last executing test programs: 4.096167841s ago: executing program 0 (id=997): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0xc2, 0x0, 0x0, 0x87, {[@mptcp=@ack={0x1e, 0x5, 0xf49, 0x4, "80"}]}}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8edd6012000800403a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc01000000000000000092fc00000000fc020000000000000000000000000000000000000000000040000000000000003c528b5166a85337e1cd98e36f85452d2a6f5c914d180e3ac13a8a621e"], 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.430254019s ago: executing program 4 (id=1011): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}]}, &(0x7f0000000440)=0x10) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x10, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x2, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000003f000000000000000000", @ANYRESOCT=r3], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0xfffffffffffffcb7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffdfc}, 0x50) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e1406040000001f0e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3.254961308s ago: executing program 4 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400000008000000060000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009a3de32d1e9cee"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x10) 3.177920639s ago: executing program 0 (id=1016): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x20, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x600, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 3.083542263s ago: executing program 4 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000e00), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x10, 0x0, &(0x7f0000000380)="998e1e53f73ebe951e0f93e2d094f2a1", 0x0, 0x5fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.616157567s ago: executing program 4 (id=1022): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0xb, 0x9}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.606148431s ago: executing program 3 (id=1023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000002e98000000000000000000000000000000000a"], 0xb8}}, 0x0) 2.200104572s ago: executing program 0 (id=1025): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) (async) connect$inet(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) r1 = socket(0x840000000002, 0x3, 0xfa) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ID={0x8, 0x1, 0x8}, @NHA_OIF={0x8, 0x5, r4}]}, 0x28}}, 0x90) sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b000100627269646765000014000280080002000600000005007b63b1f60000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.89228171s ago: executing program 2 (id=1028): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x5c00, 0x0, 0x3, 0x0, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) 1.010695423s ago: executing program 2 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400000008000000060000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009a3de32d1e9cee"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x10) 971.818759ms ago: executing program 1 (id=1030): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 928.16649ms ago: executing program 0 (id=1031): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603", 0x25}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf256800000008000300", @ANYRES32=r3, @ANYBLOB="1800"], 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x20002000) 927.727443ms ago: executing program 3 (id=1032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8019000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 847.896101ms ago: executing program 2 (id=1033): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}]}]}], {0x14}}, 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x20000000000001e0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xbd8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000000000bfa200000000000407020000f8ffffffb703000008000000b704000000000000850000080300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8", 0x1}], 0x1}, 0x4000044) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket(0x2c, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x100, 0x4a104, 0xffffffffffffffff, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x8, @value, @void, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r10, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r9}, 0x20) 825.282934ms ago: executing program 1 (id=1034): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x80}}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2}}], 0x4c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0)=0xfff, 0x100000001) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x7c, 0x0, 0x14, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x38, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x38}}, 0x0) 795.243576ms ago: executing program 0 (id=1035): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x43}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388ad", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 723.653426ms ago: executing program 3 (id=1036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'io'}]}, 0x4) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) 723.445243ms ago: executing program 2 (id=1037): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xfeb0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x16, 0xa01, 0x0, 0x25dfdbff, {0x7, 0x0, 0x60}}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000"], 0x6c}}, 0x0) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) 708.716613ms ago: executing program 3 (id=1038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41a}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 13) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) 700.686494ms ago: executing program 1 (id=1039): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000007200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 584.061522ms ago: executing program 1 (id=1040): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r4 = socket$kcm(0x23, 0x2, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, &(0x7f0000000000)={r4}) socket(0x3, 0x2, 0xf) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x0, 'net'}]}, 0x5) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) (async) splice(r0, 0x0, r3, 0x0, 0x25, 0x5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 575.177146ms ago: executing program 0 (id=1041): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000111401000000000000000000080001000000000008004f000000000008000300"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) close(r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/4096, 0x1000, 0x1, &(0x7f0000000300)=""/197, 0xc5}, &(0x7f0000000240)=0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000000)=0xa, 0x4) sendto$inet(r5, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20001) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x2}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1}}}}}}, 0x0) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000080)=0xf3b, 0x63) 280.277021ms ago: executing program 3 (id=1042): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000002e98000000000000000000000000000000000a"], 0xb8}}, 0x0) 249.760111ms ago: executing program 4 (id=1043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400000008000000060000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009a3de32d1e9cee"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x10) 249.318931ms ago: executing program 2 (id=1044): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000400000000000000000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 180.19851ms ago: executing program 1 (id=1045): r0 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22000845}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0), 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) shutdown(r5, 0x1) 130.272667ms ago: executing program 3 (id=1046): socket(0x40000000015, 0x5, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000208000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 55.04105ms ago: executing program 4 (id=1047): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000200000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 189.418µs ago: executing program 2 (id=1048): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x341d, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0xa00100}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)}}], 0x90}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) 0s ago: executing program 1 (id=1049): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xfffffffe, @local}, 0x10, 0x80000) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): all_64+0xf6/0x210 [ 107.286617][ T6769] ? clear_bhb_loop+0x45/0xa0 [ 107.286637][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.286652][ T6769] RIP: 0033:0x7f1571b8e969 [ 107.286666][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.286679][ T6769] RSP: 002b:00007f1572a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.286696][ T6769] RAX: ffffffffffffffda RBX: 00007f1571db5fa0 RCX: 00007f1571b8e969 [ 107.286706][ T6769] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 107.286716][ T6769] RBP: 00007f1572a38090 R08: 0000000000000000 R09: 0000000000000000 [ 107.286726][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.286735][ T6769] R13: 0000000000000000 R14: 00007f1571db5fa0 R15: 00007ffe41ab8d68 [ 107.286763][ T6769] [ 107.603755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.010015][ T6790] netlink: 'syz.4.298': attribute type 9 has an invalid length. [ 108.023813][ T5876] tipc: Node number set to 2886997007 [ 108.050123][ T6790] __nla_validate_parse: 1 callbacks suppressed [ 108.050137][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 108.193449][ T6790] hsr0: entered promiscuous mode [ 108.222579][ T6790] macvlan2: entered promiscuous mode [ 108.238803][ T6790] macvlan2: entered allmulticast mode [ 108.265234][ T6790] hsr0: entered allmulticast mode [ 108.283100][ T6790] hsr_slave_0: entered allmulticast mode [ 108.319451][ T6790] hsr_slave_1: entered allmulticast mode [ 108.506947][ T6811] netlink: 44 bytes leftover after parsing attributes in process `syz.3.307'. [ 108.534177][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 108.542980][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.3.307'. [ 108.589222][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'. [ 108.683944][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.999841][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 109.591177][ T6860] FAULT_INJECTION: forcing a failure. [ 109.591177][ T6860] name failslab, interval 1, probability 0, space 0, times 0 [ 109.639831][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.3.321 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 109.639855][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.639864][ T6860] Call Trace: [ 109.639870][ T6860] [ 109.639877][ T6860] dump_stack_lvl+0x189/0x250 [ 109.639907][ T6860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.639929][ T6860] ? __pfx__printk+0x10/0x10 [ 109.639950][ T6860] ? __pfx___might_resched+0x10/0x10 [ 109.639964][ T6860] ? fs_reclaim_acquire+0x7d/0x100 [ 109.639990][ T6860] should_fail_ex+0x414/0x560 [ 109.640019][ T6860] should_failslab+0xa8/0x100 [ 109.640040][ T6860] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 109.640060][ T6860] ? __alloc_skb+0x112/0x2d0 [ 109.640074][ T6860] ? pppol2tp_sock_to_session+0x4be/0x550 [ 109.640096][ T6860] __alloc_skb+0x112/0x2d0 [ 109.640115][ T6860] sock_wmalloc+0xb2/0x130 [ 109.640136][ T6860] pppol2tp_sendmsg+0x183/0x5f0 [ 109.640158][ T6860] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 109.640177][ T6860] __sock_sendmsg+0x219/0x270 [ 109.640201][ T6860] ____sys_sendmsg+0x52d/0x830 [ 109.640223][ T6860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.640250][ T6860] ? import_iovec+0x74/0xa0 [ 109.640273][ T6860] ___sys_sendmsg+0x21f/0x2a0 [ 109.640299][ T6860] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.640359][ T6860] ? __might_fault+0xb0/0x130 [ 109.640382][ T6860] __sys_sendmmsg+0x227/0x430 [ 109.640405][ T6860] ? __pfx___sys_sendmmsg+0x10/0x10 [ 109.640457][ T6860] ? rcu_is_watching+0x15/0xb0 [ 109.640484][ T6860] __x64_sys_sendmmsg+0xa0/0xc0 [ 109.640503][ T6860] do_syscall_64+0xf6/0x210 [ 109.640525][ T6860] ? clear_bhb_loop+0x45/0xa0 [ 109.640543][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.640559][ T6860] RIP: 0033:0x7f5e4318e969 [ 109.640572][ T6860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.640586][ T6860] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.640602][ T6860] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 109.640614][ T6860] RDX: 000000000001a000 RSI: 0000200000005f80 RDI: 0000000000000006 [ 109.640624][ T6860] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 109.640634][ T6860] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000002 [ 109.640643][ T6860] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 109.640669][ T6860] [ 109.883747][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.618263][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 110.701546][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 110.783742][ T6886] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 110.844099][ T6886] netlink: 10 bytes leftover after parsing attributes in process `syz.3.325'. [ 110.923834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.954260][ T6886] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.980603][ T6886] block nbd0: shutting down sockets [ 111.521978][ T6911] pim6reg9: entered allmulticast mode [ 111.653155][ T6914] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 111.676073][ T6916] geneve3: entered promiscuous mode [ 111.688739][ T6916] geneve3: entered allmulticast mode [ 111.800454][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 111.847425][ T6914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.912205][ T6926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.921597][ T6926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.954717][ T6926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.963896][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 111.974924][ T6926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.984276][ T6926] geneve2: entered promiscuous mode [ 111.989562][ T6926] geneve2: entered allmulticast mode [ 112.023093][ T5832] cgroup: fork rejected by pids controller in /syz4 [ 112.200455][ T6938] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.209327][ T6938] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.218152][ T6938] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.226872][ T6938] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.291201][ T6941] : entered promiscuous mode [ 113.003854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.105306][ T6973] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 113.112987][ T6973] __nla_validate_parse: 7 callbacks suppressed [ 113.112998][ T6973] netlink: 228 bytes leftover after parsing attributes in process `syz.2.359'. [ 113.334580][ T6980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.362'. [ 113.541916][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.546799][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 113.558058][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.570916][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.580213][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.585984][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 113.607971][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.618506][ T6986] netlink: 'syz.2.363': attribute type 13 has an invalid length. [ 113.701968][ T6983] lo speed is unknown, defaulting to 1000 [ 113.931187][ T7005] FAULT_INJECTION: forcing a failure. [ 113.931187][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 113.954029][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.3.369 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 