0xc6/0x190 [ 318.490392][T13386] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 318.490412][T13386] ? __pfx_lock_acquire+0x10/0x10 [ 318.490444][T13386] proc_fail_nth_write+0xaa/0x2d0 [ 318.490466][T13386] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 318.490485][T13386] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.490510][T13386] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.490540][T13386] vfs_write+0x29f/0xd10 [ 318.490561][T13386] ? fdget_pos+0x254/0x320 [ 318.490581][T13386] ? __mutex_unlock_slowpath+0x227/0x800 [ 318.490601][T13386] ? __pfx_vfs_write+0x10/0x10 [ 318.490614][T13386] ? do_sys_openat2+0x17a/0x1d0 [ 318.490635][T13386] ? __fget_files+0x2a/0x410 [ 318.490658][T13386] ? __fget_files+0x395/0x410 [ 318.490677][T13386] ? __fget_files+0x2a/0x410 [ 318.490706][T13386] ksys_write+0x18f/0x2b0 [ 318.490727][T13386] ? __pfx_ksys_write+0x10/0x10 [ 318.490746][T13386] ? do_syscall_64+0x100/0x230 [ 318.490769][T13386] ? do_syscall_64+0xb6/0x230 [ 318.490789][T13386] do_syscall_64+0xf3/0x230 [ 318.490808][T13386] ? clear_bhb_loop+0x35/0x90 [ 318.490831][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.490852][T13386] RIP: 0033:0x7fcc9c18bc1f [ 318.490867][T13386] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.490881][T13386] RSP: 002b:00007fcc9cf8f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.490898][T13386] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc9c18bc1f [ 318.490908][T13386] RDX: 0000000000000001 RSI: 00007fcc9cf8f0a0 RDI: 0000000000000004 [ 318.490917][T13386] RBP: 00007fcc9cf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 318.490928][T13386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 318.490937][T13386] R13: 0000000000000000 R14: 00007fcc9c3a5fa0 R15: 00007fff4db60ab8 [ 318.490963][T13386] [ 318.900635][T13402] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2778'. [ 319.209904][T13417] netlink: 'syz.0.2787': attribute type 21 has an invalid length. [ 319.234026][T13417] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2787'. [ 319.245613][T13419] FAULT_INJECTION: forcing a failure. [ 319.245613][T13419] name failslab, interval 1, probability 0, space 0, times 0 [ 319.282529][T13419] CPU: 1 UID: 0 PID: 13419 Comm: syz.4.2788 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 319.282556][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.282567][T13419] Call Trace: [ 319.282574][T13419] [ 319.282583][T13419] dump_stack_lvl+0x241/0x360 [ 319.282609][T13419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.282628][T13419] ? __pfx__printk+0x10/0x10 [ 319.282660][T13419] should_fail_ex+0x40a/0x550 [ 319.282689][T13419] should_failslab+0xac/0x100 [ 319.282712][T13419] kmem_cache_alloc_node_noprof+0x77/0x380 [ 319.282734][T13419] ? __alloc_skb+0x1c3/0x440 [ 319.282749][T13419] ? trace_contention_end+0x3c/0x120 [ 319.282772][T13419] __alloc_skb+0x1c3/0x440 [ 319.282794][T13419] ? __pfx___alloc_skb+0x10/0x10 [ 319.282811][T13419] ? hci_sock_sendmsg+0x617/0x11c0 [ 319.282832][T13419] ? __pfx___mutex_lock+0x10/0x10 [ 319.282855][T13419] hci_mgmt_cmd+0x1c5/0xf10 [ 319.282889][T13419] hci_sock_sendmsg+0x7b8/0x11c0 [ 319.282914][T13419] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.282935][T13419] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 319.282954][T13419] ? __pfx_aa_file_perm+0x10/0x10 [ 319.282969][T13419] ? aa_sock_msg_perm+0x91/0x160 [ 319.282998][T13419] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 319.283015][T13419] __sock_sendmsg+0x221/0x270 [ 319.283041][T13419] sock_write_iter+0x2d7/0x3f0 [ 319.283063][T13419] ? __pfx_sock_write_iter+0x10/0x10 [ 319.283096][T13419] ? bpf_lsm_file_permission+0x9/0x10 [ 319.283127][T13419] vfs_write+0xacf/0xd10 [ 319.283149][T13419] ? __pfx_sock_write_iter+0x10/0x10 [ 319.283170][T13419] ? __pfx_vfs_write+0x10/0x10 [ 319.283185][T13419] ? do_sys_openat2+0x17a/0x1d0 [ 319.283210][T13419] ? __fget_files+0x2a/0x410 [ 319.283235][T13419] ? __fget_files+0x2a/0x410 [ 319.283266][T13419] ksys_write+0x18f/0x2b0 [ 319.283286][T13419] ? __pfx_ksys_write+0x10/0x10 [ 319.283305][T13419] ? do_syscall_64+0x100/0x230 [ 319.283327][T13419] ? do_syscall_64+0xb6/0x230 [ 319.283349][T13419] do_syscall_64+0xf3/0x230 [ 319.283369][T13419] ? clear_bhb_loop+0x35/0x90 [ 319.283393][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.283414][T13419] RIP: 0033:0x7f2bba58d169 [ 319.283430][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.283446][T13419] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.283470][T13419] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 319.283483][T13419] RDX: 0000000000000006 RSI: 00004000000000c0 RDI: 0000000000000004 [ 319.283494][T13419] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 319.283505][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.283516][T13419] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 319.283545][T13419] [ 319.344094][T13415] can: request_module (can-proto-3) failed. [ 319.648673][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2790'. [ 319.674660][T13435] FAULT_INJECTION: forcing a failure. [ 319.674660][T13435] name failslab, interval 1, probability 0, space 0, times 0 [ 319.692404][T13435] CPU: 1 UID: 0 PID: 13435 Comm: syz.2.2794 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 319.692431][T13435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.692447][T13435] Call Trace: [ 319.692454][T13435] [ 319.692462][T13435] dump_stack_lvl+0x241/0x360 [ 319.692490][T13435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.692509][T13435] ? __pfx__printk+0x10/0x10 [ 319.692538][T13435] should_fail_ex+0x40a/0x550 [ 319.692566][T13435] should_failslab+0xac/0x100 [ 319.692589][T13435] __kmalloc_cache_noprof+0x70/0x390 [ 319.692610][T13435] ? __hw_addr_add_ex+0x1fb/0x760 [ 319.692632][T13435] __hw_addr_add_ex+0x1fb/0x760 [ 319.692657][T13435] dev_addr_init+0x157/0x240 [ 319.692678][T13435] ? __pfx_dev_addr_init+0x10/0x10 [ 319.692699][T13435] ? read_word_at_a_time+0xe/0x20 [ 319.692727][T13435] alloc_netdev_mqs+0x307/0x1210 [ 319.692745][T13435] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 319.692774][T13435] ip6gre_tunnel_locate+0x1f2/0x3d0 [ 319.692798][T13435] ? __pfx_ip6gre_tunnel_locate+0x10/0x10 [ 319.692816][T13435] ? ip6gre_tnl_parm_from_user+0x41/0x3e0 [ 319.692840][T13435] ? ip6gre_tunnel_siocdevprivate+0x608/0x810 [ 319.692866][T13435] ip6gre_tunnel_siocdevprivate+0x630/0x810 [ 319.692894][T13435] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 319.692937][T13435] ? __mutex_lock+0x602/0x1010 [ 319.692953][T13435] ? full_name_hash+0x93/0xe0 [ 319.692982][T13435] dev_ifsioc+0xcac/0x1130 [ 319.693002][T13435] ? __pfx___mutex_lock+0x10/0x10 [ 319.693028][T13435] ? __pfx_dev_ifsioc+0x10/0x10 [ 319.693052][T13435] ? dev_load+0x21/0x1f0 [ 319.693074][T13435] dev_ioctl+0x881/0x1340 [ 319.693098][T13435] sock_ioctl+0x7ef/0x8e0 [ 319.693120][T13435] ? __pfx_sock_ioctl+0x10/0x10 [ 319.693152][T13435] ? __pfx_sock_ioctl+0x10/0x10 [ 319.693174][T13435] __se_sys_ioctl+0xf5/0x170 [ 319.693194][T13435] do_syscall_64+0xf3/0x230 [ 319.693213][T13435] ? clear_bhb_loop+0x35/0x90 [ 319.693237][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.693257][T13435] RIP: 0033:0x7f9d3458d169 [ 319.693272][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.693288][T13435] RSP: 002b:00007f9d323f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.693307][T13435] RAX: ffffffffffffffda RBX: 00007f9d347a5fa0 RCX: 00007f9d3458d169 [ 319.693319][T13435] RDX: 0000400000000080 RSI: 00000000000089f1 RDI: 0000000000000003 [ 319.693329][T13435] RBP: 00007f9d323f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.693339][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.693348][T13435] R13: 0000000000000000 R14: 00007f9d347a5fa0 R15: 00007ffe43976fb8 [ 319.693374][T13435] [ 320.188909][T13450] IPVS: stopping backup sync thread 13451 ... [ 320.192904][T13451] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 320.418882][T13466] netlink: 'syz.0.2805': attribute type 41 has an invalid length. [ 320.452849][T13466] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 320.526943][T13466] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 