last executing test programs: 1m39.111149076s ago: executing program 4 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r2, &(0x7f0000000040), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e2080001400000000008000140000000070800014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000003140001800800014000000005080001400000000008000340000000a4140000001000010000000000000000000000000a00000000000000"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f00000002c0)=""/23, 0xfffffffffffffff4, 0x714, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200017ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="d4ea3e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="af", 0x1}], 0x1}}], 0x2, 0x85) 1m22.829273564s ago: executing program 4 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r2, &(0x7f0000000040), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f00000002c0)=""/23, 0xfffffffffffffff4, 0x714, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200017ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="d4ea3e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="af", 0x1}], 0x1}}], 0x2, 0x85) 1m5.882063287s ago: executing program 4 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r2, &(0x7f0000000040), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f00000002c0)=""/23, 0xfffffffffffffff4, 0x714, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200017ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="d4ea3e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="af", 0x1}], 0x1}}], 0x2, 0x85) 47.89804181s ago: executing program 4 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r2, &(0x7f0000000040), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f00000002c0)=""/23, 0xfffffffffffffff4, 0x714, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200017ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="d4ea3e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="af", 0x1}], 0x1}}], 0x2, 0x85) 29.484101826s ago: executing program 4 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r2, &(0x7f0000000040), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f00000002c0)=""/23, 0xfffffffffffffff4, 0x714, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200017ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="d4ea3e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="af", 0x1}], 0x1}}], 0x2, 0x85) 12.558749339s ago: executing program 4 (id=61): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000140)={0x2a, 0x1, 0xfffe}, 0xc) connect$qrtr(r2, &(0x7f0000000040), 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e2080001400000000008000140000000070800014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000003140001800800014000000005080001400000000008000340000000a4140000001000010000000000000000000000000a00000000000000"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0xc0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f00000002c0)=""/23, 0xfffffffffffffff4, 0x714, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200017ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="d4ea3e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="af", 0x1}], 0x1}}], 0x2, 0x85) 5.98803937s ago: executing program 1 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000000c00000008000500fdffff0c"], 0x24}}, 0x0) unshare(0x68040200) (async, rerun: 32) unshare(0x24000000) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000500], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x1000000) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (rerun: 32) socket$inet(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x1d, 0x2, 0x6) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x2, {0x2, 0x0, 0x4}}, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r7, {0xfff3}, {0xffe0, 0xfff2}, {0x2, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x20008004) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd607fa72700082f00fc020000000000000000000000000000fe8000000000000000000000000000aa3a"], 0x0) 5.496855384s ago: executing program 0 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x6b, 0x60000000}, 0x50) 5.232113564s ago: executing program 0 (id=695): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x570, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x31, r0, 0x0) r1 = socket(0x26, 0x6, 0xfffffffe) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x46060680) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000000c0), 0x0}, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0x31, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 3.600174761s ago: executing program 3 (id=702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x1000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 3.380131515s ago: executing program 3 (id=704): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x4, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x3c}}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000940)="ad5628ef6c12d6db387385cd44417da0b0c268681f90148b335e0cbe7f22d2638d90a2e3b094fc6f159e838f55b5b1e865de5e05dc48eebb7389d4", 0x3b}], 0x1, 0x0, 0x0, 0x880}}], 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000440)=@x25, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000780)="25744ea4977f7975fc8c2ed0b4dbd3caac9ef917b36bbfc6e1215f228ec3640f35d2aa8ebd839e8dca326981a3a9706402619960c4378e9f955ec78be22f7e23016ec7f619f66c46669856ca137301cb18e75b5c58afb0fd44bdf21fd04cdfd75da2a9aae9ac034a3bb0b67562fbb24424023ef9df595cde3008c90e00f308074937cd5375594598b78f0f9a1d9414c8b754bea9e176e04df97cf533773ceab336ad5d67e6055f2d5bfb8d84ecb839f3df1087afecff34a48cd292c5615818bf497d27b201492df6f4e3386b4c56b84b76cff965766d1355273209e589ac904ad4d23cb04dd69c71267f9b8209aad7c2cadb", 0xf2}], 0x1, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000070000009500000009000200"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='+qids '], 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r3}) 3.217754467s ago: executing program 3 (id=705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0x6b, 0x60000000}, 0x50) 3.099705965s ago: executing program 3 (id=706): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x2000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xc001, &(0x7f0000000140)={0x11, 0x4, r3, 0x1, 0xc}, 0x14) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8}, 0xc080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x40010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r6, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10}, {0x0, 0xa}}}, 0x24}}, 0x40044) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5c840}, 0x20008005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.117057026s ago: executing program 3 (id=708): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x601}], 0x1, 0x0, 0x0, 0xffffffffffffffe6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES64=r4, @ANYRESOCT=r3], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x2004080c) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000200000800000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="363d1ddc7400000000000000000000000000000000000000000000d74b8c795a000000000000"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="001000000300000040000000007a000000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021007d00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00030310040002000000890000000c4e3128c43b9a7fcd58804de06e1693000800040000007600000024000000000400050006ea000000000000000000000000000000000073603e65662f465fe33ced29c62be239"], 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11}, 0x18) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r6, @ANYRES16=r13, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 2.064218633s ago: executing program 1 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0xe0}, @IPSET_ATTR_MARKMASK={0x0, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffe3e, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x8000, 0xf545, 0xc, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x67, 0x0, 0x8, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x8, 0xff, 0x0, 0x0, [0x10001]}, @timestamp_addr={0x44, 0x3c, 0x5c, 0x1, 0xf, [{@empty, 0x5}, {@empty, 0x6}, {@rand_addr=0x64010101}, {@broadcast, 0xeb4b}, {@empty}, {@loopback}, {@remote, 0xe5e}]}, @rr={0x7, 0x1f, 0xad, [@local, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @generic={0x88, 0x4, "3fe1"}]}}}}}) 1.934554736s ago: executing program 0 (id=710): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000210001002dbd7000fedbdf25fe880000000000000000000000000101e00000020000000000000000000000004e248001000700010a0080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e000100000050001100ff010000000000000000000000000001fe8000000000000000000000000000bbac1414bb000000000000000000000000fc01000000000000000000000000000133"], 0xa0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52", 0xc9a}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x802, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x4000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000001180)=ANY=[@ANYBLOB="00022d35a469cf687e4ed6149f5c16c5aa6a3b382a2e532f19d987885a675ebfd13fa14b807a01d9605eb5bd18dc04dbcfa6048fb5c4a672c1a8101917a9c5f55ec0f721cc01708a3f06d23af3ff29a62fcaee8c7d29494dcf4826dbe085c27730e87674e5bddfc043cd101627dc3834d930bb2de9a2b274538cac12decff293f761988c422621c54efe1401ee364aa8b870020daa0806ad2e49b22ab967e67810aac3", @ANYRES16=0x0, @ANYBLOB="100028bd7000fddbdf253b00000008005700030500001400cd0005000500ff03090002001d00fb0a030004006c000800a00007000000080026006c0900000800a100f5ffffff0800a1000b010000050019010b0000000800a100010000000800a000010000000800a00000000000"], 0x74}, 0x1, 0x0, 0x0, 0xd0}, 0x4000040) setsockopt(r9, 0x84, 0x80020004, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r13, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x20000050) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x1) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}}}}) 1.691949677s ago: executing program 1 (id=711): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.556443485s ago: executing program 2 (id=712): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x40000000000004) (async) sendfile(r1, r1, 0x0, 0x40000000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000050000000000000003000000184000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000b7080000000000007b8af8ff00000000b7080000f10200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a57c9ffe00000006a80400080000080000000001"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x2d, &(0x7f0000000140)=""/45, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x7, 0xa}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x4, 0x9, 0xb}, {0x5, 0x2, 0x7, 0x8}, {0x4, 0x5, 0x2, 0x5}, {0x3, 0x2, 0x8, 0x8}, {0x5, 0x5, 0xb, 0xb}, {0x4, 0x4, 0x9, 0xc}, {0x2, 0x5, 0x5, 0x3}, {0x3, 0x4, 0xa, 0x4}, {0x2, 0x2, 0x10}, {0x0, 0x1, 0x10, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r5, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r5, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r8, 0x29, 0x4d, &(0x7f0000000140)=ANY=[], 0x8) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/23, 0x17}, 0x0) sendto$inet6(r9, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r6, r5, 0x6, 0x0, 0x0, @void, @value=r6, @void, @void, r7}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0xf84, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, r4, 0x28, 0x20, 0x0, @void, @void, @void, @value=r10, r7}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, r4, 0x28, 0x20, 0x0, @void, @void, @void, @value=r10, r7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r13, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r13, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r13, 0x0) (async) listen(r13, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000880)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x81, @local}}, 0x3, 0x9, 0x401, 0x9, 0x22, 0x400, 0x3b}, 0x9c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000df068ec31b75a191d5f5bae3f1", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="10005a800c0001800500020056000000"], 0x2c}}, 0x4000) 1.460047595s ago: executing program 1 (id=713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.095090664s ago: executing program 2 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040) 1.029201087s ago: executing program 1 (id=715): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x4, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x3c}}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000940)="ad5628ef6c12d6db387385cd44417da0b0c268681f90148b335e0cbe7f22d2638d90a2e3b094fc6f159e838f55b5b1e865de5e05dc48eebb7389d4bee68c93", 0x3f}], 0x1, 0x0, 0x0, 0x880}}], 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000440)=@x25, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000780)="25744ea4977f7975fc8c2ed0b4dbd3caac9ef917b36bbfc6e1215f228ec3640f35d2aa8ebd839e8dca326981a3a9706402619960c4378e9f955ec78be22f7e23016ec7f619f66c46669856ca137301cb18e75b5c58afb0fd44bdf21fd04cdfd75da2a9aae9ac034a3bb0b67562fbb24424023ef9df595cde3008c90e00f308074937cd5375594598b78f0f9a1d9414c8b754bea9e176e04df97cf533773ceab336ad5d67e6055f2d5bfb8d84ecb839f3df1087afecff34a48cd292c5615818bf497d27b201492df6f4e3386b4c56b84b76cff965766d1355273209e589ac904ad4d23cb04dd69c71267f9b8209aad7c2cadb", 0xf2}], 0x1, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000070000009500000009000200"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='+qids '], 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r3}) 967.987716ms ago: executing program 0 (id=716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0x6b, 0x60000000}, 0x50) 903.252023ms ago: executing program 2 (id=717): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x6}, 0xd90) 807.992957ms ago: executing program 0 (id=718): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeff35ac000000fff5dd00000010000100080c10000000ffff80000000", 0x58}], 0x1) 781.26466ms ago: executing program 1 (id=719): socket(0x9, 0x2, 0xeb89) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) (fail_nth: 34) 636.177672ms ago: executing program 2 (id=720): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 378.680237ms ago: executing program 2 (id=721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100), 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3000c0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1, 0x3}}, 0x0, 0x0, 0xd, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0xffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_delroute={0xc8, 0x19, 0x200, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x14, 0x0, 0x4b, 0xfc, 0x4, 0xff, 0x6, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x9}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xfffff}, {0xfff}, {0x14, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x58db}, {0x6}, {0xcc}, {0x4, 0x0, 0x1}, {0x1}, {0x87, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x43f, 0x0, 0x1}, {0x1000}, {0xfff, 0x0, 0x1}, {}, {0x3, 0x0, 0x1}, {0x93fc}, {0x6, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0xd}, {0x100}, {0x7, 0x0, 0x1}, {0xfff01}, {0x7f}, {0x40, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x676, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0xa, "0908fb3e2163d6aa5f023b703b03"}}, @RTA_VIA={0x14, 0x12, {0x6, "456ba46d330a7a83c7bbbff7c93f"}}]}, 0xc8}}, 0x0) 320.578648ms ago: executing program 3 (id=722): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x1}, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x46}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000885}, 0x4c884) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 60.097394ms ago: executing program 0 (id=723): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="040100001a000700000000e2fa00000000000000000001000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000000000000002b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e"], 0x104}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="07000000010003", 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 0s ago: executing program 2 (id=724): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2528b21df9bde4f0fe82fc702943cf00770008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000006600000012002a0004060107000055ff3c0401120b0900000a0006005050505050500000"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0xb, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14008800}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010000300686173683a69702c6d616300a20fe3ecbe014c32"], 