113.954053][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.954062][ T7005] Call Trace: [ 113.954069][ T7005] [ 113.954077][ T7005] dump_stack_lvl+0x189/0x250 [ 113.954107][ T7005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.954130][ T7005] ? __pfx__printk+0x10/0x10 [ 113.954154][ T7005] ? ref_tracker_alloc+0x318/0x460 [ 113.954173][ T7005] should_fail_ex+0x414/0x560 [ 113.954202][ T7005] should_failslab+0xa8/0x100 [ 113.954224][ T7005] kmem_cache_alloc_noprof+0x73/0x3c0 [ 113.954250][ T7005] ? skb_clone+0x212/0x3a0 [ 113.954273][ T7005] skb_clone+0x212/0x3a0 [ 113.954295][ T7005] __netlink_deliver_tap+0x404/0x850 [ 113.954332][ T7005] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.954357][ T7005] netlink_deliver_tap+0x19c/0x1b0 [ 113.954381][ T7005] netlink_unicast+0x72f/0x8d0 [ 113.954414][ T7005] netlink_sendmsg+0x805/0xb30 [ 113.954439][ T7005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.954458][ T7005] ? aa_sock_msg_perm+0x94/0x160 [ 113.954476][ T7005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 113.954493][ T7005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.954510][ T7005] __sock_sendmsg+0x219/0x270 [ 113.954534][ T7005] ____sys_sendmsg+0x505/0x830 [ 113.954558][ T7005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.954585][ T7005] ? import_iovec+0x74/0xa0 [ 113.954607][ T7005] ___sys_sendmsg+0x21f/0x2a0 [ 113.954625][ T7005] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.954674][ T7005] ? __fget_files+0x2a/0x420 [ 113.954692][ T7005] ? __fget_files+0x3a0/0x420 [ 113.954720][ T7005] __x64_sys_sendmsg+0x19b/0x260 [ 113.954740][ T7005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.954772][ T7005] ? do_syscall_64+0xba/0x210 [ 113.954795][ T7005] do_syscall_64+0xf6/0x210 [ 113.954815][ T7005] ? clear_bhb_loop+0x45/0xa0 [ 113.954833][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.954846][ T7005] RIP: 0033:0x7f5e4318e969 [ 113.954858][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.954868][ T7005] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.954882][ T7005] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 113.954891][ T7005] RDX: 0000000000000080 RSI: 0000200000000f40 RDI: 0000000000000003 [ 113.954899][ T7005] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 113.954906][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.954913][ T7005] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 113.954933][ T7005] [ 113.954954][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 114.047557][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 114.368796][ T6983] chnl_net:caif_netlink_parms(): no params data found [ 114.430777][ T7022] netlink: 240 bytes leftover after parsing attributes in process `syz.0.374'. [ 114.441318][ T7016] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 114.602314][ T7031] FAULT_INJECTION: forcing a failure. [ 114.602314][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 114.647611][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.2.377 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 114.647635][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 114.647645][ T7031] Call Trace: [ 114.647651][ T7031] [ 114.647658][ T7031] dump_stack_lvl+0x189/0x250 [ 114.647689][ T7031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.647711][ T7031] ? __pfx__printk+0x10/0x10 [ 114.647741][ T7031] should_fail_ex+0x414/0x560 [ 114.647769][ T7031] should_failslab+0xa8/0x100 [ 114.647791][ T7031] __kmalloc_cache_noprof+0x70/0x3d0 [ 114.647810][ T7031] ? sctp_add_bind_addr+0x8c/0x370 [ 114.647835][ T7031] sctp_add_bind_addr+0x8c/0x370 [ 114.647859][ T7031] sctp_copy_local_addr_list+0x30b/0x4e0 [ 114.647883][ T7031] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 114.647903][ T7031] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 114.647928][ T7031] ? sctp_v4_is_any+0x35/0x60 [ 114.647957][ T7031] ? sctp_copy_one_addr+0x93/0x360 [ 114.647980][ T7031] sctp_bind_addr_copy+0xb3/0x3c0 [ 114.648001][ T7031] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 114.648023][ T7031] sctp_connect_new_asoc+0x2e0/0x690 [ 114.648042][ T7031] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 114.648056][ T7031] ? __local_bh_enable_ip+0x12d/0x1c0 [ 114.648086][ T7031] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 114.648105][ T7031] ? security_sctp_bind_connect+0x7e/0x2e0 [ 114.648130][ T7031] sctp_sendmsg+0x155c/0x2810 [ 114.648159][ T7031] ? __pfx_sctp_sendmsg+0x10/0x10 [ 114.648178][ T7031] ? aa_sk_perm+0x81e/0x950 [ 114.648206][ T7031] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.648230][ T7031] ? sock_rps_record_flow+0x19/0x410 [ 114.648253][ T7031] ? inet_sendmsg+0x2f4/0x370 [ 114.648276][ T7031] __sock_sendmsg+0x19c/0x270 [ 114.648300][ T7031] __sys_sendto+0x3bd/0x520 [ 114.648319][ T7031] ? __pfx___sys_sendto+0x10/0x10 [ 114.648331][ T7031] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 114.648364][ T7031] ? __fget_files+0x3a0/0x420 [ 114.648394][ T7031] ? ksys_write+0x1f0/0x250 [ 114.648408][ T7031] ? rcu_is_watching+0x15/0xb0 [ 114.648436][ T7031] __x64_sys_sendto+0xde/0x100 [ 114.648454][ T7031] do_syscall_64+0xf6/0x210 [ 114.648475][ T7031] ? clear_bhb_loop+0x45/0xa0 [ 114.648494][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.648509][ T7031] RIP: 0033:0x7f8ea538e969 [ 114.648523][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.648536][ T7031] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.648553][ T7031] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 114.648564][ T7031] RDX: 0000000000034000 RSI: 0000200000000100 RDI: 0000000000000003 [ 114.648574][ T7031] RBP: 00007f8ea6117090 R08: 00002000000000c0 R09: 0000000000000010 [ 114.648584][ T7031] R10: 00000000040048c4 R11: 0000000000000246 R12: 0000000000000002 [ 114.648593][ T7031] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 114.648620][ T7031] [ 115.042337][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 115.081529][ T7045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.093746][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 115.095210][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.109993][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.117287][ T6983] bridge_slave_0: entered allmulticast mode [ 115.125524][ T6983] bridge_slave_0: entered promiscuous mode [ 115.170238][ T7045] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.241362][ T6983] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.250393][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.258854][ T6983] bridge_slave_1: entered allmulticast mode [ 115.275876][ T6983] bridge_slave_1: entered promiscuous mode [ 115.357936][ T7049] bond_slave_0: entered promiscuous mode [ 115.363754][ T7049] bond_slave_1: entered promiscuous mode [ 115.369406][ T7049] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 115.389597][ T7049] vlan3: entered promiscuous mode [ 115.400852][ T7049] bond0: entered promiscuous mode [ 115.406631][ T7049] bond1: entered promiscuous mode [ 115.612297][ T6983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.641008][ T7056] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 115.648790][ T55] Bluetooth: hci2: command tx timeout [ 115.656913][ T7056] netlink: 'syz.1.384': attribute type 2 has an invalid length. [ 115.668435][ T6983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.731696][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 115.758213][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 115.797575][ T6983] team0: Port device team_slave_0 added [ 115.831247][ T7072] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.839602][ T7072] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.847906][ T7072] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.856308][ T7072] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.954192][ T6983] team0: Port device team_slave_1 added [ 116.083547][ T7078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.092392][ T7078] bond2: entered promiscuous mode [ 116.099168][ T7078] bond0: (slave bond2): Enslaving as an active interface with an up link [ 116.124101][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.232547][ T7100] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.280302][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.311655][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.352742][ T6983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.394951][ T6983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.432179][ T6983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.483551][ T6983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.636449][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.397'. [ 116.675532][ T6983] hsr_slave_0: entered promiscuous mode [ 116.713990][ T7108] netlink: 'syz.3.397': attribute type 5 has an invalid length. [ 116.716875][ T6983] hsr_slave_1: entered promiscuous mode [ 116.748495][ T6983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.756404][ T6983] Cannot create hsr debugfs directory [ 117.061955][ T7126] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 117.163856][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.439419][ T7137] xt_CT: No such helper "pptp" [ 117.467974][ T7130] syzkaller0: entered promiscuous mode [ 117.473482][ T7130] syzkaller0: entered allmulticast mode [ 117.625990][ T6983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.723931][ T55] Bluetooth: hci2: command tx timeout [ 117.933429][ T6983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.203901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.243776][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.815610][ T55] Bluetooth: hci2: command tx timeout [ 119.977518][ T6983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.096860][ T7163] geneve2: entered promiscuous mode [ 120.102120][ T7163] geneve2: entered allmulticast mode [ 120.197691][ T6983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.283760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.304078][ T7171] __nla_validate_parse: 4 callbacks suppressed [ 120.304092][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.419'. [ 120.353811][ T7171] FAULT_INJECTION: forcing a failure. [ 120.353811][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 120.371796][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 120.603832][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.3.419 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 120.603856][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.603866][ T7171] Call Trace: [ 120.603873][ T7171] [ 120.603880][ T7171] dump_stack_lvl+0x189/0x250 [ 120.603911][ T7171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.603934][ T7171] ? __pfx__printk+0x10/0x10 [ 120.603950][ T7171] ? __mutex_unlock_slowpath+0x68a/0x700 [ 120.603976][ T7171] ? ref_tracker_alloc+0x318/0x460 [ 120.603997][ T7171] should_fail_ex+0x414/0x560 [ 120.604025][ T7171] should_failslab+0xa8/0x100 [ 120.604047][ T7171] kmem_cache_alloc_noprof+0x73/0x3c0 [ 120.604066][ T7171] ? skb_clone+0x212/0x3a0 [ 120.604088][ T7171] skb_clone+0x212/0x3a0 [ 120.604109][ T7171] __netlink_deliver_tap+0x404/0x850 [ 120.604146][ T7171] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.604171][ T7171] netlink_deliver_tap+0x19c/0x1b0 [ 120.604196][ T7171] __netlink_sendskb+0x47/0x90 [ 120.604219][ T7171] netlink_dump+0xa5c/0xe70 [ 120.604254][ T7171] ? __pfx_netlink_dump+0x10/0x10 [ 120.604297][ T7171] ? netlink_lookup+0x30/0x200 [ 120.604319][ T7171] ? netlink_lookup+0x30/0x200 [ 120.604339][ T7171] ? netlink_lookup+0x30/0x200 [ 120.604370][ T7171] __netlink_dump_start+0x5cb/0x7e0 [ 120.604402][ T7171] rtnetlink_rcv_msg+0x9eb/0xb70 [ 120.604427][ T7171] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 120.604444][ T7171] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 120.604466][ T7171] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.604488][ T7171] ? __pfx_rtnl_dumpit+0x10/0x10 [ 120.604509][ T7171] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 120.604525][ T7171] ? ref_tracker_free+0x63a/0x7d0 [ 120.604538][ T7171] ? __copy_skb_header+0xa7/0x550 [ 120.604572][ T7171] netlink_rcv_skb+0x219/0x490 [ 120.604597][ T7171] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.604621][ T7171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.604660][ T7171] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.604682][ T7171] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.604711][ T7171] netlink_unicast+0x758/0x8d0 [ 120.604745][ T7171] netlink_sendmsg+0x805/0xb30 [ 120.604770][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.604790][ T7171] ? aa_sock_msg_perm+0x94/0x160 [ 120.604809][ T7171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.604827][ T7171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.604843][ T7171] __sock_sendmsg+0x219/0x270 [ 120.604869][ T7171] ____sys_sendmsg+0x505/0x830 [ 120.604893][ T7171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.604920][ T7171] ? import_iovec+0x74/0xa0 [ 120.604944][ T7171] ___sys_sendmsg+0x21f/0x2a0 [ 120.604965][ T7171] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.605018][ T7171] ? __fget_files+0x2a/0x420 [ 120.605037][ T7171] ? __fget_files+0x3a0/0x420 [ 120.605067][ T7171] __x64_sys_sendmsg+0x19b/0x260 [ 120.605088][ T7171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.605124][ T7171] ? do_syscall_64+0xba/0x210 [ 120.605149][ T7171] do_syscall_64+0xf6/0x210 [ 120.605170][ T7171] ? clear_bhb_loop+0x45/0xa0 [ 120.605190][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.605206][ T7171] RIP: 0033:0x7f5e4318e969 [ 120.605221][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.605234][ T7171] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.605252][ T7171] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 120.605263][ T7171] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 120.605273][ T7171] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 120.605283][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.605292][ T7171] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 120.605321][ T7171] [ 121.262190][ T7193] bridge0: entered promiscuous mode [ 121.323843][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 121.338836][ T7193] macvlan2: entered promiscuous mode [ 121.361853][ T7193] bridge0: port 3(macvlan2) entered blocking state [ 121.404836][ T7193] bridge0: port 3(macvlan2) entered disabled state [ 121.411576][ T7193] macvlan2: entered allmulticast mode [ 121.423221][ T7193] bridge0: entered allmulticast mode [ 121.435310][ T7193] macvlan2: left allmulticast mode [ 121.440512][ T7193] bridge0: left allmulticast mode [ 121.457852][ T7193] bridge0: left promiscuous mode [ 121.479794][ T7195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 121.547427][ T6983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.618094][ T6983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.718372][ T6983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.761993][ T6983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.884649][ T55] Bluetooth: hci2: command tx timeout [ 122.117792][ T6983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.186845][ T6983] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.210639][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.217814][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.295088][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.302241][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.364426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.806394][ T7250] macsec1: entered allmulticast mode [ 122.824934][ T7250] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 122.882346][ T7250] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 122.970621][ T6983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.111847][ T7256] syzkaller1: entered promiscuous mode [ 123.129435][ T7256] syzkaller1: entered allmulticast mode [ 123.153374][ T7260] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 123.273161][ T7268] sch_fq: defrate 0 ignored. [ 