320.536443][T13466] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 320.552128][T13466] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 320.561296][T13466] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 320.578263][T13478] FAULT_INJECTION: forcing a failure. [ 320.578263][T13478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.592152][T13478] CPU: 1 UID: 0 PID: 13478 Comm: syz.2.2807 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 320.592177][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.592188][T13478] Call Trace: [ 320.592195][T13478] [ 320.592203][T13478] dump_stack_lvl+0x241/0x360 [ 320.592229][T13478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.592248][T13478] ? __pfx__printk+0x10/0x10 [ 320.592268][T13478] ? __pfx_lock_release+0x10/0x10 [ 320.592299][T13478] should_fail_ex+0x40a/0x550 [ 320.592328][T13478] _copy_from_iter+0x1df/0x1c40 [ 320.592347][T13478] ? __virt_addr_valid+0x183/0x530 [ 320.592365][T13478] ? __pfx_lock_release+0x10/0x10 [ 320.592396][T13478] ? __pfx__copy_from_iter+0x10/0x10 [ 320.592415][T13478] ? __virt_addr_valid+0x183/0x530 [ 320.592430][T13478] ? __virt_addr_valid+0x183/0x530 [ 320.592444][T13478] ? __virt_addr_valid+0x45f/0x530 [ 320.592461][T13478] ? __phys_addr_symbol+0x2f/0x70 [ 320.592477][T13478] ? __check_object_size+0x47a/0x730 [ 320.592503][T13478] netlink_sendmsg+0x742/0xcb0 [ 320.592537][T13478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.592563][T13478] ? aa_sock_msg_perm+0x91/0x160 [ 320.592592][T13478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.592612][T13478] __sock_sendmsg+0x221/0x270 [ 320.592637][T13478] ____sys_sendmsg+0x53a/0x860 [ 320.592670][T13478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.592687][T13478] ? __fget_files+0x2a/0x410 [ 320.592712][T13478] ? __fget_files+0x2a/0x410 [ 320.592742][T13478] __sys_sendmsg+0x269/0x350 [ 320.592765][T13478] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.592798][T13478] ? do_sys_openat2+0x17a/0x1d0 [ 320.592846][T13478] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.592870][T13478] ? do_syscall_64+0x100/0x230 [ 320.592891][T13478] ? do_syscall_64+0xb6/0x230 [ 320.592911][T13478] do_syscall_64+0xf3/0x230 [ 320.592929][T13478] ? clear_bhb_loop+0x35/0x90 [ 320.592953][T13478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.592973][T13478] RIP: 0033:0x7f9d3458d169 [ 320.592987][T13478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.593002][T13478] RSP: 002b:00007f9d323f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.593020][T13478] RAX: ffffffffffffffda RBX: 00007f9d347a5fa0 RCX: 00007f9d3458d169 [ 320.593031][T13478] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 320.593041][T13478] RBP: 00007f9d323f6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.593050][T13478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.593059][T13478] R13: 0000000000000000 R14: 00007f9d347a5fa0 R15: 00007ffe43976fb8 [ 320.593084][T13478] [ 321.180869][T13495] netlink: 'syz.0.2814': attribute type 9 has an invalid length. [ 321.190234][T13495] netlink: 201384 bytes leftover after parsing attributes in process `syz.0.2814'. [ 321.200165][T13495] openvswitch: netlink: Message has 6 unknown bytes. [ 321.262396][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 321.282362][T13502] FAULT_INJECTION: forcing a failure. [ 321.282362][T13502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.304289][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.4.2816 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 321.304315][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.304325][T13502] Call Trace: [ 321.304332][T13502] [ 321.304340][T13502] dump_stack_lvl+0x241/0x360 [ 321.304367][T13502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.304386][T13502] ? __pfx__printk+0x10/0x10 [ 321.304405][T13502] ? __pfx_lock_release+0x10/0x10 [ 321.304436][T13502] should_fail_ex+0x40a/0x550 [ 321.304464][T13502] _copy_from_user+0x2d/0xb0 [ 321.304485][T13502] move_addr_to_kernel+0x82/0x150 [ 321.304508][T13502] copy_msghdr_from_user+0x43e/0x680 [ 321.304529][T13502] ? __pfx___might_resched+0x10/0x10 [ 321.304553][T13502] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 321.304579][T13502] ? __fget_files+0x2a/0x410 [ 321.304606][T13502] ? __sys_sendmmsg+0x392/0x720 [ 321.304624][T13502] ? __might_fault+0xaa/0x120 [ 321.304645][T13502] __sys_sendmmsg+0x32b/0x720 [ 321.304674][T13502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.304704][T13502] ? __pfx_lock_release+0x10/0x10 [ 321.304724][T13502] ? kstrtouint_from_user+0x128/0x190 [ 321.304765][T13502] ? ksys_write+0x22a/0x2b0 [ 321.304783][T13502] ? __pfx_lock_release+0x10/0x10 [ 321.304811][T13502] ? sb_end_write+0xe9/0x1c0 [ 321.304834][T13502] ? vfs_write+0x7fa/0xd10 [ 321.304853][T13502] ? __mutex_unlock_slowpath+0x227/0x800 [ 321.304900][T13502] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.304926][T13502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.304951][T13502] ? do_syscall_64+0x100/0x230 [ 321.304974][T13502] __x64_sys_sendmmsg+0xa0/0xb0 [ 321.304994][T13502] do_syscall_64+0xf3/0x230 [ 321.305012][T13502] ? clear_bhb_loop+0x35/0x90 [ 321.305037][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.305057][T13502] RIP: 0033:0x7f2bba58d169 [ 321.305073][T13502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.305087][T13502] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.305106][T13502] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 321.305118][T13502] RDX: 04924924924925c6 RSI: 0000400000000680 RDI: 0000000000000006 [ 321.305130][T13502] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 321.305141][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.305152][T13502] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 321.305179][T13502] [ 321.578216][T13508] FAULT_INJECTION: forcing a failure. [ 321.578216][T13508] name failslab, interval 1, probability 0, space 0, times 0 [ 321.619067][T13508] CPU: 1 UID: 0 PID: 13508 Comm: syz.3.2818 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 321.619086][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.619092][T13508] Call Trace: [ 321.619097][T13508] [ 321.619102][T13508] dump_stack_lvl+0x241/0x360 [ 321.619119][T13508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.619130][T13508] ? __pfx__printk+0x10/0x10 [ 321.619141][T13508] ? __kmalloc_cache_noprof+0x48/0x390 [ 321.619157][T13508] ? __pfx___might_resched+0x10/0x10 [ 321.619173][T13508] should_fail_ex+0x40a/0x550 [ 321.619190][T13508] should_failslab+0xac/0x100 [ 321.619205][T13508] __kmalloc_cache_noprof+0x70/0x390 [ 321.619217][T13508] ? sctp_endpoint_new+0x86/0xab0 [ 321.619232][T13508] ? __pfx_lock_release+0x10/0x10 [ 321.619249][T13508] sctp_endpoint_new+0x86/0xab0 [ 321.619264][T13508] ? __raw_spin_lock_init+0x45/0x100 [ 321.619280][T13508] sctp_init_sock+0x998/0x1210 [ 321.619295][T13508] sctp_v6_init_sock+0x16/0x70 [ 321.619309][T13508] sctp_v6_create_accept_sk+0x409/0x5a0 [ 321.619325][T13508] sctp_accept+0x5ee/0x840 [ 321.619338][T13508] ? __pfx_sctp_v6_create_accept_sk+0x10/0x10 [ 321.619353][T13508] ? __pfx_sctp_accept+0x10/0x10 [ 321.619366][T13508] ? __pfx_autoremove_wake_function+0x10/0x10 [ 321.619381][T13508] ? security_inode_alloc+0xd2/0x310 [ 321.619391][T13508] ? __pfx_aa_sk_perm+0x10/0x10 [ 321.619408][T13508] inet_accept+0xb3/0x150 [ 321.619420][T13508] do_accept+0x4c4/0x6d0 [ 321.619438][T13508] ? __pfx_do_accept+0x10/0x10 [ 321.619463][T13508] __sys_accept4+0x11f/0x1d0 [ 321.619478][T13508] ? __pfx___sys_accept4+0x10/0x10 [ 321.619493][T13508] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.619508][T13508] ? do_syscall_64+0x100/0x230 [ 321.619527][T13508] __x64_sys_accept4+0x9a/0xb0 [ 321.619543][T13508] do_syscall_64+0xf3/0x230 [ 321.619554][T13508] ? clear_bhb_loop+0x35/0x90 [ 321.619570][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.619583][T13508] RIP: 0033:0x7f3fac38d169 [ 321.619593][T13508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.619602][T13508] RSP: 002b:00007f3fad2b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 321.619613][T13508] RAX: ffffffffffffffda RBX: 00007f3fac5a6080 