last executing test programs: 2.905819238s ago: executing program 3 (id=1303): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x7, 0x8b9, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x5000000, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x40}}]}, 0xb0}}, 0x40) 2.669999025s ago: executing program 3 (id=1305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x791db5641e51ecfe, 0x2c, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)={0x80002002}) close(0x3) close(0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) r5 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="f04e8cfe03b9988ef5ff00bc8eba26716007e97314a33f5176201b6f1047c4852a3bd38eade121099d84b482c04782c5987e5072f39a85f47b05e65dd2bb08a65299873fa6998e5cacf423346cb4c0c9e27d1afac09cdb528c09781186ffacda56653d8b2112fffed32a5de3c8600097745d2da02594447f00233174e8fb671cf808eb096ed7fd36a48f11666ddd3dec5708dc5e64c33b512e0b4d6d6c113819ebc9aa0053b40df1f98f70127ae9cee00d4d17870a578985916865186076423bc4b3bc", 0xc3}], 0x1, &(0x7f0000000880), 0x0, 0x280000c4}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="f65498b0fbf78f63781aa99f78ebaf9136234b25d5ad701f95119779e49de6cd0d810170ace7e78f3d64d2c913251788cc1851f7ffcfa52bcfe7403d961bda9dc97226816646706bfb6121d904ca51d2eea02f5ea709147a23a44803cf376375fdfc30280252de6d6699924f747307626fdea689af40fe10da314a2cec1cae37fc72c5f292c97a0f7da07e5eabbfd6d5766af3ab2eb84989639ea52c0a7b4064149725b0bda99865193740e0269f9e2f92232ef4e9619bf5e8689b26ba97f488670995", 0xc3}, {&(0x7f00000001c0)="b9e0c732cd4dfea30c739ab0db", 0xd}, {&(0x7f0000000a80)="b7a0cf5e196b410f3f893a26bbd0b29623b2c9c91a4a94c43a5207dd56acc5cf5d", 0x21}], 0x3, &(0x7f0000001c00)=[@iv={0xc0, 0x117, 0x2, 0xa8, "d2a5a143628d74d6eeede8543a63d93211cd83dd4af13b2f7e33c2ccbac57c5da5d208a1d159ccfd7ebc9ea88a5690fd24e2ce97048620f038eed2c0a7059a74a47306f2c41049d7fde9ab8921efea626778a941fe6837b3f604816e4841854aef67e6c16782b89a5aea6547b90acbeedca80825e19fa0fe0b909766d9477bdbdb2c21b593b4184b12b0e5b9a26a39666451dcde7db5daef15c974155f9c5da610d578ce3081ec59"}, @op={0x18}], 0xd8, 0x45}], 0x2, 0x24044840) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @random="000200080010", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}, {0x26, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x100, 0x1403, 0x400, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x1a, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800) recvmsg$can_raw(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r6, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) select(0x40, &(0x7f0000000000)={0x7, 0x4, 0x1, 0x6b3, 0xfffffffffffff98a, 0xffffffffffffffff, 0xb, 0x1}, &(0x7f0000000040)={0x1, 0x3, 0x9, 0x9, 0x87a4, 0x6, 0x2, 0xb11}, &(0x7f0000000080)={0x2, 0xfffffffffffffffe, 0xd1, 0x6, 0x1, 0x2, 0x5, 0x2}, &(0x7f00000000c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x1e, 0x505}, 0x10}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.160180466s ago: executing program 3 (id=1310): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/38, 0x6f, 0x22, 0x0, 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xff000000}, 0x58) 1.827432202s ago: executing program 2 (id=1311): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x3, 0x8, 0x4, 0x9, 0x4, 0x9, 0x10}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x190, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendmmsg$sock(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)='If', 0x2}, {0x0}], 0x2}}], 0x2, 0x8004) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00\x00\f\x00\x00\x00\b\x00\x00\x00\b'], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000480)=""/6, 0x2}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.753496931s ago: executing program 1 (id=1312): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 1.644536542s ago: executing program 4 (id=1313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 1.560142906s ago: executing program 1 (id=1315): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000800000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.519918436s ago: executing program 4 (id=1316): socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000120000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.428006197s ago: executing program 1 (id=1317): getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2, &(0x7f00000002c0)=""/82, 0x52}, 0x40010002) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x380, 0x470, 0x470, 0x0, 0x470, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, &(0x7f0000000380), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0xf, 0x3, 0x1, [0x3, 0x2db7, 0x1, 0x8, 0x100, 0x870, 0x4, 0x800, 0x101, 0x7, 0x2, 0x1ff, 0x0, 0x8, 0x603, 0xc], 0x10}}]}, @HL={0x28}}, {{@ipv6={@remote, @private2, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0x0, 0xffffff00, 0xff000000], 'dvmrp1\x00', 'rose0\x00', {0xff}, {0xf901323c90880f44}, 0x32, 0x3, 0x2, 0x71}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x7f, 0x9, 0xfa, 0x2, 0x900}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xffffff00, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 'syzkaller0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x87, 0xc1, 0x0, 0xc}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast2, 0x10, 0x32, 0x3}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xff, 0xffffffff], 'veth0_to_bridge\x00', 'bond_slave_0\x00', {0xff}, {}, 0x33, 0xcc, 0x3, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@rand_addr=0x64010100, 0x19, 0x17, 0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@mark={{0x30}, {0xfffffffc, 0x1000, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x74, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x66}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8004) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000c40)=0x552) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x2}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0xa}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x42, 0x1}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @float={0x7, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000f40)=""/229, 0x94, 0xe5, 0x0, 0x0, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100)={0x1, 0x0}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x7, &(0x7f0000001140)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @tail_call], &(0x7f0000001180)='GPL\x00', 0xa, 0x8, &(0x7f00000011c0)=""/8, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001240)=[0x1, r2], &(0x7f0000001280)=[{0x4, 0x4, 0xc, 0x9}, {0x1, 0x2, 0xe, 0x8}, {0x5, 0x5, 0x6, 0xb}, {0x2, 0x4, 0xb, 0x84b2fa29296fb9b4}, {0x4, 0x1, 0x1, 0x8}], 0x10, 0xffffffd3, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)='%pS \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xbf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x2, 0xa, &(0x7f0000000cc0)=@raw=[@ldst={0x0, 0x2, 0x2, 0xa, 0x9, 0x100, 0x4}, @ldst={0x3, 0x2, 0x1, 0xb, 0x1, 0x10, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xb6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000d40)='GPL\x00', 0x9, 0xd5, &(0x7f0000000d80)=""/213, 0x41000, 0x3, '\x00', 0x0, @fallback=0x9, r6, 0x8, &(0x7f0000001080)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x4, 0x3, 0x7fff}, 0x10, r7, r8, 0x9, &(0x7f0000001540)=[r9, r10, r11], &(0x7f0000001580)=[{0x1, 0x2, 0x3, 0x4}, {0x2, 0x4, 0x8, 0xb}, {0x3, 0x3, 0xc, 0x4}, {0x2, 0x2, 0x4}, {0x2, 0x5, 0xb, 0xc}, {0x1, 0x4, 0x1, 0xc}, {0x0, 0x1, 0x9}, {0x2, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x5, 0x3}], 0x10, 0x2, @void, @value}, 0x94) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, r12, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x4f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendmsg$nl_xfrm(r5, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)=@getsadinfo={0x11c, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, 0x0, [@algo_auth={0x105, 0x1, {{'streebog256\x00'}, 0x5e8, "f18a2e4553470a3384671fd9a1664aeb48d996225ad0fe2e8ec249c3c48a424434539df4ab59f22168c1a8c0b385ab4249a3d9c7336babd7c46f80e60cbe8f89850b230d4f444739db32b0e74ef76afb4d0ac63ee60cda4dbba41892c3cf35d84b0d06ecca5bd5626d471a4590aa6de1bfa6fd218befc5b76e1ec520229db3bf23efb256d84784cb967a3276831d498104bb7677d73456a39010d1ca803d5f9b6f2229955439d66bd03c59e89c221e1314fc3cd2111901f5fc904c51f1"}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000001a80), 0x169000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4ff3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x14000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x54, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xaf}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x71}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x11}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xf1c5, 0x3]}, @CTA_LABELS_MASK={0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb38}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x20400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}]}, @CTA_MARK_MASK={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40}, 0x880) r14 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r14, 0x10e, 0x4, &(0x7f0000001cc0)=0x1, 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000001d40)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000001d00), {[{{@ipv6={@mcast1, @empty, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'gre0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x6, 0x5, 0x4e}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x83a, 0x2, 0x1ff, 'pptp\x00'}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0x0, 0xff], [0xff000000, 0xff, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'caif0\x00', {0xff}, {}, 0x73, 0x2, 0x7, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5, 0x7}, {0x4, 0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r16 = openat$cgroup_ro(r5, &(0x7f0000002040)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r16, 0x80286722, &(0x7f0000002180)={&(0x7f0000002080)=""/224, 0xe0, 0x100, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000021c0)={'wlan1\x00'}) 1.380115991s ago: executing program 0 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 8) 1.212733692s ago: executing program 0 (id=1319): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x2e, 0x8, 0x70bd29, 0x25dfdbfc, {0x1f}, [@typed={0x1e, 0xb5, 0x0, 0x0, @binary="be90189031204f3eff97dca93c98f34e90d78a8e4c838ea9baa2"}, @nested={0xc, 0x96, 0x0, 0x1, [@nested={0x4, 0xb9}, @nested={0x4, 0x95}]}, @typed={0x4, 0xb2}, @nested={0x8, 0x41, 0x0, 0x1, [@nested={0x4, 0x83}]}, @generic="d938d0818c427a4550dae71fdaab67dfc489869e22a6b25230826a30b9eb238475ae91804accca52edfce348f5a90d855b1b6b46febf168dad0d7ec019896d55d2392724946e17fa19c93618574f967a6513468bd894881155b680b5c4bfd5efaa23d93e719aac6c57f0ac4b3fb66aeea125072a987ca9bbf0bcaf9bb4c011113174a89d08f3c9be"]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b922880a5327d735a75d47711ccffb8c9244c7ea0051c447f9edb924b1947dcab7c146bef1e1ed65c50d8562d9448b0f96ec12455ec7ca8eff32e07a9d1ab5880c4366b40b3e778c4974cb933c79e51e761dcc5d87dac37db0000000000000000", 0xfffffff3, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000000000000065, 0x4, 0x2, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0xd}, @mptcp=@mp_join={0x1e, 0x0, 0x8}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x5, 0x4, 0x0]}, @generic={0x5, 0x2}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86957f69a2"}]}}}}}}}, 0x0) 1.087073951s ago: executing program 3 (id=1320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.01234561s ago: executing program 0 (id=1321): unshare(0xa020480) r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000000)=[{r0, 0x6356}], 0x1, 0xff16) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xad) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x2, 0x0, 0xb}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x1b02}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) connect$packet(r2, &(0x7f0000000080)={0x11, 0x6, r5, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="11e7"], 0x32600) accept4(r0, 0x0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) unshare(0xa020480) (async) socket$inet(0x2b, 0x801, 0x0) (async) poll(&(0x7f0000000000)=[{r0, 0x6356}], 0x1, 0xff16) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xad) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x2, 0x0, 0xb}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x1b02}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async) connect$packet(r2, &(0x7f0000000080)={0x11, 0x6, r5, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="11e7"], 0x32600) (async) accept4(r0, 0x0, &(0x7f0000000100), 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) (async) 907.235845ms ago: executing program 4 (id=1322): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="da22", 0x2}, {0x0}], 0x2}}], 0x2, 0x0) 907.025368ms ago: executing program 3 (id=1323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000001c000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x20, r3}, 0x10) 828.203371ms ago: executing program 2 (id=1324): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000400000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3f}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private, @dev, 0x0}, &(0x7f00000000c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0xd5, 0xe26, 0x20, 0xffffffffffffffff, 0x5, '\x00', r4, r5, 0x0, 0x2, 0x1, 0x7, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x0) 822.355195ms ago: executing program 3 (id=1325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x2, 0x7, 0x301, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x84, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_NAT_SRC={0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x7fffffff, 0x5, 0x7, 0xd3f]}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_ROLE={0x5}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}]}}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0xd0}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xa59, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0x1, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x4d}], &(0x7f00000007c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x9, 0xfffffff7, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000880)=[{0x5, 0x5, 0x7, 0x4}, {0x5, 0x3, 0x10, 0x8}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x7, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) 712.019494ms ago: executing program 4 (id=1326): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 694.788659ms ago: executing program 0 (id=1327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0}, 0x4c) 602.608102ms ago: executing program 4 (id=1328): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x81000, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x12, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00df", 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00'}) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) 524.074406ms ago: executing program 2 (id=1329): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220180018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000005000006bf0900000000000045090100000003707b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 482.112193ms ago: executing program 0 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x24000816) 439.741187ms ago: executing program 1 (id=1331): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x2e, 0x8, 0x70bd29, 0x25dfdbfc, {0x1f}, [@typed={0x1e, 0xb5, 0x0, 0x0, @binary="be90189031204f3eff97dca93c98f34e90d78a8e4c838ea9baa2"}, @nested={0xc, 0x96, 0x0, 0x1, [@nested={0x4, 0xb9}, @nested={0x4, 0x95}]}, @typed={0x4, 0xb2}, @nested={0x8, 0x41, 0x0, 0x1, [@nested={0x4, 0x83}]}, @generic="d938d0818c427a4550dae71fdaab67dfc489869e22a6b25230826a30b9eb238475ae91804accca52edfce348f5a90d855b1b6b46febf168dad0d7ec019896d55d2392724946e17fa19c93618574f967a6513468bd894881155b680b5c4bfd5efaa23d93e719aac6c57f0ac4b3fb66aeea125072a987ca9bbf0bcaf9bb4c011113174a89d08f3c9be"]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b922880a5327d735a75d47711ccffb8c9244c7ea0051c447f9edb924b1947dcab7c146bef1e1ed65c50d8562d9448b0f96ec12455ec7ca8eff32e07a9d1ab5880c4366b40b3e778c4974cb933c79e51e761dcc5d87dac37db0000000000000000", 0xfffffff3, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xfffc, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000000000000065, 0x4, 0x2, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0xd}, @mptcp=@mp_join={0x1e, 0x0, 0x8}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x5, 0x4, 0x0]}, @generic={0x5, 0x2}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86957f69a2"}]}}}}}}}, 0x0) 365.934073ms ago: executing program 2 (id=1332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000701000000000000000220180018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b70300000000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 334.180678ms ago: executing program 0 (id=1333): unshare(0x2c020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(aes-aesni))\x00'}, 0x58) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000000)=0x1004, 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000000000010000000008001e00000400000c0012"], 0x30}}, 0x20000000) 277.301455ms ago: executing program 1 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@flushpolicy={0x10, 0x1d, 0x200, 0x70bd28, 0x255fdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 211.775977ms ago: executing program 4 (id=1335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000300000000000000000000008500000097000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) unshare(0x24060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={&(0x7f0000000680)="1a095f9a843cba799a6cf39b9925a8e3ba5336339c4b8474075cb32db5f19a49739cd5c7e553c04c65cae9c1ab6463aa2aaf4b4847c439e1ce22b9fde832ef2448ea4ac4d3d9e5dff8396054812c793e5781ce269fd760db897e29f4b90f4a4007a4c7ae5b618ae2e8b5a2697f361ac1ed6a0ae07935ec8293fdf981bef62f91a6d94697", &(0x7f0000000740)=""/176, &(0x7f00000008c0)="b21ef1323f81f22f7ebaa60ab0291997cc3eeb8e5f20f0380436532d4078d8ff0b75e37999a4f93ceeaf0367116ff157013facaf3bb21f50c2b663f0ee0b022b150e859d84e76522e02eceeb44a32c87cb2826ae94aec06b1602fc096a0c8fe8a1c233c7460b566078197a286063819d60a36a02f5cb81411a1bdc2212d286da32979af1d5e927de49b5a55db4c4f9b8593ecf20ed0871860734092f844a6a0aedf8dc9893b95dd70b7239490ae5cb897e3337832194da8ec2595a8144f047745a194d31994bb1c472", &(0x7f00000009c0)="bc94d5e47d637ae75a38c10e291a3c1089c0af2ca0f156213c3154a28676854cb391d4a77d13f72e511fc634e69246e464211f56a552c455ff42db796b864aaa3a484d7c3ae2d979dbec684f40ed04bb792062b19cb5d850165cac6a4423701b1d78e71bb1194c1b586ebd18e664dc17fd983ff18b1c0937e6ca9fceb44bfdd489885ad8aec931a71a0df388cdc0c02ff022b025b3dfa81901c7490c5619e078fc8aee1147a96234c7e5eb44f0df775a08f2a244aa2d22675d8da804483362b259428efa", 0x1, 0xffffffffffffffff, 0x4}, 0x38) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/126, 0x7e}], 0x1}, 0x1ff}], 0x1, 0x2000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c0002000900000000000000400007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018908000100ab0a53db0e4cbc28a3da3b0e1c9265edfc541f9807befb45139807ef8200907ac8919023e6979c52b74e31a7b2f7670408dd64", @ANYBLOB, @ANYRES32=r3], 0x60}}, 0x4000040) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r9) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf250300000008000100", @ANYRES32=r11, @ANYBLOB="0400f47d"], 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd8, r10, 0x11, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004040000e27f000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x30, 0x9, 0x30]}}, &(0x7f0000000200)=""/24, 0x36, 0x18, 0x1, 0x200, 0x0, @void, @value}, 0x28) 211.369255ms ago: executing program 2 (id=1336): clock_gettime(0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109c00, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44c}}, 0x0) 105.59857ms ago: executing program 2 (id=1337): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000", 0x3) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80002, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000000)={'wlan0\x00'}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x10, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x700, 0x101, 0x6}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8, 0x1, 0x401, 0x1, {{0x20, 0x4, 0x3, 0x7, 0x80, 0x67, 0x0, 0xf, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@generic={0x82, 0x5, 'CKw'}, @generic={0x7, 0x5, "66dad0"}, @ssrr={0x89, 0x13, 0x2e, [@broadcast, @rand_addr=0x64010100, @remote, @private=0xa010100]}, @timestamp_prespec={0x44, 0x44, 0x6f, 0x3, 0xa, [{@broadcast, 0x8}, {@remote, 0x8001}, {@remote, 0xe93f}, {@empty, 0x508b2e30}, {@empty, 0x1}, {@local, 0xb3c}, {@rand_addr=0x64010100, 0x9}, {@multicast1, 0x40}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'dvmrp1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24040810}, 0x80) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000006940)={@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1b}, @local, 0xeb, 0x4, 0x81, 0x100, 0x401, 0x201000a6, r10}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fddbdf25010000000c0005003f000000000000000c0002000000000000000000100007800c00018008000100", @ANYRES32=r6], 0x3c}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000010000000000000000080003400000000810001180090001006c617374000000004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003"], 0xf0}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x3, 0x20, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xfffffffffffffffe, 0x9, 0x5, 0x3, 0x4, 0x20}, 0x0, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) recvmmsg$unix(r1, &(0x7f0000006d40)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/1, 0x1}], 0x6, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000001800)=[{&(0x7f0000000740)=""/15, 0xf}, {&(0x7f0000000780)=""/78, 0x4e}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x3, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001900)=""/205, 0xcd}, {&(0x7f0000001a00)=""/179, 0xb3}, {&(0x7f0000001ac0)=""/224, 0xe0}, {&(0x7f0000001bc0)=""/105, 0x69}, {&(0x7f0000001c40)=""/135, 0x87}, {&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002e40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002f00)=""/97, 0x61}, {&(0x7f0000002f80)=""/23, 0x17}, {&(0x7f0000002fc0)=""/154, 0x9a}, {&(0x7f0000003080)=""/36, 0x24}, {&(0x7f00000030c0)=""/4, 0x4}], 0x5}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)=""/173, 0xad}, {&(0x7f00000032c0)=""/4, 0x4}, {&(0x7f0000003300)=""/205, 0xcd}, {&(0x7f0000003400)=""/106, 0x6a}, {&(0x7f0000003480)=""/62, 0x3e}], 0x5}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f00000035c0)=""/171, 0xab}, {&(0x7f0000003680)=""/253, 0xfd}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x3, &(0x7f00000047c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004900)=""/85, 0x55}, {&(0x7f0000004980)=""/155, 0x9b}, {&(0x7f0000004a40)=""/251, 0xfb}, {&(0x7f0000004b40)=""/230, 0xe6}, {&(0x7f0000004c40)=""/250, 0xfa}, {&(0x7f0000004d40)=""/243, 0xf3}, {&(0x7f0000004e40)=""/187, 0xbb}], 0x7, &(0x7f0000004f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000006380)=[{&(0x7f0000005080)=""/57, 0x39}, {&(0x7f00000050c0)=""/28, 0x1c}, {&(0x7f0000005100)=""/140, 0x8c}, {&(0x7f00000051c0)=""/164, 0xa4}, {&(0x7f0000005280)=""/114, 0x72}, {&(0x7f0000005300)=""/39, 0x27}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/22, 0x16}], 0x8, &(0x7f0000006400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000006880)=[{&(0x7f00000064c0)=""/54, 0x36}, {&(0x7f0000006500)=""/177, 0xb1}, {&(0x7f00000065c0)=""/194, 0xc2}, {&(0x7f00000066c0)=""/159, 0x9f}, {&(0x7f0000006780)=""/211, 0xd3}], 0x5, &(0x7f0000006900)}}, {{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000006900)=[{&(0x7f0000006c40)=""/170, 0xaa}], 0x1, &(0x7f0000006d00)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x40010001, &(0x7f0000006b80)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r14, 0x0, 0x4a0a, 0x0) 0s ago: executing program 1 (id=1338): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x800}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) kernel console output (not intermixed with test programs): ? __pfx_netlink_recvmsg+0x10/0x10 [ 115.431595][ T6646] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.431617][ T6646] ? aa_sock_msg_perm+0x94/0x160 [ 115.431639][ T6646] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 115.431659][ T6646] ? security_socket_recvmsg+0x7e/0x2e0 [ 115.431685][ T6646] ? __pfx_netlink_recvmsg+0x10/0x10 [ 115.431707][ T6646] sock_recvmsg+0x229/0x270 [ 115.431729][ T6646] __sys_recvfrom+0x1f6/0x340 [ 115.431754][ T6646] ? __pfx___sys_recvfrom+0x10/0x10 [ 115.431774][ T6646] ? count_memcg_event_mm+0x92/0x3b0 [ 115.431822][ T6646] ? rcu_is_watching+0x15/0xb0 [ 115.431864][ T6646] __x64_sys_recvfrom+0xde/0x100 [ 115.431893][ T6646] do_syscall_64+0xf6/0x210 [ 115.431923][ T6646] ? clear_bhb_loop+0x45/0xa0 [ 115.431947][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.431965][ T6646] RIP: 0033:0x7f1c32190734 [ 115.431981][ T6646] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 115.431997][ T6646] RSP: 002b:00007f1c2fff4ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 115.432017][ T6646] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007f1c32190734 [ 115.432031][ T6646] RDX: 0000000000001000 RSI: 00007f1c2fff4ff0 RDI: 0000000000000004 [ 115.432043][ T6646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.432054][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c32211888 [ 115.432066][ T6646] R13: 00007f1c2fff4fa0 R14: 000000000000000c R15: 0000000000000000 [ 115.432095][ T6646] [ 115.797441][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.805351][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.908626][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 115.918636][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 115.992457][ T6667] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 116.015038][ T6661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.271'. [ 116.025769][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.094855][ T6661] Cannot find add_set index 0 as target [ 116.127035][ T6661] netlink: 'syz.4.271': attribute type 25 has an invalid length. [ 116.590903][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 116.782588][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 116.868061][ T6708] netlink: 312 bytes leftover after parsing attributes in process `syz.4.288'. [ 117.063262][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 117.072503][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.327467][ T6728] ipvlan0: entered promiscuous mode [ 117.559129][ T6738] vlan4: entered promiscuous mode [ 118.105893][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 118.178041][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 119.145867][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.412645][ T6812] vlan4: entered promiscuous mode [ 119.646994][ T6830] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.781526][ T6832] team_slave_0: entered promiscuous mode [ 119.787526][ T6832] team_slave_1: entered promiscuous mode [ 119.830945][ T6832] vlan2: entered promiscuous mode [ 119.841007][ T6832] team0: entered promiscuous mode [ 120.185766][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.300019][ T6858] geneve1: entered promiscuous mode [ 120.341318][ T6857] __nla_validate_parse: 4 callbacks suppressed [ 120.341337][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 120.816889][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.849785][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.119595][ T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 121.227846][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 121.481605][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.363'. [ 121.719464][ T6917] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 121.728592][ T6916] tipc: Failed to remove unknown binding: 66,1,1/0:1329740365/1329740367 [ 121.776756][ T6917] netlink: 'syz.0.369': attribute type 2 has an invalid length. [ 121.952136][ T6926] bond0: entered promiscuous mode [ 121.970996][ T6926] bond_slave_0: entered promiscuous mode [ 121.996100][ T6926] bond_slave_1: entered promiscuous mode [ 122.265803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.998445][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 123.166180][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.174674][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.305785][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 123.637375][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.658401][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.027707][ T6942] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.037831][ T6942] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.047045][ T6942] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.060572][ T6942] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.158929][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 124.262862][ T6948] bond0: left promiscuous mode [ 124.276038][ T6948] bond_slave_0: left promiscuous mode [ 124.287982][ T6948] bond_slave_1: left promiscuous mode [ 124.294724][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.305206][ T6948] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.319786][ T6948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.343272][ T6968] vlan2: entered promiscuous mode [ 124.348484][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 124.676563][ T6985] raw_sendmsg: syz.1.390 forgot to set AF_INET. Fix it! [ 125.106830][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'. [ 125.385974][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.624879][ T7021] : renamed from bond0 (while UP) [ 125.712192][ T9] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 125.720842][ T7030] vlan2: entered promiscuous mode [ 125.836336][ T9] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 125.944024][ T7038] FAULT_INJECTION: forcing a failure. [ 125.944024][ T7038] name failslab, interval 1, probability 0, space 0, times 0 [ 125.962879][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.3.411 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 125.962917][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 125.962929][ T7038] Call Trace: [ 125.962936][ T7038] [ 125.962945][ T7038] dump_stack_lvl+0x189/0x250 [ 125.962982][ T7038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.963011][ T7038] ? __pfx__printk+0x10/0x10 [ 125.963034][ T7038] ? __pfx___might_resched+0x10/0x10 [ 125.963052][ T7038] ? fs_reclaim_acquire+0x7d/0x100 [ 125.963086][ T7038] should_fail_ex+0x414/0x560 [ 125.963123][ T7038] should_failslab+0xa8/0x100 [ 125.963151][ T7038] kmem_cache_alloc_noprof+0x73/0x3c0 [ 125.963174][ T7038] ? security_file_alloc+0x34/0x330 [ 125.963208][ T7038] security_file_alloc+0x34/0x330 [ 125.963238][ T7038] init_file+0x93/0x2f0 [ 125.963268][ T7038] alloc_empty_file+0x6e/0x1d0 [ 125.963298][ T7038] alloc_file_pseudo+0x13d/0x210 [ 125.963331][ T7038] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 125.963367][ T7038] ? alloc_fd+0x64c/0x6c0 [ 125.963397][ T7038] sock_alloc_file+0xb8/0x2e0 [ 125.963429][ T7038] ? __sys_socket+0x12c/0x1b0 [ 125.963451][ T7038] __sys_socket+0x13d/0x1b0 [ 125.963476][ T7038] __x64_sys_socket+0x7a/0x90 [ 125.963497][ T7038] do_syscall_64+0xf6/0x210 [ 125.963528][ T7038] ? clear_bhb_loop+0x45/0xa0 [ 125.963553][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.963572][ T7038] RIP: 0033:0x7f1c32190887 [ 125.963590][ T7038] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.963606][ T7038] RSP: 002b:00007f1c2fff4e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 125.963626][ T7038] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f1c32190887 [ 125.963640][ T7038] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 125.963652][ T7038] RBP: 00007f1c2fff4e70 R08: 000000000000000a R09: 0000000000000000 [ 125.963663][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 125.963675][ T7038] R13: 00007f1c2fff4fa0 R14: 00007f1c2fff4fa0 R15: 0000200000000000 [ 125.963706][ T7038] [ 126.190619][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 126.213761][ T7041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.235055][ T13] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 126.425753][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.654412][ T7027] syz.4.407 uses obsolete (PF_INET,SOCK_PACKET) [ 127.179867][ T7073] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 127.351778][ T7083] vlan2: entered promiscuous mode [ 127.465755][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.595955][ T7095] FAULT_INJECTION: forcing a failure. [ 127.595955][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 127.625301][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.2.433 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 127.625328][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 127.625339][ T7095] Call Trace: [ 127.625347][ T7095] [ 127.625356][ T7095] dump_stack_lvl+0x189/0x250 [ 127.625391][ T7095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.625420][ T7095] ? __pfx__printk+0x10/0x10 [ 127.625446][ T7095] ? ref_tracker_alloc+0x318/0x460 [ 127.625471][ T7095] should_fail_ex+0x414/0x560 [ 127.625508][ T7095] should_failslab+0xa8/0x100 [ 127.625536][ T7095] kmem_cache_alloc_noprof+0x73/0x3c0 [ 127.625569][ T7095] ? skb_clone+0x212/0x3a0 [ 127.625601][ T7095] skb_clone+0x212/0x3a0 [ 127.625631][ T7095] __netlink_deliver_tap+0x404/0x850 [ 127.625671][ T7095] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.625694][ T7095] netlink_deliver_tap+0x19c/0x1b0 [ 127.625717][ T7095] netlink_unicast+0x72f/0x8d0 [ 127.625749][ T7095] netlink_sendmsg+0x805/0xb30 [ 127.625781][ T7095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.625808][ T7095] ? aa_sock_msg_perm+0x94/0x160 [ 127.625831][ T7095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.625853][ T7095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.625877][ T7095] __sock_sendmsg+0x219/0x270 [ 127.625911][ T7095] ____sys_sendmsg+0x505/0x830 [ 127.625942][ T7095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.625978][ T7095] ? import_iovec+0x74/0xa0 [ 127.626009][ T7095] ___sys_sendmsg+0x21f/0x2a0 [ 127.626038][ T7095] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.626103][ T7095] ? __fget_files+0x2a/0x420 [ 127.626128][ T7095] ? __fget_files+0x3a0/0x420 [ 127.626165][ T7095] __x64_sys_sendmsg+0x19b/0x260 [ 127.626194][ T7095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.626238][ T7095] ? do_syscall_64+0xba/0x210 [ 127.626271][ T7095] do_syscall_64+0xf6/0x210 [ 127.626301][ T7095] ? clear_bhb_loop+0x45/0xa0 [ 127.626327][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.626346][ T7095] RIP: 0033:0x7f803ef8e969 [ 127.626364][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.626379][ T7095] RSP: 002b:00007f803fe84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.626400][ T7095] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8e969 [ 127.626414][ T7095] RDX: 0000000000040880 RSI: 0000200000000000 RDI: 0000000000000003 [ 127.626426][ T7095] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 127.626438][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.626449][ T7095] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 127.626479][ T7095] [ 127.970173][ T7095] bond0: entered promiscuous mode [ 127.986524][ T7095] bond_slave_0: entered promiscuous mode [ 127.992816][ T7095] bond_slave_1: entered promiscuous mode [ 128.112925][ T7104] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 128.262397][ T7116] FAULT_INJECTION: forcing a failure. [ 128.262397][ T7116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.283503][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.1.439 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 128.283533][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.283544][ T7116] Call