123.403881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 123.505450][ T7277] netlink: 'syz.0.453': attribute type 21 has an invalid length. [ 123.536969][ T7277] netlink: 128 bytes leftover after parsing attributes in process `syz.0.453'. [ 123.707688][ T6983] veth0_vlan: entered promiscuous mode [ 123.718798][ T7277] netlink: 'syz.0.453': attribute type 5 has an invalid length. [ 123.729943][ T7277] netlink: 'syz.0.453': attribute type 6 has an invalid length. [ 123.741660][ T7277] netlink: 3 bytes leftover after parsing attributes in process `syz.0.453'. [ 123.789963][ T6983] veth1_vlan: entered promiscuous mode [ 123.925883][ T7286] lo speed is unknown, defaulting to 1000 [ 123.955650][ T6983] veth0_macvtap: entered promiscuous mode [ 123.975066][ T6983] veth1_macvtap: entered promiscuous mode [ 124.034644][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 124.052377][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 124.083482][ T7291] netlink: 10 bytes leftover after parsing attributes in process `syz.2.456'. [ 124.113001][ T7291] nbd: socks must be embedded in a SOCK_ITEM attr [ 124.187861][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.239237][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.281679][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.316067][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.354660][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.397147][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.443797][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 124.461457][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.518114][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.549034][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.580007][ T6983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.606246][ T6983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.655674][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 124.669060][ T6983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.819324][ T6983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.852465][ T6983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.908833][ T6983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.923092][ T6983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.105954][ T7306] bridge_slave_0: left allmulticast mode [ 125.112859][ T7306] bridge_slave_0: left promiscuous mode [ 125.123237][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.145006][ T7306] bridge_slave_1: left allmulticast mode [ 125.150874][ T7306] bridge_slave_1: left promiscuous mode [ 125.159300][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.181928][ T7306] bond0: (slave bond_slave_0): Releasing backup interface [ 125.192301][ T7306] bond0: (slave bond_slave_1): Releasing backup interface [ 125.216668][ T7306] team0: Port device team_slave_0 removed [ 125.229543][ T7306] team0: Port device team_slave_1 removed [ 125.236065][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.250713][ T7306] bond1: (slave gretap1): Releasing backup interface [ 125.483836][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.528441][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.542132][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.623866][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.628459][ T7325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.667550][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.867424][ T7333] syz_tun: entered allmulticast mode [ 125.897608][ T7333] dvmrp1: entered allmulticast mode [ 125.916511][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 126.013476][ T7343] Cannot find add_set index 0 as target [ 126.043409][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.051870][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.069746][ T7339] netlink: 264 bytes leftover after parsing attributes in process `syz.0.473'. [ 126.291635][ T7332] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.303656][ T7332] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.317509][ T7332] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.328521][ T7332] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.382499][ T7332] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.391768][ T7332] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.401022][ T7332] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.409960][ T7332] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.433249][ T5912] lo speed is unknown, defaulting to 1000 [ 126.446192][ T5912] syz2: Port: 1 Link DOWN [ 126.523863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.587854][ T7327] syz_tun: left allmulticast mode [ 126.806617][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 127.174938][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 127.263500][ T7382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.491'. [ 127.272665][ T7382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.491'. [ 127.541045][ T7392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.550145][ T7392] bond0: (slave bond1): Enslaving as an active interface with an up link [ 127.563867][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.664491][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 127.892087][ T7411] FAULT_INJECTION: forcing a failure. [ 127.892087][ T7411] name failslab, interval 1, probability 0, space 0, times 0 [ 128.049795][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.2.502 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 128.049819][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.049828][ T7411] Call Trace: [ 128.049835][ T7411] [ 128.049843][ T7411] dump_stack_lvl+0x189/0x250 [ 128.049873][ T7411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.049895][ T7411] ? __pfx__printk+0x10/0x10 [ 128.049926][ T7411] should_fail_ex+0x414/0x560 [ 128.049956][ T7411] should_failslab+0xa8/0x100 [ 128.049979][ T7411] __kmalloc_cache_noprof+0x70/0x3d0 [ 128.049999][ T7411] ? sctp_add_bind_addr+0x8c/0x370 [ 128.050025][ T7411] sctp_add_bind_addr+0x8c/0x370 [ 128.050050][ T7411] sctp_copy_local_addr_list+0x30b/0x4e0 [ 128.050075][ T7411] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 128.050103][ T7411] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 128.050129][ T7411] ? sctp_v4_is_any+0x35/0x60 [ 128.050149][ T7411] ? sctp_copy_one_addr+0x93/0x360 [ 128.050173][ T7411] sctp_bind_addr_copy+0xb3/0x3c0 [ 128.050195][ T7411] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 128.050218][ T7411] sctp_connect_new_asoc+0x2e0/0x690 [ 128.050238][ T7411] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 128.050252][ T7411] ? __local_bh_enable_ip+0x12d/0x1c0 [ 128.050284][ T7411] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 128.050302][ T7411] ? security_sctp_bind_connect+0x7e/0x2e0 [ 128.050327][ T7411] sctp_sendmsg+0x155c/0x2810 [ 128.050354][ T7411] ? __pfx_sctp_sendmsg+0x10/0x10 [ 128.050373][ T7411] ? aa_sk_perm+0x81e/0x950 [ 128.050402][ T7411] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.050428][ T7411] ? sock_rps_record_flow+0x19/0x410 [ 128.050452][ T7411] ? inet_sendmsg+0x2f4/0x370 [ 128.050476][ T7411] __sock_sendmsg+0x19c/0x270 [ 128.050501][ T7411] __sys_sendto+0x3bd/0x520 [ 128.050518][ T7411] ? __pfx___sys_sendto+0x10/0x10 [ 128.050530][ T7411] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 128.050562][ T7411] ? __fget_files+0x3a0/0x420 [ 128.050589][ T7411] ? ksys_write+0x1f0/0x250 [ 128.050604][ T7411] ? rcu_is_watching+0x15/0xb0 [ 128.050634][ T7411] __x64_sys_sendto+0xde/0x100 [ 128.050651][ T7411] do_syscall_64+0xf6/0x210 [ 128.050671][ T7411] ? clear_bhb_loop+0x45/0xa0 [ 128.050688][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.050702][ T7411] RIP: 0033:0x7f8ea538e969 [ 128.050715][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.050727][ T7411] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 128.050744][ T7411] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 128.050754][ T7411] RDX: 0000000000034000 RSI: 0000200000000100 RDI: 0000000000000003 [ 128.050763][ T7411] RBP: 00007f8ea6117090 R08: 00002000000000c0 R09: 0000000000000010 [ 128.050773][ T7411] R10: 00000000040048c4 R11: 0000000000000246 R12: 0000000000000002 [ 128.050782][ T7411] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 128.050808][ T7411] [ 128.148344][ T7417] netlink: 88 bytes leftover after parsing attributes in process `syz.3.503'. [ 128.467065][ T7423] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 128.545286][ T7421] vlan3: entered promiscuous mode [ 128.550445][ T7421] team0: entered promiscuous mode [ 128.595916][ T7430] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 128.606340][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.642898][ T7430] bond2: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 128.707582][ T7430] bond2: (slave ip6tnl1): making interface the new active one [ 128.731071][ T7430] bond2: (slave ip6tnl1): Enslaving as an active interface with an up link [ 128.921283][ T7439] syz_tun: entered allmulticast mode [ 128.951612][ T7439] dvmrp8: entered allmulticast mode [ 129.145294][ T7438] syz_tun: left allmulticast mode [ 129.150672][ T7438] dvmrp8: left allmulticast mode [ 129.510131][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 129.521312][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.517'. [ 129.643846][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.003337][ T7490] 8021q: VLANs not supported on sit0 [ 130.063455][ T7494] FAULT_INJECTION: forcing a failure. [ 130.063455][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.091237][ T7495] vlan3: entered allmulticast mode [ 130.102206][ T7495] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 130.110657][ T7494] CPU: 1 UID: 0 PID: 7494 Comm: syz.2.530 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 130.110680][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.110690][ T7494] Call Trace: [ 130.110697][ T7494] [ 130.110704][ T7494] dump_stack_lvl+0x189/0x250 [ 130.110729][ T7494] ? __lock_acquire+0xaac/0xd20 [ 130.110753][ T7494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.110775][ T7494] ? __pfx__printk+0x10/0x10 [ 130.110792][ T7494] ? __might_fault+0xb0/0x130 [ 130.110823][ T7494] should_fail_ex+0x414/0x560 [ 130.110852][ T7494] _copy_from_user+0x2d/0xb0 [ 130.110873][ T7494] __sys_bpf+0x1ed/0x860 [ 130.110895][ T7494] ? __pfx___sys_bpf+0x10/0x10 [ 130.110928][ T7494] ? ksys_write+0x1f0/0x250 [ 130.110944][ T7494] ? rcu_is_watching+0x15/0xb0 [ 130.110976][ T7494] __x64_sys_bpf+0x7c/0x90 [ 130.110995][ T7494] do_syscall_64+0xf6/0x210 [ 130.111017][ T7494] ? clear_bhb_loop+0x45/0xa0 [ 130.111038][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.111053][ T7494] RIP: 0033:0x7f8ea538e969 [ 130.111068][ T7494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.111082][ T7494] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.111099][ T7494] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 130.111110][ T7494] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 130.111120][ T7494] RBP: 00007f8ea6117090 R08: 0000000000000000 R09: 0000000000000000 [ 130.111130][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.111140][ T7494] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 130.111168][ T7494] [ 130.552882][ T7512] tipc: Started in network mode [ 130.559682][ T7512] tipc: Node identity ac14140f, cluster identity 4711 [ 130.635756][ T7512] tipc: New replicast peer: 255.255.255.255 [ 130.651115][ T7512] tipc: Enabled bearer , priority 10 [ 130.683886][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.687842][ T7505] tipc: Disabling bearer [ 130.938701][ T7505] vxcan3: entered allmulticast mode [ 131.063079][ T7505] __nla_validate_parse: 8 callbacks suppressed [ 131.063096][ T7505] netlink: 5 bytes leftover after parsing attributes in process `syz.1.533'. [ 131.316454][ T7536] FAULT_INJECTION: forcing a failure. [ 131.316454][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 131.366084][ T7536] CPU: 1 UID: 0 PID: 7536 Comm: syz.1.544 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 131.366111][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 131.366121][ T7536] Call Trace: [ 131.366127][ T7536] [ 131.366134][ T7536] dump_stack_lvl+0x189/0x250 [ 131.366165][ T7536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.366187][ T7536] ? __pfx__printk+0x10/0x10 [ 131.366216][ T7536] should_fail_ex+0x414/0x560 [ 131.366246][ T7536] should_failslab+0xa8/0x100 [ 131.366268][ T7536] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 131.366288][ T7536] ? __alloc_skb+0x112/0x2d0 [ 131.366309][ T7536] __alloc_skb+0x112/0x2d0 [ 131.366328][ T7536] create_monitor_ctrl_event+0x38/0x480 [ 131.366344][ T7536] ? skb_put+0x11b/0x210 [ 131.366363][ T7536] mgmt_cmd_status+0x1cb/0x4c0 [ 131.366385][ T7536] load_irks+0xf8/0x7b0 [ 131.366412][ T7536] ? __pfx_load_irks+0x10/0x10 [ 131.366444][ T7536] hci_mgmt_cmd+0x9c6/0xef0 [ 131.366475][ T7536] hci_sock_sendmsg+0x6ca/0xee0 [ 131.366498][ T7536] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 131.366515][ T7536] ? aa_sock_msg_perm+0x94/0x160 [ 131.366533][ T7536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.366551][ T7536] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 131.366565][ T7536] __sock_sendmsg+0x219/0x270 [ 131.366589][ T7536] sock_write_iter+0x258/0x330 [ 131.366611][ T7536] ? __pfx_sock_write_iter+0x10/0x10 [ 131.366642][ T7536] ? bpf_lsm_file_permission+0x9/0x20 [ 131.366660][ T7536] ? security_file_permission+0x75/0x290 [ 131.366690][ T7536] vfs_write+0x548/0xa90 [ 131.366712][ T7536] ? __pfx_sock_write_iter+0x10/0x10 [ 131.366731][ T7536] ? __pfx_vfs_write+0x10/0x10 [ 131.366758][ T7536] ? __fget_files+0x2a/0x420 [ 131.366787][ T7536] ksys_write+0x145/0x250 [ 131.366804][ T7536] ? rcu_is_watching+0x15/0xb0 [ 131.366828][ T7536] ? __pfx_ksys_write+0x10/0x10 [ 131.366869][ T7536] ? do_syscall_64+0xba/0x210 [ 131.366894][ T7536] do_syscall_64+0xf6/0x210 [ 131.366914][ T7536] ? clear_bhb_loop+0x45/0xa0 [ 131.366934][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.366950][ T7536] RIP: 0033:0x7fe2b678e969 [ 131.366964][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.366978][ T7536] RSP: 002b:00007fe2b75d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.366995][ T7536] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678e969 [ 131.367007][ T7536] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000005 [ 131.367017][ T7536] RBP: 00007fe2b75d2090 R08: 0000000000000000 R09: 0000000000000000 [ 131.367026][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.367035][ T7536] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 131.367064][ T7536] [ 131.723759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.770684][ T7540] netlink: 'syz.2.549': attribute type 7 has an invalid length. [ 131.880938][ T7540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.203442][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.211257][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.508285][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.594913][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.559'. [ 132.643973][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.559'. [ 132.678135][ T7559] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.688222][ T7559] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.697372][ T7559] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.717306][ T7559] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.763762][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.781455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.795231][ T7559] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.803647][ T7559] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.812534][ T7559] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.821911][ T7559] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.858546][ T7583] bond0: entered promiscuous mode [ 132.863664][ T7583] bond_slave_0: entered promiscuous mode [ 132.869964][ T7583] bond_slave_1: entered promiscuous mode [ 132.877808][ T7583] bridge0: entered promiscuous