RCX: 00007f3fac38d169 [ 321.619620][T13508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 321.619626][T13508] RBP: 00007f3fad2b1090 R08: 0000000000000000 R09: 0000000000000000 [ 321.619632][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.619638][T13508] R13: 0000000000000000 R14: 00007f3fac5a6080 R15: 00007ffc9a839008 [ 321.619652][T13508] [ 322.359000][T13532] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 322.382746][T13532] netlink: 'syz.3.2828': attribute type 2 has an invalid length. [ 322.407402][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'. [ 322.422711][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 322.440609][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2828'. [ 322.497297][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 322.717258][T13545] FAULT_INJECTION: forcing a failure. [ 322.717258][T13545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.772317][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.1.2832 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 322.772342][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.772352][T13545] Call Trace: [ 322.772358][T13545] [ 322.772365][T13545] dump_stack_lvl+0x241/0x360 [ 322.772385][T13545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.772401][T13545] ? __pfx__printk+0x10/0x10 [ 322.772419][T13545] ? __pfx_lock_release+0x10/0x10 [ 322.772447][T13545] should_fail_ex+0x40a/0x550 [ 322.772473][T13545] _copy_from_iter+0x1df/0x1c40 [ 322.772492][T13545] ? __virt_addr_valid+0x183/0x530 [ 322.772509][T13545] ? __pfx_lock_release+0x10/0x10 [ 322.772537][T13545] ? __alloc_skb+0x28f/0x440 [ 322.772553][T13545] ? __pfx__copy_from_iter+0x10/0x10 [ 322.772573][T13545] ? __virt_addr_valid+0x183/0x530 [ 322.772588][T13545] ? __virt_addr_valid+0x183/0x530 [ 322.772601][T13545] ? __virt_addr_valid+0x45f/0x530 [ 322.772615][T13545] ? __phys_addr_symbol+0x2f/0x70 [ 322.772628][T13545] ? __check_object_size+0x47a/0x730 [ 322.772647][T13545] netlink_sendmsg+0x742/0xcb0 [ 322.772673][T13545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.772691][T13545] ? aa_sock_msg_perm+0x91/0x160 [ 322.772712][T13545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.772729][T13545] __sock_sendmsg+0x221/0x270 [ 322.772752][T13545] ____sys_sendmsg+0x53a/0x860 [ 322.772774][T13545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.772789][T13545] ? __fget_files+0x2a/0x410 [ 322.772811][T13545] ? __fget_files+0x2a/0x410 [ 322.772841][T13545] __sys_sendmsg+0x269/0x350 [ 322.772863][T13545] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.772892][T13545] ? do_sys_openat2+0x17a/0x1d0 [ 322.772938][T13545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.772962][T13545] ? do_syscall_64+0x100/0x230 [ 322.772985][T13545] ? do_syscall_64+0xb6/0x230 [ 322.773007][T13545] do_syscall_64+0xf3/0x230 [ 322.773025][T13545] ? clear_bhb_loop+0x35/0x90 [ 322.773049][T13545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.773069][T13545] RIP: 0033:0x7fcc9c18d169 [ 322.773084][T13545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.773099][T13545] RSP: 002b:00007fcc9cf8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.773117][T13545] RAX: ffffffffffffffda RBX: 00007fcc9c3a5fa0 RCX: 00007fcc9c18d169 [ 322.773129][T13545] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 322.773139][T13545] RBP: 00007fcc9cf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 322.773149][T13545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.773158][T13545] R13: 0000000000000000 R14: 00007fcc9c3a5fa0 R15: 00007fff4db60ab8 [ 322.773184][T13545] [ 322.784771][T13547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 323.319596][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2837'. [ 323.434918][T13563] lo speed is unknown, defaulting to 1000 [ 323.495728][T13567] FAULT_INJECTION: forcing a failure. [ 323.495728][T13567] name failslab, interval 1, probability 0, space 0, times 0 [ 323.530320][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.4.2838 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 323.530346][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.530356][T13567] Call Trace: [ 323.530363][T13567] [ 323.530371][T13567] dump_stack_lvl+0x241/0x360 [ 323.530396][T13567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.530413][T13567] ? __pfx__printk+0x10/0x10 [ 323.530442][T13567] should_fail_ex+0x40a/0x550 [ 323.530468][T13567] should_failslab+0xac/0x100 [ 323.530491][T13567] ? skb_clone+0x20c/0x390 [ 323.530508][T13567] kmem_cache_alloc_noprof+0x70/0x380 [ 323.530533][T13567] skb_clone+0x20c/0x390 [ 323.530554][T13567] __netlink_deliver_tap+0x3c4/0x7f0 [ 323.530586][T13567] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.530605][T13567] netlink_deliver_tap+0x19d/0x1b0 [ 323.530626][T13567] netlink_unicast+0x7c4/0x990 [ 323.530653][T13567] ? __pfx_netlink_unicast+0x10/0x10 [ 323.530671][T13567] ? __virt_addr_valid+0x45f/0x530 [ 323.530687][T13567] ? __phys_addr_symbol+0x2f/0x70 [ 323.530702][T13567] ? __check_object_size+0x47a/0x730 [ 323.530727][T13567] netlink_sendmsg+0x8de/0xcb0 [ 323.530761][T13567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.530787][T13567] ? aa_sock_msg_perm+0x91/0x160 [ 323.530815][T13567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.530834][T13567] __sock_sendmsg+0x221/0x270 [ 323.530858][T13567] ____sys_sendmsg+0x53a/0x860 [ 323.530884][T13567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.530900][T13567] ? __fget_files+0x2a/0x410 [ 323.530925][T13567] ? __fget_files+0x2a/0x410 [ 323.530956][T13567] __sys_sendmsg+0x269/0x350 [ 323.530979][T13567] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.531010][T13567] ? do_sys_openat2+0x17a/0x1d0 [ 323.531057][T13567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.531079][T13567] ? do_syscall_64+0x100/0x230 [ 323.531108][T13567] ? do_syscall_64+0xb6/0x230 [ 323.531129][T13567] do_syscall_64+0xf3/0x230 [ 323.531148][T13567] ? clear_bhb_loop+0x35/0x90 [ 323.531173][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.531192][T13567] RIP: 0033:0x7f2bba58d169 [ 323.531207][T13567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.531222][T13567] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.531242][T13567] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 323.531255][T13567] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 323.531266][T13567] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 323.531277][T13567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.531287][T13567] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 323.531313][T13567] [ 323.531331][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2838'. [ 323.959043][T13577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2842'. [ 323.968329][T13577] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2842'. [ 323.980544][T13577] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 324.006114][T13577] 8021q: VLANs not supported on vxcan1 [ 324.264850][T13592] netlink: 'syz.2.2848': attribute type 41 has an invalid length. [ 324.320213][T13592] gtp0: left promiscuous mode [ 324.333430][T13592] gretap1: left promiscuous mode [ 324.366158][T13592] gretap1: left allmulticast mode [ 324.382569][T13592] ipip0: left promiscuous mode [ 324.443881][T13592] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.480201][T13592] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.503678][T13592] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.530053][T13592] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 324.570002][T13592] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.600160][T13592] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.608732][T13592] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.624607][T13592] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 324.943542][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 325.025234][T13617] netlink: 'syz.2.2853': attribute type 39 has an invalid length. [ 325.146100][T13621] 8021q: adding VLAN 0 to HW filter on device team1 [ 325.386686][T13624] debugfs: Directory 'netdev:nicvf0' with parent 'phy10' already present! [ 325.857014][T13651] netlink: 