Trace: [ 128.283551][ T7116] [ 128.283560][ T7116] dump_stack_lvl+0x189/0x250 [ 128.283591][ T7116] ? __lock_acquire+0xaac/0xd20 [ 128.283621][ T7116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.283649][ T7116] ? __pfx__printk+0x10/0x10 [ 128.283669][ T7116] ? __might_fault+0xb0/0x130 [ 128.283703][ T7116] should_fail_ex+0x414/0x560 [ 128.283740][ T7116] _copy_from_user+0x2d/0xb0 [ 128.283768][ T7116] __sys_bpf+0x1ed/0x860 [ 128.283799][ T7116] ? __pfx___sys_bpf+0x10/0x10 [ 128.283837][ T7116] ? ksys_write+0x1f0/0x250 [ 128.283872][ T7116] __x64_sys_bpf+0x7c/0x90 [ 128.283895][ T7116] do_syscall_64+0xf6/0x210 [ 128.283926][ T7116] ? clear_bhb_loop+0x45/0xa0 [ 128.283949][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.283968][ T7116] RIP: 0033:0x7fc64238e969 [ 128.283986][ T7116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.284002][ T7116] RSP: 002b:00007fc643202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.284023][ T7116] RAX: ffffffffffffffda RBX: 00007fc6425b5fa0 RCX: 00007fc64238e969 [ 128.284037][ T7116] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 128.284049][ T7116] RBP: 00007fc643202090 R08: 0000000000000000 R09: 0000000000000000 [ 128.284061][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.284072][ T7116] R13: 0000000000000001 R14: 00007fc6425b5fa0 R15: 00007ffd10f49c88 [ 128.284102][ T7116] [ 128.505862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.613590][ T7108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.641427][ T7125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'. [ 128.684639][ T7128] vlan2: entered promiscuous mode [ 128.695505][ T7128] bridge0: entered promiscuous mode [ 128.701385][ T7128] vlan2: entered allmulticast mode [ 128.707209][ T7128] bridge0: entered allmulticast mode [ 128.923848][ T7135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 129.303005][ T7156] vlan3: entered promiscuous mode [ 129.437547][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 129.546050][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.904285][ T7183] : entered promiscuous mode [ 129.911780][ T7183] bond_slave_0: entered promiscuous mode [ 129.926166][ T7183] bond_slave_1: entered promiscuous mode [ 129.972364][ T7190] bridge_slave_0: left allmulticast mode [ 129.991677][ T7190] bridge_slave_0: left promiscuous mode [ 130.014370][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.073962][ T7190] bridge_slave_1: left promiscuous mode [ 130.095096][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.104083][ T7194] netlink: 'syz.0.472': attribute type 2 has an invalid length. [ 130.120416][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 130.135536][ T7190] bond0: (slave bond_slave_0): Releasing backup interface [ 130.155373][ T7190] bond0: (slave bond_slave_1): Releasing backup interface [ 130.181390][ T7190] team_slave_0: left promiscuous mode [ 130.214545][ T7190] team0: Port device team_slave_0 removed [ 130.224654][ T7194] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 130.232039][ T5882] IPVS: starting estimator thread 0... [ 130.241969][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 130.243729][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.472'. [ 130.262436][ T7190] team_slave_1: left promiscuous mode [ 130.274548][ T7190] team0: Port device team_slave_1 removed [ 130.281116][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.288973][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.301466][ T7190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.309539][ T7190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.325806][ T7200] IPVS: using max 26 ests per chain, 62400 per kthread [ 130.333561][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.473'. [ 130.536042][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 130.559351][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 130.585888][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.051675][ T7223] vlan2: entered promiscuous mode [ 131.177286][ T7232] FAULT_INJECTION: forcing a failure. [ 131.177286][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 131.194151][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.1.484 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 131.194180][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 131.194193][ T7232] Call Trace: [ 131.194201][ T7232] [ 131.194210][ T7232] dump_stack_lvl+0x189/0x250 [ 131.194249][ T7232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.194279][ T7232] ? __pfx__printk+0x10/0x10 [ 131.194309][ T7232] ? __pfx___might_resched+0x10/0x10 [ 131.194329][ T7232] ? fs_reclaim_acquire+0x7d/0x100 [ 131.194363][ T7232] should_fail_ex+0x414/0x560 [ 131.194401][ T7232] should_failslab+0xa8/0x100 [ 131.194428][ T7232] __kmalloc_noprof+0xcb/0x4f0 [ 131.194452][ T7232] ? tomoyo_encode+0x28b/0x550 [ 131.194480][ T7232] tomoyo_encode+0x28b/0x550 [ 131.194510][ T7232] tomoyo_realpath_from_path+0x58d/0x5d0 [ 131.194536][ T7232] ? tomoyo_domain+0xda/0x130 [ 131.194567][ T7232] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 131.194599][ T7232] tomoyo_path_number_perm+0x1e8/0x5a0 [ 131.194633][ T7232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.194673][ T7232] ? file_init_path+0x3b/0x590 [ 131.194709][ T7232] ? __lock_acquire+0xaac/0xd20 [ 131.194757][ T7232] ? __fget_files+0x2a/0x420 [ 131.194787][ T7232] ? __fget_files+0x3a0/0x420 [ 131.194811][ T7232] ? __fget_files+0x2a/0x420 [ 131.194841][ T7232] security_file_ioctl+0xcb/0x2d0 [ 131.194873][ T7232] __se_sys_ioctl+0x47/0x170 [ 131.194896][ T7232] do_syscall_64+0xf6/0x210 [ 131.194928][ T7232] ? clear_bhb_loop+0x45/0xa0 [ 131.194953][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.194972][ T7232] RIP: 0033:0x7fc64238e56b [ 131.194989][ T7232] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 131.195005][ T7232] RSP: 002b:00007fc643200e10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.195026][ T7232] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc64238e56b [ 131.195040][ T7232] RDX: 00007fc643200e70 RSI: 0000000000008933 RDI: 0000000000000005 [ 131.195052][ T7232] RBP: 00007fc643200e70 R08: 000000000000000a R09: 0000000000000000 [ 131.195063][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 131.195112][ T7232] R13: 00007fc643200fa0 R14: 00007fc643200fa0 R15: 0000200000000000 [ 131.195148][ T7232] [ 131.195269][ T7232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.479513][ T7234] __nla_validate_parse: 1 callbacks suppressed [ 131.479533][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 131.625775][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.716800][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 131.763266][ T7243] netlink: 'syz.3.490': attribute type 11 has an invalid length. [ 131.839956][ T7243] netlink: 224 bytes leftover after parsing attributes in process `syz.3.490'. [ 132.118885][ T7258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 132.158521][ T7258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 132.183383][ T7258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 132.215812][ T7258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 132.226919][ T7258] Dead loop on virtual device ip6_vti0, fix it urgently! [ 132.751532][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.702470][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 133.705902][ C1] net_ratelimit: 3 callbacks suppressed [ 133.705921][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.369753][ T7342] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.405328][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 134.450132][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 134.504497][ T54] IPVS: starting estimator thread 0... [ 134.625840][ T7348] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.660453][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'. [ 134.745830][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.037586][ T7360] FAULT_INJECTION: forcing a failure. [ 135.037586][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 135.051795][ T7360] CPU: 0 UID: 0 PID: 7360 Comm: syz.3.533 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 135.051822][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.051834][ T7360] Call Trace: [ 135.051842][ T7360] [ 135.051850][ T7360] dump_stack_lvl+0x189/0x250 [ 135.051903][ T7360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.051931][ T7360] ? __pfx__printk+0x10/0x10 [ 135.051955][ T7360] ? __pfx___might_resched+0x10/0x10 [ 135.051971][ T7360] ? fs_reclaim_acquire+0x7d/0x100 [ 135.052005][ T7360] should_fail_ex+0x414/0x560 [ 135.052042][ T7360] should_failslab+0xa8/0x100 [ 135.052069][ T7360] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 135.052093][ T7360] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 135.052121][ T7360] ? __alloc_skb+0x112/0x2d0 [ 135.052147][ T7360] __alloc_skb+0x112/0x2d0 [ 135.052174][ T7360] rtmsg_ifinfo_build_skb+0x84/0x260 [ 135.052213][ T7360] rtnetlink_event+0x1b7/0x270 [ 135.052245][ T7360] notifier_call_chain+0x1b3/0x3e0 [ 135.052273][ T7360] netif_set_mac_address+0x37c/0x4c0 [ 135.052305][ T7360] ? __pfx_netif_set_mac_address+0x10/0x10 [ 135.052333][ T7360] ? down_write+0x162/0x1f0 [ 135.052353][ T7360] ? rcu_is_watching+0x15/0xb0 [ 135.052382][ T7360] ? trace_kmalloc+0x1f/0xd0 [ 135.052402][ T7360] ? do_setlink+0x8ee/0x40d0 [ 135.052430][ T7360] do_setlink+0x908/0x40d0 [ 135.052470][ T7360] ? __pfx_do_setlink+0x10/0x10 [ 135.052490][ T7360] ? do_raw_spin_lock+0x121/0x290 [ 135.052525][ T7360] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.052554][ T7360] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 135.052580][ T7360] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 135.052611][ T7360] ? rcu_is_watching+0x15/0xb0 [ 135.052644][ T7360] ? __mutex_lock+0xa6d/0xe80 [ 135.052674][ T7360] ? __mutex_lock+0x51b/0xe80 [ 135.052709][ T7360] ? rtnl_newlink+0x8db/0x1c70 [ 135.052732][ T7360] ? __pfx___mutex_lock+0x10/0x10 [ 135.052770][ T7360] ? ns_capable+0x8a/0xf0 [ 135.052789][ T7360] ? rtnl_link_get_net_capable+0x16a/0x350 [ 135.052816][ T7360] rtnl_newlink+0x160b/0x1c70 [ 135.052835][ T7360] ? __kasan_slab_free+0x62/0x70 [ 135.052871][ T7360] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.052939][ T7360] ? kasan_quarantine_put+0xdd/0x220 [ 135.052962][ T7360] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.053005][ T7360] ? nlmon_xmit+0xb0/0x100 [ 135.053028][ T7360] ? kmem_cache_free+0x192/0x3f0 [ 135.053060][ T7360] ? __local_bh_enable_ip+0x12d/0x1c0 [ 135.053089][ T7360] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.053117][ T7360] ? __local_bh_enable_ip+0x12d/0x1c0 [ 135.053146][ T7360] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 135.053185][ T7360] ? aa_get_newest_label+0xf7/0x5d0 [ 135.053210][ T7360] ? __lock_acquire+0xaac/0xd20 [ 135.053268][ T7360] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.053289][ T7360] rtnetlink_rcv_msg+0x7cc/0xb70 [ 135.053314][ T7360] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 135.053334][ T7360] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.053358][ T7360] ? ref_tracker_free+0x63a/0x7d0 [ 135.053377][ T7360] ? __copy_skb_header+0xa7/0x550 [ 135.053412][ T7360] netlink_rcv_skb+0x219/0x490 [ 135.053436][ T7360] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.053459][ T7360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.053503][ T7360] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.053524][ T7360] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.053553][ T7360] netlink_unicast+0x758/0x8d0 [ 135.053584][ T7360] netlink_sendmsg+0x805/0xb30 [ 135.053618][ T7360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.053645][ T7360] ? aa_sock_msg_perm+0x94/0x160 [ 135.053668][ T7360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.053690][ T7360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.053714][ T7360] __sock_sendmsg+0x219/0x270 [ 135.053749][ T7360] ____sys_sendmsg+0x505/0x830 [ 135.053782][ T7360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.053817][ T7360] ? import_iovec+0x74/0xa0 [ 135.053848][ T7360] ___sys_sendmsg+0x21f/0x2a0 [ 135.053877][ T7360] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.053942][ T7360] ? __fget_files+0x2a/0x420 [ 135.053967][ T7360] ? __fget_files+0x3a0/0x420 [ 135.054005][ T7360] __x64_sys_sendmsg+0x19b/0x260 [ 135.054034][ T7360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.054080][ T7360] ? do_syscall_64+0xba/0x210 [ 135.054114][ T7360] do_syscall_64+0xf6/0x210 [ 135.054144][ T7360] ? clear_bhb_loop+0x45/0xa0 [ 135.054169][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.054188][ T7360] RIP: 0033:0x7f1c3218e969 [ 135.054205][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.054222][ T7360] RSP: 002b:00007f1c2fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.054252][ T7360] RAX: ffffffffffffffda RBX: 00007f1c323b5fa0 RCX: 00007f1c3218e969 [ 135.054266][ T7360] RDX: 0000000000040880 RSI: 0000200000000000 RDI: 0000000000000003 [ 135.054279][ T7360] RBP: 00007f1c2fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.054290][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.054302][ T7360] R13: 0000000000000000 R14: 00007f1c323b5fa0 R15: 00007fff9f917ac8 [ 135.054334][ T7360] [ 135.121598][ T3517] IPVS: stop unused estimator thread 0... [ 135.646893][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 135.719498][ T7371] No such timeout policy "syz1" [ 135.785956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 136.119806][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.542'. [ 136.825882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.064427][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 137.380273][ T7417] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 137.866018][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.091265][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.566'. [ 138.391053][ T7441] syzkaller0: entered promiscuous mode [ 138.396698][ T7441] syzkaller0: entered allmulticast mode [ 138.414326][ T7445] bond0: entered promiscuous mode [ 138.419548][ T7445] bond_slave_0: entered promiscuous mode [ 138.425485][ T7445] bond_slave_1: entered promiscuous mode [ 138.908852][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.175111][ T7457] ipt_ECN: cannot use operation on non-tcp rule [ 139.945766][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.590372][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 140.781876][ T7484] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.985834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.197659][ T7498] vlan2: entered promiscuous mode [ 141.207617][ T7498] bridge0: entered promiscuous mode [ 141.213214][ T7498] vlan2: entered allmulticast mode [ 141.223095][ T7498] bridge0: entered allmulticast mode [ 141.797948][ T7521] netlink: 14 bytes leftover after parsing attributes in process `syz.0.598'. [ 142.025885][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.069090][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 142.350432][ T7533] sctp: [Deprecated]: syz.1.604 (pid 7533) Use of int in max_burst socket option. [ 142.350432][ T7533] Use struct sctp_assoc_value instead [ 142.465794][ T30] audit: type=1107 audit(1746215277.826:2): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='͘µ·7·À%°mÐ’ [ 142.465794][ T30] A‚Ãñ!3¾' [ 143.065835][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.414358][ T7569] FAULT_INJECTION: forcing a failure. [ 143.414358][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.452897][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.2.618 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 143.452926][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 143.452938][ T7569] Call Trace: [ 143.452945][ T7569] [ 143.452954][ T7569] dump_stack_lvl+0x189/0x250 [ 143.452985][ T7569] ? __lock_acquire+0xaac/0xd20 [ 143.453015][ T7569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.453042][ T7569] ? __pfx__printk+0x10/0x10 [ 143.453061][ T7569] ? __might_fault+0xb0/0x130 [ 143.453097][ T7569] should_fail_ex+0x414/0x560 [ 143.453133][ T7569] _copy_from_user+0x2d/0xb0 [ 143.453160][ T7569] __sys_bind+0x199/0x3e0 [ 143.453184][ T7569] ? __pfx___sys_bind+0x10/0x10 [ 143.453235][ T7569] __x64_sys_bind+0x7a/0x90 [ 143.453256][ T7569] do_syscall_64+0xf6/0x210 [ 143.453287][ T7569] ? clear_bhb_loop+0x45/0xa0 [ 143.453311][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.453329][ T7569] RIP: 0033:0x7f803ef8e969 [ 143.453346][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.453362][ T7569] RSP: 002b:00007f803fe84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 143.453383][ T7569] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8e969 [ 143.453397][ T7569] RDX: 0000000000000058 RSI: 00002000000003c0 RDI: 0000000000000003 [ 143.453409][ T7569] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 143.453421][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.453432][ T7569] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 143.453462][ T7569] [ 143.896648][ T7578] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 144.041188][ T7582] syzkaller1: entered promiscuous mode [ 144.080061][ T7582] syzkaller1: entered allmulticast mode [ 144.105749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.168592][ T7588] FAULT_INJECTION: forcing a failure. [ 144.168592][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.219584][ T7588] CPU: 1 UID: 0 PID: 7588 Comm: syz.2.628 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 144.219614][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 144.219626][ T7588] Call Trace: [ 144.219635][ T7588] [ 144.219644][ T7588] dump_stack_lvl+0x189/0x250 [ 144.219682][ T7588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.219711][ T7588] ? __pfx__printk+0x10/0x10 [ 144.219744][ T7588] should_fail_ex+0x414/0x560 [ 144.219782][ T7588] _copy_to_user+0x31/0xb0 [ 144.219812][ T7588] simple_read_from_buffer+0xe1/0x170 [ 144.219842][ T7588] proc_fail_nth_read+0x1df/0x250 [ 144.219873][ T7588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.219905][ T7588] ? rw_verify_area+0x258/0x650 [ 144.219925][ T7588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.219955][ T7588] vfs_read+0x1fd/0x980 [ 144.219982][ T7588] ? __pfx___mutex_lock+0x10/0x10 [ 144.220013][ T7588] ? __pfx_vfs_read+0x10/0x10 [ 144.220037][ T7588] ? __fget_files+0x2a/0x420 [ 144.220067][ T7588] ? __fget_files+0x3a0/0x420 [ 144.220091][ T7588] ? __fget_files+0x2a/0x420 [ 144.220126][ T7588] ksys_read+0x145/0x250 [ 144.220147][ T7588] ? rcu_is_watching+0x15/0xb0 [ 144.220179][ T7588] ? __pfx_ksys_read+0x10/0x10 [ 144.220205][ T7588] ? do_syscall_64+0xba/0x210 [ 144.220239][ T7588] do_syscall_64+0xf6/0x210 [ 144.220270][ T7588] ? clear_bhb_loop+0x45/0xa0 [ 144.220294][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.220313][ T7588] RIP: 0033:0x7f803ef8d37c [ 144.220331][ T7588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.220347][ T7588] RSP: 002b:00007f803fe84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.220381][ T7588] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8d37c [ 144.220395][ T7588] RDX: 000000000000000f RSI: 00007f803fe840a0 RDI: 0000000000000004 [ 144.220407][ T7588] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 144.220419][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.220430][ T7588] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 144.220461][ T7588] [ 144.715641][ T7595] netlink: 272 bytes leftover after parsing attributes in process `syz.2.633'. [ 145.145875][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.171074][ T7613] vlan4: entered promiscuous mode [ 146.185976][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.373064][ T7650] FAULT_INJECTION: forcing a failure. [ 146.373064][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 146.406532][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.2.656 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 146.406562][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 146.406574][ T7650] Call Trace: [ 146.406582][ T7650] [ 146.406591][ T7650] dump_stack_lvl+0x189/0x250 [ 146.406627][ T7650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.406656][ T7650] ? __pfx__printk+0x10/0x10 [ 146.406678][ T7650] ? __pfx___might_resched+0x10/0x10 [ 146.406696][ T7650] ? fs_reclaim_acquire+0x7d/0x100 [ 146.406730][ T7650] should_fail_ex+0x414/0x560 [ 146.406767][ T7650] should_failslab+0xa8/0x100 [ 146.406794][ T7650] __kmalloc_node_noprof+0xd1/0x4e0 [ 146.406823][ T7650] ? crypto_create_tfm_node+0x83/0x3e0 [ 146.406856][ T7650] crypto_create_tfm_node+0x83/0x3e0 [ 146.406889][ T7650] crypto_alloc_tfm_node+0x172/0x3f0 [ 146.406927][ T7650] alg_bind+0x2f7/0x570 [ 146.406965][ T7650] __sys_bind+0x2c3/0x3e0 [ 146.406989][ T7650] ? __pfx___sys_bind+0x10/0x10 [ 146.407032][ T7650] __x64_sys_bind+0x7a/0x90 [ 146.407053][ T7650] do_syscall_64+0xf6/0x210 [ 146.407085][ T7650] ? clear_bhb_loop+0x45/0xa0 [ 146.407109][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.407127][ T7650] RIP: 0033:0x7f803ef8e969 [ 146.407144][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.407159][ T7650] RSP: 002b:00007f803fe84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 146.407180][ T7650] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8e969 [ 146.407194][ T7650] RDX: 0000000000000058 RSI: 00002000000003c0 RDI: 0000000000000003 [ 146.407206][ T7650] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 146.407218][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.407235][ T7650] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 146.407265][ T7650] [ 146.878273][ T7664] FAULT_INJECTION: forcing a failure. [ 146.878273][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 146.935981][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.1.662 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 146.936009][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 146.936021][ T7664] Call Trace: [ 146.936029][ T7664] [ 146.936037][ T7664] dump_stack_lvl+0x189/0x250 [ 146.936074][ T7664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.936103][ T7664] ? __pfx__printk+0x10/0x10 [ 146.936128][ T7664] ? __pfx___might_resched+0x10/0x10 [ 146.936151][ T7664] should_fail_ex+0x414/0x560 [ 146.936189][ T7664] should_failslab+0xa8/0x100 [ 146.936217][ T7664] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 146.936243][ T7664] ? __alloc_skb+0x112/0x2d0 [ 146.936270][ T7664] __alloc_skb+0x112/0x2d0 [ 146.936295][ T7664] netlink_sendmsg+0x5c6/0xb30 [ 146.936329][ T7664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.936355][ T7664] ? aa_sock_msg_perm+0x94/0x160 [ 146.936377][ T7664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.936398][ T7664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.936422][ T7664] __sock_sendmsg+0x219/0x270 [ 146.936457][ T7664] __sys_sendto+0x3bd/0x520 [ 146.936482][ T7664] ? __pfx___sys_sendto+0x10/0x10 [ 146.936517][ T7664] ? fput_close_sync+0x119/0x200 [ 146.936558][ T7664] ? dnotify_flush+0x1db/0x5e0 [ 146.936584][ T7664] ? __pfx_fput_close_sync+0x10/0x10 [ 146.936621][ T7664] __x64_sys_sendto+0xde/0x100 [ 146.936648][ T7664] do_syscall_64+0xf6/0x210 [ 146.936679][ T7664] ? clear_bhb_loop+0x45/0xa0 [ 146.936704][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.936723][ T7664] RIP: 0033:0x7fc6423907fc [ 146.936740][ T7664] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 146.936755][ T7664] RSP: 002b:00007fc643200e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 146.936776][ T7664] RAX: ffffffffffffffda RBX: 00007fc643200fa0 RCX: 00007fc6423907fc [ 146.936790][ T7664] RDX: 0000000000000024 RSI: 00007fc643200ff0 RDI: 0000000000000004 [ 146.936802][ T7664] RBP: 0000000000000000 R08: 00007fc643200e74 R09: 000000000000000c [ 146.936821][ T7664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 146.936832][ T7664] R13: 0000000000000000 R14: 00007fc643200ff0 R15: 0000000000000000 [ 146.936860][ T7664] [ 147.225845][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.750146][ T7687] netlink: 168 bytes leftover after parsing attributes in process `syz.0.672'. [ 148.265753][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.305796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.354243][ T7718] vlan2: entered promiscuous mode [ 149.468451][ T7720] Bluetooth: MGMT ver 1.23 [ 149.517668][ T7728] netlink: 88 bytes leftover after parsing attributes in process `syz.3.684'. [ 149.527601][ T7720] tipc: Started in network mode [ 149.532515][ T7720] tipc: Node identity 668f374b9b1c, cluster identity 4711 [ 149.558312][ T7720] tipc: Enabled bearer , priority 0 [ 149.702842][ T7736] FAULT_INJECTION: forcing a failure. [ 149.702842][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.738039][ T7720] syzkaller0: entered promiscuous mode [ 149.743745][ T7720] syzkaller0: entered allmulticast mode [ 149.751228][ T7720] tipc: Resetting bearer [ 149.758931][ T7736] CPU: 1 UID: 0 PID: 7736 Comm: syz.2.690 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 149.758965][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.758977][ T7736] Call Trace: [ 149.758985][ T7736] [ 149.758993][ T7736] dump_stack_lvl+0x189/0x250 [ 149.759024][ T7736] ? __lock_acquire+0xaac/0xd20 [ 149.759054][ T7736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.759083][ T7736] ? __pfx__printk+0x10/0x10 [ 149.759103][ T7736] ? __might_fault+0xb0/0x130 [ 149.759140][ T7736] should_fail_ex+0x414/0x560 [ 149.759177][ T7736] _copy_from_iter+0x1db/0x15a0 [ 149.759209][ T7736] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 149.759231][ T7736] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 149.759272][ T7736] ? __pfx__copy_from_iter+0x10/0x10 [ 149.759298][ T7736] ? __build_skb_around+0x257/0x3e0 [ 149.759326][ T7736] ? netlink_sendmsg+0x642/0xb30 [ 149.759347][ T7736] ? skb_put+0x11b/0x210 [ 149.759375][ T7736] netlink_sendmsg+0x6b2/0xb30 [ 149.759407][ T7736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.759434][ T7736] ? aa_sock_msg_perm+0x94/0x160 [ 149.759458][ T7736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.759480][ T7736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.759503][ T7736] __sock_sendmsg+0x219/0x270 [ 149.759537][ T7736] __sys_sendto+0x3bd/0x520 [ 149.759562][ T7736] ? __pfx___sys_sendto+0x10/0x10 [ 149.759599][ T7736] ? fput_close_sync+0x119/0x200 [ 149.759640][ T7736] ? dnotify_flush+0x1db/0x5e0 [ 149.759667][ T7736] ? __pfx_fput_close_sync+0x10/0x10 [ 149.759705][ T7736] __x64_sys_sendto+0xde/0x100 [ 149.759731][ T7736] do_syscall_64+0xf6/0x210 [ 149.759761][ T7736] ? clear_bhb_loop+0x45/0xa0 [ 149.759785][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.759804][ T7736] RIP: 0033:0x7f803ef907fc [ 149.759820][ T7736] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 149.759835][ T7736] RSP: 002b:00007f803fe82e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 149.759855][ T7736] RAX: ffffffffffffffda RBX: 00007f803fe82fa0 RCX: 00007f803ef907fc [ 149.759869][ T7736] RDX: 0000000000000024 RSI: 00007f803fe82ff0 RDI: 0000000000000004 [ 149.759881][ T7736] RBP: 0000000000000000 R08: 00007f803fe82e74 R09: 000000000000000c [ 149.759892][ T7736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 149.759903][ T7736] R13: 0000000000000000 R14: 00007f803fe82ff0 R15: 0000000000000000 [ 149.759939][ T7736] [ 150.162631][ T13] tipc: Resetting bearer [ 150.251330][ T7719] tipc: Resetting bearer [ 150.345836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.656503][ T7769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.677595][ T5882] tipc: Node number set to 4254283595 [ 151.147919][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 151.386307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.255624][ T7719] tipc: Disabling bearer [ 152.425941][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.565750][ T7794] $Hÿ: renamed from bond0 [ 153.465794][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.563700][ T7827] $Hÿ: renamed from bond0 (while UP) [ 153.591317][ T7827] $Hÿ: entered promiscuous mode [ 153.621585][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 154.324947][ T7854] netlink: 'syz.0.731': attribute type 4 has an invalid length. [ 154.383726][ T7857] netlink: 'syz.0.731': attribute type 4 has an invalid length. [ 154.508061][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.704515][ T7870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.738'. [ 155.545743][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.081213][ T7889] netlink: 272 bytes leftover after parsing attributes in process `syz.4.744'. [ 156.288303][ T7754] syz.3.694 (7754) used greatest stack depth: 19656 bytes left [ 156.585757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.705990][ T7909] netlink: 14 bytes leftover after parsing attributes in process `syz.3.751'. [ 156.994773][ T7924] netlink: 52 bytes leftover after parsing attributes in process `syz.1.755'. [ 157.184842][ T7930] batman_adv: batadv0: Adding interface: dummy0 [ 157.191401][ T7930] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.233084][ T7930] batman_adv: batadv0: Interface activated: dummy0 [ 157.396207][ T7937] FAULT_INJECTION: forcing a failure. [ 157.396207][ T7937] name failslab, interval 1, probability 0, space 0, times 0 [ 157.413687][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.2.763 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 157.413715][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.413725][ T7937] Call Trace: [ 157.413733][ T7937] [ 157.413743][ T7937] dump_stack_lvl+0x189/0x250 [ 157.413780][ T7937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.413809][ T7937] ? __pfx__printk+0x10/0x10 [ 157.413831][ T7937] ? __pfx___might_resched+0x10/0x10 [ 157.413851][ T7937] ? fs_reclaim_acquire+0x7d/0x100 [ 157.413887][ T7937] should_fail_ex+0x414/0x560 [ 157.413925][ T7937] should_failslab+0xa8/0x100 [ 157.413952][ T7937] __kmalloc_noprof+0xcb/0x4f0 [ 157.413975][ T7937] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.414001][ T7937] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.414045][ T7937] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 157.414083][ T7937] genl_family_rcv_msg_doit+0xb8/0x300 [ 157.414119][ T7937] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.414150][ T7937] ? rcu_is_watching+0x15/0xb0 [ 157.414183][ T7937] ? apparmor_capable+0x137/0x1b0 [ 157.414212][ T7937] ? bpf_lsm_capable+0x9/0x20 [ 157.414238][ T7937] ? security_capable+0x7e/0x2e0 [ 157.414266][ T7937] genl_rcv_msg+0x60e/0x790 [ 157.414301][ T7937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.414327][ T7937] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 157.414352][ T7937] ? __pfx_nl80211_set_interface+0x10/0x10 [ 157.414378][ T7937] ? __pfx_nl80211_post_doit+0x10/0x10 [ 157.414406][ T7937] ? ref_tracker_free+0x63a/0x7d0 [ 157.414431][ T7937] ? __copy_skb_header+0xa7/0x550 [ 157.414467][ T7937] netlink_rcv_skb+0x219/0x490 [ 157.414491][ T7937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.414520][ T7937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.414568][ T7937] ? down_read+0x1ad/0x2e0 [ 157.414589][ T7937] genl_rcv+0x28/0x40 [ 157.414615][ T7937] netlink_unicast+0x758/0x8d0 [ 157.414647][ T7937] netlink_sendmsg+0x805/0xb30 [ 157.414680][ T7937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.414706][ T7937] ? aa_sock_msg_perm+0x94/0x160 [ 157.414729][ T7937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.414750][ T7937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.414774][ T7937] __sock_sendmsg+0x219/0x270 [ 157.414809][ T7937] __sys_sendto+0x3bd/0x520 [ 157.414835][ T7937] ? __pfx___sys_sendto+0x10/0x10 [ 157.414873][ T7937] ? fput_close_sync+0x119/0x200 [ 157.414914][ T7937] ? dnotify_flush+0x1db/0x5e0 [ 157.414942][ T7937] ? __pfx_fput_close_sync+0x10/0x10 [ 157.414980][ T7937] __x64_sys_sendto+0xde/0x100 [ 157.415007][ T7937] do_syscall_64+0xf6/0x210 [ 157.415044][ T7937] ? clear_bhb_loop+0x45/0xa0 [ 157.415068][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.415087][ T7937] RIP: 0033:0x7f803ef907fc [ 157.415106][ T7937] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 157.415122][ T7937] RSP: 002b:00007f803fe82e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 157.415143][ T7937] RAX: ffffffffffffffda RBX: 00007f803fe82fa0 RCX: 00007f803ef907fc [ 157.415157][ T7937] RDX: 0000000000000024 RSI: 00007f803fe82ff0 RDI: 0000000000000004 [ 157.415169][ T7937] RBP: 0000000000000000 R08: 00007f803fe82e74 R09: 000000000000000c [ 157.415181][ T7937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 157.415192][ T7937] R13: 0000000000000000 R14: 00007f803fe82ff0 R15: 0000000000000000 [ 157.415222][ T7937] [ 157.625800][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.257861][ T7950] netlink: 277 bytes leftover after parsing attributes in process `syz.3.768'. [ 158.428991][ T7959] netlink: 'syz.2.770': attribute type 27 has an invalid length. [ 158.665751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.308037][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 159.422403][ T7984] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 159.487289][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 159.656375][ T7973] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 159.705804][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.377735][ T8025] FAULT_INJECTION: forcing a failure. [ 160.377735][ T8025] name failslab, interval 1, probability 0, space 0, times 0 [ 160.434215][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.2.787 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 160.434244][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.434255][ T8025] Call Trace: [ 160.434263][ T8025] [ 160.434271][ T8025] dump_stack_lvl+0x189/0x250 [ 160.434310][ T8025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.434339][ T8025] ? __pfx__printk+0x10/0x10 [ 160.434371][ T8025] ? __pfx___might_resched+0x10/0x10 [ 160.434389][ T8025] ? fs_reclaim_acquire+0x7d/0x100 [ 160.434424][ T8025] should_fail_ex+0x414/0x560 [ 160.434462][ T8025] should_failslab+0xa8/0x100 [ 160.434490][ T8025] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 160.434515][ T8025] ? __d_alloc+0x31/0x6f0 [ 160.434550][ T8025] __d_alloc+0x31/0x6f0 [ 160.434586][ T8025] d_alloc_parallel+0xe0/0x14e0 [ 160.434610][ T8025] ? stack_trace_save+0x9c/0xe0 [ 160.434635][ T8025] ? stack_depot_save_flags+0x40/0x910 [ 160.434667][ T8025] ? __pfx_d_alloc_parallel+0x10/0x10 [ 160.434692][ T8025] ? __raw_spin_lock_init+0x45/0x100 [ 160.434717][ T8025] ? __init_waitqueue_head+0xa9/0x150 [ 160.434746][ T8025] __lookup_slow+0x116/0x3d0 [ 160.434780][ T8025] ? __pfx___lookup_slow+0x10/0x10 [ 160.434842][ T8025] lookup_one_len+0x1aa/0x310 [ 160.434876][ T8025] ? __pfx_lookup_one_len+0x10/0x10 [ 160.434907][ T8025] ? mntput+0x65/0xc0 [ 160.434934][ T8025] start_creating+0x18d/0x310 [ 160.434960][ T8025] debugfs_create_dir+0x28/0x420 [ 160.434986][ T8025] ieee80211_debugfs_recreate_netdev+0x1a6/0x1460 [ 160.435026][ T8025] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 160.435058][ T8025] ? ieee80211_set_default_queues+0x4a0/0x4f0 [ 160.435103][ T8025] ieee80211_if_change_type+0x53a/0x990 [ 160.435143][ T8025] ieee80211_change_iface+0xd5/0x510 [ 160.435178][ T8025] cfg80211_change_iface+0x792/0xef0 [ 160.435215][ T8025] nl80211_set_interface+0x773/0xaa0 [ 160.435256][ T8025] ? __pfx_nl80211_set_interface+0x10/0x10 [ 160.435290][ T8025] ? nl80211_pre_doit+0x4fb/0x930 [ 160.435325][ T8025] genl_family_rcv_msg_doit+0x212/0x300 [ 160.435363][ T8025] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 160.435407][ T8025] ? bpf_lsm_capable+0x9/0x20 [ 160.435434][ T8025] ? security_capable+0x7e/0x2e0 [ 160.435462][ T8025] genl_rcv_msg+0x60e/0x790 [ 160.435498][ T8025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.435524][ T8025] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 160.435548][ T8025] ? __pfx_nl80211_set_interface+0x10/0x10 [ 160.435574][ T8025] ? __pfx_nl80211_post_doit+0x10/0x10 [ 160.435602][ T8025] ? ref_tracker_free+0x63a/0x7d0 [ 160.435620][ T8025] ? __copy_skb_header+0xa7/0x550 [ 160.435659][ T8025] netlink_rcv_skb+0x219/0x490 [ 160.435681][ T8025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.435710][ T8025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.435761][ T8025] ? down_read+0x1ad/0x2e0 [ 160.435783][ T8025] genl_rcv+0x28/0x40 [ 160.435815][ T8025] netlink_unicast+0x758/0x8d0 [ 160.435849][ T8025] netlink_sendmsg+0x805/0xb30 [ 160.435884][ T8025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.435911][ T8025] ? aa_sock_msg_perm+0x94/0x160 [ 160.435935][ T8025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.435957][ T8025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.435981][ T8025] __sock_sendmsg+0x219/0x270 [ 160.436016][ T8025] __sys_sendto+0x3bd/0x520 [ 160.436043][ T8025] ? __pfx___sys_sendto+0x10/0x10 [ 160.436082][ T8025] ? fput_close_sync+0x119/0x200 [ 160.436123][ T8025] ? dnotify_flush+0x1db/0x5e0 [ 160.436150][ T8025] ? __pfx_fput_close_sync+0x10/0x10 [ 160.436188][ T8025] __x64_sys_sendto+0xde/0x100 [ 160.436216][ T8025] do_syscall_64+0xf6/0x210 [ 160.436248][ T8025] ? clear_bhb_loop+0x45/0xa0 [ 160.436273][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.436291][ T8025] RIP: 0033:0x7f803ef907fc [ 160.436309][ T8025] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 160.436325][ T8025] RSP: 002b:00007f803fe82e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 160.436345][ T8025] RAX: ffffffffffffffda RBX: 00007f803fe82fa0 RCX: 00007f803ef907fc [ 160.436359][ T8025] RDX: 0000000000000024 RSI: 00007f803fe82ff0 RDI: 0000000000000004 [ 160.436370][ T8025] RBP: 0000000000000000 R08: 00007f803fe82e74 R09: 000000000000000c [ 160.436381][ T8025] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 160.436392][ T8025] R13: 0000000000000000 R14: 00007f803fe82ff0 R15: 0000000000000000 [ 160.436424][ T8025] [ 160.864911][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.979108][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.049412][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.426947][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 161.865862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.320690][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 162.437472][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 162.462949][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 162.582924][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 162.905902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.418468][ T8122] vlan0: entered promiscuous mode [ 163.945743][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.994169][ T8133] netlink: 'syz.3.822': attribute type 4 has an invalid length. [ 164.142640][ T8137] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 164.166769][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 164.193031][ T8137] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 164.281773][ T8142] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 164.699565][ T8156] netlink: 7 bytes leftover after parsing attributes in process `syz.3.830'. [ 164.985739][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.587962][ T8194] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 165.763671][ T8198] veth1_to_bond: entered allmulticast mode [ 165.772217][ T8194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.819386][ T8193] veth1_to_bond: left allmulticast mode [ 166.026102][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.461221][ T8216] macvlan1: entered promiscuous mode [ 166.507279][ T8216] ipvlan0: entered promiscuous mode [ 166.514465][ T8216] ipvlan0: left promiscuous mode [ 166.640935][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.851'. [ 166.856257][ T8216] macvlan1: left promiscuous mode [ 167.065751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.707260][ T8256] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 167.879093][ T8261] bpq0: entered allmulticast mode [ 168.088953][ T8267] FAULT_INJECTION: forcing a failure. [ 168.088953][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 168.105731][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.139304][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.0.871 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 168.139333][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.139448][ T8267] Call Trace: [ 168.139459][ T8267] [ 168.139469][ T8267] dump_stack_lvl+0x189/0x250 [ 168.139515][ T8267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.139546][ T8267] ? __pfx__printk+0x10/0x10 [ 168.139574][ T8267] ? __pfx___might_resched+0x10/0x10 [ 168.139592][ T8267] ? fs_reclaim_acquire+0x7d/0x100 [ 168.139627][ T8267] should_fail_ex+0x414/0x560 [ 168.139665][ T8267] should_failslab+0xa8/0x100 [ 168.139693][ T8267] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 168.139716][ T8267] ? __d_alloc+0x31/0x6f0 [ 168.139750][ T8267] __d_alloc+0x31/0x6f0 [ 168.139786][ T8267] d_alloc_parallel+0xe0/0x14e0 [ 168.139803][ T8267] ? kasan_save_track+0x4f/0x80 [ 168.139822][ T8267] ? kasan_save_track+0x3e/0x80 [ 168.139841][ T8267] ? __kasan_slab_alloc+0x6c/0x80 [ 168.139861][ T8267] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 168.139882][ T8267] ? security_inode_alloc+0x39/0x330 [ 168.139904][ T8267] ? inode_init_always_gfp+0x9ed/0xdc0 [ 168.139925][ T8267] ? alloc_inode+0x82/0x1b0 [ 168.139952][ T8267] ? __lock_acquire+0xaac/0xd20 [ 168.139989][ T8267] ? __pfx_d_alloc_parallel+0x10/0x10 [ 168.140013][ T8267] ? __raw_spin_lock_init+0x45/0x100 [ 168.140037][ T8267] ? __init_waitqueue_head+0xa9/0x150 [ 168.140066][ T8267] __lookup_slow+0x116/0x3d0 [ 168.140099][ T8267] ? __pfx___lookup_slow+0x10/0x10 [ 168.140152][ T8267] lookup_one_len+0x1aa/0x310 [ 168.140186][ T8267] ? __pfx_lookup_one_len+0x10/0x10 [ 168.140216][ T8267] ? mntput+0x65/0xc0 [ 168.140242][ T8267] start_creating+0x18d/0x310 [ 168.140267][ T8267] debugfs_create_dir+0x28/0x420 [ 168.140293][ T8267] ieee80211_debugfs_recreate_netdev+0x1fe/0x1460 [ 168.140332][ T8267] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 168.140365][ T8267] ? ieee80211_set_default_queues+0x4a0/0x4f0 [ 168.140408][ T8267] ieee80211_if_change_type+0x53a/0x990 [ 168.140456][ T8267] ieee80211_change_iface+0xd5/0x510 [ 168.140491][ T8267] cfg80211_change_iface+0x792/0xef0 [ 168.140527][ T8267] nl80211_set_interface+0x773/0xaa0 [ 168.140567][ T8267] ? __pfx_nl80211_set_interface+0x10/0x10 [ 168.140600][ T8267] ? nl80211_pre_doit+0x4fb/0x930 [ 168.140634][ T8267] genl_family_rcv_msg_doit+0x212/0x300 [ 168.140671][ T8267] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.140715][ T8267] ? bpf_lsm_capable+0x9/0x20 [ 168.140741][ T8267] ? security_capable+0x7e/0x2e0 [ 168.140767][ T8267] genl_rcv_msg+0x60e/0x790 [ 168.140803][ T8267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.140828][ T8267] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.140852][ T8267] ? __pfx_nl80211_set_interface+0x10/0x10 [ 168.140878][ T8267] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.140905][ T8267] ? ref_tracker_free+0x63a/0x7d0 [ 168.140923][ T8267] ? __copy_skb_header+0xa7/0x550 [ 168.140961][ T8267] netlink_rcv_skb+0x219/0x490 [ 168.140983][ T8267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.141012][ T8267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.141061][ T8267] ? down_read+0x1ad/0x2e0 [ 168.141083][ T8267] genl_rcv+0x28/0x40 [ 168.141108][ T8267] netlink_unicast+0x758/0x8d0 [ 168.141140][ T8267] netlink_sendmsg+0x805/0xb30 [ 168.141174][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.141200][ T8267] ? aa_sock_msg_perm+0x94/0x160 [ 168.141224][ T8267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.141245][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.141268][ T8267] __sock_sendmsg+0x219/0x270 [ 168.141302][ T8267] __sys_sendto+0x3bd/0x520 [ 168.141328][ T8267] ? __pfx___sys_sendto+0x10/0x10 [ 168.141367][ T8267] ? fput_close_sync+0x119/0x200 [ 168.141408][ T8267] ? dnotify_flush+0x1db/0x5e0 [ 168.141441][ T8267] ? __pfx_fput_close_sync+0x10/0x10 [ 168.141479][ T8267] __x64_sys_sendto+0xde/0x100 [ 168.141506][ T8267] do_syscall_64+0xf6/0x210 [ 168.141537][ T8267] ? clear_bhb_loop+0x45/0xa0 [ 168.141561][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.141579][ T8267] RIP: 0033:0x7f4981f907fc [ 168.141597][ T8267] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 168.141613][ T8267] RSP: 002b:00007f4982e48e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 168.141635][ T8267] RAX: ffffffffffffffda RBX: 00007f4982e48fa0 RCX: 00007f4981f907fc [ 168.141648][ T8267] RDX: 0000000000000024 RSI: 00007f4982e48ff0 RDI: 0000000000000004 [ 168.141660][ T8267] RBP: 0000000000000000 R08: 00007f4982e48e74 R09: 000000000000000c [ 168.141672][ T8267] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 168.141684][ T8267] R13: 0000000000000000 R14: 00007f4982e48ff0 R15: 0000000000000000 [ 168.141716][ T8267] [ 168.612906][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.621237][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.047767][ T8283] vlan0: entered promiscuous mode [ 169.071643][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 169.145734][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.164747][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.881'. [ 169.393831][ T8291] IPv4: Oversized IP packet from 127.202.26.0 [ 169.767962][ T8308] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 170.185902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.232872][ T8332] !: renamed from dummy0 (while UP) [ 171.225738][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.244395][ T8411] vlan0: entered promiscuous mode [ 172.265727][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.586306][ T5139] Bluetooth: hci4: command 0x0405 tx timeout [ 173.305745][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.389033][ T8458] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 173.450203][ T8458] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 173.503687][ T8461] netlink: 60 bytes leftover after parsing attributes in process `syz.1.927'. [ 173.763149][ T8476] FAULT_INJECTION: forcing a failure. [ 173.763149][ T8476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.831900][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.0.933 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 173.831931][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 173.831944][ T8476] Call Trace: [ 173.831952][ T8476] [ 173.831961][ T8476] dump_stack_lvl+0x189/0x250 [ 173.831998][ T8476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.832026][ T8476] ? __pfx__printk+0x10/0x10 [ 173.832054][ T8476] ? should_fail_ex+0x3c1/0x560 [ 173.832089][ T8476] should_fail_ex+0x414/0x560 [ 173.832126][ T8476] _copy_from_user+0x2d/0xb0 [ 173.832154][ T8476] __sys_bpf+0x1ed/0x860 [ 173.832181][ T8476] ? __pfx___sys_bpf+0x10/0x10 [ 173.832219][ T8476] ? ksys_write+0x1f0/0x250 [ 173.832240][ T8476] ? rcu_is_watching+0x15/0xb0 [ 173.832281][ T8476] __x64_sys_bpf+0x7c/0x90 [ 173.832304][ T8476] do_syscall_64+0xf6/0x210 [ 173.832335][ T8476] ? clear_bhb_loop+0x45/0xa0 [ 173.832360][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.832378][ T8476] RIP: 0033:0x7f4981f8e969 [ 173.832396][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.832413][ T8476] RSP: 002b:00007f4982e4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.832433][ T8476] RAX: ffffffffffffffda RBX: 00007f49821b5fa0 RCX: 00007f4981f8e969 [ 173.832448][ T8476] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 173.832461][ T8476] RBP: 00007f4982e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.832473][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.832485][ T8476] R13: 0000000000000000 R14: 00007f49821b5fa0 R15: 00007ffe7aa11068 [ 173.832516][ T8476] [ 174.271035][ T8494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.939'. [ 174.317209][ T8494] GUP no longer grows the stack in syz.4.939 (8494): 200000006000-20000000a000 (200000005000) [ 174.345809][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.364097][ T8494] CPU: 1 UID: 0 PID: 8494 Comm: syz.4.939 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 174.364129][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 174.364143][ T8494] Call Trace: [ 174.364152][ T8494] [ 174.364161][ T8494] dump_stack_lvl+0x189/0x250 [ 174.364201][ T8494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.364231][ T8494] ? __pfx__printk+0x10/0x10 [ 174.364248][ T8494] ? find_vma+0xe7/0x160 [ 174.364289][ T8494] __get_user_pages+0x24e4/0x2a40 [ 174.364348][ T8494] ? __pfx___get_user_pages+0x10/0x10 [ 174.364371][ T8494] ? __gup_longterm_locked+0xbf7/0x15b0 [ 174.364396][ T8494] ? down_read_killable+0x1d1/0x350 [ 174.364415][ T8494] ? try_get_folio+0x633/0x660 [ 174.364445][ T8494] __gup_longterm_locked+0xd66/0x15b0 [ 174.364475][ T8494] ? try_grab_folio_fast+0x19a/0x4d0 [ 174.364512][ T8494] ? gup_fast_fallback+0x1672/0x1d60 [ 174.364541][ T8494] gup_fast_fallback+0x1843/0x1d60 [ 174.364601][ T8494] ? __pfx_gup_fast_fallback+0x10/0x10 [ 174.364623][ T8494] ? __mutex_lock+0x330/0xe80 [ 174.364660][ T8494] ? update_curr_dl_se+0x107/0xa20 [ 174.364694][ T8494] ? is_valid_gup_args+0x11f/0x200 [ 174.364721][ T8494] ? get_user_pages_fast+0x4d/0xb0 [ 174.364749][ T8494] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 174.364785][ T8494] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 174.364811][ T8494] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.364836][ T8494] ? wait_for_space+0x24d/0x2d0 [ 174.364863][ T8494] iov_iter_get_pages2+0x5e/0xa0 [ 174.364894][ T8494] __se_sys_vmsplice+0x548/0x10e0 [ 174.364941][ T8494] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 174.364971][ T8494] ? __pfx_futex_wake+0x10/0x10 [ 174.365005][ T8494] ? __lock_acquire+0xaac/0xd20 [ 174.365075][ T8494] ? rcu_is_watching+0x15/0xb0 [ 174.365114][ T8494] ? do_syscall_64+0xba/0x210 [ 174.365150][ T8494] do_syscall_64+0xf6/0x210 [ 174.365181][ T8494] ? clear_bhb_loop+0x45/0xa0 [ 174.365207][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.365226][ T8494] RIP: 0033:0x7f21a558e969 [ 174.365245][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.365263][ T8494] RSP: 002b:00007f21a6411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 174.365285][ T8494] RAX: ffffffffffffffda RBX: 00007f21a57b5fa0 RCX: 00007f21a558e969 [ 174.365300][ T8494] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e [ 174.365314][ T8494] RBP: 00007f21a5610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 174.365328][ T8494] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 174.365340][ T8494] R13: 0000000000000000 R14: 00007f21a57b5fa0 R15: 00007fff17df4a68 [ 174.365373][ T8494] [ 174.666936][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 174.882623][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.890490][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.966753][ T8504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.944'. [ 174.995792][ T8504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.944'. [ 175.055800][ T8504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.944'. [ 175.385758][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.564204][ T8532] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 175.613936][ T8532] netlink: 'syz.1.953': attribute type 2 has an invalid length. [ 176.283533][ T8553] FAULT_INJECTION: forcing a failure. [ 176.283533][ T8553] name failslab, interval 1, probability 0, space 0, times 0 [ 176.321392][ T8555] xt_TCPMSS: Only works on TCP SYN packets [ 176.351282][ T8553] CPU: 0 UID: 0 PID: 8553 Comm: syz.4.962 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 176.351309][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 176.351321][ T8553] Call Trace: [ 176.351329][ T8553] [ 176.351337][ T8553] dump_stack_lvl+0x189/0x250 [ 176.351374][ T8553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.351404][ T8553] ? __pfx__printk+0x10/0x10 [ 176.351429][ T8553] ? __pfx___might_resched+0x10/0x10 [ 176.351446][ T8553] ? fs_reclaim_acquire+0x7d/0x100 [ 176.351480][ T8553] should_fail_ex+0x414/0x560 [ 176.351517][ T8553] should_failslab+0xa8/0x100 [ 176.351545][ T8553] __kmalloc_noprof+0xcb/0x4f0 [ 176.351569][ T8553] ? bpf_test_init+0xc2/0x170 [ 176.351595][ T8553] bpf_test_init+0xc2/0x170 [ 176.351620][ T8553] bpf_prog_test_run_xdp+0x37c/0xf90 [ 176.351659][ T8553] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 176.351696][ T8553] ? __fget_files+0x2a/0x420 [ 176.351727][ T8553] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 176.351751][ T8553] bpf_prog_test_run+0x2a9/0x340 [ 176.351783][ T8553] __sys_bpf+0x4a4/0x860 [ 176.351809][ T8553] ? __pfx___sys_bpf+0x10/0x10 [ 176.351847][ T8553] ? ksys_write+0x1f0/0x250 [ 176.351867][ T8553] ? rcu_is_watching+0x15/0xb0 [ 176.351907][ T8553] __x64_sys_bpf+0x7c/0x90 [ 176.351931][ T8553] do_syscall_64+0xf6/0x210 [ 176.351962][ T8553] ? clear_bhb_loop+0x45/0xa0 [ 176.351987][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.352006][ T8553] RIP: 0033:0x7f21a558e969 [ 176.352023][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.352040][ T8553] RSP: 002b:00007f21a6411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.352061][ T8553] RAX: ffffffffffffffda RBX: 00007f21a57b5fa0 RCX: 00007f21a558e969 [ 176.352075][ T8553] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 176.352087][ T8553] RBP: 00007f21a6411090 R08: 0000000000000000 R09: 0000000000000000 [ 176.352099][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.352110][ T8553] R13: 0000000000000000 R14: 00007f21a57b5fa0 R15: 00007fff17df4a68 [ 176.352141][ T8553] [ 176.425877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.824428][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 176.848090][ T8562] Bluetooth: MGMT ver 1.23 [ 177.090307][ T8571] netlink: 136 bytes leftover after parsing attributes in process `syz.2.967'. [ 177.131019][ T8571] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 