mode [ 132.883941][ T7583] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 132.892213][ T7583] Cannot create hsr debugfs directory [ 133.131562][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 133.190183][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 133.216912][ T7591] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 133.263807][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.563'. [ 133.287183][ T7591] geneve0: entered promiscuous mode [ 133.292913][ T7591] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 133.336969][ T7591] team0: Failed to send options change via netlink (err -105) [ 133.375551][ T7591] team0: Port device geneve0 added [ 133.698029][ T7624] FAULT_INJECTION: forcing a failure. [ 133.698029][ T7624] name failslab, interval 1, probability 0, space 0, times 0 [ 133.713881][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.2.574 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 133.713903][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.713912][ T7624] Call Trace: [ 133.713919][ T7624] [ 133.713926][ T7624] dump_stack_lvl+0x189/0x250 [ 133.713961][ T7624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.713983][ T7624] ? __pfx__printk+0x10/0x10 [ 133.714012][ T7624] should_fail_ex+0x414/0x560 [ 133.714036][ T7624] should_failslab+0xa8/0x100 [ 133.714053][ T7624] __kmalloc_cache_noprof+0x70/0x3d0 [ 133.714069][ T7624] ? sctp_add_bind_addr+0x8c/0x370 [ 133.714088][ T7624] sctp_add_bind_addr+0x8c/0x370 [ 133.714107][ T7624] sctp_copy_local_addr_list+0x30b/0x4e0 [ 133.714126][ T7624] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 133.714142][ T7624] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 133.714157][ T7624] ? sctp_association_new+0x18b3/0x25f0 [ 133.714170][ T7624] ? sctp_v6_is_any+0x64/0x80 [ 133.714189][ T7624] ? sctp_copy_one_addr+0x93/0x360 [ 133.714208][ T7624] sctp_bind_addr_copy+0xb3/0x3c0 [ 133.714224][ T7624] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 133.714241][ T7624] sctp_connect_new_asoc+0x2e0/0x690 [ 133.714256][ T7624] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 133.714273][ T7624] ? sctp_get_af_specific+0x29/0x80 [ 133.714288][ T7624] ? sctp_inet6_send_verify+0x80/0x300 [ 133.714303][ T7624] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 133.714317][ T7624] __sctp_connect+0x5ba/0xd50 [ 133.714339][ T7624] ? __pfx___sctp_connect+0x10/0x10 [ 133.714349][ T7624] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.714367][ T7624] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.714383][ T7624] ? __local_bh_enable_ip+0x12d/0x1c0 [ 133.714400][ T7624] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 133.714414][ T7624] ? security_sctp_bind_connect+0x7e/0x2e0 [ 133.714433][ T7624] sctp_setsockopt_connectx+0x100/0x1b0 [ 133.714450][ T7624] sctp_setsockopt+0x6d9/0x1200 [ 133.714462][ T7624] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.714482][ T7624] do_sock_setsockopt+0x257/0x3e0 [ 133.714497][ T7624] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 133.714508][ T7624] ? __fget_files+0x2a/0x420 [ 133.714526][ T7624] ? __fget_files+0x3a0/0x420 [ 133.714540][ T7624] ? __fget_files+0x2a/0x420 [ 133.714561][ T7624] __x64_sys_setsockopt+0x18b/0x220 [ 133.714579][ T7624] do_syscall_64+0xf6/0x210 [ 133.714595][ T7624] ? clear_bhb_loop+0x45/0xa0 [ 133.714611][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.714623][ T7624] RIP: 0033:0x7f8ea538e969 [ 133.714634][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.714644][ T7624] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.714657][ T7624] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 133.714666][ T7624] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 133.714674][ T7624] RBP: 00007f8ea6117090 R08: 000000000000002c R09: 0000000000000000 [ 133.714681][ T7624] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000002 [ 133.714689][ T7624] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 133.714710][ T7624] [ 133.803879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.084829][ T7637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.104781][ T7635] netlink: 'syz.0.577': attribute type 29 has an invalid length. [ 134.139077][ T7636] delete_channel: no stack [ 134.152915][ T7639] lo speed is unknown, defaulting to 1000 [ 134.476364][ T7662] FAULT_INJECTION: forcing a failure. [ 134.476364][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 134.489260][ T7662] CPU: 0 UID: 0 PID: 7662 Comm: syz.1.586 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 134.489282][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.489292][ T7662] Call Trace: [ 134.489298][ T7662] [ 134.489305][ T7662] dump_stack_lvl+0x189/0x250 [ 134.489334][ T7662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.489357][ T7662] ? __pfx__printk+0x10/0x10 [ 134.489380][ T7662] ? __pfx___might_resched+0x10/0x10 [ 134.489401][ T7662] should_fail_ex+0x414/0x560 [ 134.489428][ T7662] should_failslab+0xa8/0x100 [ 134.489450][ T7662] __kmalloc_cache_noprof+0x70/0x3d0 [ 134.489468][ T7662] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 134.489490][ T7662] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 134.489520][ T7662] genl_family_rcv_msg_doit+0x212/0x300 [ 134.489547][ T7662] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.489585][ T7662] ? bpf_lsm_capable+0x9/0x20 [ 134.489606][ T7662] ? security_capable+0x7e/0x2e0 [ 134.489629][ T7662] genl_rcv_msg+0x60e/0x790 [ 134.489664][ T7662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.489682][ T7662] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 134.489714][ T7662] netlink_rcv_skb+0x219/0x490 [ 134.489738][ T7662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.489758][ T7662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.489805][ T7662] ? down_read+0x1ad/0x2e0 [ 134.489830][ T7662] genl_rcv+0x28/0x40 [ 134.489847][ T7662] netlink_unicast+0x758/0x8d0 [ 134.489880][ T7662] netlink_sendmsg+0x805/0xb30 [ 134.489905][ T7662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.489925][ T7662] ? aa_sock_msg_perm+0x94/0x160 [ 134.489942][ T7662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.489958][ T7662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.489975][ T7662] __sock_sendmsg+0x219/0x270 [ 134.490000][ T7662] ____sys_sendmsg+0x505/0x830 [ 134.490023][ T7662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.490050][ T7662] ? import_iovec+0x74/0xa0 [ 134.490073][ T7662] ___sys_sendmsg+0x21f/0x2a0 [ 134.490093][ T7662] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.490144][ T7662] ? __fget_files+0x2a/0x420 [ 134.490162][ T7662] ? __fget_files+0x3a0/0x420 [ 134.490193][ T7662] __x64_sys_sendmsg+0x19b/0x260 [ 134.490217][ T7662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.490252][ T7662] ? do_syscall_64+0xba/0x210 [ 134.490276][ T7662] do_syscall_64+0xf6/0x210 [ 134.490296][ T7662] ? clear_bhb_loop+0x45/0xa0 [ 134.490317][ T7662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.490333][ T7662] RIP: 0033:0x7fe2b678e969 [ 134.490347][ T7662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.490361][ T7662] RSP: 002b:00007fe2b75d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.490379][ T7662] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678e969 [ 134.490391][ T7662] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000005 [ 134.490402][ T7662] RBP: 00007fe2b75d2090 R08: 0000000000000000 R09: 0000000000000000 [ 134.490412][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.490422][ T7662] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 134.490449][ T7662] [ 134.520223][ T7660] lo speed is unknown, defaulting to 1000 [ 134.708868][ T7669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'. [ 134.843841][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.978482][ T7671] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 134.999307][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 135.129641][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 135.130505][ T7680] FAULT_INJECTION: forcing a failure. [ 135.130505][ T7680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.163324][ T7674] vxcan5: entered allmulticast mode [ 135.216257][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.1.590 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 135.216283][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.216293][ T7680] Call Trace: [ 135.216300][ T7680] [ 135.216307][ T7680] dump_stack_lvl+0x189/0x250 [ 135.216333][ T7680] ? __lock_acquire+0xaac/0xd20 [ 135.216358][ T7680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.216378][ T7680] ? __pfx__printk+0x10/0x10 [ 135.216392][ T7680] ? __might_fault+0xb0/0x130 [ 135.216420][ T7680] should_fail_ex+0x414/0x560 [ 135.216444][ T7680] _copy_from_user+0x2d/0xb0 [ 135.216464][ T7680] generic_map_update_batch+0x572/0x7f0 [ 135.216500][ T7680] ? __pfx_generic_map_update_batch+0x10/0x10 [ 135.216523][ T7680] ? __fget_files+0x2a/0x420 [ 135.216551][ T7680] ? __pfx_generic_map_update_batch+0x10/0x10 [ 135.216575][ T7680] bpf_map_do_batch+0x369/0x5f0 [ 135.216600][ T7680] __sys_bpf+0x384/0x860 [ 135.216622][ T7680] ? __pfx___sys_bpf+0x10/0x10 [ 135.216655][ T7680] ? ksys_write+0x1f0/0x250 [ 135.216672][ T7680] ? rcu_is_watching+0x15/0xb0 [ 135.216706][ T7680] __x64_sys_bpf+0x7c/0x90 [ 135.216725][ T7680] do_syscall_64+0xf6/0x210 [ 135.216747][ T7680] ? clear_bhb_loop+0x45/0xa0 [ 135.216767][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.216783][ T7680] RIP: 0033:0x7fe2b678e969 [ 135.216798][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.216812][ T7680] RSP: 002b:00007fe2b75d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.216830][ T7680] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678e969 [ 135.216847][ T7680] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 135.216858][ T7680] RBP: 00007fe2b75d2090 R08: 0000000000000000 R09: 0000000000000000 [ 135.216868][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.216878][ T7680] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 135.216905][ T7680] [ 135.481295][ T7686] IPVS: length: 78 != 8 [ 135.880082][ T7713] FAULT_INJECTION: forcing a failure. [ 135.880082][ T7713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.894677][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.933793][ T7713] CPU: 0 UID: 0 PID: 7713 Comm: syz.1.600 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 135.933824][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.933834][ T7713] Call Trace: [ 135.933840][ T7713] [ 135.933847][ T7713] dump_stack_lvl+0x189/0x250 [ 135.933877][ T7713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.933900][ T7713] ? __pfx__printk+0x10/0x10 [ 135.933919][ T7713] ? fs_reclaim_acquire+0x7d/0x100 [ 135.933952][ T7713] should_fail_ex+0x414/0x560 [ 135.933981][ T7713] prepare_alloc_pages+0x213/0x610 [ 135.934013][ T7713] __alloc_frozen_pages_noprof+0x123/0x370 [ 135.934041][ T7713] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.934069][ T7713] ? __pfx__copy_from_iter+0x10/0x10 [ 135.934089][ T7713] ? policy_nodemask+0x27c/0x720 [ 135.934109][ T7713] ? aa_file_perm+0x11f/0xed0 [ 135.934131][ T7713] alloc_pages_mpol+0x232/0x4a0 [ 135.934158][ T7713] alloc_pages_noprof+0xa9/0x190 [ 135.934181][ T7713] anon_pipe_write+0xb85/0x1360 [ 135.934227][ T7713] ? __pfx_anon_pipe_write+0x10/0x10 [ 135.934246][ T7713] ? common_file_perm+0x199/0x200 [ 135.934266][ T7713] ? bpf_lsm_file_permission+0x9/0x20 [ 135.934285][ T7713] ? security_file_permission+0x75/0x290 [ 135.934320][ T7713] vfs_write+0x548/0xa90 [ 135.934343][ T7713] ? __pfx_anon_pipe_write+0x10/0x10 [ 135.934364][ T7713] ? __pfx_vfs_write+0x10/0x10 [ 135.934393][ T7713] ? __fget_files+0x2a/0x420 [ 135.934423][ T7713] ksys_write+0x145/0x250 [ 135.934439][ T7713] ? rcu_is_watching+0x15/0xb0 [ 135.934463][ T7713] ? __pfx_ksys_write+0x10/0x10 [ 135.934486][ T7713] ? do_syscall_64+0xba/0x210 [ 135.934511][ T7713] do_syscall_64+0xf6/0x210 [ 135.934532][ T7713] ? clear_bhb_loop+0x45/0xa0 [ 135.934551][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.934567][ T7713] RIP: 0033:0x7fe2b678e969 [ 135.934582][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.934596][ T7713] RSP: 002b:00007fe2b75d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.934614][ T7713] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678e969 [ 135.934626][ T7713] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 135.934637][ T7713] RBP: 00007fe2b75d2090 R08: 0000000000000000 R09: 0000000000000000 [ 135.934648][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.934657][ T7713] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 135.934687][ T7713] [ 136.231798][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 136.287442][ T7720] macsec0: entered allmulticast mode [ 136.292813][ T7720] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 136.319035][ T7720] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 136.545190][ T7739] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 136.923764][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.416404][ T7763] lo speed is unknown, defaulting to 1000 [ 137.632524][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 137.804136][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 137.923230][ T7775] syzkaller1: entered promiscuous mode [ 137.950838][ T7775] syzkaller1: entered allmulticast mode [ 137.963856][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.329402][ T7796] pim6reg9: entered allmulticast mode [ 138.431948][ T7801] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 138.544503][ T7804] macsec1: entered allmulticast mode [ 138.561118][ T7808] FAULT_INJECTION: forcing a failure. [ 138.561118][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 138.574372][ T7804] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 138.581547][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.3.637 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 138.581569][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.581579][ T7808] Call Trace: [ 138.581585][ T7808] [ 138.581592][ T7808] dump_stack_lvl+0x189/0x250 [ 138.581620][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.581642][ T7808] ? __pfx__printk+0x10/0x10 [ 138.581664][ T7808] ? ref_tracker_alloc+0x318/0x460 [ 138.581682][ T7808] should_fail_ex+0x414/0x560 [ 138.581710][ T7808] should_failslab+0xa8/0x100 [ 138.581731][ T7808] kmem_cache_alloc_noprof+0x73/0x3c0 [ 138.581748][ T7808] ? skb_clone+0x212/0x3a0 [ 138.581770][ T7808] skb_clone+0x212/0x3a0 [ 138.581790][ T7808] __netlink_deliver_tap+0x404/0x850 [ 138.581826][ T7808] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.581850][ T7808] netlink_deliver_tap+0x19c/0x1b0 [ 138.581874][ T7808] netlink_unicast+0x72f/0x8d0 [ 138.581905][ T7808] netlink_sendmsg+0x805/0xb30 [ 138.581929][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.581947][ T7808] ? aa_sock_msg_perm+0x94/0x160 [ 138.581964][ T7808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.581983][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.581999][ T7808] __sock_sendmsg+0x219/0x270 [ 138.582023][ T7808] ____sys_sendmsg+0x505/0x830 [ 138.582044][ T7808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.582071][ T7808] ? import_iovec+0x74/0xa0 [ 138.582094][ T7808] ___sys_sendmsg+0x21f/0x2a0 [ 138.582114][ T7808] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.582165][ T7808] ? __fget_files+0x2a/0x420 [ 138.582184][ T7808] ? __fget_files+0x3a0/0x420 [ 138.582213][ T7808] __x64_sys_sendmsg+0x19b/0x260 [ 138.582233][ T7808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.582266][ T7808] ? do_syscall_64+0xba/0x210 [ 138.582290][ T7808] do_syscall_64+0xf6/0x210 [ 138.582310][ T7808] ? clear_bhb_loop+0x45/0xa0 [ 138.582329][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.582344][ T7808] RIP: 0033:0x7f5e4318e969 [ 138.582367][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.582381][ T7808] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.582397][ T7808] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 138.582409][ T7808] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 138.582420][ T7808] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 138.582430][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.582438][ T7808] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 138.582465][ T7808] [ 138.605727][ T7811] FAULT_INJECTION: forcing a failure. [ 138.605727][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 138.865840][ T7804] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 138.890418][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.0.639 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 138.890443][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.890452][ T7811] Call Trace: [ 138.890459][ T7811] [ 138.890466][ T7811] dump_stack_lvl+0x189/0x250 [ 138.890493][ T7811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.890512][ T7811] ? __pfx__printk+0x10/0x10 [ 138.890528][ T7811] ? __pfx___might_resched+0x10/0x10 [ 138.890542][ T7811] ? fs_reclaim_acquire+0x7d/0x100 [ 138.890569][ T7811] should_fail_ex+0x414/0x560 [ 138.890596][ T7811] should_failslab+0xa8/0x100 [ 138.890616][ T7811] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 138.890635][ T7811] ? __alloc_skb+0x112/0x2d0 [ 138.890655][ T7811] __alloc_skb+0x112/0x2d0 [ 138.890674][ T7811] alloc_skb_with_frags+0xca/0x890 [ 138.890705][ T7811] sock_alloc_send_pskb+0x857/0x990 [ 138.890742][ T7811] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 138.890772][ T7811] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 138.890795][ T7811] unix_dgram_sendmsg+0x5c2/0x17c0 [ 138.890819][ T7811] ? cgroup_rstat_updated+0x144/0xb50 [ 138.890844][ T7811] ? aa_sk_perm+0x81e/0x950 [ 138.890872][ T7811] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 138.890896][ T7811] ? aa_sock_msg_perm+0x94/0x160 [ 138.890913][ T7811] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 138.890928][ T7811] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 138.890944][ T7811] __sock_sendmsg+0x219/0x270 [ 138.890964][ T7811] ____sys_sendmsg+0x52d/0x830 [ 138.890984][ T7811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.891007][ T7811] ? import_iovec+0x74/0xa0 [ 138.891026][ T7811] ___sys_sendmsg+0x21f/0x2a0 [ 138.891043][ T7811] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.891094][ T7811] ? __might_fault+0xb0/0x130 [ 138.891114][ T7811] __sys_sendmmsg+0x227/0x430 [ 138.891134][ T7811] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.891157][ T7811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.891190][ T7811] ? ksys_write+0x1f0/0x250 [ 138.891204][ T7811] ? rcu_is_watching+0x15/0xb0 [ 138.891232][ T7811] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.891249][ T7811] do_syscall_64+0xf6/0x210 [ 138.891267][ T7811] ? clear_bhb_loop+0x45/0xa0 [ 138.891286][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.891299][ T7811] RIP: 0033:0x7f1571b8e969 [ 138.891313][ T7811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.891325][ T7811] RSP: 002b:00007f1572a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.891351][ T7811] RAX: ffffffffffffffda RBX: 00007f1571db5fa0 RCX: 00007f1571b8e969 [ 138.891362][ T7811] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 138.891371][ T7811] RBP: 00007f1572a38090 R08: 0000000000000000 R09: 0000000000000000 [ 138.891380][ T7811] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 138.891388][ T7811] R13: 0000000000000000 R14: 00007f1571db5fa0 R15: 00007ffe41ab8d68 [ 138.891412][ T7811] [ 139.004010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.346859][ T7830] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 139.372451][ T7832] vlan3: entered promiscuous mode [ 139.377572][ T7832] bond0: entered promiscuous mode [ 139.382762][ T7830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.392925][ T7832] vlan3: entered allmulticast mode [ 139.400247][ T7832] bond0: entered allmulticast mode [ 139.442558][ T7839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.650'. [ 139.688519][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 139.719257][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 139.766880][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.660'. [ 139.983344][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.666'. [ 140.043775][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.116260][ T7888] wireguard0: entered promiscuous mode [ 140.340442][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 140.349520][ T7905] FAULT_INJECTION: forcing a failure. [ 140.349520][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.362774][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.1.677 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 140.362796][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.362806][ T7905] Call Trace: [ 140.362813][ T7905] [ 140.362820][ T7905] dump_stack_lvl+0x189/0x250 [ 140.362850][ T7905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.362872][ T7905] ? __pfx__printk+0x10/0x10 [ 140.362902][ T7905] should_fail_ex+0x414/0x560 [ 140.362931][ T7905] _copy_to_user+0x31/0xb0 [ 140.362954][ T7905] simple_read_from_buffer+0xe1/0x170 [ 140.362979][ T7905] proc_fail_nth_read+0x1df/0x250 [ 140.363004][ T7905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.363029][ T7905] ? rw_verify_area+0x258/0x650 [ 140.363045][ T7905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.363068][ T7905] vfs_read+0x1fd/0x980 [ 140.363092][ T7905] ? __pfx___mutex_lock+0x10/0x10 [ 140.363114][ T7905] ? __pfx_vfs_read+0x10/0x10 [ 140.363133][ T7905] ? __fget_files+0x2a/0x420 [ 140.363158][ T7905] ? __fget_files+0x3a0/0x420 [ 140.363176][ T7905] ? __fget_files+0x2a/0x420 [ 140.363204][ T7905] ksys_read+0x145/0x250 [ 140.363219][ T7905] ? rcu_is_watching+0x15/0xb0 [ 140.363244][ T7905] ? __pfx_ksys_read+0x10/0x10 [ 140.363265][ T7905] ? do_syscall_64+0xba/0x210 [ 140.363297][ T7905] do_syscall_64+0xf6/0x210 [ 140.363319][ T7905] ? clear_bhb_loop+0x45/0xa0 [ 140.363340][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.363356][ T7905] RIP: 0033:0x7fe2b678d37c [ 140.363370][ T7905] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.363384][ T7905] RSP: 002b:00007fe2b75d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.363402][ T7905] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678d37c [ 140.363413][ T7905] RDX: 000000000000000f RSI: 00007fe2b75d20a0 RDI: 0000000000000004 [ 140.363423][ T7905] RBP: 00007fe2b75d2090 R08: 0000000000000000 R09: 0000000000000000 [ 140.363434][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.363443][ T7905] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 140.363471][ T7905] [ 140.797826][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 141.084838][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.667013][ T7931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.703178][ T7931] bond2: entered promiscuous mode [ 141.730171][ T7931] bond0: (slave bond2): Enslaving as an active interface with an up link [ 141.812776][ T7946] netlink: 156 bytes leftover after parsing attributes in process `syz.2.690'. [ 142.124034][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.302077][ T7966] macsec1: entered allmulticast mode [ 142.325476][ T7966] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 142.351497][ T7966] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 142.470624][ T7976] netlink: 156 bytes leftover after parsing attributes in process `syz.2.703'. [ 142.634872][ T7987] x_tables: unsorted underflow at hook 4 [ 142.715710][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.711'. [ 142.823456][ T7995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.858930][ T7995] bond3: entered promiscuous mode [ 142.864632][ T7995] bond0: (slave bond3): Enslaving as an active interface with an up link [ 143.163900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.703545][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 143.804653][ T8035] FAULT_INJECTION: forcing a failure. [ 143.804653][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 143.852175][ T8038] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 143.866634][ T8035] CPU: 1 UID: 0 PID: 8035 Comm: syz.3.726 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 143.866658][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 143.866668][ T8035] Call Trace: [ 143.866675][ T8035] [ 143.866682][ T8035] dump_stack_lvl+0x189/0x250 [ 143.866710][ T8035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.866732][ T8035] ? __pfx__printk+0x10/0x10 [ 143.866753][ T8035] ? __pfx___might_resched+0x10/0x10 [ 143.866767][ T8035] ? fs_reclaim_acquire+0x7d/0x100 [ 143.866792][ T8035] should_fail_ex+0x414/0x560 [ 143.866821][ T8035] should_failslab+0xa8/0x100 [ 143.866842][ T8035] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 143.866861][ T8035] ? __get_vm_area_node+0x131/0x2d0 [ 143.866885][ T8035] __get_vm_area_node+0x131/0x2d0 [ 143.866909][ T8035] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 143.866930][ T8035] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 143.866971][ T8035] ? aa_get_newest_label+0xf7/0x5d0 [ 143.866989][ T8035] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.867011][ T8035] ? _parse_integer_limit+0x1ae/0x1f0 [ 143.867038][ T8035] ? rcu_is_watching+0x15/0xb0 [ 143.867063][ T8035] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 143.867083][ T8035] __vmalloc_noprof+0x7a/0x90 [ 143.867104][ T8035] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 143.867125][ T8035] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 143.867150][ T8035] bpf_prog_alloc+0x3c/0x1a0 [ 143.867173][ T8035] bpf_prog_load+0x735/0x1930 [ 143.867201][ T8035] ? __lock_acquire+0xaac/0xd20 [ 143.867225][ T8035] ? __pfx_bpf_prog_load+0x10/0x10 [ 143.867267][ T8035] ? bpf_lsm_bpf+0x9/0x20 [ 143.867285][ T8035] ? security_bpf+0x7e/0x300 [ 143.867311][ T8035] __sys_bpf+0x5f1/0x860 [ 143.867333][ T8035] ? __pfx___sys_bpf+0x10/0x10 [ 143.867365][ T8035] ? ksys_write+0x1f0/0x250 [ 143.867382][ T8035] ? rcu_is_watching+0x15/0xb0 [ 143.867415][ T8035] __x64_sys_bpf+0x7c/0x90 [ 143.867434][ T8035] do_syscall_64+0xf6/0x210 [ 143.867457][ T8035] ? clear_bhb_loop+0x45/0xa0 [ 143.867477][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.867493][ T8035] RIP: 0033:0x7f5e4318e969 [ 143.867508][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.867522][ T8035] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.867540][ T8035] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 143.867552][ T8035] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 143.867563][ T8035] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 143.867573][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.867583][ T8035] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 143.867611][ T8035] [ 143.867853][ T8035] syz.3.726: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 144.132631][ T8046] xt_connbytes: Forcing CT accounting to be enabled [ 144.141758][ T8035] ,cpuset= [ 144.172822][ T8046] Cannot find add_set index 0 as target [ 144.177985][ T8035] /,mems_allowed=0-1 [ 144.187236][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.732'. [ 144.201868][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 144.203882][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.227354][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.3.726 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 144.227377][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 144.227387][ T8035] Call Trace: [ 144.227393][ T8035] [ 144.227401][ T8035] dump_stack_lvl+0x189/0x250 [ 144.227427][ T8035] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 144.227449][ T8035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.227472][ T8035] ? __pfx__printk+0x10/0x10 [ 144.227489][ T8035] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 144.227514][ T8035] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 144.227546][ T8035] warn_alloc+0x214/0x310 [ 144.227575][ T8035] ? __pfx_warn_alloc+0x10/0x10 [ 144.227607][ T8035] ? __get_vm_area_node+0x27f/0x2d0 [ 144.227635][ T8035] __vmalloc_node_range_noprof+0x316/0x12c0 [ 144.227680][ T8035] ? aa_get_newest_label+0xf7/0x5d0 [ 144.227699][ T8035] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 144.227721][ T8035] ? _parse_integer_limit+0x1ae/0x1f0 [ 144.227741][ T8035] ? rcu_is_watching+0x15/0xb0 [ 144.227765][ T8035] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.227785][ T8035] __vmalloc_noprof+0x7a/0x90 [ 144.227806][ T8035] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.227827][ T8035] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.227852][ T8035] bpf_prog_alloc+0x3c/0x1a0 [ 144.227875][ T8035] bpf_prog_load+0x735/0x1930 [ 144.227903][ T8035] ? __lock_acquire+0xaac/0xd20 [ 144.227926][ T8035] ? __pfx_bpf_prog_load+0x10/0x10 [ 144.227969][ T8035] ? bpf_lsm_bpf+0x9/0x20 [ 144.227987][ T8035] ? security_bpf+0x7e/0x300 [ 144.228012][ T8035] __sys_bpf+0x5f1/0x860 [ 144.228033][ T8035] ? __pfx___sys_bpf+0x10/0x10 [ 144.228066][ T8035] ? ksys_write+0x1f0/0x250 [ 144.228083][ T8035] ? rcu_is_watching+0x15/0xb0 [ 144.228116][ T8035] __x64_sys_bpf+0x7c/0x90 [ 144.228134][ T8035] do_syscall_64+0xf6/0x210 [ 144.228159][ T8035] ? clear_bhb_loop+0x45/0xa0 [ 144.228180][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.228195][ T8035] RIP: 0033:0x7f5e4318e969 [ 144.228210][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.228224][ T8035] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.228247][ T8035] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 144.228259][ T8035] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 144.228270][ T8035] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 144.228280][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.228289][ T8035] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 144.228317][ T8035] [ 144.228513][ T8035] Mem-Info: [ 144.234049][ T8048] lo speed is unknown, defaulting to 1000 [ 144.240743][ T8035] active_anon:6756 inactive_anon:0 isolated_anon:0 [ 144.240743][ T8035] active_file:1431 inactive_file:38338 isolated_file:0 [ 144.240743][ T8035] unevictable:768 dirty:212 writeback:0 [ 144.240743][ T8035] slab_reclaimable:10451 slab_unreclaimable:102331 [ 144.240743][ T8035] mapped:28454 shmem:1412 pagetables:730 [ 144.240743][ T8035] sec_pagetables:0 bounce:0 [ 144.240743][ T8035] kernel_misc_reclaimable:0 [ 144.240743][ T8035] free:1340310 free_pcp:611 free_cma:0 [ 144.451464][ T8060] vlan2: entered promiscuous mode [ 144.509018][ T8035] Node 0 active_anon:28324kB inactive_anon:0kB active_file:5724kB inactive_file:153276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115016kB dirty:844kB writeback:0kB shmem:5212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11488kB pagetables:3320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.603382][ T8035] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.643433][ T8035] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.676871][ T8035] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 144.682658][ T8035] Node 0 DMA32 free:1425604kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:31916kB inactive_anon:0kB active_file:5724kB inactive_file:153176kB unevictable:1536kB writepending:844kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:4044kB local_pcp:1744kB free_cma:0kB [ 144.729695][ T8035] lowmem_reserve[]: 0 0 0 0 0 [ 144.737202][ T8035] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.768017][ T8035] lowmem_reserve[]: 0 0 0 0 0 [ 144.772760][ T8035] Node 1 Normal free:3912724kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.805479][ T8035] lowmem_reserve[]: 0 0 0 0 0 [ 144.810226][ T8035] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.842730][ T8035] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 86*16kB (UME) 588*32kB (U) 293*64kB (UME) 156*128kB (UME) 75*256kB (UME) 47*512kB (UM) 21*1024kB (UME) 2*2048kB (UM) 316*4096kB (M) = 1422124kB [ 144.891906][ T8065] lo speed is unknown, defaulting to 1000 [ 144.911285][ T8035] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.938692][ T8069] FAULT_INJECTION: forcing a failure. [ 