'syz.3.2866': attribute type 1 has an invalid length. [ 325.926969][T13651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.995880][T13646] bond4: (slave gretap1): making interface the new active one [ 326.004721][T13646] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 326.015924][T13655] FAULT_INJECTION: forcing a failure. [ 326.015924][T13655] name failslab, interval 1, probability 0, space 0, times 0 [ 326.029311][T13655] CPU: 0 UID: 0 PID: 13655 Comm: syz.0.2869 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 326.029331][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.029339][T13655] Call Trace: [ 326.029345][T13655] [ 326.029351][T13655] dump_stack_lvl+0x241/0x360 [ 326.029374][T13655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.029388][T13655] ? __pfx__printk+0x10/0x10 [ 326.029404][T13655] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 326.029423][T13655] ? __pfx___might_resched+0x10/0x10 [ 326.029444][T13655] should_fail_ex+0x40a/0x550 [ 326.029466][T13655] should_failslab+0xac/0x100 [ 326.029484][T13655] kmem_cache_alloc_node_noprof+0x77/0x380 [ 326.029500][T13655] ? __alloc_skb+0x1c3/0x440 [ 326.029516][T13655] __alloc_skb+0x1c3/0x440 [ 326.029527][T13655] ? kfree+0x196/0x430 [ 326.029541][T13655] ? call_nexthop_notifiers+0x1d3/0x280 [ 326.029562][T13655] ? __pfx___alloc_skb+0x10/0x10 [ 326.029584][T13655] nexthop_notify+0x35e/0x5d0 [ 326.029606][T13655] rtm_new_nexthop+0x6027/0xa490 [ 326.029642][T13655] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 326.029687][T13655] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.029711][T13655] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 326.029724][T13655] ? lockdep_hardirqs_on+0x99/0x150 [ 326.029739][T13655] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 326.029752][T13655] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.029769][T13655] ? rcu_is_watching+0x15/0xb0 [ 326.029798][T13655] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 326.029833][T13655] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 326.029866][T13655] rtnetlink_rcv_msg+0x73f/0xcf0 [ 326.029884][T13655] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 326.029904][T13655] ? __lock_acquire+0x1397/0x2100 [ 326.029925][T13655] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.029956][T13655] netlink_rcv_skb+0x206/0x480 [ 326.029976][T13655] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.029998][T13655] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.030036][T13655] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.030057][T13655] netlink_unicast+0x7f6/0x990 [ 326.030083][T13655] ? __pfx_netlink_unicast+0x10/0x10 [ 326.030099][T13655] ? __virt_addr_valid+0x45f/0x530 [ 326.030115][T13655] ? __phys_addr_symbol+0x2f/0x70 [ 326.030130][T13655] ? __check_object_size+0x47a/0x730 [ 326.030153][T13655] netlink_sendmsg+0x8de/0xcb0 [ 326.030185][T13655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.030213][T13655] ? aa_sock_msg_perm+0x91/0x160 [ 326.030240][T13655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.030259][T13655] __sock_sendmsg+0x221/0x270 [ 326.030282][T13655] ____sys_sendmsg+0x53a/0x860 [ 326.030305][T13655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.030320][T13655] ? __fget_files+0x2a/0x410 [ 326.030343][T13655] ? __fget_files+0x2a/0x410 [ 326.030371][T13655] __sys_sendmsg+0x269/0x350 [ 326.030393][T13655] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.030423][T13655] ? do_sys_openat2+0x17a/0x1d0 [ 326.030470][T13655] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.030494][T13655] ? do_syscall_64+0x100/0x230 [ 326.030517][T13655] ? do_syscall_64+0xb6/0x230 [ 326.030539][T13655] do_syscall_64+0xf3/0x230 [ 326.030558][T13655] ? clear_bhb_loop+0x35/0x90 [ 326.030582][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.030602][T13655] RIP: 0033:0x7f917e18d169 [ 326.030618][T13655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.030632][T13655] RSP: 002b:00007f917f09a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.030651][T13655] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18d169 [ 326.030664][T13655] RDX: 0000000000000080 RSI: 0000400000000040 RDI: 0000000000000003 [ 326.030675][T13655] RBP: 00007f917f09a090 R08: 0000000000000000 R09: 0000000000000000 [ 326.030686][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.030697][T13655] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 326.030725][T13655] [ 326.910666][T13681] __nla_validate_parse: 4 callbacks suppressed [ 326.910684][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 327.036955][T13687] FAULT_INJECTION: forcing a failure. [ 327.036955][T13687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.071415][T13687] CPU: 0 UID: 0 PID: 13687 Comm: syz.0.2881 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 327.071443][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.071454][T13687] Call Trace: [ 327.071461][T13687] [ 327.071468][T13687] dump_stack_lvl+0x241/0x360 [ 327.071496][T13687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.071513][T13687] ? __pfx__printk+0x10/0x10 [ 327.071533][T13687] ? __pfx_lock_release+0x10/0x10 [ 327.071563][T13687] should_fail_ex+0x40a/0x550 [ 327.071591][T13687] _copy_from_user+0x2d/0xb0 [ 327.071613][T13687] dev_ethtool+0x2aa/0x1d70 [ 327.071639][T13687] ? __pfx_lock_acquire+0x10/0x10 [ 327.071662][T13687] ? dev_load+0x21/0x1f0 [ 327.071683][T13687] ? __pfx_dev_ethtool+0x10/0x10 [ 327.071707][T13687] ? tomoyo_path_number_perm+0x5dd/0x770 [ 327.071742][T13687] ? dev_load+0x21/0x1f0 [ 327.071764][T13687] dev_ioctl+0x785/0x1340 [ 327.071790][T13687] sock_do_ioctl+0x240/0x460 [ 327.071824][T13687] ? __pfx_sock_do_ioctl+0x10/0x10 [ 327.071865][T13687] sock_ioctl+0x626/0x8e0 [ 327.071887][T13687] ? __pfx_sock_ioctl+0x10/0x10 [ 327.071907][T13687] ? __fget_files+0x2a/0x410 [ 327.071933][T13687] ? __fget_files+0x2a/0x410 [ 327.071959][T13687] ? __pfx_sock_ioctl+0x10/0x10 [ 327.071981][T13687] __se_sys_ioctl+0xf5/0x170 [ 327.072002][T13687] do_syscall_64+0xf3/0x230 [ 327.072022][T13687] ? clear_bhb_loop+0x35/0x90 [ 327.072045][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.072066][T13687] RIP: 0033:0x7f917e18d169 [ 327.072081][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.072095][T13687] RSP: 002b:00007f917f09a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.072114][T13687] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18d169 [ 327.072127][T13687] RDX: 0000400000000f00 RSI: 0000000000008946 RDI: 0000000000000003 [ 327.072139][T13687] RBP: 00007f917f09a090 R08: 0000000000000000 R09: 0000000000000000 [ 327.072150][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.072161][T13687] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 327.072188][T13687] [ 327.353527][T13691] netlink: 'syz.1.2882': attribute type 3 has an invalid length. [ 327.363717][T13691] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2882'. [ 327.430707][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'. [ 327.440051][T13701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2886'. [ 327.462134][T13703] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2887'. [ 327.713488][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2891'. [ 327.748892][T13718] FAULT_INJECTION: forcing a failure. [ 327.748892][T13718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.762223][T13718] CPU: 0 UID: 0 PID: 13718 Comm: syz.0.2894 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 327.762247][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.762258][T13718] Call Trace: [ 327.762265][T13718] [ 327.762273][T13718] dump_stack_lvl+0x241/0x360 [ 327.762300][T13718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.762319][T13718] ? __pfx__printk+0x10/0x10 [ 327.762343][T13718] ? snprintf+0xda/0x120 [ 327.762368][T13718] should_fail_ex+0x40a/0x550 [ 327.762396][T13718] _copy_to_user+0x31/0xb0 [ 327.762419][T13718] simple_read_from_buffer+0xca/0x150 [ 327.762444][T13718] proc_fail_nth_read+0x1e9/0x250 [ 327.762469][T13718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.762494][T13718] ? rw_verify_area+0x243/0x630 [ 