177.156416][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.968'. [ 177.401664][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 177.465848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.625227][ T8595] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.170618][ T8612] xt_bpf: check failed: parse error [ 178.505819][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.545733][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.877947][ T8671] FAULT_INJECTION: forcing a failure. [ 179.877947][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.904844][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.1.1005 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 179.904877][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 179.904890][ T8671] Call Trace: [ 179.904898][ T8671] [ 179.904907][ T8671] dump_stack_lvl+0x189/0x250 [ 179.904945][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.904974][ T8671] ? __pfx__printk+0x10/0x10 [ 179.905009][ T8671] should_fail_ex+0x414/0x560 [ 179.905047][ T8671] _copy_from_user+0x2d/0xb0 [ 179.905076][ T8671] bpf_test_init+0xf8/0x170 [ 179.905101][ T8671] bpf_prog_test_run_xdp+0x37c/0xf90 [ 179.905141][ T8671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 179.905170][ T8671] ? __fget_files+0x2a/0x420 [ 179.905209][ T8671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 179.905234][ T8671] bpf_prog_test_run+0x2a9/0x340 [ 179.905265][ T8671] __sys_bpf+0x4a4/0x860 [ 179.905292][ T8671] ? __pfx___sys_bpf+0x10/0x10 [ 179.905331][ T8671] ? ksys_write+0x1f0/0x250 [ 179.905352][ T8671] ? rcu_is_watching+0x15/0xb0 [ 179.905394][ T8671] __x64_sys_bpf+0x7c/0x90 [ 179.905416][ T8671] do_syscall_64+0xf6/0x210 [ 179.905449][ T8671] ? clear_bhb_loop+0x45/0xa0 [ 179.905473][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.905493][ T8671] RIP: 0033:0x7fc64238e969 [ 179.905511][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.905528][ T8671] RSP: 002b:00007fc643202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.905549][ T8671] RAX: ffffffffffffffda RBX: 00007fc6425b5fa0 RCX: 00007fc64238e969 [ 179.905563][ T8671] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 179.905576][ T8671] RBP: 00007fc643202090 R08: 0000000000000000 R09: 0000000000000000 [ 179.905588][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.905599][ T8671] R13: 0000000000000000 R14: 00007fc6425b5fa0 R15: 00007ffd10f49c88 [ 179.905631][ T8671] [ 180.443099][ T8681] netlink: 'syz.2.1007': attribute type 32 has an invalid length. [ 180.516059][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 180.538379][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.585964][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.589223][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.894329][ T8664] x_tables: duplicate underflow at hook 2 [ 181.181373][ T8696] netlink: 'syz.1.1013': attribute type 9 has an invalid length. [ 181.199801][ T8696] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.1013'. [ 181.490166][ T8706] pim6reg: entered allmulticast mode [ 181.625980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.665803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.772722][ T8736] vlan2: entered promiscuous mode [ 183.705831][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.405774][ T8780] netlink: 768 bytes leftover after parsing attributes in process `syz.0.1043'. [ 184.489470][ T8785] syz.3.1046 uses old SIOCAX25GETINFO [ 184.745730][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.920925][ T8809] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 184.956503][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 185.033129][ T8815] af_packet: tpacket_rcv: packet too big, clamped from 4124 to 4294967272. macoff=96 [ 185.047943][ T8813] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.057123][ T9] IPVS: starting estimator thread 0... [ 185.064359][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1057'. [ 185.147424][ T8819] IPVS: using max 34 ests per chain, 81600 per kthread [ 185.173362][ T8807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.192587][ T8807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.383234][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1063'. [ 185.411426][ T8807] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.445788][ T8807] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.455243][ T8807] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.515933][ T8807] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.652331][ T8811] bond0: left promiscuous mode [ 185.664740][ T8811] bond_slave_0: left promiscuous mode [ 185.671391][ T8811] bond_slave_1: left promiscuous mode [ 185.680643][ T8811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.691187][ T8811] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.706659][ T8811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.751251][ T8831] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 185.785738][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.943386][ T8836] netlink: 'syz.4.1069': attribute type 10 has an invalid length. [ 186.026976][ T8842] xt_hashlimit: size too large, truncated to 1048576 [ 186.042990][ T8836] dummy0: entered promiscuous mode [ 186.060648][ T8836] team0: Port device dummy0 added [ 186.100445][ T8846] ÿ: renamed from dummy0 (while UP) [ 186.299051][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 186.585971][ T5139] Bluetooth: hci4: command 0x0405 tx timeout [ 186.668836][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1080'. [ 186.825882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.107708][ T8890] No such timeout policy "syz1" [ 187.116916][ T8889] FAULT_INJECTION: forcing a failure. [ 187.116916][ T8889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.170966][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: syz.2.1089 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 187.170995][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.171008][ T8889] Call Trace: [ 187.171015][ T8889] [ 187.171024][ T8889] dump_stack_lvl+0x189/0x250 [ 187.171057][ T8889] ? __lock_acquire+0xaac/0xd20 [ 187.171088][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.171120][ T8889] ? __pfx__printk+0x10/0x10 [ 187.171140][ T8889] ? __might_fault+0xb0/0x130 [ 187.171176][ T8889] should_fail_ex+0x414/0x560 [ 187.171212][ T8889] _copy_from_user+0x2d/0xb0 [ 187.171240][ T8889] ___sys_sendmsg+0x158/0x2a0 [ 187.171268][ T8889] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.171333][ T8889] ? __fget_files+0x2a/0x420 [ 187.171358][ T8889] ? __fget_files+0x3a0/0x420 [ 187.171395][ T8889] __sys_sendmmsg+0x227/0x430 [ 187.171426][ T8889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.171462][ T8889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.171511][ T8889] ? ksys_write+0x1f0/0x250 [ 187.171532][ T8889] ? rcu_is_watching+0x15/0xb0 [ 187.171571][ T8889] __x64_sys_sendmmsg+0xa0/0xc0 [ 187.171607][ T8889] do_syscall_64+0xf6/0x210 [ 187.171637][ T8889] ? clear_bhb_loop+0x45/0xa0 [ 187.171661][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.171680][ T8889] RIP: 0033:0x7f803ef8e969 [ 187.171698][ T8889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.171715][ T8889] RSP: 002b:00007f803fe84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.171737][ T8889] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8e969 [ 187.171752][ T8889] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000003 [ 187.171765][ T8889] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 187.171777][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.171789][ T8889] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 187.171820][ T8889] [ 187.827750][ T8910] FAULT_INJECTION: forcing a failure. [ 187.827750][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.865739][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.882245][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.3.1096 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 187.882275][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.882288][ T8910] Call Trace: [ 187.882296][ T8910] [ 187.882304][ T8910] dump_stack_lvl+0x189/0x250 [ 187.882342][ T8910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.882372][ T8910] ? __pfx__printk+0x10/0x10 [ 187.882405][ T8910] should_fail_ex+0x414/0x560 [ 187.882442][ T8910] _copy_to_user+0x31/0xb0 [ 187.882480][ T8910] bpf_test_finish+0x1c4/0x660 [ 187.882520][ T8910] ? __pfx_bpf_test_finish+0x10/0x10 [ 187.882548][ T8910] ? bpf_test_init+0x133/0x170 [ 187.882572][ T8910] bpf_prog_test_run_xdp+0x79a/0xf90 [ 187.882612][ T8910] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 187.882641][ T8910] ? __fget_files+0x2a/0x420 [ 187.882672][ T8910] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 187.882696][ T8910] bpf_prog_test_run+0x2a9/0x340 [ 187.882728][ T8910] __sys_bpf+0x4a4/0x860 [ 187.882755][ T8910] ? __pfx___sys_bpf+0x10/0x10 [ 187.882793][ T8910] ? ksys_write+0x1f0/0x250 [ 187.882813][ T8910] ? rcu_is_watching+0x15/0xb0 [ 187.882854][ T8910] __x64_sys_bpf+0x7c/0x90 [ 187.882876][ T8910] do_syscall_64+0xf6/0x210 [ 187.882906][ T8910] ? clear_bhb_loop+0x45/0xa0 [ 187.882931][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.882949][ T8910] RIP: 0033:0x7f1c3218e969 [ 187.882966][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.882983][ T8910] RSP: 002b:00007f1c2fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.883003][ T8910] RAX: ffffffffffffffda RBX: 00007f1c323b5fa0 RCX: 00007f1c3218e969 [ 187.883018][ T8910] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 187.883030][ T8910] RBP: 00007f1c2fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.883042][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.883054][ T8910] R13: 0000000000000000 R14: 00007f1c323b5fa0 R15: 00007fff9f917ac8 [ 187.883085][ T8910] [ 188.123861][ T8920] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.160512][ T8920] FAULT_INJECTION: forcing a failure. [ 188.160512][ T8920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.217360][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.0.1101 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 188.217390][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 188.217403][ T8920] Call Trace: [ 188.217410][ T8920] [ 188.217419][ T8920] dump_stack_lvl+0x189/0x250 [ 188.217452][ T8920] ? __lock_acquire+0xaac/0xd20 [ 188.217484][ T8920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.217511][ T8920] ? __pfx__printk+0x10/0x10 [ 188.217539][ T8920] ? __might_fault+0xb0/0x130 [ 188.217576][ T8920] should_fail_ex+0x414/0x560 [ 188.217614][ T8920] _copy_from_user+0x2d/0xb0 [ 188.217643][ T8920] ___sys_recvmsg+0x12e/0x510 [ 188.217677][ T8920] ? __pfx____sys_recvmsg+0x10/0x10 [ 188.217730][ T8920] ? __fget_files+0x3a0/0x420 [ 188.217767][ T8920] do_recvmmsg+0x307/0x760 [ 188.217804][ T8920] ? __pfx_do_recvmmsg+0x10/0x10 [ 188.217844][ T8920] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.217893][ T8920] __x64_sys_recvmmsg+0x190/0x240 [ 188.217919][ T8920] ? rcu_is_watching+0x15/0xb0 [ 188.217950][ T8920] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 188.217983][ T8920] ? do_syscall_64+0xba/0x210 [ 188.218017][ T8920] do_syscall_64+0xf6/0x210 [ 188.218048][ T8920] ? clear_bhb_loop+0x45/0xa0 [ 188.218072][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.218091][ T8920] RIP: 0033:0x7f4981f8e969 [ 188.218109][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.218127][ T8920] RSP: 002b:00007f4982e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.218148][ T8920] RAX: ffffffffffffffda RBX: 00007f49821b5fa0 RCX: 00007f4981f8e969 [ 188.218162][ T8920] RDX: 0000000000000001 RSI: 0000200000004640 RDI: 0000000000000003 [ 188.218175][ T8920] RBP: 00007f4982e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 188.218187][ T8920] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 188.218200][ T8920] R13: 0000000000000000 R14: 00007f49821b5fa0 R15: 00007ffe7aa11068 [ 188.218230][ T8920] [ 188.534126][ T8926] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.806652][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 188.905720][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.945717][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.033886][ T8966] bond0: entered promiscuous mode [ 190.053872][ T8966] bond_slave_0: entered promiscuous mode [ 190.071312][ T8966] bond_slave_1: entered promiscuous mode [ 190.857298][ T8996] syz.1.1122 (8996) used obsolete PPPIOCDETACH ioctl [ 190.985875][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.110631][ T9007] xt_bpf: check failed: parse error [ 191.229806][ T9012] FAULT_INJECTION: forcing a failure. [ 191.229806][ T9012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.258274][ T9012] CPU: 1 UID: 0 PID: 9012 Comm: syz.1.1129 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 191.258304][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 191.258317][ T9012] Call Trace: [ 191.258324][ T9012] [ 191.258333][ T9012] dump_stack_lvl+0x189/0x250 [ 191.258371][ T9012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.258400][ T9012] ? __pfx__printk+0x10/0x10 [ 191.258434][ T9012] should_fail_ex+0x414/0x560 [ 191.258472][ T9012] _copy_to_user+0x31/0xb0 [ 191.258501][ T9012] bpf_test_finish+0x1c4/0x660 [ 191.258532][ T9012] ? __pfx_bpf_test_finish+0x10/0x10 [ 191.258561][ T9012] ? bpf_test_init+0x133/0x170 [ 191.258584][ T9012] bpf_prog_test_run_xdp+0x79a/0xf90 [ 191.258625][ T9012] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 191.258653][ T9012] ? __fget_files+0x2a/0x420 [ 191.258686][ T9012] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 191.258710][ T9012] bpf_prog_test_run+0x2a9/0x340 [ 191.258741][ T9012] __sys_bpf+0x4a4/0x860 [ 191.258766][ T9012] ? __pfx___sys_bpf+0x10/0x10 [ 191.258805][ T9012] ? ksys_write+0x1f0/0x250 [ 191.258826][ T9012] ? rcu_is_watching+0x15/0xb0 [ 191.258868][ T9012] __x64_sys_bpf+0x7c/0x90 [ 191.258891][ T9012] do_syscall_64+0xf6/0x210 [ 191.258922][ T9012] ? clear_bhb_loop+0x45/0xa0 [ 191.258948][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.258967][ T9012] RIP: 0033:0x7fc64238e969 [ 191.258985][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.259001][ T9012] RSP: 002b:00007fc643202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.259023][ T9012] RAX: ffffffffffffffda RBX: 00007fc6425b5fa0 RCX: 00007fc64238e969 [ 191.259037][ T9012] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 191.259050][ T9012] RBP: 00007fc643202090 R08: 0000000000000000 R09: 0000000000000000 [ 191.259062][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.259074][ T9012] R13: 0000000000000000 R14: 00007fc6425b5fa0 R15: 00007ffd10f49c88 [ 191.259106][ T9012] [ 191.894747][ T9019] xt_bpf: check failed: parse error [ 191.967161][ T9019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 192.025726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.094365][ T9021] FAULT_INJECTION: forcing a failure. [ 192.094365][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 192.131444][ T9023] can: request_module (can-proto-3) failed. [ 192.136119][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.3.1131 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 192.136152][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.136165][ T9021] Call Trace: [ 192.136174][ T9021] [ 192.136183][ T9021] dump_stack_lvl+0x189/0x250 [ 192.136225][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.136257][ T9021] ? __pfx__printk+0x10/0x10 [ 192.136286][ T9021] ? __pfx___might_resched+0x10/0x10 [ 192.136306][ T9021] ? fs_reclaim_acquire+0x7d/0x100 [ 192.136344][ T9021] should_fail_ex+0x414/0x560 [ 192.136393][ T9021] should_failslab+0xa8/0x100 [ 192.136423][ T9021] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 192.136451][ T9021] ? __d_alloc+0x31/0x6f0 [ 192.136488][ T9021] __d_alloc+0x31/0x6f0 [ 192.136527][ T9021] d_alloc_parallel+0xe0/0x14e0 [ 192.136545][ T9021] ? kasan_save_track+0x3e/0x80 [ 192.136567][ T9021] ? __kasan_slab_alloc+0x6c/0x80 [ 192.136590][ T9021] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 192.136613][ T9021] ? security_inode_alloc+0x39/0x330 [ 192.136637][ T9021] ? inode_init_always_gfp+0x9ed/0xdc0 [ 192.136662][ T9021] ? alloc_inode+0x82/0x1b0 [ 192.136684][ T9021] ? new_inode+0x22/0x170 [ 192.136708][ T9021] ? __debugfs_create_file+0x14d/0x4f0 [ 192.136736][ T9021] ? __lock_acquire+0xaac/0xd20 [ 192.136778][ T9021] ? __pfx_d_alloc_parallel+0x10/0x10 [ 192.136806][ T9021] ? __raw_spin_lock_init+0x45/0x100 [ 192.136832][ T9021] ? __init_waitqueue_head+0xa9/0x150 [ 192.136864][ T9021] __lookup_slow+0x116/0x3d0 [ 192.136902][ T9021] ? __pfx___lookup_slow+0x10/0x10 [ 192.136961][ T9021] lookup_one_len+0x1aa/0x310 [ 192.136997][ T9021] ? __pfx_lookup_one_len+0x10/0x10 [ 192.137027][ T9021] ? do_raw_spin_unlock+0x122/0x240 [ 192.137052][ T9021] ? mntput+0x65/0xc0 [ 192.137086][ T9021] start_creating+0x18d/0x310 [ 192.137114][ T9021] __debugfs_create_file+0x79/0x4f0 [ 192.137143][ T9021] debugfs_create_file_short+0x3f/0x60 [ 192.137171][ T9021] ieee80211_debugfs_recreate_netdev+0x29c/0x1460 [ 192.137216][ T9021] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 192.137251][ T9021] ? ieee80211_set_default_queues+0x4a0/0x4f0 [ 192.137298][ T9021] ieee80211_if_change_type+0x53a/0x990 [ 192.137343][ T9021] ieee80211_change_iface+0xd5/0x510 [ 192.137385][ T9021] cfg80211_change_iface+0x792/0xef0 [ 192.137422][ T9021] nl80211_set_interface+0x773/0xaa0 [ 192.137463][ T9021] ? __pfx_nl80211_set_interface+0x10/0x10 [ 192.137497][ T9021] ? nl80211_pre_doit+0x4fb/0x930 [ 192.137532][ T9021] genl_family_rcv_msg_doit+0x212/0x300 [ 192.137571][ T9021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 192.137616][ T9021] ? bpf_lsm_capable+0x9/0x20 [ 192.137643][ T9021] ? security_capable+0x7e/0x2e0 [ 192.137672][ T9021] genl_rcv_msg+0x60e/0x790 [ 192.137708][ T9021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.137735][ T9021] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 192.137759][ T9021] ? __pfx_nl80211_set_interface+0x10/0x10 [ 192.137786][ T9021] ? __pfx_nl80211_post_doit+0x10/0x10 [ 192.137815][ T9021] ? ref_tracker_free+0x63a/0x7d0 [ 192.137834][ T9021] ? __copy_skb_header+0xa7/0x550 [ 192.137872][ T9021] netlink_rcv_skb+0x219/0x490 [ 192.137896][ T9021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.137926][ T9021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.137978][ T9021] ? down_read+0x1ad/0x2e0 [ 192.138000][ T9021] genl_rcv+0x28/0x40 [ 192.138026][ T9021] netlink_unicast+0x758/0x8d0 [ 192.138059][ T9021] netlink_sendmsg+0x805/0xb30 [ 192.138094][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.138122][ T9021] ? aa_sock_msg_perm+0x94/0x160 [ 192.138145][ T9021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.138167][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.138191][ T9021] __sock_sendmsg+0x219/0x270 [ 192.138226][ T9021] __sys_sendto+0x3bd/0x520 [ 192.138254][ T9021] ? __pfx___sys_sendto+0x10/0x10 [ 192.138293][ T9021] ? fput_close_sync+0x119/0x200 [ 192.138336][ T9021] ? dnotify_flush+0x1db/0x5e0 [ 192.138369][ T9021] ? __pfx_fput_close_sync+0x10/0x10 [ 192.138408][ T9021] __x64_sys_sendto+0xde/0x100 [ 192.138438][ T9021] do_syscall_64+0xf6/0x210 [ 192.138473][ T9021] ? clear_bhb_loop+0x45/0xa0 [ 192.138501][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.138524][ T9021] RIP: 0033:0x7f1c321907fc [ 192.138544][ T9021] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 192.138563][ T9021] RSP: 002b:00007f1c2fff4e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 192.138586][ T9021] RAX: ffffffffffffffda RBX: 00007f1c2fff4fa0 RCX: 00007f1c321907fc [ 192.138602][ T9021] RDX: 0000000000000024 RSI: 00007f1c2fff4ff0 RDI: 0000000000000004 [ 192.138615][ T9021] RBP: 0000000000000000 R08: 00007f1c2fff4e74 R09: 000000000000000c [ 192.138628][ T9021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 192.138641][ T9021] R13: 0000000000000000 R14: 00007f1c2fff4ff0 R15: 0000000000000000 [ 192.138676][ T9021] [ 192.675316][ T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.700401][ T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.065725][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.124878][ T9045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1137'. [ 193.703254][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 193.750560][ T9060] block nbd0: not configured, cannot reconfigure [ 193.932536][ T9070] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.949631][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 193.962366][ T9069] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 194.078166][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1137'. [ 194.105825][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.190493][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.190706][ T9043] netlink: 'syz.0.1137': attribute type 16 has an invalid length. [ 194.212127][ T9043] netlink: 'syz.0.1137': attribute type 17 has an invalid length. [ 194.306192][ T9073] block nbd0: server does not support multiple connections per device. [ 194.328519][ T9073] block nbd0: shutting down sockets [ 194.389456][ T9078] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1152'. [ 194.661862][ T9090] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1155'. [ 194.691536][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 195.145802][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.435028][ T9119] syzkaller0: entered promiscuous mode [ 195.462191][ T9119] syzkaller0: entered allmulticast mode [ 195.980755][ T9147] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 196.185890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.225726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.525445][ T9154] vlan4: entered promiscuous mode [ 197.775124][ T9159] syz_tun: refused to change device tx_queue_len [ 197.795910][ T9159] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 197.824461][ T9166] FAULT_INJECTION: forcing a failure. [ 197.824461][ T9166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.848006][ T9166] CPU: 0 UID: 0 PID: 9166 Comm: syz.2.1185 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 197.848051][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.848064][ T9166] Call Trace: [ 197.848071][ T9166] [ 197.848080][ T9166] dump_stack_lvl+0x189/0x250 [ 197.848118][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.848148][ T9166] ? __pfx__printk+0x10/0x10 [ 197.848181][ T9166] should_fail_ex+0x414/0x560 [ 197.848220][ T9166] _copy_to_user+0x31/0xb0 [ 197.848250][ T9166] bpf_test_finish+0x500/0x660 [ 197.848281][ T9166] ? __pfx_bpf_test_finish+0x10/0x10 [ 197.848311][ T9166] ? bpf_test_init+0x133/0x170 [ 197.848337][ T9166] bpf_prog_test_run_xdp+0x79a/0xf90 [ 197.848379][ T9166] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 197.848408][ T9166] ? __fget_files+0x2a/0x420 [ 197.848442][ T9166] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 197.848467][ T9166] bpf_prog_test_run+0x2a9/0x340 [ 197.848500][ T9166] __sys_bpf+0x4a4/0x860 [ 197.848528][ T9166] ? __pfx___sys_bpf+0x10/0x10 [ 197.848573][ T9166] ? ksys_write+0x1f0/0x250 [ 197.848595][ T9166] ? rcu_is_watching+0x15/0xb0 [ 197.848644][ T9166] __x64_sys_bpf+0x7c/0x90 [ 197.848668][ T9166] do_syscall_64+0xf6/0x210 [ 197.848700][ T9166] ? clear_bhb_loop+0x45/0xa0 [ 197.848725][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.848744][ T9166] RIP: 0033:0x7f803ef8e969 [ 197.848761][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.848778][ T9166] RSP: 002b:00007f803fe84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.848800][ T9166] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8e969 [ 197.848814][ T9166] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 197.848827][ T9166] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 197.848839][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.848851][ T9166] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 197.848884][ T9166] [ 198.150926][ T9170] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.265718][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.332117][ T9177] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1189'. [ 198.395604][ T9180] FAULT_INJECTION: forcing a failure. [ 198.395604][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 198.486327][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.1.1190 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 198.486357][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 198.486370][ T9180] Call Trace: [ 198.486378][ T9180] [ 198.486387][ T9180] dump_stack_lvl+0x189/0x250 [ 198.486425][ T9180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.486453][ T9180] ? __pfx__printk+0x10/0x10 [ 198.486478][ T9180] ? __pfx___might_resched+0x10/0x10 [ 198.486502][ T9180] should_fail_ex+0x414/0x560 [ 198.486539][ T9180] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 198.486581][ T9180] should_failslab+0xa8/0x100 [ 198.486608][ T9180] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 198.486629][ T9180] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 198.486654][ T9180] ? alloc_inode+0x67/0x1b0 [ 198.486678][ T9180] ? __pfx_lookup_one_len+0x10/0x10 [ 198.486711][ T9180] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 198.486733][ T9180] alloc_inode+0x67/0x1b0 [ 198.486759][ T9180] new_inode+0x22/0x170 [ 198.486783][ T9180] ? start_creating+0x1fe/0x310 [ 198.486814][ T9180] __debugfs_create_file+0x14d/0x4f0 [ 198.486846][ T9180] debugfs_create_file_short+0x3f/0x60 [ 198.486872][ T9180] ieee80211_debugfs_recreate_netdev+0x29c/0x1460 [ 198.486913][ T9180] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 198.486945][ T9180] ? ieee80211_set_default_queues+0x4a0/0x4f0 [ 198.486987][ T9180] ieee80211_if_change_type+0x53a/0x990 [ 198.487024][ T9180] ieee80211_change_iface+0xd5/0x510 [ 198.487060][ T9180] cfg80211_change_iface+0x792/0xef0 [ 198.487098][ T9180] nl80211_set_interface+0x773/0xaa0 [ 198.487139][ T9180] ? __pfx_nl80211_set_interface+0x10/0x10 [ 198.487174][ T9180] ? nl80211_pre_doit+0x4fb/0x930 [ 198.487209][ T9180] genl_family_rcv_msg_doit+0x212/0x300 [ 198.487248][ T9180] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.487292][ T9180] ? bpf_lsm_capable+0x9/0x20 [ 198.487319][ T9180] ? security_capable+0x7e/0x2e0 [ 198.487352][ T9180] genl_rcv_msg+0x60e/0x790 [ 198.487387][ T9180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.487414][ T9180] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 198.487438][ T9180] ? __pfx_nl80211_set_interface+0x10/0x10 [ 198.487465][ T9180] ? __pfx_nl80211_post_doit+0x10/0x10 [ 198.487492][ T9180] ? ref_tracker_free+0x63a/0x7d0 [ 198.487512][ T9180] ? __copy_skb_header+0xa7/0x550 [ 198.487549][ T9180] netlink_rcv_skb+0x219/0x490 [ 198.487573][ T9180] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.487604][ T9180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.487653][ T9180] ? down_read+0x1ad/0x2e0 [ 198.487677][ T9180] genl_rcv+0x28/0x40 [ 198.487702][ T9180] netlink_unicast+0x758/0x8d0 [ 198.487736][ T9180] netlink_sendmsg+0x805/0xb30 [ 198.487770][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.487798][ T9180] ? aa_sock_msg_perm+0x94/0x160 [ 198.487827][ T9180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.487847][ T9180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.487870][ T9180] __sock_sendmsg+0x219/0x270 [ 198.487905][ T9180] __sys_sendto+0x3bd/0x520 [ 198.487930][ T9180] ? __pfx___sys_sendto+0x10/0x10 [ 198.487970][ T9180] ? fput_close_sync+0x119/0x200 [ 198.488011][ T9180] ? dnotify_flush+0x1db/0x5e0 [ 198.488038][ T9180] ? __pfx_fput_close_sync+0x10/0x10 [ 198.488077][ T9180] __x64_sys_sendto+0xde/0x100 [ 198.488106][ T9180] do_syscall_64+0xf6/0x210 [ 198.488137][ T9180] ? clear_bhb_loop+0x45/0xa0 [ 198.488162][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.488181][ T9180] RIP: 0033:0x7fc6423907fc [ 198.488198][ T9180] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 198.488215][ T9180] RSP: 002b:00007fc643200e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 198.488236][ T9180] RAX: ffffffffffffffda RBX: 00007fc643200fa0 RCX: 00007fc6423907fc [ 198.488250][ T9180] RDX: 0000000000000024 RSI: 00007fc643200ff0 RDI: 0000000000000004 [ 198.488263][ T9180] RBP: 0000000000000000 R08: 00007fc643200e74 R09: 000000000000000c [ 198.488276][ T9180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 198.488287][ T9180] R13: 0000000000000000 R14: 00007fc643200ff0 R15: 0000000000000000 [ 198.488320][ T9180] [ 198.490070][ T9180] debugfs: out of free dentries, can not create file 'state' [ 198.998304][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.031957][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.219714][ T9194] syzkaller0: entered promiscuous mode [ 199.242618][ T9194] syzkaller0: entered allmulticast mode [ 199.305867][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.558086][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1198'. [ 199.842819][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 199.905601][ T9222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1200'. [ 200.345731][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.389894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.217296][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1209'. [ 202.425716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.547207][ T9271] FAULT_INJECTION: forcing a failure. [ 202.547207][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.635877][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.3.1214 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 202.635908][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.635921][ T9271] Call Trace: [ 202.635929][ T9271] [ 202.635938][ T9271] dump_stack_lvl+0x189/0x250 [ 202.635970][ T9271] ? __lock_acquire+0xaac/0xd20 [ 202.636000][ T9271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.636029][ T9271] ? __pfx__printk+0x10/0x10 [ 202.636049][ T9271] ? __might_fault+0xb0/0x130 [ 202.636087][ T9271] should_fail_ex+0x414/0x560 [ 202.636124][ T9271] _copy_from_user+0x2d/0xb0 [ 202.636152][ T9271] __sys_bind+0x199/0x3e0 [ 202.636176][ T9271] ? __pfx___sys_bind+0x10/0x10 [ 202.636225][ T9271] __x64_sys_bind+0x7a/0x90 [ 202.636256][ T9271] do_syscall_64+0xf6/0x210 [ 202.636288][ T9271] ? clear_bhb_loop+0x45/0xa0 [ 202.636312][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.636331][ T9271] RIP: 0033:0x7f1c3218e969 [ 202.636348][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.636365][ T9271] RSP: 002b:00007f1c2fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 202.636386][ T9271] RAX: ffffffffffffffda RBX: 00007f1c323b5fa0 RCX: 00007f1c3218e969 [ 202.636401][ T9271] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 202.636413][ T9271] RBP: 00007f1c2fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.636425][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.636436][ T9271] R13: 0000000000000000 R14: 00007f1c323b5fa0 R15: 00007fff9f917ac8 [ 202.636466][ T9271] [ 203.436158][ T9288] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.465718][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.527009][ T9288] FAULT_INJECTION: forcing a failure. [ 203.527009][ T9288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.650920][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 203.656466][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.2.1219 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 203.656498][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.656511][ T9288] Call Trace: [ 203.656521][ T9288] [ 203.656530][ T9288] dump_stack_lvl+0x189/0x250 [ 203.656571][ T9288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.656604][ T9288] ? __pfx__printk+0x10/0x10 [ 203.656641][ T9288] should_fail_ex+0x414/0x560 [ 203.656683][ T9288] _copy_to_user+0x31/0xb0 [ 203.656717][ T9288] simple_read_from_buffer+0xe1/0x170 [ 203.656749][ T9288] proc_fail_nth_read+0x1df/0x250 [ 203.656784][ T9288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.656818][ T9288] ? rw_verify_area+0x258/0x650 [ 203.656840][ T9288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.656872][ T9288] vfs_read+0x1fd/0x980 [ 203.656902][ T9288] ? __pfx___mutex_lock+0x10/0x10 [ 203.656936][ T9288] ? __pfx_vfs_read+0x10/0x10 [ 203.656961][ T9288] ? __fget_files+0x2a/0x420 [ 203.656994][ T9288] ? __fget_files+0x3a0/0x420 [ 203.657021][ T9288] ? __fget_files+0x2a/0x420 [ 203.657058][ T9288] ksys_read+0x145/0x250 [ 203.657085][ T9288] ? __pfx_ksys_read+0x10/0x10 [ 203.657121][ T9288] do_syscall_64+0xf6/0x210 [ 203.657155][ T9288] ? clear_bhb_loop+0x45/0xa0 [ 203.657182][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.657217][ T9288] RIP: 0033:0x7f803ef8d37c [ 203.657236][ T9288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.657254][ T9288] RSP: 002b:00007f803fe84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.657278][ T9288] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8d37c [ 203.657293][ T9288] RDX: 000000000000000f RSI: 00007f803fe840a0 RDI: 0000000000000004 [ 203.657307][ T9288] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 203.657320][ T9288] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 203.657333][ T9288] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 203.657368][ T9288] [ 204.366151][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.373941][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.461424][ T9301] batman_adv: batadv0: Interface deactivated: 0! [ 204.505829][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.612053][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 204.819960][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.870407][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.040779][ T9301] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.054133][ T9301] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.063654][ T9301] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.074864][ T9301] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.174513][ T9304] bond0: left promiscuous mode [ 205.184241][ T9304] bond_slave_0: left promiscuous mode [ 205.192428][ T9304] bond_slave_1: left promiscuous mode [ 205.208428][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.222702][ T9304] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.234552][ T9304] batman_adv: batadv0: Interface activated: 0! [ 205.249755][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.517499][ T9342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1236'. [ 205.545864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.240577][ T9374] FAULT_INJECTION: forcing a failure. [ 206.240577][ T9374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.295065][ T9374] CPU: 1 UID: 0 PID: 9374 Comm: syz.3.1242 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 206.295092][ T9374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.295103][ T9374] Call Trace: [ 206.295110][ T9374] [ 206.295118][ T9374] dump_stack_lvl+0x189/0x250 [ 206.295146][ T9374] ? __lock_acquire+0xaac/0xd20 [ 206.295171][ T9374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.295195][ T9374] ? __pfx__printk+0x10/0x10 [ 206.295212][ T9374] ? __might_fault+0xb0/0x130 [ 206.295242][ T9374] should_fail_ex+0x414/0x560 [ 206.295281][ T9374] _copy_from_user+0x2d/0xb0 [ 206.295305][ T9374] ___sys_sendmsg+0x158/0x2a0 [ 206.295328][ T9374] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.295386][ T9374] ? __might_fault+0xb0/0x130 [ 206.295410][ T9374] __sys_sendmmsg+0x227/0x430 [ 206.295437][ T9374] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.295468][ T9374] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.295511][ T9374] ? ksys_write+0x1f0/0x250 [ 206.295530][ T9374] ? rcu_is_watching+0x15/0xb0 [ 206.295563][ T9374] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.295586][ T9374] do_syscall_64+0xf6/0x210 [ 206.295612][ T9374] ? clear_bhb_loop+0x45/0xa0 [ 206.295636][ T9374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.295652][ T9374] RIP: 0033:0x7f1c3218e969 [ 206.295670][ T9374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.295686][ T9374] RSP: 002b:00007f1c2fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.295706][ T9374] RAX: ffffffffffffffda RBX: 00007f1c323b5fa0 RCX: 00007f1c3218e969 [ 206.295719][ T9374] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000003 [ 206.295730][ T9374] RBP: 00007f1c2fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.295741][ T9374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.295751][ T9374] R13: 0000000000000000 R14: 00007f1c323b5fa0 R15: 00007fff9f917ac8 [ 206.295780][ T9374] [ 206.311840][ T9376] ip6gretap1: entered allmulticast mode [ 206.585864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.925788][ T9391] vlan4: entered promiscuous mode [ 207.098587][ T9403] FAULT_INJECTION: forcing a failure. [ 207.098587][ T9403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.175040][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.1.1252 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 207.175071][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.175084][ T9403] Call Trace: [ 207.175092][ T9403] [ 207.175101][ T9403] dump_stack_lvl+0x189/0x250 [ 207.175146][ T9403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.175176][ T9403] ? __pfx__printk+0x10/0x10 [ 207.175209][ T9403] should_fail_ex+0x414/0x560 [ 207.175247][ T9403] _copy_to_user+0x31/0xb0 [ 207.175277][ T9403] bpf_test_finish+0x532/0x660 [ 207.175306][ T9403] ? __pfx_bpf_test_finish+0x10/0x10 [ 207.175335][ T9403] ? bpf_test_init+0x133/0x170 [ 207.175359][ T9403] bpf_prog_test_run_xdp+0x79a/0xf90 [ 207.175399][ T9403] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 207.175427][ T9403] ? __fget_files+0x2a/0x420 [ 207.175459][ T9403] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 207.175483][ T9403] bpf_prog_test_run+0x2a9/0x340 [ 207.175513][ T9403] __sys_bpf+0x4a4/0x860 [ 207.175540][ T9403] ? __pfx___sys_bpf+0x10/0x10 [ 207.175577][ T9403] ? ksys_write+0x1f0/0x250 [ 207.175598][ T9403] ? rcu_is_watching+0x15/0xb0 [ 207.175642][ T9403] __x64_sys_bpf+0x7c/0x90 [ 207.175664][ T9403] do_syscall_64+0xf6/0x210 [ 207.175694][ T9403] ? clear_bhb_loop+0x45/0xa0 [ 207.175718][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.175737][ T9403] RIP: 0033:0x7fc64238e969 [ 207.175755][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.175772][ T9403] RSP: 002b:00007fc643202038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.175793][ T9403] RAX: ffffffffffffffda RBX: 00007fc6425b5fa0 RCX: 00007fc64238e969 [ 207.175807][ T9403] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 207.175819][ T9403] RBP: 00007fc643202090 R08: 0000000000000000 R09: 0000000000000000 [ 207.175831][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.175842][ T9403] R13: 0000000000000000 R14: 00007fc6425b5fa0 R15: 00007ffd10f49c88 [ 207.175871][ T9403] [ 207.544552][ T9416] netlink: 'syz.4.1253': attribute type 16 has an invalid length. [ 207.608333][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 207.625852][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.266285][ T9443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 208.275312][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 208.359714][ T9443] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1263'. [ 208.488686][ T9450] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.498063][ T9450] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.507662][ T9450] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.516508][ T9450] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.584229][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1267'. [ 208.622571][ T9456] netlink: 'syz.1.1269': attribute type 4 has an invalid length. [ 208.631262][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 208.665933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.746649][ T9463] bond0: entered promiscuous mode [ 208.762700][ T9463] bond_slave_0: entered promiscuous mode [ 208.787562][ T9463] bond_slave_1: entered promiscuous mode [ 209.101495][ T9472] syzkaller1: entered promiscuous mode [ 209.115991][ T9472] syzkaller1: entered allmulticast mode [ 209.438349][ T9483] FAULT_INJECTION: forcing a failure. [ 209.438349][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.497989][ T9483] CPU: 0 UID: 0 PID: 9483 Comm: syz.1.1281 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 209.498018][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.498030][ T9483] Call Trace: [ 209.498038][ T9483] [ 209.498047][ T9483] dump_stack_lvl+0x189/0x250 [ 209.498083][ T9483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.498111][ T9483] ? __pfx__printk+0x10/0x10 [ 209.498144][ T9483] should_fail_ex+0x414/0x560 [ 209.498180][ T9483] _copy_to_user+0x31/0xb0 [ 209.498209][ T9483] simple_read_from_buffer+0xe1/0x170 [ 209.498239][ T9483] proc_fail_nth_read+0x1df/0x250 [ 209.498270][ T9483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.498301][ T9483] ? rw_verify_area+0x258/0x650 [ 209.498321][ T9483] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.498349][ T9483] vfs_read+0x1fd/0x980 [ 209.498378][ T9483] ? __pfx___mutex_lock+0x10/0x10 [ 209.498408][ T9483] ? __pfx_vfs_read+0x10/0x10 [ 209.498431][ T9483] ? __fget_files+0x2a/0x420 [ 209.498460][ T9483] ? __fget_files+0x3a0/0x420 [ 209.498484][ T9483] ? __fget_files+0x2a/0x420 [ 209.498518][ T9483] ksys_read+0x145/0x250 [ 209.498543][ T9483] ? __pfx_ksys_read+0x10/0x10 [ 209.498569][ T9483] ? do_syscall_64+0xba/0x210 [ 209.498602][ T9483] do_syscall_64+0xf6/0x210 [ 209.498632][ T9483] ? clear_bhb_loop+0x45/0xa0 [ 209.498657][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.498676][ T9483] RIP: 0033:0x7fc64238d37c [ 209.498694][ T9483] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.498719][ T9483] RSP: 002b:00007fc643202030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.498739][ T9483] RAX: ffffffffffffffda RBX: 00007fc6425b5fa0 RCX: 00007fc64238d37c [ 209.498753][ T9483] RDX: 000000000000000f RSI: 00007fc6432020a0 RDI: 0000000000000007 [ 209.498765][ T9483] RBP: 00007fc643202090 R08: 0000000000000000 R09: 0000000000000000 [ 209.498775][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.498786][ T9483] R13: 0000000000000000 R14: 00007fc6425b5fa0 R15: 00007ffd10f49c88 [ 209.498817][ T9483] [ 209.706021][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.745723][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.631600][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 211.701816][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 211.785836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.793575][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 211.869500][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.875996][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 211.944444][ T9566] FAULT_INJECTION: forcing a failure. [ 211.944444][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 212.031576][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.2.1308 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 212.031608][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.031621][ T9566] Call Trace: [ 212.031629][ T9566] [ 212.031637][ T9566] dump_stack_lvl+0x189/0x250 [ 212.031676][ T9566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.031705][ T9566] ? __pfx__printk+0x10/0x10 [ 212.031732][ T9566] ? __pfx___might_resched+0x10/0x10 [ 212.031749][ T9566] ? fs_reclaim_acquire+0x7d/0x100 [ 212.031783][ T9566] should_fail_ex+0x414/0x560 [ 212.031820][ T9566] should_failslab+0xa8/0x100 [ 212.031848][ T9566] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 212.031875][ T9566] ? __alloc_skb+0x112/0x2d0 [ 212.031903][ T9566] __alloc_skb+0x112/0x2d0 [ 212.031930][ T9566] sock_wmalloc+0xb2/0x130 [ 212.031959][ T9566] pppoe_sendmsg+0x2a8/0x790 [ 212.031989][ T9566] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 212.032012][ T9566] ? aa_sock_msg_perm+0x94/0x160 [ 212.032036][ T9566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.032058][ T9566] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 212.032081][ T9566] __sock_sendmsg+0x219/0x270 [ 212.032115][ T9566] ____sys_sendmsg+0x52d/0x830 [ 212.032148][ T9566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.032183][ T9566] ? import_iovec+0x74/0xa0 [ 212.032214][ T9566] ___sys_sendmsg+0x21f/0x2a0 [ 212.032242][ T9566] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.032317][ T9566] ? __might_fault+0xb0/0x130 [ 212.032346][ T9566] __sys_sendmmsg+0x227/0x430 [ 212.032378][ T9566] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.032414][ T9566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.032463][ T9566] ? ksys_write+0x1f0/0x250 [ 212.032483][ T9566] ? rcu_is_watching+0x15/0xb0 [ 212.032555][ T9566] __x64_sys_sendmmsg+0xa0/0xc0 [ 212.032584][ T9566] do_syscall_64+0xf6/0x210 [ 212.032615][ T9566] ? clear_bhb_loop+0x45/0xa0 [ 212.032639][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.032658][ T9566] RIP: 0033:0x7f803ef8e969 [ 212.032676][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.032692][ T9566] RSP: 002b:00007f803fe84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.032713][ T9566] RAX: ffffffffffffffda RBX: 00007f803f1b5fa0 RCX: 00007f803ef8e969 [ 212.032727][ T9566] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000003 [ 212.032739][ T9566] RBP: 00007f803fe84090 R08: 0000000000000000 R09: 0000000000000000 [ 212.032752][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.032764][ T9566] R13: 0000000000000000 R14: 00007f803f1b5fa0 R15: 00007fffef1e9b28 [ 212.032795][ T9566] [ 212.035441][ T9568] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1309'. [ 212.356417][ T9568] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1309'. [ 212.802685][ T9596] FAULT_INJECTION: forcing a failure. [ 212.802685][ T9596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.821304][ T9596] CPU: 0 UID: 0 PID: 9596 Comm: syz.0.1318 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 212.821334][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.821346][ T9596] Call Trace: [ 212.821355][ T9596] [ 212.821364][ T9596] dump_stack_lvl+0x189/0x250 [ 212.821402][ T9596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.821437][ T9596] ? __pfx__printk+0x10/0x10 [ 212.821471][ T9596] should_fail_ex+0x414/0x560 [ 212.821509][ T9596] _copy_to_user+0x31/0xb0 [ 212.821540][ T9596] simple_read_from_buffer+0xe1/0x170 [ 212.821570][ T9596] proc_fail_nth_read+0x1df/0x250 [ 212.821602][ T9596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.821634][ T9596] ? rw_verify_area+0x258/0x650 [ 212.821655][ T9596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.821686][ T9596] vfs_read+0x1fd/0x980 [ 212.821715][ T9596] ? __pfx___mutex_lock+0x10/0x10 [ 212.821746][ T9596] ? __pfx_vfs_read+0x10/0x10 [ 212.821770][ T9596] ? __fget_files+0x2a/0x420 [ 212.821801][ T9596] ? __fget_files+0x3a0/0x420 [ 212.821825][ T9596] ? __fget_files+0x2a/0x420 [ 212.821860][ T9596] ksys_read+0x145/0x250 [ 212.821880][ T9596] ? rcu_is_watching+0x15/0xb0 [ 212.821911][ T9596] ? __pfx_ksys_read+0x10/0x10 [ 212.821937][ T9596] ? do_syscall_64+0xba/0x210 [ 212.821973][ T9596] do_syscall_64+0xf6/0x210 [ 212.822004][ T9596] ? clear_bhb_loop+0x45/0xa0 [ 212.822028][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.822047][ T9596] RIP: 0033:0x7f4981f8d37c [ 212.822065][ T9596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.822082][ T9596] RSP: 002b:00007f4982e4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.822103][ T9596] RAX: ffffffffffffffda RBX: 00007f49821b5fa0 RCX: 00007f4981f8d37c [ 212.822118][ T9596] RDX: 000000000000000f RSI: 00007f4982e4a0a0 RDI: 0000000000000005 [ 212.822130][ T9596] RBP: 00007f4982e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 212.822142][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.822154][ T9596] R13: 0000000000000000 R14: 00007f49821b5fa0 R15: 00007ffe7aa11068 [ 212.822185][ T9596] [ 212.825729][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.871150][ T9597] x_tables: duplicate underflow at hook 1 [ 212.933988][ T9598] x_tables: duplicate underflow at hook 3 [ 212.947144][ T9594] vlan4: entered promiscuous mode [ 213.282592][ T9605] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 213.865713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.116433][ T9639] nbd: socks must be embedded in a SOCK_ITEM attr [ 214.128518][ T9639] block nbd0: shutting down sockets [ 214.240883][ T9649] ------------[ cut here ]------------ [ 214.263833][ T9649] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 214.299502][ T9649] index 16 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 214.352671][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.2.1337 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 214.352702][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 214.352716][ T9649] Call Trace: [ 214.352724][ T9649] [ 214.352734][ T9649] dump_stack_lvl+0x189/0x250 [ 214.352771][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.352802][ T9649] ? __pfx__printk+0x10/0x10 [ 214.352819][ T9649] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.352862][ T9649] ubsan_epilogue+0xa/0x40 [ 214.352883][ T9649] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 214.352913][ T9649] ? __asan_memcpy+0x40/0x70 [ 214.352934][ T9649] ipv6_addr_prefix+0x145/0x1d0 [ 214.352971][ T9649] ip6_route_info_create+0x629/0xa70 [ 214.353003][ T9649] ip6_route_add+0x29/0x2f0 [ 214.353026][ T9649] ? ipv6_route_ioctl+0x313/0x480 [ 214.353055][ T9649] ipv6_route_ioctl+0x35c/0x480 [ 214.353088][ T9649] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 214.353147][ T9649] inet6_ioctl+0x219/0x280 [ 214.353166][ T9649] ? __pfx_inet6_ioctl+0x10/0x10 [ 214.353194][ T9649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.353235][ T9649] sock_do_ioctl+0xd9/0x300 [ 214.353270][ T9649] ? __pfx_sock_do_ioctl+0x10/0x10 [ 214.353302][ T9649] ? __lock_acquire+0xaac/0xd20 [ 214.353353][ T9649] sock_ioctl+0x576/0x790 [ 214.353386][ T9649] ? __pfx_sock_ioctl+0x10/0x10 [ 214.353420][ T9649] ? __fget_files+0x3a0/0x420 [ 214.353446][ T9649] ? __fget_files+0x2a/0x420 [ 214.353476][ T9649] ? bpf_lsm_file_ioctl+0x9/0x20 [ 214.353502][ T9649] ? __pfx_sock_ioctl+0x10/0x10 [ 214.353530][ T9649] __se_sys_ioctl+0xf9/0x170 [ 214.353554][ T9649] do_syscall_64+0xf6/0x210 [ 214.353586][ T9649] ? clear_bhb_loop+0x45/0xa0 [ 214.353611][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.353630][ T9649] RIP: 0033:0x7f803ef8e969 [ 214.353648][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.353665][ T9649] RSP: 002b:00007f803fe63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.353688][ T9649] RAX: ffffffffffffffda RBX: 00007f803f1b6080 RCX: 00007f803ef8e969 [ 214.353702][ T9649] RDX: 0000200000006940 RSI: 000000000000890b RDI: 0000000000000007 [ 214.353716][ T9649] RBP: 00007f803f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 214.353728][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.353739][ T9649] R13: 0000000000000000 R14: 00007f803f1b6080 R15: 00007fffef1e9b28 [ 214.353771][ T9649] [ 214.353779][ T9649] ---[ end trace ]--- [ 214.587495][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1337'. [ 214.641532][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 214.645729][ T9649] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 214.645754][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.2.1337 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 214.645783][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 214.645799][ T9649] Call Trace: [ 214.645808][ T9649] [ 214.645820][ T9649] dump_stack_lvl+0x99/0x250 [ 214.645861][ T9649] ? __asan_memcpy+0x40/0x70 [ 214.645887][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.645923][ T9649] ? __pfx__printk+0x10/0x10 [ 214.645959][ T9649] panic+0x2db/0x790 [ 214.645998][ T9649] ? __pfx_panic+0x10/0x10 [ 214.646027][ T9649] ? _printk+0xcf/0x120 [ 214.646056][ T9649] ? __pfx__printk+0x10/0x10 [ 214.646075][ T9649] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.646118][ T9649] check_panic_on_warn+0x89/0xb0 [ 214.646150][ T9649] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 214.646183][ T9649] ? __asan_memcpy+0x40/0x70 [ 214.646206][ T9649] ipv6_addr_prefix+0x145/0x1d0 [ 214.646247][ T9649] ip6_route_info_create+0x629/0xa70 [ 214.646284][ T9649] ip6_route_add+0x29/0x2f0 [ 214.646309][ T9649] ? ipv6_route_ioctl+0x313/0x480 [ 214.646340][ T9649] ipv6_route_ioctl+0x35c/0x480 [ 214.646375][ T9649] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 214.646443][ T9649] inet6_ioctl+0x219/0x280 [ 214.646464][ T9649] ? __pfx_inet6_ioctl+0x10/0x10 [ 214.646497][ T9649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.646549][ T9649] sock_do_ioctl+0xd9/0x300 [ 214.646588][ T9649] ? __pfx_sock_do_ioctl+0x10/0x10 [ 214.646625][ T9649] ? __lock_acquire+0xaac/0xd20 [ 214.646672][ T9649] sock_ioctl+0x576/0x790 [ 214.646707][ T9649] ? __pfx_sock_ioctl+0x10/0x10 [ 214.646744][ T9649] ? __fget_files+0x3a0/0x420 [ 214.646774][ T9649] ? __fget_files+0x2a/0x420 [ 214.646807][ T9649] ? bpf_lsm_file_ioctl+0x9/0x20 [ 214.646838][ T9649] ? __pfx_sock_ioctl+0x10/0x10 [ 214.646871][ T9649] __se_sys_ioctl+0xf9/0x170 [ 214.646897][ T9649] do_syscall_64+0xf6/0x210 [ 214.646933][ T9649] ? clear_bhb_loop+0x45/0xa0 [ 214.646960][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.646983][ T9649] RIP: 0033:0x7f803ef8e969 [ 214.647004][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.647025][ T9649] RSP: 002b:00007f803fe63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.647050][ T9649] RAX: ffffffffffffffda RBX: 00007f803f1b6080 RCX: 00007f803ef8e969 [ 214.647068][ T9649] RDX: 0000200000006940 RSI: 000000000000890b RDI: 0000000000000007 [ 214.647083][ T9649] RBP: 00007f803f010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 214.647098][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.647113][ T9649] R13: 0000000000000000 R14: 00007f803f1b6080 R15: 00007fffef1e9b28 [ 214.647146][ T9649] [ 214.650799][ T9649] Kernel Offset: disabled