144.938692][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 144.966121][ T8069] CPU: 0 UID: 0 PID: 8069 Comm: syz.1.739 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 144.966146][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 144.966156][ T8069] Call Trace: [ 144.966164][ T8069] [ 144.966171][ T8069] dump_stack_lvl+0x189/0x250 [ 144.966201][ T8069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.966224][ T8069] ? __pfx__printk+0x10/0x10 [ 144.966245][ T8069] ? __pfx___might_resched+0x10/0x10 [ 144.966265][ T8069] should_fail_ex+0x414/0x560 [ 144.966294][ T8069] should_failslab+0xa8/0x100 [ 144.966317][ T8069] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 144.966337][ T8069] ? __alloc_skb+0x112/0x2d0 [ 144.966351][ T8069] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 144.966378][ T8069] __alloc_skb+0x112/0x2d0 [ 144.966398][ T8069] pfkey_sendmsg+0x1dd/0x1090 [ 144.966427][ T8069] ? __pfx___might_resched+0x10/0x10 [ 144.966449][ T8069] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 144.966477][ T8069] ? aa_sk_perm+0x81e/0x950 [ 144.966506][ T8069] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.966526][ T8069] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 144.966551][ T8069] ? aa_sock_msg_perm+0x94/0x160 [ 144.966569][ T8069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.966587][ T8069] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 144.966609][ T8069] __sock_sendmsg+0x219/0x270 [ 144.966634][ T8069] ____sys_sendmsg+0x505/0x830 [ 144.966657][ T8069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.966684][ T8069] ? import_iovec+0x74/0xa0 [ 144.966708][ T8069] ___sys_sendmsg+0x21f/0x2a0 [ 144.966728][ T8069] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.966780][ T8069] ? __fget_files+0x2a/0x420 [ 144.966799][ T8069] ? __fget_files+0x3a0/0x420 [ 144.966828][ T8069] __x64_sys_sendmsg+0x19b/0x260 [ 144.966849][ T8069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.966882][ T8069] ? do_syscall_64+0xba/0x210 [ 144.966907][ T8069] do_syscall_64+0xf6/0x210 [ 144.966927][ T8069] ? clear_bhb_loop+0x45/0xa0 [ 144.966955][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.966971][ T8069] RIP: 0033:0x7fe2b678e969 [ 144.966986][ T8069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.966999][ T8069] RSP: 002b:00007fe2b75d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.967017][ T8069] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678e969 [ 144.967029][ T8069] RDX: 00000000040000c0 RSI: 0000200000000100 RDI: 0000000000000003 [ 144.967040][ T8069] RBP: 00007fe2b75d2090 R08: 0000000000000000 R09: 0000000000000000 [ 144.967049][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.967059][ T8069] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 144.967086][ T8069] [ 145.134239][ T8035] Node 1 [ 145.243900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.343834][ T8035] Normal: 197*4kB (UME) 58*8kB (UME) 41*16kB (UME) 219*32kB (UME) 99*64kB (UME) 23*128kB (UME) 13*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 5*2048kB (UE) 945*4096kB (M) = 3912724kB [ 145.399322][ T8035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.439970][ T8035] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.504667][ T8035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.584419][ T8035] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.708450][ T8035] 47729 total pagecache pages [ 145.713185][ T8035] 0 pages in swap cache [ 145.733500][ T8035] Free swap = 124996kB [ 145.737845][ T8035] Total swap = 124996kB [ 145.742006][ T8035] 2097051 pages RAM [ 145.748520][ T8087] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 145.765781][ T8035] 0 pages HighMem/MovableOnly [ 145.780772][ T8087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.800645][ T8035] 424361 pages reserved [ 145.816224][ T8035] 0 pages cma reserved [ 146.283748][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.308341][ T8109] lo speed is unknown, defaulting to 1000 [ 146.511052][ T8122] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 146.916582][ T8132] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.960524][ T8132] Cannot find set identified by id 0 to match [ 147.019758][ T8135] openvswitch: netlink: VXLAN extension 32 out of range max 1 [ 147.082470][ T8114] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 147.197601][ T8126] netlink: 'syz.1.749': attribute type 29 has an invalid length. [ 147.323755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.397519][ T8146] lo speed is unknown, defaulting to 1000 [ 147.602022][ T8156] FAULT_INJECTION: forcing a failure. [ 147.602022][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 147.649836][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.3.761 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 147.649860][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 147.649870][ T8156] Call Trace: [ 147.649877][ T8156] [ 147.649884][ T8156] dump_stack_lvl+0x189/0x250 [ 147.649915][ T8156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.649938][ T8156] ? __pfx__printk+0x10/0x10 [ 147.649968][ T8156] should_fail_ex+0x414/0x560 [ 147.649997][ T8156] should_failslab+0xa8/0x100 [ 147.650019][ T8156] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.650039][ T8156] ? sctp_add_bind_addr+0x8c/0x370 [ 147.650063][ T8156] sctp_add_bind_addr+0x8c/0x370 [ 147.650089][ T8156] sctp_copy_local_addr_list+0x30b/0x4e0 [ 147.650114][ T8156] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 147.650135][ T8156] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 147.650154][ T8156] ? sctp_association_new+0x18b3/0x25f0 [ 147.650171][ T8156] ? sctp_v6_is_any+0x64/0x80 [ 147.650195][ T8156] ? sctp_copy_one_addr+0x93/0x360 [ 147.650218][ T8156] sctp_bind_addr_copy+0xb3/0x3c0 [ 147.650239][ T8156] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 147.650262][ T8156] sctp_connect_new_asoc+0x2e0/0x690 [ 147.650283][ T8156] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 147.650305][ T8156] ? sctp_get_af_specific+0x29/0x80 [ 147.650324][ T8156] ? sctp_inet6_send_verify+0x80/0x300 [ 147.650343][ T8156] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 147.650362][ T8156] __sctp_connect+0x5ba/0xd50 [ 147.650390][ T8156] ? __pfx___sctp_connect+0x10/0x10 [ 147.650404][ T8156] ? __local_bh_enable_ip+0x12d/0x1c0 [ 147.650428][ T8156] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.650450][ T8156] ? __local_bh_enable_ip+0x12d/0x1c0 [ 147.650472][ T8156] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 147.650490][ T8156] ? security_sctp_bind_connect+0x7e/0x2e0 [ 147.650516][ T8156] sctp_setsockopt_connectx+0x100/0x1b0 [ 147.650539][ T8156] sctp_setsockopt+0x6d9/0x1200 [ 147.650554][ T8156] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 147.650580][ T8156] do_sock_setsockopt+0x257/0x3e0 [ 147.650600][ T8156] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 147.650618][ T8156] ? __fget_files+0x2a/0x420 [ 147.650643][ T8156] ? __fget_files+0x3a0/0x420 [ 147.650661][ T8156] ? __fget_files+0x2a/0x420 [ 147.650689][ T8156] __x64_sys_setsockopt+0x18b/0x220 [ 147.650713][ T8156] do_syscall_64+0xf6/0x210 [ 147.650734][ T8156] ? clear_bhb_loop+0x45/0xa0 [ 147.650761][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.650776][ T8156] RIP: 0033:0x7f5e4318e969 [ 147.650791][ T8156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.650806][ T8156] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.650823][ T8156] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 147.650835][ T8156] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 147.650845][ T8156] RBP: 00007f5e43f67090 R08: 000000000000002c R09: 0000000000000000 [ 147.650855][ T8156] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000002 [ 147.650865][ T8156] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 147.650893][ T8156] [ 147.968520][ T8150] netlink: 'syz.4.758': attribute type 23 has an invalid length. [ 148.237950][ T8163] batadv_slave_0: entered promiscuous mode [ 148.249957][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 148.259487][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'. [ 148.339161][ T8163] ip6gretap0: entered promiscuous mode [ 148.350936][ T8163] ip6gretap0: left promiscuous mode [ 148.363831][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.371672][ T55] Bluetooth: hci3: command 0x0401 tx timeout [ 148.450556][ T8181] IPv6: NLM_F_REPLACE set, but no existing node found! [ 148.456213][ T8186] netlink: 156 bytes leftover after parsing attributes in process `syz.0.771'. [ 148.543031][ T8162] batadv_slave_0: left promiscuous mode [ 148.628144][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 148.682558][ T8197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.736968][ T8197] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 148.859329][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 148.875979][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'. [ 149.404543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.567330][ T8234] FAULT_INJECTION: forcing a failure. [ 149.567330][ T8234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.591646][ T8234] CPU: 1 UID: 0 PID: 8234 Comm: syz.4.786 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 149.591669][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.591679][ T8234] Call Trace: [ 149.591685][ T8234] [ 149.591692][ T8234] dump_stack_lvl+0x189/0x250 [ 149.591721][ T8234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.591742][ T8234] ? __pfx__printk+0x10/0x10 [ 149.591758][ T8234] ? fs_reclaim_acquire+0x7d/0x100 [ 149.591787][ T8234] should_fail_ex+0x414/0x560 [ 149.591813][ T8234] prepare_alloc_pages+0x213/0x610 [ 149.591841][ T8234] __alloc_frozen_pages_noprof+0x123/0x370 [ 149.591866][ T8234] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.591903][ T8234] alloc_pages_bulk_noprof+0x560/0x710 [ 149.591925][ T8234] ? rcu_is_watching+0x15/0xb0 [ 149.591948][ T8234] ? trace_kmalloc+0x1f/0xd0 [ 149.591963][ T8234] ? __kmalloc_noprof+0x29b/0x4f0 [ 149.591979][ T8234] ? copy_splice_read+0x143/0x9b0 [ 149.592000][ T8234] copy_splice_read+0x173/0x9b0 [ 149.592028][ T8234] ? __pfx_copy_splice_read+0x10/0x10 [ 149.592043][ T8234] ? look_up_lock_class+0x74/0x170 [ 149.592063][ T8234] ? register_lock_class+0x51/0x320 [ 149.592086][ T8234] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 149.592110][ T8234] ? alloc_pipe_info+0x374/0x4d0 [ 149.592128][ T8234] ? __pfx_copy_splice_read+0x10/0x10 [ 149.592143][ T8234] splice_direct_to_actor+0x4a6/0xcc0 [ 149.592179][ T8234] ? __pfx_direct_splice_actor+0x10/0x10 [ 149.592196][ T8234] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 149.592214][ T8234] ? __pfx_aa_file_perm+0x10/0x10 [ 149.592238][ T8234] do_splice_direct+0x181/0x270 [ 149.592259][ T8234] ? __pfx_do_splice_direct+0x10/0x10 [ 149.592277][ T8234] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 149.592301][ T8234] ? rw_verify_area+0x258/0x650 [ 149.592322][ T8234] do_sendfile+0x4da/0x7d0 [ 149.592342][ T8234] ? __pfx_vfs_write+0x10/0x10 [ 149.592364][ T8234] ? __pfx_do_sendfile+0x10/0x10 [ 149.592383][ T8234] ? __fget_files+0x3a0/0x420 [ 149.592412][ T8234] __se_sys_sendfile64+0x13e/0x190 [ 149.592431][ T8234] ? rcu_is_watching+0x15/0xb0 [ 149.592453][ T8234] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 149.592476][ T8234] ? do_syscall_64+0xba/0x210 [ 149.592499][ T8234] do_syscall_64+0xf6/0x210 [ 149.592518][ T8234] ? clear_bhb_loop+0x45/0xa0 [ 149.592537][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.592552][ T8234] RIP: 0033:0x7f8888f8e969 [ 149.592567][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.592581][ T8234] RSP: 002b:00007f8889dd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.592612][ T8234] RAX: ffffffffffffffda RBX: 00007f88891b5fa0 RCX: 00007f8888f8e969 [ 149.592624][ T8234] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 149.592642][ T8234] RBP: 00007f8889dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 149.592652][ T8234] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000001 [ 149.592660][ T8234] R13: 0000000000000000 R14: 00007f88891b5fa0 R15: 00007fff0417c278 [ 149.592686][ T8234] [ 149.957286][ T8238] netlink: zone id is out of range [ 149.962485][ T8238] netlink: zone id is out of range [ 149.973817][ T8238] netlink: set zone limit has 4 unknown bytes [ 149.993548][ T8238] netlink: 56 bytes leftover after parsing attributes in process `syz.4.789'. [ 150.021065][ T8240] FAULT_INJECTION: forcing a failure. [ 150.021065][ T8240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.071167][ T8240] CPU: 1 UID: 0 PID: 8240 Comm: syz.3.788 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 150.071192][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.071202][ T8240] Call Trace: [ 150.071209][ T8240] [ 150.071216][ T8240] dump_stack_lvl+0x189/0x250 [ 150.071242][ T8240] ? __lock_acquire+0xaac/0xd20 [ 150.071267][ T8240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.071289][ T8240] ? __pfx__printk+0x10/0x10 [ 150.071305][ T8240] ? __might_fault+0xb0/0x130 [ 150.071337][ T8240] should_fail_ex+0x414/0x560 [ 150.071366][ T8240] _copy_from_user+0x2d/0xb0 [ 150.071387][ T8240] __sys_bpf+0x1ed/0x860 [ 150.071410][ T8240] ? __pfx___sys_bpf+0x10/0x10 [ 150.071442][ T8240] ? ksys_write+0x1f0/0x250 [ 150.071459][ T8240] ? rcu_is_watching+0x15/0xb0 [ 150.071493][ T8240] __x64_sys_bpf+0x7c/0x90 [ 150.071512][ T8240] do_syscall_64+0xf6/0x210 [ 150.071534][ T8240] ? clear_bhb_loop+0x45/0xa0 [ 150.071554][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.071570][ T8240] RIP: 0033:0x7f5e4318e969 [ 150.071584][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.071599][ T8240] RSP: 002b:00007f5e43f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.071616][ T8240] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318e969 [ 150.071628][ T8240] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 150.071639][ T8240] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 150.071648][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.071658][ T8240] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 150.071686][ T8240] [ 150.358474][ T8247] netlink: 'syz.1.790': attribute type 21 has an invalid length. [ 150.377937][ T8252] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 150.443759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.586145][ T8257] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 151.390069][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.790'. [ 151.442679][ T8225] lo speed is unknown, defaulting to 1000 [ 151.483792][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.577499][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.0.799'. [ 152.138527][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 152.181041][ T8301] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.189861][ T8301] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.198830][ T8301] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.207597][ T8301] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.247128][ T8308] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 152.269429][ T8308] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 152.523758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.575264][ T5912] IPVS: starting estimator thread 0... [ 152.679571][ T8325] IPVS: using max 35 ests per chain, 84000 per kthread [ 152.971084][ T8345] syzkaller1: entered promiscuous mode [ 153.013477][ T8345] syzkaller1: entered allmulticast mode [ 153.096978][ T8350] geneve3: entered promiscuous mode [ 153.103430][ T8350] geneve3: entered allmulticast mode [ 153.497849][ T8358] __nla_validate_parse: 4 callbacks suppressed [ 153.497865][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'. [ 153.563846][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.637153][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.824'. [ 153.728980][ T8365] lo speed is unknown, defaulting to 1000 [ 154.279300][ T8405] netlink: 156 bytes leftover after parsing attributes in process `syz.4.839'. [ 154.604009][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.078763][ T8433] netlink: 'syz.4.848': attribute type 11 has an invalid length. [ 155.253933][ T8437] tipc: Enabling of bearer rejected, failed to enable media [ 155.643841][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.183532][ T8467] siw: device registration error -23 [ 156.574872][ T8486] syz.1.866: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.618038][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.1.866 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 156.618066][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.618078][ T8486] Call Trace: [ 156.618085][ T8486] [ 156.618093][ T8486] dump_stack_lvl+0x189/0x250 [ 156.618127][ T8486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.618151][ T8486] ? __pfx__printk+0x10/0x10 [ 156.618168][ T8486] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 156.618196][ T8486] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 156.618224][ T8486] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 156.618254][ T8486] warn_alloc+0x214/0x310 [ 156.618284][ T8486] ? __pfx_warn_alloc+0x10/0x10 [ 156.618306][ T8486] ? kasan_save_track+0x4f/0x80 [ 156.618324][ T8486] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 156.618344][ T8486] ? xskq_create+0x56/0x170 [ 156.618364][ T8486] ? __x64_sys_setsockopt+0x18b/0x220 [ 156.618381][ T8486] ? do_syscall_64+0xf6/0x210 [ 156.618401][ T8486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.618435][ T8486] __vmalloc_node_range_noprof+0x125/0x12c0 [ 156.618490][ T8486] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.618517][ T8486] ? __kasan_kmalloc+0x93/0xb0 [ 156.618543][ T8486] vmalloc_user_noprof+0x74/0x80 [ 156.618567][ T8486] ? xskq_create+0xbf/0x170 [ 156.618584][ T8486] xskq_create+0xbf/0x170 [ 156.618607][ T8486] xsk_init_queue+0xb0/0x110 [ 156.618630][ T8486] xsk_setsockopt+0x43f/0x710 [ 156.618651][ T8486] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.618681][ T8486] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 156.618700][ T8486] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.618720][ T8486] do_sock_setsockopt+0x257/0x3e0 [ 156.618741][ T8486] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.618757][ T8486] ? __fget_files+0x2a/0x420 [ 156.618784][ T8486] ? __fget_files+0x3a0/0x420 [ 156.618803][ T8486] ? __fget_files+0x2a/0x420 [ 156.618833][ T8486] __x64_sys_setsockopt+0x18b/0x220 [ 156.618857][ T8486] do_syscall_64+0xf6/0x210 [ 156.618880][ T8486] ? clear_bhb_loop+0x45/0xa0 [ 156.618901][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.618918][ T8486] RIP: 0033:0x7fe2b678e969 [ 156.618934][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.618949][ T8486] RSP: 002b:00007fe2b75d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.618968][ T8486] RAX: ffffffffffffffda RBX: 00007fe2b69b5fa0 RCX: 00007fe2b678e969 [ 156.618981][ T8486] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 156.618991][ T8486] RBP: 00007fe2b6810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 156.619002][ T8486] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.619013][ T8486] R13: 0000000000000000 R14: 00007fe2b69b5fa0 R15: 00007fff2e90eae8 [ 156.619042][ T8486] [ 156.619049][ T8486] Mem-Info: [ 156.685980][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.929591][ T8486] active_anon:8165 inactive_anon:0 isolated_anon:0 [ 156.929591][ T8486] active_file:1477 inactive_file:38344 isolated_file:0 [ 156.929591][ T8486] unevictable:768 dirty:341 writeback:0 [ 156.929591][ T8486] slab_reclaimable:10314 slab_unreclaimable:104919 [ 156.929591][ T8486] mapped:30561 shmem:1412 pagetables:872 [ 156.929591][ T8486] sec_pagetables:0 bounce:0 [ 156.929591][ T8486] kernel_misc_reclaimable:0 [ 156.929591][ T8486] free:1337705 free_pcp:364 free_cma:0 [ 157.047077][ T8486] Node 0 active_anon:33660kB inactive_anon:0kB active_file:5908kB inactive_file:153300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122244kB dirty:1364kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11392kB pagetables:3088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.141961][ T8486] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.203303][ T8486] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.243664][ T8486] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 157.250224][ T8486] Node 0 DMA32 free:1419128kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:35852kB inactive_anon:0kB active_file:5908kB inactive_file:153200kB unevictable:1536kB writepending:1364kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:2340kB local_pcp:944kB free_cma:0kB [ 157.281046][ T8486] lowmem_reserve[]: 0 0 0 0 0 [ 157.292272][ T8486] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.319577][ T8486] lowmem_reserve[]: 0 0 0 0 0 [ 157.324708][ T8486] Node 1 Normal free:3912760kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.407994][ T8486] lowmem_reserve[]: 0 0 0 0 0 [ 157.423789][ T8486] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.456005][ T8486] Node 0 DMA32: 418*4kB (UM) 564*8kB (UME) 202*16kB (UME) 247*32kB (UME) 398*64kB (UME) 155*128kB (UME) 74*256kB (UME) 40*512kB (UM) 20*1024kB (UME) 1*2048kB (U) 316*4096kB (UM) = 1418920kB [ 157.463599][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 157.496905][ T8486] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 157.523662][ T8486] Node 1 Normal: 196*4kB (UME) 56*8kB (UME) 41*16kB (UME) 219*32kB (UME) 100*64kB (UME) 23*128kB (UME) 13*256kB (UME) 8*512kB (UME) 6*1024kB (UME) 5*2048kB (UE) 945*4096kB (M) = 3912768kB [ 157.567079][ T8486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.591011][ T8486] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.613603][ T8486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.637067][ T8486] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.663733][ T8486] 41283 total pagecache pages [ 157.668425][ T8486] 0 pages in swap cache [ 157.672581][ T8486] Free swap = 124996kB [ 157.693888][ T8486] Total swap = 124996kB [ 157.698075][ T8486] 2097051 pages RAM [ 157.701891][ T8486] 0 pages HighMem/MovableOnly [ 157.713782][ T8486] 424361 pages reserved [ 157.717953][ T8486] 0 pages cma reserved [ 157.723755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.923601][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 157.938066][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 157.956580][ T8525] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.965801][ T8525] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.974746][ T8525] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.983454][ T8525] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.382882][ T8546] netlink: 44 bytes leftover after parsing attributes in process `syz.2.888'. [ 158.618859][ T8553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.627604][ T8553] bond3: entered promiscuous mode [ 158.632782][ T8553] bond3: entered allmulticast mode [ 158.643010][ T8553] bond0: (slave bond3): Enslaving as an active interface with an up link [ 158.726307][ T8561] syzkaller0: entered promiscuous mode [ 158.731816][ T8561] syzkaller0: entered allmulticast mode [ 158.763842][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.042272][ T8575] tipc: Started in network mode [ 159.057493][ T8575] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 159.080427][ T8575] tipc: Enabled bearer , priority 10 [ 159.166853][ T8577] openvswitch: netlink: Tunnel attr 2 has unexpected len 12 expected 4 [ 159.725051][ T8609] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 159.766994][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.786685][ T8609] team0: entered promiscuous mode [ 159.803878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.812942][ T8609] team_slave_0: entered promiscuous mode [ 159.819528][ T8609] team_slave_1: entered promiscuous mode [ 159.830249][ T8609] bond0: (slave team0): Enslaving as an active interface with an up link [ 159.883796][ T55] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 159.887223][ T5831] Bluetooth: hci0: command 0x0401 tx timeout [ 159.993389][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.907'. [ 160.123358][ T8627] openvswitch: netlink: Tunnel attr 2 has unexpected len 12 expected 4 [ 160.194733][ T5912] tipc: Node number set to 4269801488 [ 160.433473][ T8633] FAULT_INJECTION: forcing a failure. [ 160.433473][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 160.473060][ T8633] CPU: 0 UID: 0 PID: 8633 Comm: syz.3.918 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 160.473086][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.473097][ T8633] Call Trace: [ 160.473103][ T8633] [ 160.473111][ T8633] dump_stack_lvl+0x189/0x250 [ 160.473141][ T8633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.473164][ T8633] ? __pfx__printk+0x10/0x10 [ 160.473194][ T8633] should_fail_ex+0x414/0x560 [ 160.473224][ T8633] should_failslab+0xa8/0x100 [ 160.473247][ T8633] __kmalloc_cache_noprof+0x70/0x3d0 [ 160.473267][ T8633] ? sctp_add_bind_addr+0x8c/0x370 [ 160.473293][ T8633] sctp_add_bind_addr+0x8c/0x370 [ 160.473319][ T8633] sctp_copy_local_addr_list+0x30b/0x4e0 [ 160.473344][ T8633] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 160.473365][ T8633] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 160.473390][ T8633] ? sctp_v4_is_any+0x35/0x60 [ 160.473411][ T8633] ? sctp_copy_one_addr+0x93/0x360 [ 160.473436][ T8633] sctp_bind_addr_copy+0xb3/0x3c0 [ 160.473458][ T8633] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 160.473481][ T8633] sctp_connect_new_asoc+0x2e0/0x690 [ 160.473502][ T8633] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 160.473520][ T8633] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 160.473536][ T8633] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 160.473551][ T8633] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 160.473568][ T8633] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 160.473587][ T8633] ? security_sctp_bind_connect+0x7e/0x2e0 [ 160.473613][ T8633] sctp_sendmsg+0x155c/0x2810 [ 160.473642][ T8633] ? __pfx_sctp_sendmsg+0x10/0x10 [ 160.473662][ T8633] ? aa_sk_perm+0x81e/0x950 [ 160.473692][ T8633] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.473717][ T8633] ? sock_rps_record_flow+0x19/0x410 [ 160.473737][ T8633] ? inet_sendmsg+0x2f4/0x370 [ 160.473754][ T8633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.473775][ T8633] __sock_sendmsg+0x19c/0x270 [ 160.473800][ T8633] __sys_sendto+0x3bd/0x520 [ 160.473817][ T8633] ? __pfx___sys_sendto+0x10/0x10 [ 160.473829][ T8633] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 160.473860][ T8633] ? __fget_files+0x3a0/0x420 [ 160.473897][ T8633] ? ksys_write+0x1f0/0x250 [ 160.473924][ T8633] __x64_sys_sendto+0xde/0x100 [ 160.473944][ T8633] do_syscall_64+0xf6/0x210 [ 160.473967][ T8633] ? clear_bhb_loop+0x45/0xa0 [ 160.473987][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.474003][ T8633] RIP: 0033:0x7f5e4318e969 [ 160.474018][ T8633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.474033][ T8633] RSP: 002b:00007f5e43f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 160.474051][ T8633] RAX: ffffffffffffffda RBX: 00007f5e433b6080 RCX: 00007f5e4318e969 [ 160.474063][ T8633] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 160.474073][ T8633] RBP: 00007f5e43f46090 R08: 0000200000000000 R09: 0000000000000010 [ 160.474083][ T8633] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 160.474094][ T8633] R13: 0000000000000001 R14: 00007f5e433b6080 R15: 00007fff1dde0fc8 [ 160.474121][ T8633] [ 160.843745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.921711][ T8658] FAULT_INJECTION: forcing a failure. [ 160.921711][ T8658] name failslab, interval 1, probability 0, space 0, times 0 [ 160.934793][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.0.924 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 160.934817][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.934827][ T8658] Call Trace: [ 160.934834][ T8658] [ 160.934841][ T8658] dump_stack_lvl+0x189/0x250 [ 160.934871][ T8658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.934902][ T8658] ? __pfx__printk+0x10/0x10 [ 160.934933][ T8658] should_fail_ex+0x414/0x560 [ 160.934962][ T8658] should_failslab+0xa8/0x100 [ 160.934985][ T8658] __kmalloc_cache_noprof+0x70/0x3d0 [ 160.935005][ T8658] ? sctp_add_bind_addr+0x8c/0x370 [ 160.935031][ T8658] sctp_add_bind_addr+0x8c/0x370 [ 160.935057][ T8658] sctp_copy_local_addr_list+0x30b/0x4e0 [ 160.935081][ T8658] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 160.935102][ T8658] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 160.935125][ T8658] ? sctp_v6_is_any+0x64/0x80 [ 160.935148][ T8658] ? sctp_copy_one_addr+0x93/0x360 [ 160.935171][ T8658] sctp_bind_addr_copy+0xb3/0x3c0 [ 160.935193][ T8658] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 160.935215][ T8658] sctp_connect_new_asoc+0x2e0/0x690 [ 160.935235][ T8658] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 160.935253][ T8658] ? __lock_acquire+0xaac/0xd20 [ 160.935276][ T8658] ? sctp_get_af_specific+0x29/0x80 [ 160.935295][ T8658] ? sctp_inet6_send_verify+0x80/0x300 [ 160.935315][ T8658] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 160.935335][ T8658] __sctp_connect+0x5ba/0xd50 [ 160.935364][ T8658] ? __pfx___sctp_connect+0x10/0x10 [ 160.935384][ T8658] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 160.935403][ T8658] ? security_sctp_bind_connect+0x7e/0x2e0 [ 160.935427][ T8658] sctp_getsockopt_connectx3+0x2c4/0x440 [ 160.935451][ T8658] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 160.935473][ T8658] ? __local_bh_enable_ip+0x12d/0x1c0 [ 160.935497][ T8658] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.935532][ T8658] sctp_getsockopt+0x98a/0xb60 [ 160.935551][ T8658] do_sock_getsockopt+0x35d/0x650 [ 160.935572][ T8658] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 160.935589][ T8658] ? do_syscall_64+0x40/0x210 [ 160.935608][ T8658] ? __fget_files+0x2a/0x420 [ 160.935628][ T8658] ? __fget_files+0x3a0/0x420 [ 160.935646][ T8658] ? __fget_files+0x2a/0x420 [ 160.935674][ T8658] __x64_sys_getsockopt+0x1a5/0x250 [ 160.935690][ T8658] ? do_syscall_64+0x40/0x210 [ 160.935711][ T8658] ? do_syscall_64+0x40/0x210 [ 160.935735][ T8658] do_syscall_64+0xf6/0x210 [ 160.935756][ T8658] ? clear_bhb_loop+0x45/0xa0 [ 160.935776][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.935792][ T8658] RIP: 0033:0x7f1571b8e969 [ 160.935807][ T8658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.935821][ T8658] RSP: 002b:00007f1572a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 160.935839][ T8658] RAX: ffffffffffffffda RBX: 00007f1571db5fa0 RCX: 00007f1571b8e969 [ 160.935851][ T8658] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 160.935860][ T8658] RBP: 00007f1572a38090 R08: 0000200000000240 R09: 0000000000000000 [ 160.935871][ T8658] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.935888][ T8658] R13: 0000000000000000 R14: 00007f1571db5fa0 R15: 00007ffe41ab8d68 [ 160.935917][ T8658] [ 161.316331][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 161.396537][ T8662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.421125][ T8667] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 161.493618][ T8672] netlink: 5 bytes leftover after parsing attributes in process `syz.4.931'. [ 161.508142][ T8672] 0ªX¹¦D: renamed from gretap0 (while UP) [ 161.516073][ T8675] openvswitch: netlink: Tunnel attr 2 has unexpected len 12 expected 4 [ 161.538444][ T8677] sctp: [Deprecated]: syz.1.930 (pid 8677) Use of int in max_burst socket option deprecated. [ 161.538444][ T8677] Use struct sctp_assoc_value instead [ 161.568127][ T8672] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 161.584325][ T8676] sctp: [Deprecated]: syz.1.930 (pid 8676) Use of int in max_burst socket option deprecated. [ 161.584325][ T8676] Use struct sctp_assoc_value instead [ 161.762064][ T8688] netlink: 440 bytes leftover after parsing attributes in process `syz.0.935'. [ 161.883764][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.068965][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 