327.762509][T13718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.762532][T13718] vfs_read+0x1f8/0xb40 [ 327.762549][T13718] ? fdget_pos+0x254/0x320 [ 327.762571][T13718] ? __pfx___mutex_lock+0x10/0x10 [ 327.762591][T13718] ? __pfx_vfs_read+0x10/0x10 [ 327.762612][T13718] ? __fget_files+0x2a/0x410 [ 327.762635][T13718] ? __fget_files+0x395/0x410 [ 327.762655][T13718] ? __fget_files+0x2a/0x410 [ 327.762683][T13718] ksys_read+0x18f/0x2b0 [ 327.762702][T13718] ? __pfx_ksys_read+0x10/0x10 [ 327.762718][T13718] ? do_syscall_64+0x100/0x230 [ 327.762740][T13718] ? do_syscall_64+0xb6/0x230 [ 327.762769][T13718] do_syscall_64+0xf3/0x230 [ 327.762787][T13718] ? clear_bhb_loop+0x35/0x90 [ 327.762812][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.762833][T13718] RIP: 0033:0x7f917e18bb7c [ 327.762848][T13718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.762863][T13718] RSP: 002b:00007f917f09a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.762882][T13718] RAX: ffffffffffffffda RBX: 00007f917e3a5fa0 RCX: 00007f917e18bb7c [ 327.762895][T13718] RDX: 000000000000000f RSI: 00007f917f09a0a0 RDI: 0000000000000004 [ 327.762906][T13718] RBP: 00007f917f09a090 R08: 0000000000000000 R09: 0000000000000000 [ 327.762917][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.762927][T13718] R13: 0000000000000000 R14: 00007f917e3a5fa0 R15: 00007ffcc27c1088 [ 327.762955][T13718] [ 328.000166][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'. [ 328.066206][ T5880] hid-generic 0005:046D:0A0E.0002: item fetching failed at offset 0/1 [ 328.093966][ T5880] hid-generic 0005:046D:0A0E.0002: probe with driver hid-generic failed with error -22 [ 328.140696][T13726] FAULT_INJECTION: forcing a failure. [ 328.140696][T13726] name failslab, interval 1, probability 0, space 0, times 0 [ 328.179200][T13726] CPU: 0 UID: 0 PID: 13726 Comm: syz.2.2897 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 328.179227][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.179238][T13726] Call Trace: [ 328.179245][T13726] [ 328.179253][T13726] dump_stack_lvl+0x241/0x360 [ 328.179279][T13726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.179298][T13726] ? __pfx__printk+0x10/0x10 [ 328.179319][T13726] ? fs_reclaim_acquire+0x93/0x130 [ 328.179336][T13726] ? __pfx___might_resched+0x10/0x10 [ 328.179354][T13726] ? dynamic_dname+0x144/0x1b0 [ 328.179375][T13726] should_fail_ex+0x40a/0x550 [ 328.179402][T13726] should_failslab+0xac/0x100 [ 328.179425][T13726] __kmalloc_noprof+0xdd/0x4c0 [ 328.179445][T13726] ? tomoyo_encode+0x26f/0x540 [ 328.179465][T13726] tomoyo_encode+0x26f/0x540 [ 328.179483][T13726] ? __pfx_sockfs_dname+0x10/0x10 [ 328.179507][T13726] tomoyo_realpath_from_path+0x59e/0x5e0 [ 328.179536][T13726] tomoyo_path_number_perm+0x239/0x770 [ 328.179557][T13726] ? __lock_acquire+0x1397/0x2100 [ 328.179582][T13726] ? tomoyo_path_number_perm+0x209/0x770 [ 328.179605][T13726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.179661][T13726] ? __fget_files+0x2a/0x410 [ 328.179695][T13726] ? __fget_files+0x2a/0x410 [ 328.179719][T13726] security_file_ioctl+0xc6/0x2a0 [ 328.179740][T13726] __se_sys_ioctl+0x46/0x170 [ 328.179761][T13726] do_syscall_64+0xf3/0x230 [ 328.179781][T13726] ? clear_bhb_loop+0x35/0x90 [ 328.179803][T13726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.179822][T13726] RIP: 0033:0x7f9d3458d169 [ 328.179838][T13726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.179850][T13726] RSP: 002b:00007f9d323f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.179868][T13726] RAX: ffffffffffffffda RBX: 00007f9d347a5fa0 RCX: 00007f9d3458d169 [ 328.179881][T13726] RDX: 0000400000000140 RSI: 000000000000891b RDI: 0000000000000008 [ 328.179892][T13726] RBP: 00007f9d323f6090 R08: 0000000000000000 R09: 0000000000000000 [ 328.179903][T13726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.179913][T13726] R13: 0000000000000000 R14: 00007f9d347a5fa0 R15: 00007ffe43976fb8 [ 328.179939][T13726] [ 328.179956][T13726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.560057][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 328.569268][T13739] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 328.604527][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2899'. [ 328.828426][T13753] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.2905'. [ 328.842668][T13753] openvswitch: netlink: Unknown key attributes 20 [ 329.650139][T13789] lo speed is unknown, defaulting to 1000 [ 329.676140][T13792] FAULT_INJECTION: forcing a failure. [ 329.676140][T13792] name failslab, interval 1, probability 0, space 0, times 0 [ 329.740111][T13792] CPU: 0 UID: 0 PID: 13792 Comm: syz.3.2924 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 329.740138][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.740149][T13792] Call Trace: [ 329.740155][T13792] [ 329.740164][T13792] dump_stack_lvl+0x241/0x360 [ 329.740191][T13792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.740210][T13792] ? __pfx__printk+0x10/0x10 [ 329.740230][T13792] ? __kmalloc_noprof+0xb5/0x4c0 [ 329.740252][T13792] ? __pfx___might_resched+0x10/0x10 [ 329.740271][T13792] ? aa_get_newest_label+0xff/0x6f0 [ 329.740293][T13792] ? genl_get_cmd+0x19e/0xce0 [ 329.740315][T13792] should_fail_ex+0x40a/0x550 [ 329.740342][T13792] should_failslab+0xac/0x100 [ 329.740364][T13792] __kmalloc_noprof+0xdd/0x4c0 [ 329.740383][T13792] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 329.740401][T13792] ? apparmor_capable+0x13b/0x1b0 [ 329.740423][T13792] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 329.740449][T13792] genl_rcv_msg+0x80b/0xec0 [ 329.740476][T13792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.740522][T13792] ? __pfx_lock_acquire+0x10/0x10 [ 329.740545][T13792] ? __pfx_mptcp_pm_nl_set_limits_doit+0x10/0x10 [ 329.740568][T13792] ? __pfx___might_resched+0x10/0x10 [ 329.740599][T13792] netlink_rcv_skb+0x206/0x480 [ 329.740629][T13792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.740649][T13792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.740701][T13792] genl_rcv+0x28/0x40 [ 329.740716][T13792] netlink_unicast+0x7f6/0x990 [ 329.740745][T13792] ? __pfx_netlink_unicast+0x10/0x10 [ 329.740762][T13792] ? __virt_addr_valid+0x45f/0x530 [ 329.740780][T13792] ? __phys_addr_symbol+0x2f/0x70 [ 329.740796][T13792] ? __check_object_size+0x47a/0x730 [ 329.740822][T13792] netlink_sendmsg+0x8de/0xcb0 [ 329.740855][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.740880][T13792] ? aa_sock_msg_perm+0x91/0x160 [ 329.740909][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.740929][T13792] __sock_sendmsg+0x221/0x270 [ 329.740954][T13792] ____sys_sendmsg+0x53a/0x860 [ 329.740981][T13792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.740997][T13792] ? __fget_files+0x2a/0x410 [ 329.741022][T13792] ? __fget_files+0x2a/0x410 [ 329.741054][T13792] __sys_sendmsg+0x269/0x350 [ 329.741077][T13792] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.741112][T13792] ? do_sys_openat2+0x17a/0x1d0 [ 329.741161][T13792] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 329.741186][T13792] ? do_syscall_64+0x100/0x230 [ 329.741209][T13792] ? do_syscall_64+0xb6/0x230 [ 329.741231][T13792] do_syscall_64+0xf3/0x230 [ 329.741250][T13792] ? clear_bhb_loop+0x35/0x90 [ 329.741275][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.741295][T13792] RIP: 0033:0x7f3fac38d169 [ 329.741311][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.741326][T13792] RSP: 002b:00007f3fad2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.741345][T13792] RAX: ffffffffffffffda RBX: 00007f3fac5a5fa0 RCX: 00007f3fac38d169 [ 329.741357][T13792] RDX: 0000000000018040 RSI: 0000400000000240 RDI: 0000000000000003 [ 329.741368][T13792] RBP: 00007f3fad2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 329.741379][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.741389][T13792] R13: 0000000000000000 R14: 00007f3fac5a5fa0 R15: 00007ffc9a839008 [ 329.741418][T13792] [ 330.245839][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.274086][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.282634][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.313899][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.338067][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 330.355807][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.447915][T13793] lo speed is unknown, defaulting to 1000 [ 330.537723][T13803] netlink: 'syz.4.2928': attribute type 4 has an invalid length. [ 330.635779][T13808] netlink: 'syz.3.2929': attribute type 1 has an invalid length. [ 330.684551][T13808] FAULT_INJECTION: forcing a failure. [ 330.684551][T13808] name failslab, interval 1, probability 0, space 0, times 0 [ 330.733902][T13808] CPU: 1 UID: 0 PID: 13808 Comm: syz.3.2929 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 330.733928][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.733938][T13808] Call Trace: [ 330.733944][T13808] [ 330.733952][T13808] dump_stack_lvl+0x241/0x360 [ 330.733977][T13808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.733995][T13808] ? __pfx__printk+0x10/0x10 [ 330.734013][T13808] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 330.734036][T13808] ? __pfx___might_resched+0x10/0x10 [ 330.734058][T13808] should_fail_ex+0x40a/0x550 [ 330.734084][T13808] should_failslab+0xac/0x100 [ 330.734106][T13808] kmem_cache_alloc_node_noprof+0x77/0x380 [ 330.734127][T13808] ? __alloc_skb+0x1c3/0x440 [ 330.734146][T13808] __alloc_skb+0x1c3/0x440 [ 330.734165][T13808] ? __pfx___alloc_skb+0x10/0x10 [ 330.734180][T13808] ? __lock_acquire+0x20b0/0x2100 [ 330.734206][T13808] ? netlink_ack_tlv_len+0x6e/0x200 [ 330.734229][T13808] netlink_ack+0x145/0xa60 [ 330.734253][T13808] ? __kasan_kmalloc+0x23/0xb0 [ 330.734274][T13808] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 330.734289][T13808] ? skb_pull+0xc1/0x1e0 [ 330.734312][T13808] nfnetlink_rcv+0x26bd/0x2ab0 [ 330.734329][T13808] ? __pfx_validate_chain+0x10/0x10 [ 330.734375][T13808] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 330.734403][T13808] ? __lock_acquire+0x1397/0x2100 [ 330.734466][T13808] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.734487][T13808] ? __pfx_lock_release+0x10/0x10 [ 330.734522][T13808] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.734547][T13808] netlink_unicast+0x7f6/0x990 [ 330.734573][T13808] ? __pfx_netlink_unicast+0x10/0x10 [ 330.734590][T13808] ? __virt_addr_valid+0x45f/0x530 [ 330.734608][T13808] ? __phys_addr_symbol+0x2f/0x70 [ 330.734623][T13808] ? __check_object_size+0x47a/0x730 [ 330.734649][T13808] netlink_sendmsg+0x8de/0xcb0 [ 330.734682][T13808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.734706][T13808] ? aa_sock_msg_perm+0x91/0x160 [ 330.734733][T13808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.734753][T13808] __sock_sendmsg+0x221/0x270 [ 330.734777][T13808] ____sys_sendmsg+0x53a/0x860 [ 330.734803][T13808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.734819][T13808] ? __fget_files+0x2a/0x410 [ 330.734842][T13808] ? __fget_files+0x2a/0x410 [ 330.734870][T13808] __sys_sendmsg+0x269/0x350 [ 330.734891][T13808] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.734921][T13808] ? do_sys_openat2+0x17a/0x1d0 [ 330.734968][T13808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.734992][T13808] ? do_syscall_64+0x100/0x230 [ 330.735014][T13808] ? do_syscall_64+0xb6/0x230 [ 330.735036][T13808] do_syscall_64+0xf3/0x230 [ 330.735055][T13808] ? clear_bhb_loop+0x35/0x90 [ 330.735079][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.735099][T13808] RIP: 0033:0x7f3fac38d169 [ 330.735115][T13808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.735130][T13808] RSP: 002b:00007f3fad2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.735150][T13808] RAX: ffffffffffffffda RBX: 00007f3fac5a5fa0 RCX: 00007f3fac38d169 [ 330.735162][T13808] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000003 [ 330.735172][T13808] RBP: 00007f3fad2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 330.735182][T13808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.735191][T13808] R13: 0000000000000000 R14: 00007f3fac5a5fa0 R15: 00007ffc9a839008 [ 330.735215][T13808] [ 331.346537][T13793] chnl_net:caif_netlink_parms(): no params data found [ 331.397842][T13828] netlink: 'syz.4.2935': attribute type 4 has an invalid length. [ 331.699763][T13793] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.707306][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.714790][T13793] bridge_slave_0: entered allmulticast mode [ 331.721871][T13793] bridge_slave_0: entered promiscuous mode [ 331.761910][T13793] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.779549][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.797653][T13793] bridge_slave_1: entered allmulticast mode [ 331.809383][T13793] bridge_slave_1: entered promiscuous mode [ 331.927575][T13793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.981877][T13793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.983886][T13859] netlink: 'syz.4.2944': attribute type 1 has an invalid length. [ 332.010670][T13859] __nla_validate_parse: 14 callbacks suppressed [ 332.010689][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2944'. [ 332.064718][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'. [ 332.079193][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'. [ 332.085637][T13859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2944'. [ 332.110851][T13793] team0: Port device team_slave_0 added [ 332.129126][T13793] team0: Port device team_slave_1 added [ 332.139368][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 332.220152][T13793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.236567][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.270402][T13793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.295856][T13793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.303022][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.329275][T13793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.395565][T13793] hsr_slave_0: entered promiscuous mode [ 332.410776][T13793] hsr_slave_1: entered promiscuous mode [ 332.420229][T13793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.436580][T13793] Cannot create hsr debugfs directory [ 332.442358][T13874] lo speed is unknown, defaulting to 1000 [ 332.453938][ T5838] Bluetooth: hci5: command tx timeout [ 332.623528][T13881] FAULT_INJECTION: forcing a failure. [ 332.623528][T13881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.643791][T13881] CPU: 0 UID: 0 PID: 13881 Comm: syz.4.2951 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 332.643817][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.643828][T13881] Call Trace: [ 332.643835][T13881] [ 332.643843][T13881] dump_stack_lvl+0x241/0x360 [ 332.643869][T13881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.643887][T13881] ? __pfx__printk+0x10/0x10 [ 332.643910][T13881] ? snprintf+0xda/0x120 [ 332.643935][T13881] should_fail_ex+0x40a/0x550 [ 332.643960][T13881] _copy_to_user+0x31/0xb0 [ 332.643981][T13881] simple_read_from_buffer+0xca/0x150 [ 332.644005][T13881] proc_fail_nth_read+0x1e9/0x250 [ 332.644027][T13881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.644050][T13881] ? rw_verify_area+0x243/0x630 [ 332.644065][T13881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.644087][T13881] vfs_read+0x1f8/0xb40 [ 332.644104][T13881] ? do_sock_setsockopt+0x3e2/0x720 [ 332.644121][T13881] ? do_sock_setsockopt+0x3e2/0x720 [ 332.644138][T13881] ? __pfx_vfs_read+0x10/0x10 [ 332.644157][T13881] ? __pfx_packet_setsockopt+0x10/0x10 [ 332.644176][T13881] ? do_sock_setsockopt+0x3e2/0x720 [ 332.644196][T13881] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 332.644218][T13881] ksys_read+0x18f/0x2b0 [ 332.644238][T13881] ? __pfx_ksys_read+0x10/0x10 [ 332.644253][T13881] ? do_syscall_64+0x100/0x230 [ 332.644274][T13881] ? do_syscall_64+0xb6/0x230 [ 332.644295][T13881] do_syscall_64+0xf3/0x230 [ 332.644313][T13881] ? clear_bhb_loop+0x35/0x90 [ 332.644345][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.644366][T13881] RIP: 0033:0x7f2bba58bb7c [ 332.644387][T13881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.644401][T13881] RSP: 002b:00007f2bbb3bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.644420][T13881] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58bb7c [ 332.644433][T13881] RDX: 