162.093206][ T8712] 8021q: VLANs not supported on sit0 [ 162.159891][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 162.712476][ T8745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.953'. [ 162.923746][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.099350][ T8766] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 163.197389][ T8772] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 163.217610][ T8772] bond4: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 163.250736][ T8772] bond4: (slave ip6tnl1): making interface the new active one [ 163.264698][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'. [ 163.287954][ T8772] bond4: (slave ip6tnl1): Enslaving as an active interface with an up link [ 163.765112][ T8786] vlan2: entered promiscuous mode [ 163.963754][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.125007][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 164.177748][ T8796] netlink: 'syz.2.970': attribute type 21 has an invalid length. [ 164.185641][ T8796] netlink: 128 bytes leftover after parsing attributes in process `syz.2.970'. [ 164.195454][ T8796] netlink: 'syz.2.970': attribute type 5 has an invalid length. [ 165.003759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.419239][ T8840] __nla_validate_parse: 1 callbacks suppressed [ 165.419256][ T8840] netlink: 476 bytes leftover after parsing attributes in process `syz.4.982'. [ 165.475082][ T8840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.982'. [ 165.496672][ T8840] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 165.652902][ T8847] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 166.043908][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.062391][ T8873] xt_connbytes: Forcing CT accounting to be enabled [ 166.069388][ T8873] set match dimension is over the limit! [ 166.077629][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 166.119387][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 166.391595][ T8886] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.454661][ T8889] trusted_key: syz.4.999 sent an empty control message without MSG_MORE. [ 166.568158][ T8898] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1002'. [ 166.949192][ T8922] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 166.967150][ T8922] bridge_slave_1: left allmulticast mode [ 166.972963][ T8922] bridge_slave_1: left promiscuous mode [ 166.981198][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.083840][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.379908][ T8939] syzkaller0: entered promiscuous mode [ 167.394486][ T8939] syzkaller0: entered allmulticast mode [ 167.780703][ T8963] FAULT_INJECTION: forcing a failure. [ 167.780703][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 167.795839][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: syz.2.1024 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 167.795863][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 167.795874][ T8963] Call Trace: [ 167.795881][ T8963] [ 167.795888][ T8963] dump_stack_lvl+0x189/0x250 [ 167.795918][ T8963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.795941][ T8963] ? __pfx__printk+0x10/0x10 [ 167.795973][ T8963] should_fail_ex+0x414/0x560 [ 167.796003][ T8963] should_failslab+0xa8/0x100 [ 167.796026][ T8963] __kmalloc_cache_noprof+0x70/0x3d0 [ 167.796046][ T8963] ? sctp_add_bind_addr+0x8c/0x370 [ 167.796073][ T8963] sctp_add_bind_addr+0x8c/0x370 [ 167.796098][ T8963] sctp_copy_local_addr_list+0x30b/0x4e0 [ 167.796124][ T8963] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 167.796145][ T8963] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 167.796171][ T8963] ? sctp_v4_is_any+0x35/0x60 [ 167.796192][ T8963] ? sctp_copy_one_addr+0x93/0x360 [ 167.796217][ T8963] sctp_bind_addr_copy+0xb3/0x3c0 [ 167.796240][ T8963] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 167.796263][ T8963] sctp_connect_new_asoc+0x2e0/0x690 [ 167.796284][ T8963] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 167.796302][ T8963] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 167.796319][ T8963] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 167.796333][ T8963] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 167.796351][ T8963] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 167.796370][ T8963] __sctp_connect+0x5ba/0xd50 [ 167.796407][ T8963] ? __pfx___sctp_connect+0x10/0x10 [ 167.796434][ T8963] sctp_inet_connect+0x12e/0x1e0 [ 167.796460][ T8963] __sys_connect+0x313/0x440 [ 167.796484][ T8963] ? __fget_files+0x3a0/0x420 [ 167.796505][ T8963] ? __pfx___sys_connect+0x10/0x10 [ 167.796553][ T8963] __x64_sys_connect+0x7a/0x90 [ 167.796578][ T8963] do_syscall_64+0xf6/0x210 [ 167.796600][ T8963] ? clear_bhb_loop+0x45/0xa0 [ 167.796621][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.796637][ T8963] RIP: 0033:0x7f8ea538e969 [ 167.796651][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.796666][ T8963] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 167.796683][ T8963] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 167.796696][ T8963] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 167.796707][ T8963] RBP: 00007f8ea6117090 R08: 0000000000000000 R09: 0000000000000000 [ 167.796717][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.796727][ T8963] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 167.796756][ T8963] [ 168.123843][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.187042][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 169.163807][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.495120][ T8989] nbd: socks must be embedded in a SOCK_ITEM attr [ 169.712093][ T9003] FAULT_INJECTION: forcing a failure. [ 169.712093][ T9003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.745122][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 169.759644][ T9003] CPU: 0 UID: 0 PID: 9003 Comm: syz.3.1038 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 169.759667][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.759678][ T9003] Call Trace: [ 169.759684][ T9003] [ 169.759691][ T9003] dump_stack_lvl+0x189/0x250 [ 169.759722][ T9003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.759744][ T9003] ? __pfx__printk+0x10/0x10 [ 169.759774][ T9003] should_fail_ex+0x414/0x560 [ 169.759804][ T9003] _copy_to_user+0x31/0xb0 [ 169.759826][ T9003] simple_read_from_buffer+0xe1/0x170 [ 169.759851][ T9003] proc_fail_nth_read+0x1df/0x250 [ 169.759876][ T9003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.759900][ T9003] ? rw_verify_area+0x258/0x650 [ 169.759917][ T9003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.759940][ T9003] vfs_read+0x1fd/0x980 [ 169.759964][ T9003] ? __pfx___mutex_lock+0x10/0x10 [ 169.759986][ T9003] ? __pfx_vfs_read+0x10/0x10 [ 169.760006][ T9003] ? __fget_files+0x2a/0x420 [ 169.760031][ T9003] ? __fget_files+0x3a0/0x420 [ 169.760049][ T9003] ? __fget_files+0x2a/0x420 [ 169.760079][ T9003] ksys_read+0x145/0x250 [ 169.760095][ T9003] ? rcu_is_watching+0x15/0xb0 [ 169.760120][ T9003] ? __pfx_ksys_read+0x10/0x10 [ 169.760141][ T9003] ? do_syscall_64+0xba/0x210 [ 169.760167][ T9003] do_syscall_64+0xf6/0x210 [ 169.760188][ T9003] ? clear_bhb_loop+0x45/0xa0 [ 169.760208][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.760224][ T9003] RIP: 0033:0x7f5e4318d37c [ 169.760239][ T9003] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.760253][ T9003] RSP: 002b:00007f5e43f67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.760271][ T9003] RAX: ffffffffffffffda RBX: 00007f5e433b5fa0 RCX: 00007f5e4318d37c [ 169.760283][ T9003] RDX: 000000000000000f RSI: 00007f5e43f670a0 RDI: 0000000000000004 [ 169.760293][ T9003] RBP: 00007f5e43f67090 R08: 0000000000000000 R09: 0000000000000000 [ 169.760303][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.760313][ T9003] R13: 0000000000000000 R14: 00007f5e433b5fa0 R15: 00007fff1dde0fc8 [ 169.760341][ T9003] [ 169.988645][ T9005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1037'. [ 170.003773][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'. [ 170.114535][ T9017] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 170.122327][ T9017] netlink: 'syz.2.1044': attribute type 2 has an invalid length. [ 170.203835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.335987][ T9029] ------------[ cut here ]------------ [ 170.341794][ T9029] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 170.349289][ T9029] index 255 is out of range for type 'const int[12]' [ 170.356010][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.2.1048 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 170.356034][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 170.356045][ T9029] Call Trace: [ 170.356053][ T9029] [ 170.356061][ T9029] dump_stack_lvl+0x189/0x250 [ 170.356094][ T9029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.356118][ T9029] ? __pfx__printk+0x10/0x10 [ 170.356133][ T9029] ? tcp_v6_connect+0xbce/0x1830 [ 170.356156][ T9029] ? __sys_connect+0x313/0x440 [ 170.356181][ T9029] ? do_syscall_64+0xf6/0x210 [ 170.356202][ T9029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.356232][ T9029] ubsan_epilogue+0xa/0x40 [ 170.356249][ T9029] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 170.356277][ T9029] ip6_rt_copy_init+0x8e7/0x970 [ 170.356305][ T9029] ip6_pol_route+0xbac/0x1180 [ 170.356328][ T9029] ? ip6_pol_route+0x162/0x1180 [ 170.356356][ T9029] ? __pfx_ip6_pol_route+0x10/0x10 [ 170.356379][ T9029] ? ipv6_addr_label+0x1ae/0x1e0 [ 170.356401][ T9029] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 170.356435][ T9029] fib6_rule_lookup+0x348/0x6f0 [ 170.356460][ T9029] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 170.356483][ T9029] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 170.356513][ T9029] ? ip6_route_output_flags+0x2e/0x5d0 [ 170.356539][ T9029] ? __pfx_rcuref_put+0x10/0x10 [ 170.356570][ T9029] ip6_route_output_flags+0x364/0x5d0 [ 170.356594][ T9029] ? ip6_route_output_flags+0x2e/0x5d0 [ 170.356622][ T9029] ip6_dst_lookup_tail+0x299/0x1510 [ 170.356643][ T9029] ? ip6_dst_lookup_tail+0x211/0x1510 [ 170.356668][ T9029] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 170.356687][ T9029] ? sha256+0x105/0x160 [ 170.356711][ T9029] ? __pfx_sha256+0x10/0x10 [ 170.356744][ T9029] ip6_dst_lookup_flow+0x47/0xe0 [ 170.356766][ T9029] tcp_v6_connect+0xbce/0x1830 [ 170.356800][ T9029] ? __pfx_tcp_v6_connect+0x10/0x10 [ 170.356833][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.356857][ T9029] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.356879][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.356903][ T9029] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 170.356929][ T9029] ? do_raw_spin_unlock+0x122/0x240 [ 170.356954][ T9029] mptcp_connect+0x742/0xc10 [ 170.356982][ T9029] __inet_stream_connect+0x295/0xf10 [ 170.357015][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.357040][ T9029] ? __pfx___inet_stream_connect+0x10/0x10 [ 170.357061][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.357087][ T9029] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 170.357123][ T9029] inet_stream_connect+0x66/0xa0 [ 170.357149][ T9029] __sys_connect+0x313/0x440 [ 170.357177][ T9029] ? __pfx___sys_connect+0x10/0x10 [ 170.357234][ T9029] __x64_sys_connect+0x7a/0x90 [ 170.357261][ T9029] do_syscall_64+0xf6/0x210 [ 170.357285][ T9029] ? clear_bhb_loop+0x45/0xa0 [ 170.357306][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.357321][ T9029] RIP: 0033:0x7f8ea538e969 [ 170.357336][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.357351][ T9029] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 170.357370][ T9029] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 170.357383][ T9029] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 170.357394][ T9029] RBP: 00007f8ea5410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 170.357404][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.357415][ T9029] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 170.357445][ T9029] [ 170.357452][ T9029] ---[ end trace ]--- [ 170.683665][ T9039] smc: net device bond0 applied user defined pnetid SYZ0 [ 170.687632][ T9029] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 170.687649][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.2.1048 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 170.687668][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 170.687678][ T9029] Call Trace: [ 170.687686][ T9029] [ 170.687695][ T9029] dump_stack_lvl+0x99/0x250 [ 170.687725][ T9029] ? __asan_memcpy+0x40/0x70 [ 170.687744][ T9029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.687768][ T9029] ? __pfx__printk+0x10/0x10 [ 170.687799][ T9029] panic+0x2db/0x790 [ 170.687829][ T9029] ? __pfx_panic+0x10/0x10 [ 170.687849][ T9029] ? _printk+0xcf/0x120 [ 170.687872][ T9029] ? __pfx__printk+0x10/0x10 [ 170.687886][ T9029] ? tcp_v6_connect+0xbce/0x1830 [ 170.687910][ T9029] ? __sys_connect+0x313/0x440 [ 170.687934][ T9029] ? do_syscall_64+0xf6/0x210 [ 170.687955][ T9029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.687977][ T9029] check_panic_on_warn+0x89/0xb0 [ 170.688001][ T9029] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 170.688028][ T9029] ip6_rt_copy_init+0x8e7/0x970 [ 170.688058][ T9029] ip6_pol_route+0xbac/0x1180 [ 170.688081][ T9029] ? ip6_pol_route+0x162/0x1180 [ 170.688109][ T9029] ? __pfx_ip6_pol_route+0x10/0x10 [ 170.688132][ T9029] ? ipv6_addr_label+0x1ae/0x1e0 [ 170.688155][ T9029] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 170.688188][ T9029] fib6_rule_lookup+0x348/0x6f0 [ 170.688214][ T9029] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 170.688239][ T9029] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 170.688270][ T9029] ? ip6_route_output_flags+0x2e/0x5d0 [ 170.688296][ T9029] ? __pfx_rcuref_put+0x10/0x10 [ 170.688327][ T9029] ip6_route_output_flags+0x364/0x5d0 [ 170.688352][ T9029] ? ip6_route_output_flags+0x2e/0x5d0 [ 170.688379][ T9029] ip6_dst_lookup_tail+0x299/0x1510 [ 170.688400][ T9029] ? ip6_dst_lookup_tail+0x211/0x1510 [ 170.688426][ T9029] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 170.688444][ T9029] ? sha256+0x105/0x160 [ 170.688475][ T9029] ? __pfx_sha256+0x10/0x10 [ 170.688507][ T9029] ip6_dst_lookup_flow+0x47/0xe0 [ 170.688530][ T9029] tcp_v6_connect+0xbce/0x1830 [ 170.688566][ T9029] ? __pfx_tcp_v6_connect+0x10/0x10 [ 170.688599][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.688625][ T9029] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.688648][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.688673][ T9029] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 170.688699][ T9029] ? do_raw_spin_unlock+0x122/0x240 [ 170.688724][ T9029] mptcp_connect+0x742/0xc10 [ 170.688752][ T9029] __inet_stream_connect+0x295/0xf10 [ 170.688784][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.688809][ T9029] ? __pfx___inet_stream_connect+0x10/0x10 [ 170.688832][ T9029] ? __local_bh_enable_ip+0x12d/0x1c0 [ 170.688857][ T9029] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 170.688893][ T9029] inet_stream_connect+0x66/0xa0 [ 170.688919][ T9029] __sys_connect+0x313/0x440 [ 170.688947][ T9029] ? __pfx___sys_connect+0x10/0x10 [ 170.688994][ T9029] __x64_sys_connect+0x7a/0x90 [ 170.689021][ T9029] do_syscall_64+0xf6/0x210 [ 170.689044][ T9029] ? clear_bhb_loop+0x45/0xa0 [ 170.689065][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.689082][ T9029] RIP: 0033:0x7f8ea538e969 [ 170.689099][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.689114][ T9029] RSP: 002b:00007f8ea6117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 170.689133][ T9029] RAX: ffffffffffffffda RBX: 00007f8ea55b5fa0 RCX: 00007f8ea538e969 [ 170.689147][ T9029] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 170.689158][ T9029] RBP: 00007f8ea5410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 170.689170][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.689180][ T9029] R13: 0000000000000000 R14: 00007f8ea55b5fa0 R15: 00007ffe5847ce18 [ 170.689210][ T9029] [ 170.695709][ T9029] Kernel Offset: disabled