000000000000000f RSI: 00007f2bbb3bc0a0 RDI: 0000000000000004 [ 332.644444][T13881] RBP: 00007f2bbb3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 332.644456][T13881] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.644466][T13881] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 332.644497][T13881] [ 333.623092][T13793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.648120][T13793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.687246][T13793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.703281][T13793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.958073][T13793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.009544][T13793] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.042852][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.050040][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.069557][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.076731][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.108400][T13916] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 334.127484][T13916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'. [ 334.162489][T13793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.185960][T13916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2961'. [ 334.396861][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 334.414676][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2964'. [ 334.523251][T13934] lo speed is unknown, defaulting to 1000 [ 334.533961][ T5838] Bluetooth: hci5: command tx timeout [ 334.537759][T13793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.659505][T13793] veth0_vlan: entered promiscuous mode [ 334.692768][T13793] veth1_vlan: entered promiscuous mode [ 334.774199][T13793] veth0_macvtap: entered promiscuous mode [ 334.791972][T13793] veth1_macvtap: entered promiscuous mode [ 334.835671][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.854226][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.873470][T13793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.915387][T13793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.940206][T13793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.960873][T13793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.001153][T13793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.035324][T13793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.045504][T13793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.054555][T13793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.514590][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.542059][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.578809][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 335.618787][T13957] macvtap1: entered promiscuous mode [ 335.628455][T13957] team0: entered promiscuous mode [ 335.653485][T13957] team_slave_0: entered promiscuous mode [ 335.660601][T13957] team_slave_1: entered promiscuous mode [ 335.671349][T13957] macvtap1: entered allmulticast mode [ 335.678934][T13957] team0: entered allmulticast mode [ 335.687282][T13957] team_slave_0: entered allmulticast mode [ 335.693063][T13957] team_slave_1: entered allmulticast mode [ 335.700290][T13957] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 335.724285][T13958] team0: left allmulticast mode [ 335.729183][T13958] team_slave_0: left allmulticast mode [ 335.745602][T13958] team_slave_1: left allmulticast mode [ 335.751136][T13958] team0: left promiscuous mode [ 335.757431][T13958] team_slave_0: left promiscuous mode [ 335.763053][T13958] team_slave_1: left promiscuous mode [ 335.793981][T13961] pim6reg: entered allmulticast mode [ 335.801194][T13957] pim6reg: left allmulticast mode [ 335.802940][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.830623][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.975083][T13967] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 336.226085][T13975] unsupported nlmsg_type 40 [ 336.613936][ T5838] Bluetooth: hci5: command tx timeout [ 336.865455][T13989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.965004][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.985208][T13995] syz_tun: entered promiscuous mode [ 336.990482][T13995] syz_tun: entered allmulticast mode [ 336.996307][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.007099][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.025053][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.035089][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.042444][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.149728][T13995] pim6reg: entered allmulticast mode [ 337.292336][T13989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.336300][T13997] pim6reg: left allmulticast mode [ 337.514924][T13989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.553965][T13996] lo speed is unknown, defaulting to 1000 [ 337.722197][T13989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.796706][T14022] __nla_validate_parse: 6 callbacks suppressed [ 337.796725][T14022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2992'. [ 338.035417][T13989] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.117606][T13989] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.178497][T13989] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.192260][ T12] bridge_slave_1: left allmulticast mode [ 338.199520][ T12] bridge_slave_1: left promiscuous mode [ 338.207889][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.219978][ T12] bridge_slave_0: left allmulticast mode [ 338.228804][ T12] bridge_slave_0: left promiscuous mode [ 338.235798][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.553952][ T12] bond4 (unregistering): (slave gretap1): Releasing active interface [ 338.658960][ T12] bond2 (unregistering): (slave geneve3): Releasing backup interface [ 338.701122][ T5833] Bluetooth: hci5: command tx timeout [ 339.011652][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.024555][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 339.037759][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 339.052577][ T12] bond0 (unregistering): Released all slaves [ 339.062824][ T12] bond1 (unregistering): Released all slaves [ 339.076228][ T12] bond2 (unregistering): Released all slaves [ 339.088258][ T12] bond3 (unregistering): Released all slaves [ 339.094542][ T5833] Bluetooth: hci0: command tx timeout [ 339.222256][ T12] bond4 (unregistering): Released all slaves [ 339.253471][T13989] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.282436][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 339.359384][ T12] fþ: left promiscuous mode [ 339.504197][T13996] chnl_net:caif_netlink_parms(): no params data found [ 339.615168][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'. [ 339.674657][T14065] netlink: 'syz.4.3006': attribute type 10 has an invalid length. [ 339.750807][T14065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.761409][T14065] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 339.776752][T14070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3007'. [ 339.787324][T14070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3007'. [ 339.799754][T14072] pim6reg: entered allmulticast mode [ 339.874235][T13996] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.888002][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.900830][T13996] bridge_slave_0: entered allmulticast mode [ 339.916163][T13996] bridge_slave_0: entered promiscuous mode [ 339.995609][T14057] pim6reg: left allmulticast mode [ 340.028925][T13996] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.044416][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.059063][T13996] bridge_slave_1: entered allmulticast mode [ 340.080874][T13996] bridge_slave_1: entered promiscuous mode [ 340.147206][T13996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.227502][T13996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.444835][T13996] team0: Port device team_slave_0 added [ 340.513447][T13996] team0: Port device team_slave_1 added [ 340.565934][T14089] lo speed is unknown, defaulting to 1000 [ 340.723499][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3015'. [ 340.743738][ T12] hsr_slave_0: left promiscuous mode [ 340.855311][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.167803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.176724][ T5833] Bluetooth: hci0: command tx timeout [ 341.265839][ T12] hsr_slave_1: left allmulticast mode [ 341.314070][ T12] hsr_slave_1: left promiscuous mode [ 341.370015][T14114] netlink: 'syz.1.3022': attribute type 10 has an invalid length. [ 341.829300][ T12] team0 (unregistering): Port device team_slave_1 removed [ 341.873220][ T12] team0 (unregistering): Port device C removed [ 342.046624][ T12] vxcan1 (unregistering): left allmulticast mode [ 342.240446][ T1143] smc: removing ib device syz0 [ 342.281581][ T6090] lo speed is unknown, defaulting to 1000 [ 342.316642][T14114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.383502][T14114] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 342.433535][T13996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.453492][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.538357][T13996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.589210][T14125] FAULT_INJECTION: forcing a failure. [ 342.589210][T14125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.603043][T14125] CPU: 1 UID: 0 PID: 14125 Comm: syz.1.3025 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 342.603067][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.603077][T14125] Call Trace: [ 342.603084][T14125] [ 342.603092][T14125] dump_stack_lvl+0x241/0x360 [ 342.603119][T14125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.603137][T14125] ? __pfx__printk+0x10/0x10 [ 342.603160][T14125] ? snprintf+0xda/0x120 [ 342.603187][T14125] should_fail_ex+0x40a/0x550 [ 342.603215][T14125] _copy_to_user+0x31/0xb0 [ 342.603238][T14125] simple_read_from_buffer+0xca/0x150 [ 342.603263][T14125] proc_fail_nth_read+0x1e9/0x250 [ 342.603288][T14125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.603312][T14125] ? rw_verify_area+0x243/0x630 [ 342.603329][T14125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.603353][T14125] vfs_read+0x1f8/0xb40 [ 342.603372][T14125] ? fdget_pos+0x254/0x320 [ 342.603402][T14125] ? __pfx___mutex_lock+0x10/0x10 [ 342.603423][T14125] ? __pfx_vfs_read+0x10/0x10 [ 342.603438][T14125] ? do_sys_openat2+0x17a/0x1d0 [ 342.603463][T14125] ? __fget_files+0x2a/0x410 [ 342.603487][T14125] ? __fget_files+0x395/0x410 [ 342.603507][T14125] ? __fget_files+0x2a/0x410 [ 342.603538][T14125] ksys_read+0x18f/0x2b0 [ 342.603556][T14125] ? __pfx_ksys_read+0x10/0x10 [ 342.603577][T14125] ? do_syscall_64+0x100/0x230 [ 342.603598][T14125] ? do_syscall_64+0xb6/0x230 [ 342.603618][T14125] do_syscall_64+0xf3/0x230 [ 342.603636][T14125] ? clear_bhb_loop+0x35/0x90 [ 342.603660][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.603680][T14125] RIP: 0033:0x7fcc9c18bb7c [ 342.603696][T14125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 342.603711][T14125] RSP: 002b:00007fcc9cf8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.603728][T14125] RAX: ffffffffffffffda RBX: 00007fcc9c3a5fa0 RCX: 00007fcc9c18bb7c [ 342.603741][T14125] RDX: 000000000000000f RSI: 00007fcc9cf8f0a0 RDI: 0000000000000004 [ 342.603752][T14125] RBP: 00007fcc9cf8f090 R08: 0000000000000000 R09: 0000000000000000 [ 342.603764][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.603774][T14125] R13: 0000000000000000 R14: 00007fcc9c3a5fa0 R15: 00007fff4db60ab8 [ 342.603804][T14125] [ 343.057223][T13996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.086300][T13996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.149687][T13996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.166253][T14129] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000197: 0000 [#1] PREEMPT SMP KASAN PTI [ 343.178862][T14129] KASAN: null-ptr-deref in range [0x0000000000000cb8-0x0000000000000cbf] [ 343.187284][T14129] CPU: 1 UID: 0 PID: 14129 Comm: syz.4.3027 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 343.198053][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.208167][T14129] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 343.214606][T14129] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 343.234230][T14129] RSP: 0018:ffffc900050afbc0 EFLAGS: 00010203 [ 343.240315][T14129] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: 0000000000080000 [ 343.248298][T14129] RDX: ffffc9001b0f9000 RSI: 0000000000000075 RDI: 0000000000000076 [ 343.256286][T14129] RBP: ffffc900050afcd8 R08: ffffffff9455284f R09: 1ffffffff28aa509 [ 343.264269][T14129] R10: dffffc0000000000 R11: fffffbfff28aa50a R12: dffffc0000000000 [ 343.272254][T14129] R13: 0000000000000000 R14: ffff888030f41e40 R15: 1ffff92000a15f80 [ 343.280240][T14129] FS: 00007f2bbb3bc6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 343.289180][T14129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.295780][T14129] CR2: 00007f9d323f5f98 CR3: 00000000348c0000 CR4: 00000000003526f0 [ 343.303765][T14129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.311746][T14129] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.319731][T14129] Call Trace: [ 343.323020][T14129] [ 343.325962][T14129] ? __die_body+0x5f/0xb0 [ 343.330293][T14129] ? die_addr+0xb0/0xe0 [ 343.334453][T14129] ? exc_general_protection+0x3dd/0x5d0 [ 343.340615][T14129] ? asm_exc_general_protection+0x26/0x30 [ 343.346333][T14129] ? bpf_map_offload_map_alloc+0x19a/0x910 [ 343.352133][T14129] ? __pfx_bpf_map_offload_map_alloc+0x10/0x10 [ 343.358280][T14129] ? __pfx___might_resched+0x10/0x10 [ 343.363562][T14129] ? __might_fault+0xaa/0x120 [ 343.368240][T14129] ? __pfx_lock_release+0x10/0x10 [ 343.373256][T14129] ? array_map_alloc_check+0x287/0x350 [ 343.378708][T14129] map_create+0x946/0x11c0 [ 343.383123][T14129] __sys_bpf+0x6d3/0x820 [ 343.387361][T14129] ? __pfx___sys_bpf+0x10/0x10 [ 343.392118][T14129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.398089][T14129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.404410][T14129] ? do_syscall_64+0x100/0x230 [ 343.409165][T14129] __x64_sys_bpf+0x7c/0x90 [ 343.413569][T14129] do_syscall_64+0xf3/0x230 [ 343.418069][T14129] ? clear_bhb_loop+0x35/0x90 [ 343.422739][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.428626][T14129] RIP: 0033:0x7f2bba58d169 [ 343.433030][T14129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.452631][T14129] RSP: 002b:00007f2bbb3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.461035][T14129] RAX: ffffffffffffffda RBX: 00007f2bba7a5fa0 RCX: 00007f2bba58d169 [ 343.468996][T14129] RDX: 0000000000000048 RSI: 0000400000000340 RDI: 0000000000000000 [ 343.476955][T14129] RBP: 00007f2bba60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.484915][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.492873][T14129] R13: 0000000000000000 R14: 00007f2bba7a5fa0 R15: 00007ffe4c93a1a8 [ 343.500838][T14129] [ 343.503841][T14129] Modules linked in: [ 343.508473][T14129] ---[ end trace 0000000000000000 ]--- [ 343.518290][ T5833] Bluetooth: hci0: command tx timeout [ 343.552704][T14129] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 343.562825][T14129] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 343.598341][T14129] RSP: 0018:ffffc900050afbc0 EFLAGS: 00010203 [ 343.605169][T14129] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: 0000000000080000 [ 343.636751][T14129] RDX: ffffc9001b0f9000 RSI: 0000000000000075 RDI: 0000000000000076 [ 343.743284][T14129] RBP: ffffc900050afcd8 R08: ffffffff9455284f R09: 1ffffffff28aa509 [ 343.751931][T14129] R10: dffffc0000000000 R11: fffffbfff28aa50a R12: dffffc0000000000 [ 343.762690][T14129] R13: 0000000000000000 R14: ffff888030f41e40 R15: 1ffff92000a15f80 [ 343.771666][T14129] FS: 00007f2bbb3bc6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 343.783093][T14129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.789835][T14129] CR2: 00007f94c43373b0 CR3: 00000000348c0000 CR4: 00000000003526f0 [ 343.800599][T14129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.808920][T14129] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.820026][T14129] Kernel panic - not syncing: Fatal exception [ 343.826643][T14129] Kernel Offset: disabled [ 343.830961][T14129] Rebooting in 86400 seconds..