0x54}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000), 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10) kernel console output (not intermixed with test programs): .459190][ T6036] RAX: ffffffffffffffda RBX: 00007f7ab73b5fa0 RCX: 00007f7ab718e969 [ 99.459205][ T6036] RDX: fffffffffffffede RSI: 00002000000001c0 RDI: 0000000000000003 [ 99.459219][ T6036] RBP: 00007f7ab805d090 R08: 0000000000000000 R09: 0000000003000137 [ 99.459232][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.459244][ T6036] R13: 0000000000000000 R14: 00007f7ab73b5fa0 R15: 00007fff6b520508 [ 99.459279][ T6036] [ 99.828733][ T6017] lowmem_reserve[]: 0 0 0 0 0 [ 99.847478][ T6017] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.943800][ T6017] lowmem_reserve[]: 0 0 0 0 0 [ 99.985123][ T6017] Node 1 Normal free:3910448kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:64kB free_cma:0kB [ 100.104986][ T6017] lowmem_reserve[]: 0 0 0 0 0 [ 100.115099][ T6017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 100.190784][ T6017] Node 0 DMA32: 456*4kB (U) 299*8kB (UME) 248*16kB (UME) 269*32kB (UME) 115*64kB (UME) 12*128kB (UME) 12*256kB (ME) 7*512kB (UME) 4*1024kB (UME) 6*2048kB (UME) 352*4096kB (M) = 1490520kB [ 100.226391][ T6054] nbd: socks must be embedded in a SOCK_ITEM attr [ 100.272949][ T6017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 100.329266][ T6017] Node 1 Normal: 208*4kB (UME) 56*8kB (UME) 39*16kB (UME) 220*32kB (UME) 105*64kB (UME) 36*128kB (UME) 12*256kB (UM) 8*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3910448kB [ 100.377161][ T6055] can: request_module (can-proto-5) failed. [ 100.407395][ T6017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.438338][ T6017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.499382][ T6017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.536112][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 100.540594][ T6017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.593962][ T6017] 41592 total pagecache pages [ 100.659450][ T6017] 0 pages in swap cache [ 100.663689][ T6017] Free swap = 124996kB [ 100.667898][ T6017] Total swap = 124996kB [ 100.708207][ T6017] 2097051 pages RAM [ 100.712215][ T6017] 0 pages HighMem/MovableOnly [ 100.729270][ T6070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.37'. [ 100.741518][ T6017] 424374 pages reserved [ 100.745729][ T6017] 0 pages cma reserved [ 100.789309][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 101.133361][ T6083] vlan2: entered allmulticast mode [ 101.169452][ T6083] bond0: entered allmulticast mode [ 101.204838][ T6083] bond_slave_0: entered allmulticast mode [ 101.235753][ T6083] bond_slave_1: entered allmulticast mode [ 101.605480][ T6104] FAULT_INJECTION: forcing a failure. [ 101.605480][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 101.663587][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.4.47 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 101.663616][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.663635][ T6104] Call Trace: [ 101.663643][ T6104] [ 101.663652][ T6104] dump_stack_lvl+0x189/0x250 [ 101.663690][ T6104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.663719][ T6104] ? __pfx__printk+0x10/0x10 [ 101.663750][ T6104] ? __pfx___might_resched+0x10/0x10 [ 101.663768][ T6104] ? fs_reclaim_acquire+0x7d/0x100 [ 101.663802][ T6104] should_fail_ex+0x414/0x560 [ 101.663839][ T6104] should_failslab+0xa8/0x100 [ 101.663866][ T6104] kmem_cache_alloc_noprof+0x73/0x3c0 [ 101.663890][ T6104] ? __kernfs_new_node+0xd7/0x7f0 [ 101.663923][ T6104] __kernfs_new_node+0xd7/0x7f0 [ 101.663952][ T6104] ? __lock_acquire+0xaac/0xd20 [ 101.663985][ T6104] ? __pfx___kernfs_new_node+0x10/0x10 [ 101.664013][ T6104] ? kernfs_root+0x1c/0x230 [ 101.664046][ T6104] ? kernfs_root+0x1c/0x230 [ 101.664071][ T6104] ? kernfs_root+0x1c/0x230 [ 101.664094][ T6104] ? kernfs_root+0x1c/0x230 [ 101.664125][ T6104] kernfs_new_node+0x102/0x210 [ 101.664159][ T6104] __kernfs_create_file+0x4b/0x2e0 [ 101.664183][ T6104] sysfs_add_file_mode_ns+0x238/0x300 [ 101.664213][ T6104] sysfs_create_file_ns+0x128/0x1a0 [ 101.664234][ T6104] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 101.664260][ T6104] ? device_create_file+0xf4/0x1c0 [ 101.664284][ T6104] device_add+0x440/0xb50 [ 101.664305][ T6104] ? device_initialize+0x24b/0x440 [ 101.664329][ T6104] wakeup_source_sysfs_add+0x1af/0x280 [ 101.664355][ T6104] wakeup_source_register+0x175/0x250 [ 101.664377][ T6104] ep_insert+0xff3/0x1a00 [ 101.664413][ T6104] ? __pfx_ep_insert+0x10/0x10 [ 101.664446][ T6104] ? bpf_lsm_capable+0x9/0x20 [ 101.664483][ T6104] do_epoll_ctl+0x80e/0xe80 [ 101.664512][ T6104] __x64_sys_epoll_ctl+0x163/0x1a0 [ 101.664532][ T6104] ? rcu_is_watching+0x15/0xb0 [ 101.664563][ T6104] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 101.664589][ T6104] ? do_syscall_64+0xba/0x210 [ 101.664623][ T6104] do_syscall_64+0xf6/0x210 [ 101.664661][ T6104] ? clear_bhb_loop+0x45/0xa0 [ 101.664685][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.664703][ T6104] RIP: 0033:0x7f7ab718e969 [ 101.664720][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.664735][ T6104] RSP: 002b:00007f7ab803c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 101.664757][ T6104] RAX: ffffffffffffffda RBX: 00007f7ab73b6080 RCX: 00007f7ab718e969 [ 101.664771][ T6104] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 101.664782][ T6104] RBP: 00007f7ab803c090 R08: 0000000000000000 R09: 0000000000000000 [ 101.664793][ T6104] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002 [ 101.664805][ T6104] R13: 0000000000000000 R14: 00007f7ab73b6080 R15: 00007fff6b520508 [ 101.664835][ T6104] [ 102.133017][ T6106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.48'. [ 102.214253][ T6106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.48'. [ 103.057006][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.077195][ T6153] FAULT_INJECTION: forcing a failure. [ 103.077195][ T6153] name failslab, interval 1, probability 0, space 0, times 0 [ 103.104034][ T6153] CPU: 1 UID: 0 PID: 6153 Comm: syz.0.62 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 103.104063][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 103.104075][ T6153] Call Trace: [ 103.104082][ T6153] [ 103.104091][ T6153] dump_stack_lvl+0x189/0x250 [ 103.104127][ T6153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.104156][ T6153] ? __pfx__printk+0x10/0x10 [ 103.104182][ T6153] ? __pfx___might_resched+0x10/0x10 [ 103.104200][ T6153] ? fs_reclaim_acquire+0x7d/0x100 [ 103.104234][ T6153] should_fail_ex+0x414/0x560 [ 103.104271][ T6153] should_failslab+0xa8/0x100 [ 103.104299][ T6153] kmem_cache_alloc_noprof+0x73/0x3c0 [ 103.104322][ T6153] ? __kernfs_new_node+0xd7/0x7f0 [ 103.104356][ T6153] __kernfs_new_node+0xd7/0x7f0 [ 103.104384][ T6153] ? __lock_acquire+0xaac/0xd20 [ 103.104418][ T6153] ? __pfx___kernfs_new_node+0x10/0x10 [ 103.104447][ T6153] ? kernfs_root+0x1c/0x230 [ 103.104481][ T6153] ? kernfs_root+0x1c/0x230 [ 103.104513][ T6153] ? kernfs_root+0x1c/0x230 [ 103.104536][ T6153] ? kernfs_root+0x1c/0x230 [ 103.104568][ T6153] kernfs_new_node+0x102/0x210 [ 103.104602][ T6153] kernfs_create_link+0xa7/0x200 [ 103.104628][ T6153] sysfs_do_create_link_sd+0x83/0x110 [ 103.104658][ T6153] device_add_class_symlinks+0x1cf/0x240 [ 103.104686][ T6153] device_add+0x475/0xb50 [ 103.104706][ T6153] ? device_initialize+0x24b/0x440 [ 103.104735][ T6153] wakeup_source_sysfs_add+0x1af/0x280 [ 103.104763][ T6153] wakeup_source_register+0x175/0x250 [ 103.104788][ T6153] ep_insert+0xff3/0x1a00 [ 103.104827][ T6153] ? __pfx_ep_insert+0x10/0x10 [ 103.104863][ T6153] ? bpf_lsm_capable+0x9/0x20 [ 103.104900][ T6153] do_epoll_ctl+0x80e/0xe80 [ 103.104932][ T6153] __x64_sys_epoll_ctl+0x163/0x1a0 [ 103.104953][ T6153] ? rcu_is_watching+0x15/0xb0 [ 103.104984][ T6153] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 103.105010][ T6153] ? do_syscall_64+0xba/0x210 [ 103.105045][ T6153] do_syscall_64+0xf6/0x210 [ 103.105074][ T6153] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.105094][ T6153] ? clear_bhb_loop+0x45/0xa0 [ 103.105118][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.105137][ T6153] RIP: 0033:0x7fc33bf8e969 [ 103.105155][ T6153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.105171][ T6153] RSP: 002b:00007fc33ce84038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 103.105191][ T6153] RAX: ffffffffffffffda RBX: 00007fc33c1b6080 RCX: 00007fc33bf8e969 [ 103.105206][ T6153] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 103.105216][ T6153] RBP: 00007fc33ce84090 R08: 0000000000000000 R09: 0000000000000000 [ 103.105228][ T6153] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002 [ 103.105240][ T6153] R13: 0000000000000000 R14: 00007fc33c1b6080 R15: 00007ffe39c46168 [ 103.105272][ T6153] [ 103.848825][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.867633][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.882792][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.897255][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.919977][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.928627][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.137653][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 104.159072][ T6181] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 104.173117][ T6181] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 104.215298][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.243004][ T6181] netlink: 80 bytes leftover after parsing attributes in process `syz.3.69'. [ 104.380009][ T6187] ip6t_srh: unknown srh match flags 4000 [ 104.395529][ T6190] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 104.445123][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.483063][ T6187] team_slave_0: entered promiscuous mode [ 104.489078][ T6187] team_slave_1: entered promiscuous mode [ 104.495557][ T6187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.508351][ T6187] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 104.644567][ T6199] FAULT_INJECTION: forcing a failure. [ 104.644567][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 104.682344][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.2.74 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 104.682374][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.682386][ T6199] Call Trace: [ 104.682395][ T6199] [ 104.682405][ T6199] dump_stack_lvl+0x189/0x250 [ 104.682447][ T6199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.682479][ T6199] ? __pfx__printk+0x10/0x10 [ 104.682509][ T6199] ? __pfx___might_resched+0x10/0x10 [ 104.682529][ T6199] ? fs_reclaim_acquire+0x7d/0x100 [ 104.682568][ T6199] should_fail_ex+0x414/0x560 [ 104.682610][ T6199] should_failslab+0xa8/0x100 [ 104.682640][ T6199] kmem_cache_alloc_noprof+0x73/0x3c0 [ 104.682667][ T6199] ? __kernfs_new_node+0xd7/0x7f0 [ 104.682705][ T6199] __kernfs_new_node+0xd7/0x7f0 [ 104.682737][ T6199] ? __lock_acquire+0xaac/0xd20 [ 104.682776][ T6199] ? __pfx___kernfs_new_node+0x10/0x10 [ 104.682809][ T6199] ? kernfs_root+0x1c/0x230 [ 104.682848][ T6199] ? kernfs_root+0x1c/0x230 [ 104.682876][ T6199] ? kernfs_root+0x1c/0x230 [ 104.682902][ T6199] ? kernfs_root+0x1c/0x230 [ 104.682936][ T6199] kernfs_new_node+0x102/0x210 [ 104.682967][ T6199] __kernfs_create_file+0x4b/0x2e0 [ 104.682989][ T6199] sysfs_add_file_mode_ns+0x238/0x300 [ 104.683018][ T6199] internal_create_group+0x66d/0x1110 [ 104.683059][ T6199] ? __pfx_internal_create_group+0x10/0x10 [ 104.683085][ T6199] ? kernfs_add_one+0xf0/0x520 [ 104.683129][ T6199] sysfs_create_groups+0x59/0x120 [ 104.683156][ T6199] device_add_attrs+0x1c4/0x5a0 [ 104.683184][ T6199] ? __pfx_device_add_attrs+0x10/0x10 [ 104.683209][ T6199] ? device_add_class_symlinks+0x21f/0x240 [ 104.683233][ T6199] device_add+0x496/0xb50 [ 104.683253][ T6199] ? device_initialize+0x24b/0x440 [ 104.683275][ T6199] wakeup_source_sysfs_add+0x1af/0x280 [ 104.683301][ T6199] wakeup_source_register+0x175/0x250 [ 104.683329][ T6199] ep_insert+0xff3/0x1a00 [ 104.683367][ T6199] ? __pfx_ep_insert+0x10/0x10 [ 104.683401][ T6199] ? bpf_lsm_capable+0x9/0x20 [ 104.683439][ T6199] do_epoll_ctl+0x80e/0xe80 [ 104.683474][ T6199] __x64_sys_epoll_ctl+0x163/0x1a0 [ 104.683498][ T6199] ? rcu_is_watching+0x15/0xb0 [ 104.683533][ T6199] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 104.683563][ T6199] ? do_syscall_64+0xba/0x210 [ 104.683611][ T6199] do_syscall_64+0xf6/0x210 [ 104.683643][ T6199] ? clear_bhb_loop+0x45/0xa0 [ 104.683668][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.683688][ T6199] RIP: 0033:0x7fbb46d8e969 [ 104.683707][ T6199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.683725][ T6199] RSP: 002b:00007fbb47c3a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 104.683752][ T6199] RAX: ffffffffffffffda RBX: 00007fbb46fb6080 RCX: 00007fbb46d8e969 [ 104.683765][ T6199] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 104.683775][ T6199] RBP: 00007fbb47c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 104.683785][ T6199] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002 [ 104.683797][ T6199] R13: 0000000000000000 R14: 00007fbb46fb6080 R15: 00007ffdfbb8b258 [ 104.683827][ T6199] [ 105.259201][ T63] bridge_slave_1: left allmulticast mode [ 105.265146][ T63] bridge_slave_1: left promiscuous mode [ 105.298101][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.366387][ T63] bridge_slave_0: left allmulticast mode [ 105.388315][ T63] bridge_slave_0: left promiscuous mode [ 105.417775][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.583083][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 105.602608][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 105.620649][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 105.630889][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 105.639189][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 105.646778][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 105.655021][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 105.663448][ T5880] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 105.680458][ T5880] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 106.020172][ T5835] Bluetooth: hci4: command tx timeout [ 106.086317][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.110223][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.121754][ T63] bond0 (unregistering): Released all slaves [ 106.277226][ T6168] chnl_net:caif_netlink_parms(): no params data found [ 106.451191][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 106.483752][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 106.571417][ T6254] netlink: 45 bytes leftover after parsing attributes in process `syz.2.86'. [ 106.620225][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 107.043486][ T6284] FAULT_INJECTION: forcing a failure. [ 107.043486][ T6284] name failslab, interval 1, probability 0, space 0, times 0 [ 107.075378][ T6276] veth1_to_team: entered promiscuous mode [ 107.106918][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.1.90 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 107.106947][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.106958][ T6284] Call Trace: [ 107.106966][ T6284] [ 107.106976][ T6284] dump_stack_lvl+0x189/0x250 [ 107.107013][ T6284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.107041][ T6284] ? __pfx__printk+0x10/0x10 [ 107.107067][ T6284] ? __pfx___might_resched+0x10/0x10 [ 107.107085][ T6284] ? fs_reclaim_acquire+0x7d/0x100 [ 107.107119][ T6284] should_fail_ex+0x414/0x560 [ 107.107157][ T6284] should_failslab+0xa8/0x100 [ 107.107184][ T6284] kmem_cache_alloc_noprof+0x73/0x3c0 [ 107.107214][ T6284] ? __kernfs_new_node+0xd7/0x7f0 [ 107.107247][ T6284] __kernfs_new_node+0xd7/0x7f0 [ 107.107276][ T6284] ? __lock_acquire+0xaac/0xd20 [ 107.107316][ T6284] ? __pfx___kernfs_new_node+0x10/0x10 [ 107.107344][ T6284] ? kernfs_root+0x1c/0x230 [ 107.107378][ T6284] ? kernfs_root+0x1c/0x230 [ 107.107403][ T6284] ? kernfs_root+0x1c/0x230 [ 107.107426][ T6284] ? kernfs_root+0x1c/0x230 [ 107.107458][ T6284] kernfs_new_node+0x102/0x210 [ 107.107492][ T6284] __kernfs_create_file+0x4b/0x2e0 [ 107.107517][ T6284] sysfs_add_file_mode_ns+0x238/0x300 [ 107.107550][ T6284] internal_create_group+0x66d/0x1110 [ 107.107595][ T6284] ? __pfx_internal_create_group+0x10/0x10 [ 107.107623][ T6284] ? kernfs_add_one+0xf0/0x520 [ 107.107660][ T6284] sysfs_create_groups+0x59/0x120 [ 107.107691][ T6284] device_add_attrs+0x1c4/0x5a0 [ 107.107721][ T6284] ? __pfx_device_add_attrs+0x10/0x10 [ 107.107747][ T6284] ? device_add_class_symlinks+0x21f/0x240 [ 107.107773][ T6284] device_add+0x496/0xb50 [ 107.107793][ T6284] ? device_initialize+0x24b/0x440 [ 107.107818][ T6284] wakeup_source_sysfs_add+0x1af/0x280 [ 107.107845][ T6284] wakeup_source_register+0x175/0x250 [ 107.107870][ T6284] ep_insert+0xff3/0x1a00 [ 107.107910][ T6284] ? __pfx_ep_insert+0x10/0x10 [ 107.107943][ T6284] ? bpf_lsm_capable+0x9/0x20 [ 107.107981][ T6284] do_epoll_ctl+0x80e/0xe80 [ 107.108013][ T6284] __x64_sys_epoll_ctl+0x163/0x1a0 [ 107.108034][ T6284] ? rcu_is_watching+0x15/0xb0 [ 107.108065][ T6284] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 107.108092][ T6284] ? do_syscall_64+0xba/0x210 [ 107.108127][ T6284] do_syscall_64+0xf6/0x210 [ 107.108157][ T6284] ? clear_bhb_loop+0x45/0xa0 [ 107.108182][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.108201][ T6284] RIP: 0033:0x7ff0b638e969 [ 107.108224][ T6284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.108239][ T6284] RSP: 002b:00007ff0b7286038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 107.108260][ T6284] RAX: ffffffffffffffda RBX: 00007ff0b65b6080 RCX: 00007ff0b638e969 [ 107.108274][ T6284] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 107.108285][ T6284] RBP: 00007ff0b7286090 R08: 0000000000000000 R09: 0000000000000000 [ 107.108297][ T6284] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002 [ 107.108308][ T6284] R13: 0000000000000000 R14: 00007ff0b65b6080 R15: 00007ffccdd79c98 [ 107.108340][ T6284] [ 107.672448][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.95'. [ 107.770023][ T6286] netlink: 96 bytes leftover after parsing attributes in process `syz.0.91'. [ 107.799222][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.825941][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.848635][ T6168] bridge_slave_0: entered allmulticast mode [ 107.870372][ T6168] bridge_slave_0: entered promiscuous mode [ 107.890918][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.907289][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.914966][ T6168] bridge_slave_1: entered allmulticast mode [ 107.933883][ T6168] bridge_slave_1: entered promiscuous mode [ 108.098722][ T5835] Bluetooth: hci4: command tx timeout [ 108.153051][ T6168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.257136][ T63] hsr_slave_0: left promiscuous mode [ 108.272869][ T63] hsr_slave_1: left promiscuous mode [ 108.285383][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.308363][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.322620][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.348162][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.437440][ T63] veth1_macvtap: left promiscuous mode [ 108.447845][ T63] veth0_macvtap: left promiscuous mode [ 108.458550][ T63] veth1_vlan: left promiscuous mode [ 108.464096][ T63] veth0_vlan: left promiscuous mode [ 108.570691][ T6327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.100'. [ 108.965202][ T63] team0 (unregistering): Port device team_slave_1 removed [ 109.005615][ T63] team0 (unregistering): Port device team_slave_0 removed [ 109.377478][ T6168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.435160][ T6168] team0: Port device team_slave_0 added [ 109.452914][ T6168] team0: Port device team_slave_1 added [ 109.746722][ T6336] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 109.748705][ T24] IPVS: starting estimator thread 0... [ 109.786088][ T6323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.812571][ T6323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.831358][ T6342] Zero length message leads to an empty skb [ 109.854388][ T6323] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 109.863862][ T6340] IPVS: using max 29 ests per chain, 69600 per kthread [ 109.881965][ T6323] team_slave_0: left promiscuous mode [ 109.888424][ T6323] team_slave_1: left promiscuous mode [ 109.892824][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 109.909117][ T6323] bond0 (unregistering): Released all slaves [ 110.183388][ T5835] Bluetooth: hci4: command tx timeout [ 110.256241][ T6342] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 110.307689][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 110.347176][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.386719][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.426373][ T6360] netlink: 'syz.3.113': attribute type 309 has an invalid length. [ 110.478638][ T6168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.517109][ T6168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.556325][ T6168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.630954][ T6168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.706465][ T6369] netlink: 68 bytes leftover after parsing attributes in process `syz.3.116'. [ 110.883432][ T6168] hsr_slave_0: entered promiscuous mode [ 110.919623][ T6168] hsr_slave_1: entered promiscuous mode [ 110.958244][ T6168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.970239][ T6168] Cannot create hsr debugfs directory [ 111.237024][ T6388] batadv1: entered promiscuous mode [ 112.258454][ T5835] Bluetooth: hci4: command tx timeout [ 113.047138][ T6445] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 113.118064][ T6445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.132'. [ 113.128405][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 113.257430][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 113.683716][ T6478] netlink: 'syz.0.139': attribute type 5 has an invalid length. [ 113.695523][ T6478] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.736538][ T6478] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.877342][ T6168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.941884][ T6168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.995124][ T6488] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.144'. [ 114.007048][ T6168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.044804][ T6168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.117708][ T6487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.523719][ T6168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.600917][ T6168] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.639491][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.646677][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.703901][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.711853][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.277555][ T6527] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 115.329966][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 115.431290][ T6168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.206079][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.707966][ T6168] veth0_vlan: entered promiscuous mode [ 116.754697][ T6168] veth1_vlan: entered promiscuous mode [ 116.952267][ T6168] veth0_macvtap: entered promiscuous mode [ 117.003406][ T6168] veth1_macvtap: entered promiscuous mode [ 117.022715][ T6584] nbd: must specify at least one socket [ 117.034211][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.063367][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.113800][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.144545][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.207363][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.232416][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.265208][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.334989][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.383235][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.431803][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.465548][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.482257][ T6168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.509662][ T6168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.551551][ T6168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.583126][ T6168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.605855][ T6168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.631922][ T6168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.651185][ T6168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.751665][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 117.795874][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 118.210008][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.217863][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.465084][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.497803][ T6628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.516725][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.601213][ T6633] nbd: must specify at least one socket [ 118.706039][ T6640] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 118.920970][ T6647] xt_SECMARK: invalid mode: 0 [ 118.946546][ T6646] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 118.973805][ T6646] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 119.012315][ T6646] bond1: (slave vcan1): making interface the new active one [ 119.021174][ T6646] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 119.073951][ T6644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.479670][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.706778][ T6644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.926337][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.993878][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 120.034890][ T6671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 120.061225][ T6675] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 120.121092][ T6644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.726915][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.748380][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.775607][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.794343][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.804368][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.866462][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.923318][ T6644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.036755][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.313324][ T6644] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.610059][ T6644] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.805008][ T53] bridge_slave_1: left allmulticast mode [ 121.820299][ T5840] block nbd0: Receive control failed (result -32) [ 121.825483][ T53] bridge_slave_1: left promiscuous mode [ 121.843833][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.874411][ T53] bridge_slave_0: left allmulticast mode [ 121.888819][ T53] bridge_slave_0: left promiscuous mode [ 121.901704][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.076779][ T6708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.816034][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.831029][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.847471][ T53] bond0 (unregistering): Released all slaves [ 122.898584][ T5840] Bluetooth: hci4: command tx timeout [ 123.212235][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 123.224736][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'. [ 123.241457][ T6735] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 123.375324][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 123.913008][ T53] hsr_slave_0: left promiscuous mode [ 123.952906][ T53] hsr_slave_1: left promiscuous mode [ 123.992066][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.011634][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.061787][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.080461][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.135948][ T53] veth1_macvtap: left promiscuous mode [ 124.149774][ T53] veth0_macvtap: left promiscuous mode [ 124.155604][ T53] veth1_vlan: left promiscuous mode [ 124.165084][ T53] veth0_vlan: left promiscuous mode [ 124.213726][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 124.742919][ T53] team0 (unregistering): Port device team_slave_1 removed [ 124.782439][ T53] team0 (unregistering): Port device team_slave_0 removed [ 124.978484][ T5840] Bluetooth: hci4: command tx timeout [ 125.249676][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 125.269189][ T6765] tipc: Started in network mode [ 125.301228][ T6765] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 125.324759][ T6765] tipc: Enabling of bearer rejected, failed to enable media [ 125.553481][ T6782] netlink: 188 bytes leftover after parsing attributes in process `syz.0.201'. [ 125.706890][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 125.733662][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.788667][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.795988][ T6685] bridge_slave_0: entered allmulticast mode [ 125.860871][ T6685] bridge_slave_0: entered promiscuous mode [ 125.882278][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.896694][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.911899][ T6685] bridge_slave_1: entered allmulticast mode [ 125.931185][ T6685] bridge_slave_1: entered promiscuous mode [ 126.100960][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.157050][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.454344][ T6685] team0: Port device team_slave_0 added [ 126.529647][ T6685] team0: Port device team_slave_1 added [ 126.872766][ T6821] lo speed is unknown, defaulting to 1000 [ 126.961610][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.970347][ T5840] block nbd1: Receive control failed (result -32) [ 127.008720][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.035399][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.057830][ T6821] lo speed is unknown, defaulting to 1000 [ 127.070207][ T6821] lo speed is unknown, defaulting to 1000 [ 127.087992][ T5840] Bluetooth: hci4: command tx timeout [ 127.231307][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.276799][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.333680][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.867274][ T6685] hsr_slave_0: entered promiscuous mode [ 127.905954][ T6685] hsr_slave_1: entered promiscuous mode [ 127.919017][ T6685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.937282][ T6685] Cannot create hsr debugfs directory [ 128.076427][ T6821] infiniband syz0: set active [ 128.083153][ T6821] infiniband syz0: added lo [ 128.093338][ T6821] syz0: rxe_create_cq: returned err = -12 [ 128.101700][ T5898] lo speed is unknown, defaulting to 1000 [ 128.127569][ T6821] infiniband syz0: Couldn't create ib_mad CQ [ 128.140521][ T6861] netlink: 'syz.1.221': attribute type 10 has an invalid length. [ 128.144314][ T6821] infiniband syz0: Couldn't open port 1 [ 128.187061][ T6861] bond0: (slave wlan1): Releasing backup interface [ 128.226209][ T6821] RDS/IB: syz0: added [ 128.227641][ T6861] team0: Port device wlan1 added [ 128.237304][ T6821] smc: adding ib device syz0 with port count 1 [ 128.247158][ T6821] smc: ib device syz0 port 1 has pnetid [ 128.296392][ T5898] lo speed is unknown, defaulting to 1000 [ 128.337090][ T6821] lo speed is unknown, defaulting to 1000 [ 129.138849][ T5840] Bluetooth: hci4: command tx timeout [ 129.176569][ T6821] lo speed is unknown, defaulting to 1000 [ 129.946035][ T6685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.253578][ T6685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.311436][ T6685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.395789][ T6685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.399132][ T6821] lo speed is unknown, defaulting to 1000 [ 130.596398][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 130.630489][ T6923] netlink: 256 bytes leftover after parsing attributes in process `syz.2.234'. [ 130.857456][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.966840][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.987531][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.994771][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.046496][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.053732][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.178139][ T6821] lo speed is unknown, defaulting to 1000 [ 131.203742][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 131.837431][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.328661][ T6821] lo speed is unknown, defaulting to 1000 [ 132.874888][ T6685] veth0_vlan: entered promiscuous mode [ 132.891799][ T6994] xt_NFQUEUE: number of total queues is 0 [ 132.954974][ T6685] veth1_vlan: entered promiscuous mode [ 132.982265][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.000858][ T6999] FAULT_INJECTION: forcing a failure. [ 133.000858][ T6999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.046648][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.1.251 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 133.046683][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.046695][ T6999] Call Trace: [ 133.046703][ T6999] [ 133.046712][ T6999] dump_stack_lvl+0x189/0x250 [ 133.046761][ T6999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.046788][ T6999] ? __pfx__printk+0x10/0x10 [ 133.046821][ T6999] should_fail_ex+0x414/0x560 [ 133.046859][ T6999] _copy_from_user+0x2d/0xb0 [ 133.046887][ T6999] alg_setkey+0xb8/0x190 [ 133.046910][ T6999] alg_setsockopt+0x3da/0x4a0 [ 133.046928][ T6999] ? __pfx_alg_setsockopt+0x10/0x10 [ 133.046949][ T6999] do_sock_setsockopt+0x257/0x3e0 [ 133.046979][ T6999] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 133.047001][ T6999] ? __fget_files+0x2a/0x420 [ 133.047033][ T6999] ? __fget_files+0x3a0/0x420 [ 133.047057][ T6999] ? __fget_files+0x2a/0x420 [ 133.047092][ T6999] __x64_sys_setsockopt+0x18b/0x220 [ 133.047124][ T6999] do_syscall_64+0xf6/0x210 [ 133.047156][ T6999] ? clear_bhb_loop+0x45/0xa0 [ 133.047181][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.047200][ T6999] RIP: 0033:0x7ff0b638e969 [ 133.047226][ T6999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.047241][ T6999] RSP: 002b:00007ff0b72a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.047269][ T6999] RAX: ffffffffffffffda RBX: 00007ff0b65b5fa0 RCX: 00007ff0b638e969 [ 133.047283][ T6999] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 133.047295][ T6999] RBP: 00007ff0b72a7090 R08: 0000000000000011 R09: 0000000000000000 [ 133.047307][ T6999] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 133.047320][ T6999] R13: 0000000000000000 R14: 00007ff0b65b5fa0 R15: 00007ffccdd79c98 [ 133.047352][ T6999] [ 133.431486][ T7009] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 133.662550][ T7006] bond1: (slave gretap1): making interface the new active one [ 133.677383][ T7006] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 133.717814][ T6821] syz.0.210 (6821) used greatest stack depth: 20312 bytes left [ 133.874983][ T6685] veth0_macvtap: entered promiscuous mode [ 133.917746][ T6685] veth1_macvtap: entered promiscuous mode [ 133.986714][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.058118][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.100838][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.147370][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.159845][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.187276][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.233413][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.297318][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 134.309586][ T7047] FAULT_INJECTION: forcing a failure. [ 134.309586][ T7047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.324271][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.0.263 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 134.324297][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.324309][ T7047] Call Trace: [ 134.324317][ T7047] [ 134.324325][ T7047] dump_stack_lvl+0x189/0x250 [ 134.324362][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.324390][ T7047] ? __pfx__printk+0x10/0x10 [ 134.324422][ T7047] should_fail_ex+0x414/0x560 [ 134.324458][ T7047] _copy_to_user+0x31/0xb0 [ 134.324484][ T7047] simple_read_from_buffer+0xe1/0x170 [ 134.324521][ T7047] proc_fail_nth_read+0x1df/0x250 [ 134.324551][ T7047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.324580][ T7047] ? rw_verify_area+0x258/0x650 [ 134.324600][ T7047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.324632][ T7047] vfs_read+0x1fd/0x980 [ 134.324689][ T7047] ? __pfx___mutex_lock+0x10/0x10 [ 134.324719][ T7047] ? __pfx_vfs_read+0x10/0x10 [ 134.324742][ T7047] ? __fget_files+0x2a/0x420 [ 134.324772][ T7047] ? __fget_files+0x3a0/0x420 [ 134.324795][ T7047] ? __fget_files+0x2a/0x420 [ 134.324829][ T7047] ksys_read+0x145/0x250 [ 134.324853][ T7047] ? __pfx_ksys_read+0x10/0x10 [ 134.324878][ T7047] ? do_syscall_64+0xba/0x210 [ 134.324912][ T7047] do_syscall_64+0xf6/0x210 [ 134.324943][ T7047] ? clear_bhb_loop+0x45/0xa0 [ 134.324967][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.324985][ T7047] RIP: 0033:0x7fc33bf8d37c [ 134.325003][ T7047] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 134.325019][ T7047] RSP: 002b:00007fc33cea5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.325040][ T7047] RAX: ffffffffffffffda RBX: 00007fc33c1b5fa0 RCX: 00007fc33bf8d37c [ 134.325054][ T7047] RDX: 000000000000000f RSI: 00007fc33cea50a0 RDI: 0000000000000004 [ 134.325064][ T7047] RBP: 00007fc33cea5090 R08: 0000000000000000 R09: 0000000000000000 [ 134.325075][ T7047] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 134.325086][ T7047] R13: 0000000000000000 R14: 00007fc33c1b5fa0 R15: 00007ffe39c46168 [ 134.325117][ T7047] [ 134.595303][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 134.654534][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.732170][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.795172][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.818027][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.828627][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.849362][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.907211][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.063885][ T6685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.108183][ T6685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.116955][ T6685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.173543][ T6685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.575632][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.621347][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.743343][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.764324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.352937][ T3488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.580625][ T3488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.702208][ T3488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.983133][ T3488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.488433][ T7151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.597589][ T7151] netlink: 96 bytes leftover after parsing attributes in process `syz.3.287'. [ 137.883054][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.892082][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.937430][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.948303][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.959795][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.970299][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.982008][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.133695][ T7136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.152547][ T7136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.365968][ T7136] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.376355][ T7136] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.396312][ T7136] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.412465][ T7136] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.544366][ T5832] lo speed is unknown, defaulting to 1000 [ 138.553734][ T5832] syz0: Port: 1 Link DOWN [ 138.609204][ T5878] lo speed is unknown, defaulting to 1000 [ 138.722764][ T7173] lo speed is unknown, defaulting to 1000 [ 138.893585][ T3488] bridge_slave_1: left allmulticast mode [ 138.916291][ T3488] bridge_slave_1: left promiscuous mode [ 138.934273][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.965344][ T7191] netlink: 248 bytes leftover after parsing attributes in process `syz.0.295'. [ 139.029258][ T3488] bridge_slave_0: left allmulticast mode [ 139.059618][ T3488] bridge_slave_0: left promiscuous mode [ 139.083127][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.847217][ T3488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.859393][ T3488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.873704][ T3488] bond0 (unregistering): Released all slaves [ 139.905023][ T7157] lo speed is unknown, defaulting to 1000 [ 140.023673][ T5835] Bluetooth: hci4: command tx timeout [ 140.133633][ T7209] netlink: 'syz.2.300': attribute type 2 has an invalid length. [ 140.146963][ T7209] netlink: 224 bytes leftover after parsing attributes in process `syz.2.300'. [ 140.242643][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 140.592395][ T7220] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 140.627838][ T7220] netlink: 224 bytes leftover after parsing attributes in process `syz.1.304'. [ 140.835556][ T7220] macvtap1: entered promiscuous mode [ 140.850652][ T7220] vlan0: entered promiscuous mode [ 140.866410][ T7220] macvtap1: entered allmulticast mode [ 140.886013][ T7220] vlan0: entered allmulticast mode [ 140.903767][ T7220] veth0_vlan: entered allmulticast mode [ 140.940211][ T7220] vlan0: left allmulticast mode [ 140.945148][ T7220] veth0_vlan: left allmulticast mode [ 141.005608][ T7220] vlan0: left promiscuous mode [ 141.385479][ T3488] hsr_slave_0: left promiscuous mode [ 141.416703][ T3488] hsr_slave_1: left promiscuous mode [ 141.427299][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.435310][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.468464][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.486991][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.528352][ T7250] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 141.536362][ T7251] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 141.584593][ T3488] veth1_macvtap: left promiscuous mode [ 141.606133][ T3488] veth0_macvtap: left promiscuous mode [ 141.627299][ T3488] veth1_vlan: left promiscuous mode [ 141.638522][ T3488] veth0_vlan: left promiscuous mode [ 141.990938][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 142.098347][ T5835] Bluetooth: hci4: command tx timeout [ 142.296830][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 142.339773][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 142.815717][ T7259] pim6reg: entered allmulticast mode [ 142.823239][ T7262] pim6reg: left allmulticast mode [ 142.854848][ T7240] lo speed is unknown, defaulting to 1000 [ 143.017195][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 143.429426][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 143.702946][ T30] audit: type=1800 audit(1746221470.011:2): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.321" name="memory.events" dev="tmpfs" ino=409 res=0 errno=0 [ 143.755388][ T30] audit: type=1804 audit(1746221470.021:3): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.321" name="/newroot/77/memory.events" dev="tmpfs" ino=409 res=1 errno=0 [ 144.012409][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.045242][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.057112][ T7157] bridge_slave_0: entered allmulticast mode [ 144.082886][ T7157] bridge_slave_0: entered promiscuous mode [ 144.156352][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.178165][ T5835] Bluetooth: hci4: command tx timeout [ 144.185386][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.230507][ T7157] bridge_slave_1: entered allmulticast mode [ 144.269871][ T7157] bridge_slave_1: entered promiscuous mode [ 144.435591][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.515644][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.736447][ T7157] team0: Port device team_slave_0 added [ 144.803204][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 144.832173][ T7157] team0: Port device team_slave_1 added [ 145.360832][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.367854][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.429756][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.454262][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.464101][ T7352] netlink: 45 bytes leftover after parsing attributes in process `syz.3.332'. [ 145.481230][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.540471][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.788612][ T7157] hsr_slave_0: entered promiscuous mode [ 145.817698][ T7157] hsr_slave_1: entered promiscuous mode [ 145.824493][ T7157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.868288][ T7157] Cannot create hsr debugfs directory [ 145.967725][ T7370] netlink: 'syz.0.335': attribute type 30 has an invalid length. [ 146.114647][ T1205] IPVS: starting estimator thread 0... [ 146.131298][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.139319][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.229183][ T7373] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.263341][ T5835] Bluetooth: hci4: command tx timeout [ 146.642945][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.338'. [ 146.746610][ T7367] veth1_to_team: left promiscuous mode [ 146.761099][ T7367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.780386][ T7367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.847682][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 147.481122][ T7402] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 147.499984][ T5835] block nbd2: Receive control failed (result -32) [ 149.282757][ T7449] netlink: 88 bytes leftover after parsing attributes in process `syz.2.358'. [ 149.306793][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 149.335735][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.357'. [ 149.486538][ T7452] lo speed is unknown, defaulting to 1000 [ 149.614465][ T7157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.643565][ T7462] netlink: 'syz.2.360': attribute type 2 has an invalid length. [ 149.655568][ T7157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.682677][ T7462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.360'. [ 149.734477][ T7157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.757296][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 149.786023][ T7465] team0: No ports can be present during mode change [ 149.805850][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 149.815064][ T7157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.009002][ T7474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.082624][ T7477] syz_tun: entered allmulticast mode [ 150.093826][ T7477] Bluetooth: MGMT ver 1.23 [ 150.146400][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.217066][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.265882][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.273151][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.306296][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.313552][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.862900][ T7472] syz_tun: left allmulticast mode [ 150.936053][ T7498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.156467][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.864063][ T7529] lo speed is unknown, defaulting to 1000 [ 152.097865][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'. [ 152.162781][ T7157] veth0_vlan: entered promiscuous mode [ 152.292625][ T7157] veth1_vlan: entered promiscuous mode [ 152.447350][ T7157] veth0_macvtap: entered promiscuous mode [ 152.493526][ T7157] veth1_macvtap: entered promiscuous mode [ 152.564549][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.581783][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.614767][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.674861][ T7157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.718087][ T7157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.732664][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.775343][ T7157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.808444][ T7157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.828024][ T7157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.836851][ T7157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.996676][ T7567] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 153.196336][ T7570] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.387'. [ 153.221929][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.235588][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.422977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.475021][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.565006][ T7580] nbd: must specify a size in bytes for the device [ 153.888493][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 154.896174][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.985704][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.058215][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.239716][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.255764][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 155.273797][ T7640] netlink: 'syz.0.399': attribute type 9 has an invalid length. [ 155.345284][ T7640] macvlan2: entered allmulticast mode [ 155.356878][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 155.374437][ T7640] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 155.415139][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 155.496538][ T7643] netlink: 'syz.1.403': attribute type 13 has an invalid length. [ 155.560690][ T7643] netlink: 'syz.1.403': attribute type 12 has an invalid length. [ 155.990725][ T63] bridge_slave_1: left allmulticast mode [ 156.028528][ T63] bridge_slave_1: left promiscuous mode [ 156.035072][ T7660] FAULT_INJECTION: forcing a failure. [ 156.035072][ T7660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.061518][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.089079][ T7660] CPU: 1 UID: 0 PID: 7660 Comm: syz.0.408 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 156.089110][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.089122][ T7660] Call Trace: [ 156.089130][ T7660] [ 156.089140][ T7660] dump_stack_lvl+0x189/0x250 [ 156.089172][ T7660] ? __lock_acquire+0xaac/0xd20 [ 156.089204][ T7660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.089232][ T7660] ? __pfx__printk+0x10/0x10 [ 156.089252][ T7660] ? __might_fault+0xb0/0x130 [ 156.089290][ T7660] should_fail_ex+0x414/0x560 [ 156.089328][ T7660] _copy_from_iter+0x1db/0x15a0 [ 156.089361][ T7660] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 156.089383][ T7660] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 156.089410][ T7660] ? __pfx__copy_from_iter+0x10/0x10 [ 156.089436][ T7660] ? __build_skb_around+0x257/0x3e0 [ 156.089464][ T7660] ? netlink_sendmsg+0x642/0xb30 [ 156.089485][ T7660] ? skb_put+0x11b/0x210 [ 156.089513][ T7660] netlink_sendmsg+0x6b2/0xb30 [ 156.089547][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.089573][ T7660] ? aa_sock_msg_perm+0x94/0x160 [ 156.089606][ T7660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.089629][ T7660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.089652][ T7660] __sock_sendmsg+0x219/0x270 [ 156.089687][ T7660] ____sys_sendmsg+0x505/0x830 [ 156.089720][ T7660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.089757][ T7660] ? import_iovec+0x74/0xa0 [ 156.089788][ T7660] ___sys_sendmsg+0x21f/0x2a0 [ 156.089816][ T7660] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.089882][ T7660] ? __fget_files+0x2a/0x420 [ 156.089907][ T7660] ? __fget_files+0x3a0/0x420 [ 156.089945][ T7660] __x64_sys_sendmsg+0x19b/0x260 [ 156.089974][ T7660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.090018][ T7660] ? do_syscall_64+0xba/0x210 [ 156.090053][ T7660] do_syscall_64+0xf6/0x210 [ 156.090084][ T7660] ? clear_bhb_loop+0x45/0xa0 [ 156.090108][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.090128][ T7660] RIP: 0033:0x7fc33bf8e969 [ 156.090145][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.090161][ T7660] RSP: 002b:00007fc33cea5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.090181][ T7660] RAX: ffffffffffffffda RBX: 00007fc33c1b5fa0 RCX: 00007fc33bf8e969 [ 156.090201][ T7660] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 156.090213][ T7660] RBP: 00007fc33cea5090 R08: 0000000000000000 R09: 0000000000000000 [ 156.090225][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.090236][ T7660] R13: 0000000000000000 R14: 00007fc33c1b5fa0 R15: 00007ffe39c46168 [ 156.090267][ T7660] [ 156.459122][ T63] bridge_slave_0: left allmulticast mode [ 156.466057][ T63] bridge_slave_0: left promiscuous mode [ 156.476950][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.491748][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.492644][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.410'. [ 156.514854][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 156.515072][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.538540][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.547145][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.558749][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.815989][ T7684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.831995][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 157.449910][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.477326][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.493999][ T63] bond0 (unregistering): Released all slaves [ 157.735538][ T7663] lo speed is unknown, defaulting to 1000 [ 158.245004][ T7728] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.660004][ T5840] Bluetooth: hci4: command tx timeout [ 158.711304][ T7740] FAULT_INJECTION: forcing a failure. [ 158.711304][ T7740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.751164][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.2.426 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 158.751185][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.751194][ T7740] Call Trace: [ 158.751201][ T7740] [ 158.751207][ T7740] dump_stack_lvl+0x189/0x250 [ 158.751231][ T7740] ? __lock_acquire+0xaac/0xd20 [ 158.751254][ T7740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.751274][ T7740] ? __pfx__printk+0x10/0x10 [ 158.751289][ T7740] ? __might_fault+0xb0/0x130 [ 158.751315][ T7740] should_fail_ex+0x414/0x560 [ 158.751343][ T7740] _copy_from_user+0x2d/0xb0 [ 158.751368][ T7740] ___sys_sendmsg+0x158/0x2a0 [ 158.751389][ T7740] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.751435][ T7740] ? __fget_files+0x2a/0x420 [ 158.751453][ T7740] ? __fget_files+0x3a0/0x420 [ 158.751479][ T7740] __x64_sys_sendmsg+0x19b/0x260 [ 158.751500][ T7740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.751531][ T7740] ? do_syscall_64+0xba/0x210 [ 158.751557][ T7740] do_syscall_64+0xf6/0x210 [ 158.751578][ T7740] ? clear_bhb_loop+0x45/0xa0 [ 158.751596][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.751609][ T7740] RIP: 0033:0x7fbb46d8e969 [ 158.751622][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.751634][ T7740] RSP: 002b:00007fbb47c5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.751649][ T7740] RAX: ffffffffffffffda RBX: 00007fbb46fb5fa0 RCX: 00007fbb46d8e969 [ 158.751659][ T7740] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000007 [ 158.751667][ T7740] RBP: 00007fbb47c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 158.751676][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.751684][ T7740] R13: 0000000000000000 R14: 00007fbb46fb5fa0 R15: 00007ffdfbb8b258 [ 158.751706][ T7740] [ 158.753897][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.356375][ T63] hsr_slave_0: left promiscuous mode [ 159.392436][ T63] hsr_slave_1: left promiscuous mode [ 159.408203][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.430463][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.462455][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.471416][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.587941][ T63] veth1_macvtap: left promiscuous mode [ 159.600081][ T63] veth0_macvtap: left promiscuous mode [ 159.612329][ T63] veth1_vlan: left promiscuous mode [ 159.627223][ T63] veth0_vlan: left promiscuous mode [ 160.526822][ T63] team0 (unregistering): Port device team_slave_1 removed [ 160.570368][ T63] team0 (unregistering): Port device team_slave_0 removed [ 160.739489][ T5840] Bluetooth: hci4: command tx timeout [ 161.707390][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 161.823715][ T9] IPVS: starting estimator thread 0... [ 161.939789][ T7812] IPVS: using max 28 ests per chain, 67200 per kthread [ 162.106549][ T7811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.253870][ T7813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.355701][ T7811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.489276][ T7811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.636877][ T7811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.665585][ T7816] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.696325][ T7816] tipc: Enabled bearer , priority 10 [ 162.759129][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.766929][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.774664][ T7663] bridge_slave_0: entered allmulticast mode [ 162.784409][ T7663] bridge_slave_0: entered promiscuous mode [ 162.799571][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.818373][ T5840] Bluetooth: hci4: command tx timeout [ 162.873481][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.892837][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.916017][ T7663] bridge_slave_1: entered allmulticast mode [ 162.938173][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.963174][ T7663] bridge_slave_1: entered promiscuous mode [ 163.078120][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.218141][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.274283][ T7811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.310164][ T7811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.337343][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.358060][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.381736][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.468285][ T7856] wireguard0: entered promiscuous mode [ 163.498218][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.638113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.644499][ T7811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.779476][ T9] tipc: Node number set to 1 [ 163.903963][ T7663] team0: Port device team_slave_0 added [ 163.918156][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.930525][ T7663] team0: Port device team_slave_1 added [ 164.004262][ T7811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.188052][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.239479][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.246496][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.318369][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.332956][ T7889] netlink: 'syz.0.467': attribute type 5 has an invalid length. [ 164.348886][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.357180][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.385055][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.812407][ T7898] lo speed is unknown, defaulting to 1000 [ 164.853845][ T7663] hsr_slave_0: entered promiscuous mode [ 164.877119][ T7663] hsr_slave_1: entered promiscuous mode [ 164.893905][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.918192][ T5840] Bluetooth: hci4: command tx timeout [ 164.925765][ T7663] Cannot create hsr debugfs directory [ 166.327535][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 166.437084][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.476419][ T7952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.453078][ T7663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.510985][ T7663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.570390][ T7663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.615050][ T7663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.793861][ T7993] FAULT_INJECTION: forcing a failure. [ 167.793861][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 167.810376][ T7993] CPU: 0 UID: 0 PID: 7993 Comm: syz.3.499 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 167.810407][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 167.810420][ T7993] Call Trace: [ 167.810429][ T7993] [ 167.810438][ T7993] dump_stack_lvl+0x189/0x250 [ 167.810477][ T7993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.810506][ T7993] ? __pfx__printk+0x10/0x10 [ 167.810529][ T7993] ? __pfx___might_resched+0x10/0x10 [ 167.810548][ T7993] ? fs_reclaim_acquire+0x7d/0x100 [ 167.810582][ T7993] should_fail_ex+0x414/0x560 [ 167.810621][ T7993] should_failslab+0xa8/0x100 [ 167.810649][ T7993] kmem_cache_alloc_noprof+0x73/0x3c0 [ 167.810672][ T7993] ? sk_prot_alloc+0x57/0x220 [ 167.810703][ T7993] sk_prot_alloc+0x57/0x220 [ 167.810725][ T7993] ? sk_alloc+0x24/0x370 [ 167.810751][ T7993] sk_alloc+0x3a/0x370 [ 167.810781][ T7993] inet6_create+0x7fd/0x12a0 [ 167.810799][ T7993] ? inet6_create+0x71/0x12a0 [ 167.810837][ T7993] __sock_create+0x4b0/0x9f0 [ 167.810869][ T7993] udp_sock_create6+0xcb/0x690 [ 167.810899][ T7993] ? __pfx_udp_sock_create6+0x10/0x10 [ 167.810933][ T7993] ? rxrpc_lookup_local+0xc1a/0x1410 [ 167.810963][ T7993] rxrpc_lookup_local+0xc92/0x1410 [ 167.810998][ T7993] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 167.811030][ T7993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 167.811066][ T7993] ? __local_bh_enable_ip+0x12d/0x1c0 [ 167.811101][ T7993] ? do_raw_spin_unlock+0x122/0x240 [ 167.811131][ T7993] rxrpc_sendmsg+0x399/0x710 [ 167.811158][ T7993] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 167.811179][ T7993] __sock_sendmsg+0x219/0x270 [ 167.811215][ T7993] ____sys_sendmsg+0x505/0x830 [ 167.811248][ T7993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.811286][ T7993] ? import_iovec+0x74/0xa0 [ 167.811317][ T7993] ___sys_sendmsg+0x21f/0x2a0 [ 167.811346][ T7993] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.811419][ T7993] ? __fget_files+0x2a/0x420 [ 167.811444][ T7993] ? __fget_files+0x3a0/0x420 [ 167.811482][ T7993] __x64_sys_sendmsg+0x19b/0x260 [ 167.811510][ T7993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.811556][ T7993] ? do_syscall_64+0xba/0x210 [ 167.811591][ T7993] do_syscall_64+0xf6/0x210 [ 167.811621][ T7993] ? clear_bhb_loop+0x45/0xa0 [ 167.811647][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.811665][ T7993] RIP: 0033:0x7fdc4358e969 [ 167.811683][ T7993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.811699][ T7993] RSP: 002b:00007fdc44448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.811720][ T7993] RAX: ffffffffffffffda RBX: 00007fdc437b5fa0 RCX: 00007fdc4358e969 [ 167.811734][ T7993] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000005 [ 167.811746][ T7993] RBP: 00007fdc44448090 R08: 0000000000000000 R09: 0000000000000000 [ 167.811758][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.811769][ T7993] R13: 0000000000000000 R14: 00007fdc437b5fa0 R15: 00007fff694e4ee8 [ 167.811801][ T7993] [ 168.112850][ C0] net_ratelimit: 3 callbacks suppressed [ 168.112869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.231260][ T5840] block nbd3: Receive control failed (result -32) [ 168.267484][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.369974][ T7663] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.429674][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.436876][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.487123][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.494383][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.749872][ T8013] FAULT_INJECTION: forcing a failure. [ 168.749872][ T8013] name failslab, interval 1, probability 0, space 0, times 0 [ 168.796991][ T8013] CPU: 1 UID: 0 PID: 8013 Comm: syz.3.506 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 168.797022][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 168.797034][ T8013] Call Trace: [ 168.797043][ T8013] [ 168.797052][ T8013] dump_stack_lvl+0x189/0x250 [ 168.797091][ T8013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.797122][ T8013] ? __pfx__printk+0x10/0x10 [ 168.797149][ T8013] ? __pfx___might_resched+0x10/0x10 [ 168.797167][ T8013] ? fs_reclaim_acquire+0x7d/0x100 [ 168.797202][ T8013] should_fail_ex+0x414/0x560 [ 168.797241][ T8013] should_failslab+0xa8/0x100 [ 168.797270][ T8013] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 168.797295][ T8013] ? __d_alloc+0x31/0x6f0 [ 168.797330][ T8013] __d_alloc+0x31/0x6f0 [ 168.797357][ T8013] ? stack_depot_save_flags+0x40/0x910 [ 168.797391][ T8013] d_alloc_parallel+0xe0/0x14e0 [ 168.797412][ T8013] ? kasan_save_track+0x4f/0x80 [ 168.797432][ T8013] ? kasan_save_track+0x3e/0x80 [ 168.797450][ T8013] ? __kasan_slab_alloc+0x6c/0x80 [ 168.797471][ T8013] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 168.797493][ T8013] ? security_inode_alloc+0x39/0x330 [ 168.797517][ T8013] ? alloc_inode+0x82/0x1b0 [ 168.797537][ T8013] ? new_inode+0x22/0x170 [ 168.797568][ T8013] ? __lock_acquire+0xaac/0xd20 [ 168.797602][ T8013] ? __pfx_d_alloc_parallel+0x10/0x10 [ 168.797628][ T8013] ? __raw_spin_lock_init+0x45/0x100 [ 168.797652][ T8013] ? __init_waitqueue_head+0xa9/0x150 [ 168.797683][ T8013] __lookup_slow+0x116/0x3d0 [ 168.797717][ T8013] ? __pfx___lookup_slow+0x10/0x10 [ 168.797782][ T8013] lookup_one_len+0x1aa/0x310 [ 168.797816][ T8013] ? __pfx_lookup_one_len+0x10/0x10 [ 168.797843][ T8013] ? down_write+0x162/0x1f0 [ 168.797862][ T8013] ? __pfx_down_write+0x10/0x10 [ 168.797881][ T8013] ? mntput+0x65/0xc0 [ 168.797911][ T8013] start_creating+0x18d/0x310 [ 168.797934][ T8013] __debugfs_create_file+0x79/0x4f0 [ 168.797961][ T8013] debugfs_create_file_unsafe+0x3a/0x50 [ 168.797985][ T8013] nbd_start_device+0x356/0xac0 [ 168.798021][ T8013] ? __nla_parse+0x40/0x60 [ 168.798049][ T8013] nbd_genl_connect+0x1250/0x1930 [ 168.798097][ T8013] ? __pfx_nbd_genl_connect+0x10/0x10 [ 168.798134][ T8013] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 168.798172][ T8013] ? __nla_parse+0x40/0x60 [ 168.798198][ T8013] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 168.798237][ T8013] genl_family_rcv_msg_doit+0x212/0x300 [ 168.798274][ T8013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.798327][ T8013] ? stack_depot_save_flags+0x40/0x910 [ 168.798353][ T8013] genl_rcv_msg+0x60e/0x790 [ 168.798390][ T8013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.798417][ T8013] ? __pfx_nbd_genl_connect+0x10/0x10 [ 168.798469][ T8013] netlink_rcv_skb+0x219/0x490 [ 168.798492][ T8013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.798523][ T8013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.798580][ T8013] ? down_read+0x1ad/0x2e0 [ 168.798602][ T8013] genl_rcv+0x28/0x40 [ 168.798628][ T8013] netlink_unicast+0x758/0x8d0 [ 168.798662][ T8013] netlink_sendmsg+0x805/0xb30 [ 168.798697][ T8013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.798724][ T8013] ? aa_sock_msg_perm+0x94/0x160 [ 168.798747][ T8013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.798775][ T8013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.798799][ T8013] __sock_sendmsg+0x219/0x270 [ 168.798835][ T8013] ____sys_sendmsg+0x505/0x830 [ 168.798868][ T8013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.798905][ T8013] ? import_iovec+0x74/0xa0 [ 168.798937][ T8013] ___sys_sendmsg+0x21f/0x2a0 [ 168.798966][ T8013] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.799037][ T8013] ? __fget_files+0x2a/0x420 [ 168.799062][ T8013] ? __fget_files+0x3a0/0x420 [ 168.799101][ T8013] __x64_sys_sendmsg+0x19b/0x260 [ 168.799131][ T8013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.799178][ T8013] ? do_syscall_64+0xba/0x210 [ 168.799213][ T8013] do_syscall_64+0xf6/0x210 [ 168.799243][ T8013] ? clear_bhb_loop+0x45/0xa0 [ 168.799268][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.799286][ T8013] RIP: 0033:0x7fdc4358e969 [ 168.799305][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.799320][ T8013] RSP: 002b:00007fdc44448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.799340][ T8013] RAX: ffffffffffffffda RBX: 00007fdc437b5fa0 RCX: 00007fdc4358e969 [ 168.799354][ T8013] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000006 [ 168.799366][ T8013] RBP: 00007fdc44448090 R08: 0000000000000000 R09: 0000000000000000 [ 168.799378][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.799389][ T8013] R13: 0000000000000000 R14: 00007fdc437b5fa0 R15: 00007fff694e4ee8 [ 168.799422][ T8013] [ 169.138257][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.405325][ T5840] block nbd4: Receive control failed (result -32) [ 169.500176][ T5840] block nbd5: Receive control failed (result -32) [ 169.869269][ T8045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.954954][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.178118][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.293769][ T8064] sctp: [Deprecated]: syz.3.516 (pid 8064) Use of int in max_burst socket option. [ 170.293769][ T8064] Use struct sctp_assoc_value instead [ 170.371557][ T8069] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20002 [ 170.456821][ T8064] netlink: 'syz.3.516': attribute type 7 has an invalid length. [ 170.495168][ T8064] : entered promiscuous mode [ 170.620113][ T7663] veth0_vlan: entered promiscuous mode [ 170.666356][ T7663] veth1_vlan: entered promiscuous mode [ 170.808609][ T7663] veth0_macvtap: entered promiscuous mode [ 170.833772][ T7663] veth1_macvtap: entered promiscuous mode [ 170.935936][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.953130][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.965859][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.012529][ T8092] netlink: 'syz.2.523': attribute type 39 has an invalid length. [ 171.029913][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.043996][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.073043][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.142329][ T7663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.155890][ T7663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.167468][ T7663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.181090][ T7663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.221091][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.493146][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.525411][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.632494][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.654510][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.926886][ T8122] FAULT_INJECTION: forcing a failure. [ 171.926886][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.994818][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.3.530 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 171.994846][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.994857][ T8122] Call Trace: [ 171.994865][ T8122] [ 171.994874][ T8122] dump_stack_lvl+0x189/0x250 [ 171.994904][ T8122] ? __lock_acquire+0xaac/0xd20 [ 171.994935][ T8122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.994964][ T8122] ? __pfx__printk+0x10/0x10 [ 171.994984][ T8122] ? __might_fault+0xb0/0x130 [ 171.995023][ T8122] should_fail_ex+0x414/0x560 [ 171.995062][ T8122] _copy_from_user+0x2d/0xb0 [ 171.995090][ T8122] kstrtouint_from_user+0xc4/0x170 [ 171.995116][ T8122] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 171.995156][ T8122] proc_fail_nth_write+0x88/0x240 [ 171.995185][ T8122] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.995228][ T8122] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.995257][ T8122] vfs_write+0x27b/0xa90 [ 171.995288][ T8122] ? __pfx_vfs_write+0x10/0x10 [ 171.995312][ T8122] ? __fget_files+0x2a/0x420 [ 171.995342][ T8122] ? __fget_files+0x3a0/0x420 [ 171.995366][ T8122] ? __fget_files+0x2a/0x420 [ 171.995400][ T8122] ksys_write+0x145/0x250 [ 171.995431][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 171.995458][ T8122] ? do_syscall_64+0xba/0x210 [ 171.995499][ T8122] do_syscall_64+0xf6/0x210 [ 171.995534][ T8122] ? clear_bhb_loop+0x45/0xa0 [ 171.995558][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.995576][ T8122] RIP: 0033:0x7fdc4358d41f [ 171.995593][ T8122] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 171.995610][ T8122] RSP: 002b:00007fdc44448030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.995631][ T8122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdc4358d41f [ 171.995645][ T8122] RDX: 0000000000000001 RSI: 00007fdc444480a0 RDI: 0000000000000005 [ 171.995657][ T8122] RBP: 00007fdc44448090 R08: 0000000000000000 R09: 0000000000000000 [ 171.995668][ T8122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 171.995680][ T8122] R13: 0000000000000000 R14: 00007fdc437b5fa0 R15: 00007fff694e4ee8 [ 171.995712][ T8122] [ 172.234060][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'. [ 172.258107][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.647560][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.915736][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.072499][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.230332][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.298037][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.553930][ T63] bridge_slave_1: left allmulticast mode [ 173.562956][ T63] bridge_slave_1: left promiscuous mode [ 173.569378][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.582290][ T63] bridge_slave_0: left allmulticast mode [ 173.589522][ T63] bridge_slave_0: left promiscuous mode [ 173.595364][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.931753][ T5840] block nbd6: Receive control failed (result -32) [ 174.337989][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.390923][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 174.514679][ T8190] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 174.527599][ T8190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 174.553264][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.580657][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.595873][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.619854][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.630273][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.707585][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.723898][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.751285][ T63] bond0 (unregistering): Released all slaves [ 174.945617][ T8190] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 174.962703][ T8190] team0: Failed to send options change via netlink (err -105) [ 174.973564][ T8190] team0: Port device geneve0 added [ 174.986390][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.546'. [ 175.197263][ T8213] netlink: 10 bytes leftover after parsing attributes in process `syz.0.549'. [ 175.232752][ T8191] lo speed is unknown, defaulting to 1000 [ 175.378115][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.613434][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'. [ 175.810253][ T5835] block nbd7: Receive control failed (result -32) [ 176.123781][ T5835] block nbd8: Receive control failed (result -32) [ 176.418112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.738456][ T5835] Bluetooth: hci4: command tx timeout [ 176.747260][ T63] hsr_slave_0: left promiscuous mode [ 176.816825][ T63] hsr_slave_1: left promiscuous mode [ 176.839755][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.871334][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.922237][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.975421][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.039823][ T63] veth1_macvtap: left promiscuous mode [ 177.045440][ T63] veth0_macvtap: left promiscuous mode [ 177.054013][ T63] veth1_vlan: left promiscuous mode [ 177.088155][ T63] veth0_vlan: left promiscuous mode [ 177.458010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.545124][ T8289] FAULT_INJECTION: forcing a failure. [ 177.545124][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.558873][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.1.568 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 177.558919][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 177.558939][ T8289] Call Trace: [ 177.558956][ T8289] [ 177.558965][ T8289] dump_stack_lvl+0x189/0x250 [ 177.558996][ T8289] ? __lock_acquire+0xaac/0xd20 [ 177.559027][ T8289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.559056][ T8289] ? __pfx__printk+0x10/0x10 [ 177.559076][ T8289] ? __might_fault+0xb0/0x130 [ 177.559113][ T8289] should_fail_ex+0x414/0x560 [ 177.559151][ T8289] _copy_from_iter+0x1db/0x15a0 [ 177.559183][ T8289] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 177.559205][ T8289] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 177.559232][ T8289] ? __pfx__copy_from_iter+0x10/0x10 [ 177.559258][ T8289] ? __build_skb_around+0x257/0x3e0 [ 177.559286][ T8289] ? netlink_sendmsg+0x642/0xb30 [ 177.559307][ T8289] ? skb_put+0x11b/0x210 [ 177.559334][ T8289] netlink_sendmsg+0x6b2/0xb30 [ 177.559367][ T8289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.559395][ T8289] ? aa_sock_msg_perm+0x94/0x160 [ 177.559419][ T8289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.559440][ T8289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.559465][ T8289] __sock_sendmsg+0x219/0x270 [ 177.559500][ T8289] ____sys_sendmsg+0x505/0x830 [ 177.559532][ T8289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.559568][ T8289] ? import_iovec+0x74/0xa0 [ 177.559599][ T8289] ___sys_sendmsg+0x21f/0x2a0 [ 177.559627][ T8289] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.559693][ T8289] ? __fget_files+0x2a/0x420 [ 177.559718][ T8289] ? __fget_files+0x3a0/0x420 [ 177.559755][ T8289] __x64_sys_sendmsg+0x19b/0x260 [ 177.559785][ T8289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.559829][ T8289] ? do_syscall_64+0xba/0x210 [ 177.559863][ T8289] do_syscall_64+0xf6/0x210 [ 177.559893][ T8289] ? clear_bhb_loop+0x45/0xa0 [ 177.559917][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.559936][ T8289] RIP: 0033:0x7ff0b638e969 [ 177.559959][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.559976][ T8289] RSP: 002b:00007ff0b72a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.559997][ T8289] RAX: ffffffffffffffda RBX: 00007ff0b65b5fa0 RCX: 00007ff0b638e969 [ 177.560012][ T8289] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 177.560024][ T8289] RBP: 00007ff0b72a7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.560036][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.560048][ T8289] R13: 0000000000000000 R14: 00007ff0b65b5fa0 R15: 00007ffccdd79c98 [ 177.560080][ T8289] [ 177.585215][ T8291] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20003 [ 178.245106][ T63] team0 (unregistering): Port device team_slave_1 removed [ 178.290387][ T63] team0 (unregistering): Port device team_slave_0 removed [ 178.498001][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.819014][ T5835] Bluetooth: hci4: command tx timeout [ 179.217343][ T8311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.357550][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 179.398465][ T8325] FAULT_INJECTION: forcing a failure. [ 179.398465][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 179.467706][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.1.580 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 179.467737][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 179.467750][ T8325] Call Trace: [ 179.467758][ T8325] [ 179.467768][ T8325] dump_stack_lvl+0x189/0x250 [ 179.467808][ T8325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.467839][ T8325] ? __pfx__printk+0x10/0x10 [ 179.467862][ T8325] ? __pfx___might_resched+0x10/0x10 [ 179.467882][ T8325] ? fs_reclaim_acquire+0x7d/0x100 [ 179.467921][ T8325] should_fail_ex+0x414/0x560 [ 179.467959][ T8325] should_failslab+0xa8/0x100 [ 179.467989][ T8325] __kmalloc_cache_noprof+0x70/0x3d0 [ 179.468014][ T8325] ? rxrpc_alloc_bundle+0x7a/0x710 [ 179.468047][ T8325] rxrpc_alloc_bundle+0x7a/0x710 [ 179.468079][ T8325] rxrpc_look_up_bundle+0x398/0x870 [ 179.468110][ T8325] ? do_raw_spin_unlock+0x122/0x240 [ 179.468140][ T8325] rxrpc_new_client_call+0xc4a/0x1500 [ 179.468177][ T8325] rxrpc_do_sendmsg+0xc70/0x1220 [ 179.468213][ T8325] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 179.468230][ T8325] ? __local_bh_enable_ip+0x12d/0x1c0 [ 179.468267][ T8325] ? do_raw_spin_unlock+0x122/0x240 [ 179.468296][ T8325] ? rxrpc_sendmsg+0x4cc/0x710 [ 179.468321][ T8325] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 179.468342][ T8325] __sock_sendmsg+0x219/0x270 [ 179.468378][ T8325] ____sys_sendmsg+0x505/0x830 [ 179.468410][ T8325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.468447][ T8325] ? import_iovec+0x74/0xa0 [ 179.468479][ T8325] ___sys_sendmsg+0x21f/0x2a0 [ 179.468509][ T8325] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.468588][ T8325] ? __fget_files+0x2a/0x420 [ 179.468614][ T8325] ? __fget_files+0x3a0/0x420 [ 179.468653][ T8325] __x64_sys_sendmsg+0x19b/0x260 [ 179.468684][ T8325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.468732][ T8325] ? do_syscall_64+0xba/0x210 [ 179.468769][ T8325] do_syscall_64+0xf6/0x210 [ 179.468800][ T8325] ? clear_bhb_loop+0x45/0xa0 [ 179.468825][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.468845][ T8325] RIP: 0033:0x7ff0b638e969 [ 179.468864][ T8325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.468880][ T8325] RSP: 002b:00007ff0b72a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.468901][ T8325] RAX: ffffffffffffffda RBX: 00007ff0b65b5fa0 RCX: 00007ff0b638e969 [ 179.468916][ T8325] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000005 [ 179.468930][ T8325] RBP: 00007ff0b72a7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.468942][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.468954][ T8325] R13: 0000000000000000 R14: 00007ff0b65b5fa0 R15: 00007ffccdd79c98 [ 179.468989][ T8325] [ 179.538144][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.115362][ T8341] ip6tnl1: entered promiscuous mode [ 180.148055][ T8341] ip6tnl1: entered allmulticast mode [ 180.168575][ T8341] team0: Device ip6tnl1 is of different type [ 180.223596][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.231765][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.240704][ T8191] bridge_slave_0: entered allmulticast mode [ 180.254531][ T8191] bridge_slave_0: entered promiscuous mode [ 180.284515][ T8348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.363693][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.395788][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.413972][ T8191] bridge_slave_1: entered allmulticast mode [ 180.424676][ T8191] bridge_slave_1: entered promiscuous mode [ 180.519518][ T8348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.578090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.680176][ T8348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.757458][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.792442][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.892327][ T8348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.904503][ T5835] Bluetooth: hci4: command tx timeout [ 181.023173][ T8375] netlink: 136 bytes leftover after parsing attributes in process `syz.1.592'. [ 181.048628][ T8375] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 181.101787][ T8191] team0: Port device team_slave_0 added [ 181.104336][ T8381] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 181.124330][ T8191] team0: Port device team_slave_1 added [ 181.204982][ T8381] bond0: entered promiscuous mode [ 181.213433][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.355215][ T8385] bond0: (slave bridge2): making interface the new active one [ 181.370925][ T8385] bridge2: entered promiscuous mode [ 181.381411][ T8385] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 181.443643][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.459069][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.492918][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.618154][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.776280][ T8379] lo speed is unknown, defaulting to 1000 [ 181.794715][ T8348] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.835242][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.868835][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.929384][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.105550][ T8348] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.215729][ T8348] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.327511][ T8348] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.377469][ T8191] hsr_slave_0: entered promiscuous mode [ 182.393709][ T8191] hsr_slave_1: entered promiscuous mode [ 182.401371][ T8191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.409946][ T8191] Cannot create hsr debugfs directory [ 182.439320][ T8383] lo speed is unknown, defaulting to 1000 [ 182.657992][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.961321][ T8421] netlink: 144 bytes leftover after parsing attributes in process `syz.2.598'. [ 182.980452][ T5835] Bluetooth: hci4: command tx timeout [ 183.088946][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 183.183705][ T8425] bridge3: entered promiscuous mode [ 183.697998][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.573856][ T8191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.595744][ T8191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.620675][ T8191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.653947][ T8191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.738119][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.776795][ T8456] openvswitch: netlink: Key type 16365 is out of range max 32 [ 185.012288][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.076414][ T8466] nbd: must specify a size in bytes for the device [ 185.128345][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.210033][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.217301][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.330018][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.337306][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.778097][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.800681][ T8500] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 185.834023][ T8506] xt_bpf: check failed: parse error [ 185.837740][ T8497] lo speed is unknown, defaulting to 1000 [ 185.860987][ T8506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 186.372451][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.427168][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 186.690239][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.743892][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 186.818006][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.136842][ T8552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.629'. [ 187.388636][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.586495][ T8191] veth0_vlan: entered promiscuous mode [ 187.597052][ T8568] FAULT_INJECTION: forcing a failure. [ 187.597052][ T8568] name failslab, interval 1, probability 0, space 0, times 0 [ 187.634341][ T8191] veth1_vlan: entered promiscuous mode [ 187.647013][ T8568] CPU: 1 UID: 0 PID: 8568 Comm: syz.1.632 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 187.647045][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.647058][ T8568] Call Trace: [ 187.647066][ T8568] [ 187.647075][ T8568] dump_stack_lvl+0x189/0x250 [ 187.647113][ T8568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.647142][ T8568] ? __pfx__printk+0x10/0x10 [ 187.647169][ T8568] ? __pfx___might_resched+0x10/0x10 [ 187.647194][ T8568] should_fail_ex+0x414/0x560 [ 187.647233][ T8568] should_failslab+0xa8/0x100 [ 187.647261][ T8568] kmem_cache_alloc_noprof+0x73/0x3c0 [ 187.647285][ T8568] ? security_inode_alloc+0x39/0x330 [ 187.647314][ T8568] security_inode_alloc+0x39/0x330 [ 187.647340][ T8568] inode_init_always_gfp+0x9ed/0xdc0 [ 187.647374][ T8568] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 187.647395][ T8568] alloc_inode+0x82/0x1b0 [ 187.647421][ T8568] new_inode+0x22/0x170 [ 187.647446][ T8568] ? start_creating+0x1fe/0x310 [ 187.647471][ T8568] __debugfs_create_file+0x14d/0x4f0 [ 187.647499][ T8568] debugfs_create_file_full+0x3f/0x60 [ 187.647525][ T8568] nbd_start_device+0x398/0xac0 [ 187.647560][ T8568] ? __nla_parse+0x40/0x60 [ 187.647589][ T8568] nbd_genl_connect+0x1250/0x1930 [ 187.647631][ T8568] ? __pfx_nbd_genl_connect+0x10/0x10 [ 187.647676][ T8568] ? __nla_parse+0x40/0x60 [ 187.647705][ T8568] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 187.647746][ T8568] genl_family_rcv_msg_doit+0x212/0x300 [ 187.647785][ T8568] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.647849][ T8568] ? stack_depot_save_flags+0x40/0x910 [ 187.647878][ T8568] genl_rcv_msg+0x60e/0x790 [ 187.647924][ T8568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.647951][ T8568] ? __pfx_nbd_genl_connect+0x10/0x10 [ 187.647998][ T8568] netlink_rcv_skb+0x219/0x490 [ 187.648022][ T8568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.648052][ T8568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.648103][ T8568] ? down_read+0x1ad/0x2e0 [ 187.648126][ T8568] genl_rcv+0x28/0x40 [ 187.648152][ T8568] netlink_unicast+0x758/0x8d0 [ 187.648187][ T8568] netlink_sendmsg+0x805/0xb30 [ 187.648223][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.648251][ T8568] ? aa_sock_msg_perm+0x94/0x160 [ 187.648276][ T8568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.648298][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.648322][ T8568] __sock_sendmsg+0x219/0x270 [ 187.648359][ T8568] ____sys_sendmsg+0x505/0x830 [ 187.648393][ T8568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.648431][ T8568] ? import_iovec+0x74/0xa0 [ 187.648463][ T8568] ___sys_sendmsg+0x21f/0x2a0 [ 187.648492][ T8568] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.648565][ T8568] ? __fget_files+0x2a/0x420 [ 187.648590][ T8568] ? __fget_files+0x3a0/0x420 [ 187.648629][ T8568] __x64_sys_sendmsg+0x19b/0x260 [ 187.648660][ T8568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.648707][ T8568] ? do_syscall_64+0xba/0x210 [ 187.648742][ T8568] do_syscall_64+0xf6/0x210 [ 187.648773][ T8568] ? clear_bhb_loop+0x45/0xa0 [ 187.648800][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.648819][ T8568] RIP: 0033:0x7ff0b638e969 [ 187.648837][ T8568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.648854][ T8568] RSP: 002b:00007ff0b72a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.648876][ T8568] RAX: ffffffffffffffda RBX: 00007ff0b65b5fa0 RCX: 00007ff0b638e969 [ 187.648891][ T8568] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000006 [ 187.648904][ T8568] RBP: 00007ff0b72a7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.648926][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.648938][ T8568] R13: 0000000000000000 R14: 00007ff0b65b5fa0 R15: 00007ffccdd79c98 [ 187.648973][ T8568] [ 187.858029][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.890706][ T8191] veth0_macvtap: entered promiscuous mode [ 188.041828][ T8568] debugfs: out of free dentries, can not create file 'flags' [ 188.091201][ T8191] veth1_macvtap: entered promiscuous mode [ 188.179413][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.200357][ T5835] block nbd9: Receive control failed (result -32) [ 188.218618][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.230662][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.243711][ T8191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.254703][ T8191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.273150][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.322521][ T8191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.358325][ T8191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.367107][ T8191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.406768][ T8191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.743491][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.637'. [ 188.826071][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.864017][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.898027][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.963062][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.002796][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.607467][ T1313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.687613][ T1313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.938149][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.985341][ T1313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.062223][ T1313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.243681][ T1313] bridge_slave_1: left allmulticast mode [ 190.258334][ T1313] bridge_slave_1: left promiscuous mode [ 190.264182][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.275627][ T1313] bridge_slave_0: left allmulticast mode [ 190.284218][ T1313] bridge_slave_0: left promiscuous mode [ 190.291716][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.488224][ T8630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'. [ 190.805757][ T8644] netlink: 'syz.1.650': attribute type 39 has an invalid length. [ 190.978024][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.368414][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.390746][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.405826][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.414333][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.422602][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.442587][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.457477][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.471872][ T1313] bond0 (unregistering): Released all slaves [ 192.018105][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.051439][ T8668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.062463][ T8668] bond_slave_0: left allmulticast mode [ 192.071405][ T8668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.081035][ T8668] bond_slave_1: left allmulticast mode [ 192.087008][ T8668] bond0 (unregistering): Released all slaves [ 192.106471][ T8658] lo speed is unknown, defaulting to 1000 [ 192.770031][ T8698] xt_CT: No such helper "snmp" [ 192.985853][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 193.057994][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.137872][ T8717] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 193.164857][ T8717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.671'. [ 193.272230][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 193.493867][ T5840] Bluetooth: hci4: command tx timeout [ 193.663505][ T8726] lo speed is unknown, defaulting to 1000 [ 194.097996][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.199678][ T8747] team0 (unregistering): Port device wlan1 removed [ 194.416111][ T1313] hsr_slave_0: left promiscuous mode [ 194.424437][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.442839][ T1313] hsr_slave_1: left promiscuous mode [ 194.453793][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.468106][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.476524][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.485108][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.546490][ T1313] veth1_macvtap: left promiscuous mode [ 194.554005][ T1313] veth0_macvtap: left promiscuous mode [ 194.560935][ T1313] veth1_vlan: left promiscuous mode [ 194.566379][ T1313] veth0_vlan: left promiscuous mode [ 195.142499][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.253060][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 195.302660][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 195.538385][ T5840] Bluetooth: hci4: command tx timeout [ 196.069729][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 196.154838][ T8658] chnl_net:caif_netlink_parms(): no params data found [ 196.178101][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.200449][ T8800] Illegal XDP return value 4294967274 on prog (id 288) dev N/A, expect packet loss! [ 196.274105][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 196.910234][ T8820] FAULT_INJECTION: forcing a failure. [ 196.910234][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 196.913801][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.943653][ T8820] CPU: 1 UID: 0 PID: 8820 Comm: syz.3.694 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 196.943686][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 196.943700][ T8820] Call Trace: [ 196.943709][ T8820] [ 196.943719][ T8820] dump_stack_lvl+0x189/0x250 [ 196.943775][ T8820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.943811][ T8820] ? __pfx__printk+0x10/0x10 [ 196.943836][ T8820] ? __pfx___might_resched+0x10/0x10 [ 196.943856][ T8820] ? fs_reclaim_acquire+0x7d/0x100 [ 196.943893][ T8820] should_fail_ex+0x414/0x560 [ 196.943934][ T8820] should_failslab+0xa8/0x100 [ 196.943963][ T8820] __kmalloc_noprof+0xcb/0x4f0 [ 196.943988][ T8820] ? kobject_get_path+0xc5/0x2d0 [ 196.944027][ T8820] kobject_get_path+0xc5/0x2d0 [ 196.944074][ T8820] kobject_uevent_env+0x292/0x8c0 [ 196.944110][ T8820] nbd_set_size+0x57a/0x6c0 [ 196.944139][ T8820] ? __pfx_nbd_set_size+0x10/0x10 [ 196.944157][ T8820] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 196.944220][ T8820] ? nbd_start_device+0x88b/0xac0 [ 196.944268][ T8820] nbd_genl_connect+0x1250/0x1930 [ 196.944310][ T8820] ? __pfx_nbd_genl_connect+0x10/0x10 [ 196.944345][ T8820] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 196.944387][ T8820] ? __nla_parse+0x40/0x60 [ 196.944416][ T8820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 196.944457][ T8820] genl_family_rcv_msg_doit+0x212/0x300 [ 196.944496][ T8820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 196.944545][ T8820] ? stack_depot_save_flags+0x40/0x910 [ 196.944574][ T8820] genl_rcv_msg+0x60e/0x790 [ 196.944613][ T8820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.944646][ T8820] ? __pfx_nbd_genl_connect+0x10/0x10 [ 196.944695][ T8820] netlink_rcv_skb+0x219/0x490 [ 196.944720][ T8820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.944751][ T8820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.944805][ T8820] ? down_read+0x1ad/0x2e0 [ 196.944827][ T8820] genl_rcv+0x28/0x40 [ 196.944854][ T8820] netlink_unicast+0x758/0x8d0 [ 196.944890][ T8820] netlink_sendmsg+0x805/0xb30 [ 196.944926][ T8820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.944955][ T8820] ? aa_sock_msg_perm+0x94/0x160 [ 196.944980][ T8820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.945003][ T8820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.945029][ T8820] __sock_sendmsg+0x219/0x270 [ 196.945072][ T8820] ____sys_sendmsg+0x505/0x830 [ 196.945107][ T8820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.945146][ T8820] ? import_iovec+0x74/0xa0 [ 196.945180][ T8820] ___sys_sendmsg+0x21f/0x2a0 [ 196.945211][ T8820] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.945284][ T8820] ? __fget_files+0x2a/0x420 [ 196.945310][ T8820] ? __fget_files+0x3a0/0x420 [ 196.945351][ T8820] __x64_sys_sendmsg+0x19b/0x260 [ 196.945381][ T8820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.945431][ T8820] ? do_syscall_64+0xba/0x210 [ 196.945467][ T8820] do_syscall_64+0xf6/0x210 [ 196.945499][ T8820] ? clear_bhb_loop+0x45/0xa0 [ 196.945525][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.945545][ T8820] RIP: 0033:0x7fdc4358e969 [ 196.945564][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.945582][ T8820] RSP: 002b:00007fdc44448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.945604][ T8820] RAX: ffffffffffffffda RBX: 00007fdc437b5fa0 RCX: 00007fdc4358e969 [ 196.945620][ T8820] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000006 [ 196.945634][ T8820] RBP: 00007fdc44448090 R08: 0000000000000000 R09: 0000000000000000 [ 196.945647][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.945659][ T8820] R13: 0000000000000000 R14: 00007fdc437b5fa0 R15: 00007fff694e4ee8 [ 196.945695][ T8820] [ 196.948495][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.981443][ T5840] block nbd10: Receive control failed (result -32) [ 197.097821][ T8658] bridge_slave_0: entered allmulticast mode [ 197.221863][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.260855][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 197.372315][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 197.408424][ T8658] bridge_slave_0: entered promiscuous mode [ 197.416745][ T8792] lo speed is unknown, defaulting to 1000 [ 197.536414][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 197.552370][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.566967][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.584243][ T8658] bridge_slave_1: entered allmulticast mode [ 197.593216][ T8658] bridge_slave_1: entered promiscuous mode [ 197.618413][ T5840] Bluetooth: hci4: command tx timeout [ 197.731416][ T8837] netlink: 64 bytes leftover after parsing attributes in process `syz.3.698'. [ 197.797037][ T8658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.828664][ T8658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.842334][ T8825] lo speed is unknown, defaulting to 1000 [ 198.054055][ T8658] team0: Port device team_slave_0 added [ 198.145844][ T8658] team0: Port device team_slave_1 added [ 198.259256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.565674][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.594791][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.641783][ T8658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.655195][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.672714][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.705355][ T8658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.063153][ T8871] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 199.147353][ T8658] hsr_slave_0: entered promiscuous mode [ 199.157467][ T8658] hsr_slave_1: entered promiscuous mode [ 199.164462][ T8658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.175697][ T8658] Cannot create hsr debugfs directory [ 199.297988][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.698325][ T5835] Bluetooth: hci4: command tx timeout [ 199.763837][ T8878] can: request_module (can-proto-3) failed. [ 200.046000][ T8892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'. [ 200.316793][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 200.338046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.339994][ T8902] lo speed is unknown, defaulting to 1000 [ 201.241111][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 201.378015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.438829][ T8924] FAULT_INJECTION: forcing a failure. [ 201.438829][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 201.468434][ T8924] CPU: 0 UID: 0 PID: 8924 Comm: syz.1.719 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 201.468465][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.468478][ T8924] Call Trace: [ 201.468486][ T8924] [ 201.468495][ T8924] dump_stack_lvl+0x189/0x250 [ 201.468535][ T8924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.468564][ T8924] ? __pfx__printk+0x10/0x10 [ 201.468592][ T8924] ? __pfx___might_resched+0x10/0x10 [ 201.468611][ T8924] ? fs_reclaim_acquire+0x7d/0x100 [ 201.468646][ T8924] should_fail_ex+0x414/0x560 [ 201.468684][ T8924] should_failslab+0xa8/0x100 [ 201.468707][ T8924] kmem_cache_alloc_noprof+0x73/0x3c0 [ 201.468728][ T8924] ? __kernfs_new_node+0xd7/0x7f0 [ 201.468763][ T8924] __kernfs_new_node+0xd7/0x7f0 [ 201.468792][ T8924] ? __lock_acquire+0xaac/0xd20 [ 201.468827][ T8924] ? __pfx___kernfs_new_node+0x10/0x10 [ 201.468857][ T8924] ? kernfs_root+0x1c/0x230 [ 201.468891][ T8924] ? kernfs_root+0x1c/0x230 [ 201.468917][ T8924] ? kernfs_root+0x1c/0x230 [ 201.468950][ T8924] ? kernfs_root+0x1c/0x230 [ 201.468983][ T8924] kernfs_new_node+0x102/0x210 [ 201.469018][ T8924] __kernfs_create_file+0x4b/0x2e0 [ 201.469044][ T8924] sysfs_add_file_mode_ns+0x238/0x300 [ 201.469079][ T8924] sysfs_create_file_ns+0x128/0x1a0 [ 201.469106][ T8924] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 201.469137][ T8924] ? device_create_file+0xf4/0x1c0 [ 201.469162][ T8924] nbd_genl_connect+0x13f7/0x1930 [ 201.469203][ T8924] ? __pfx_nbd_genl_connect+0x10/0x10 [ 201.469249][ T8924] ? __nla_parse+0x40/0x60 [ 201.469277][ T8924] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 201.469335][ T8924] genl_family_rcv_msg_doit+0x212/0x300 [ 201.469373][ T8924] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.469420][ T8924] ? stack_depot_save_flags+0x40/0x910 [ 201.469451][ T8924] genl_rcv_msg+0x60e/0x790 [ 201.469488][ T8924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.469515][ T8924] ? __pfx_nbd_genl_connect+0x10/0x10 [ 201.469562][ T8924] netlink_rcv_skb+0x219/0x490 [ 201.469586][ T8924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.469616][ T8924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.469668][ T8924] ? down_read+0x1ad/0x2e0 [ 201.469690][ T8924] genl_rcv+0x28/0x40 [ 201.469716][ T8924] netlink_unicast+0x758/0x8d0 [ 201.469750][ T8924] netlink_sendmsg+0x805/0xb30 [ 201.469785][ T8924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.469813][ T8924] ? aa_sock_msg_perm+0x94/0x160 [ 201.469837][ T8924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.469860][ T8924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.469884][ T8924] __sock_sendmsg+0x219/0x270 [ 201.469921][ T8924] ____sys_sendmsg+0x505/0x830 [ 201.469959][ T8924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.469997][ T8924] ? import_iovec+0x74/0xa0 [ 201.470029][ T8924] ___sys_sendmsg+0x21f/0x2a0 [ 201.470059][ T8924] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.470130][ T8924] ? __fget_files+0x2a/0x420 [ 201.470154][ T8924] ? __fget_files+0x3a0/0x420 [ 201.470193][ T8924] __x64_sys_sendmsg+0x19b/0x260 [ 201.470224][ T8924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.470272][ T8924] ? do_syscall_64+0xba/0x210 [ 201.470306][ T8924] do_syscall_64+0xf6/0x210 [ 201.470337][ T8924] ? clear_bhb_loop+0x45/0xa0 [ 201.470363][ T8924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.470382][ T8924] RIP: 0033:0x7ff0b638e969 [ 201.470400][ T8924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.470418][ T8924] RSP: 002b:00007ff0b72a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.470440][ T8924] RAX: ffffffffffffffda RBX: 00007ff0b65b5fa0 RCX: 00007ff0b638e969 [ 201.470454][ T8924] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000006 [ 201.470467][ T8924] RBP: 00007ff0b72a7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.470480][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.470492][ T8924] R13: 0000000000000000 R14: 00007ff0b65b5fa0 R15: 00007ffccdd79c98 [ 201.470526][ T8924] [ 201.470707][ T8924] block nbd11: device_create_file failed for backend! [ 201.779082][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 201.979715][ T8658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.999367][ T5835] block nbd11: Receive control failed (result -32) [ 202.010484][ T5835] block nbd11: shutting down sockets [ 202.029618][ T5835] ================================================================== [ 202.037743][ T5835] BUG: KASAN: slab-use-after-free in recv_work+0x215e/0x24f0 [ 202.044491][ T8658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.045151][ T5835] Write of size 4 at addr ffff8880756c1078 by task kworker/u9:3/5835 [ 202.059945][ T5835] [ 202.062304][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:3 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 202.062331][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.062344][ T5835] Workqueue: nbd11-recv recv_work [ 202.062366][ T5835] Call Trace: [ 202.062374][ T5835] [ 202.062383][ T5835] dump_stack_lvl+0x189/0x250 [ 202.062417][ T5835] ? __virt_addr_valid+0x18c/0x540 [ 202.062442][ T5835] ? rcu_is_watching+0x15/0xb0 [ 202.062471][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.062498][ T5835] ? rcu_is_watching+0x15/0xb0 [ 202.062526][ T5835] ? lock_release+0x4b/0x3e0 [ 202.062554][ T5835] ? __virt_addr_valid+0x18c/0x540 [ 202.062578][ T5835] ? __virt_addr_valid+0x469/0x540 [ 202.062609][ T5835] print_report+0xb4/0x290 [ 202.062632][ T5835] ? recv_work+0x215e/0x24f0 [ 202.062648][ T5835] kasan_report+0x118/0x150 [ 202.062674][ T5835] ? recv_work+0x215e/0x24f0 [ 202.062695][ T5835] kasan_check_range+0x29a/0x2b0 [ 202.062721][ T5835] recv_work+0x215e/0x24f0 [ 202.062738][ T5835] ? arch_stack_walk+0x11c/0x150 [ 202.062769][ T5835] ? stack_trace_save+0x9c/0xe0 [ 202.062795][ T5835] ? __pfx_recv_work+0x10/0x10 [ 202.062822][ T5835] ? lockdep_unlock+0x89/0x120 [ 202.062855][ T5835] ? validate_chain+0x897/0x2140 [ 202.062925][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.062958][ T5835] ? process_scheduled_works+0x9ec/0x17a0 [ 202.062986][ T5835] ? process_scheduled_works+0x9ec/0x17a0 [ 202.063016][ T5835] process_scheduled_works+0xadb/0x17a0 [ 202.063060][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 202.063100][ T5835] worker_thread+0x8a0/0xda0 [ 202.063132][ T5835] kthread+0x70e/0x8a0 [ 202.063155][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 202.063172][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.063194][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.063215][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.063238][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.063265][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.063286][ T5835] ret_from_fork+0x4b/0x80 [ 202.063305][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.063325][ T5835] ret_from_fork_asm+0x1a/0x30 [ 202.063351][ T5835] [ 202.063358][ T5835] [ 202.273051][ T5835] Allocated by task 8924: [ 202.277400][ T5835] kasan_save_track+0x3e/0x80 [ 202.282106][ T5835] __kasan_kmalloc+0x93/0xb0 [ 202.286738][ T5835] __kmalloc_cache_noprof+0x230/0x3d0 [ 202.292133][ T5835] nbd_alloc_and_init_config+0x88/0x260 [ 202.297719][ T5835] nbd_genl_connect+0x9dd/0x1930 [ 202.302676][ T5835] genl_family_rcv_msg_doit+0x212/0x300 [ 202.308241][ T5835] genl_rcv_msg+0x60e/0x790 [ 202.312760][ T5835] netlink_rcv_skb+0x219/0x490 [ 202.317541][ T5835] genl_rcv+0x28/0x40 [ 202.321542][ T5835] netlink_unicast+0x758/0x8d0 [ 202.326319][ T5835] netlink_sendmsg+0x805/0xb30 [ 202.331093][ T5835] __sock_sendmsg+0x219/0x270 [ 202.335789][ T5835] ____sys_sendmsg+0x505/0x830 [ 202.340567][ T5835] ___sys_sendmsg+0x21f/0x2a0 [ 202.345350][ T5835] __x64_sys_sendmsg+0x19b/0x260 [ 202.350300][ T5835] do_syscall_64+0xf6/0x210 [ 202.354825][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.360732][ T5835] [ 202.363062][ T5835] Freed by task 5835: [ 202.367048][ T5835] kasan_save_track+0x3e/0x80 [ 202.371739][ T5835] kasan_save_free_info+0x46/0x50 [ 202.376783][ T5835] __kasan_slab_free+0x62/0x70 [ 202.381563][ T5835] kfree+0x193/0x440 [ 202.385469][ T5835] nbd_config_put+0x642/0x790 [ 202.390171][ T5835] recv_work+0x2148/0x24f0 [ 202.394594][ T5835] process_scheduled_works+0xadb/0x17a0 [ 202.400167][ T5835] worker_thread+0x8a0/0xda0 [ 202.404766][ T5835] kthread+0x70e/0x8a0 [ 202.408846][ T5835] ret_from_fork+0x4b/0x80 [ 202.413271][ T5835] ret_from_fork_asm+0x1a/0x30 [ 202.418047][ T5835] [ 202.420379][ T5835] The buggy address belongs to the object at ffff8880756c1000 [ 202.420379][ T5835] which belongs to the cache kmalloc-256 of size 256 [ 202.434440][ T5835] The buggy address is located 120 bytes inside of [ 202.434440][ T5835] freed 256-byte region [ffff8880756c1000, ffff8880756c1100) [ 202.448255][ T5835] [ 202.450587][ T5835] The buggy address belongs to the physical page: [ 202.457012][ T5835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x756c0 [ 202.465789][ T5835] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 202.474301][ T5835] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 202.482213][ T5835] page_type: f5(slab) [ 202.486216][ T5835] raw: 00fff00000000040 ffff88801a041b40 ffffea0000480680 dead000000000007 [ 202.494851][ T5835] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 202.503462][ T5835] head: 00fff00000000040 ffff88801a041b40 ffffea0000480680 dead000000000007 [ 202.512147][ T5835] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 202.520913][ T5835] head: 00fff00000000001 ffffea0001d5b001 00000000ffffffff 00000000ffffffff [ 202.529638][ T5835] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 202.538331][ T5835] page dumped because: kasan: bad access detected [ 202.544759][ T5835] page_owner tracks the page as allocated [ 202.550473][ T5835] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 93057316910, free_ts 92995840633 [ 202.571851][ T5835] post_alloc_hook+0x1d8/0x230 [ 202.576639][ T5835] get_page_from_freelist+0x21e0/0x22c0 [ 202.582232][ T5835] __alloc_frozen_pages_noprof+0x181/0x370 [ 202.588064][ T5835] alloc_pages_mpol+0x232/0x4a0 [ 202.592950][ T5835] allocate_slab+0x8a/0x3b0 [ 202.597485][ T5835] ___slab_alloc+0xbfc/0x1480 [ 202.602188][ T5835] __kmalloc_cache_noprof+0x296/0x3d0 [ 202.607613][ T5835] ____ip_mc_inc_group+0x528/0xde0 [ 202.612754][ T5835] ip_mc_up+0x125/0x300 [ 202.616933][ T5835] inetdev_event+0xfb3/0x15b0 [ 202.621634][ T5835] notifier_call_chain+0x1b3/0x3e0 [ 202.626764][ T5835] __dev_notify_flags+0x18d/0x2e0 [ 202.631816][ T5835] netif_change_flags+0xe8/0x1a0 [ 202.636777][ T5835] do_setlink+0xcb9/0x40d0 [ 202.641298][ T5835] rtnl_newlink+0x160b/0x1c70 [ 202.645993][ T5835] rtnetlink_rcv_msg+0x7cc/0xb70 [ 202.651070][ T5835] page last free pid 5888 tgid 5888 stack trace: [ 202.657404][ T5835] __free_frozen_pages+0xb14/0xce0 [ 202.662544][ T5835] __mmdrop+0xb5/0x460 [ 202.666636][ T5835] exit_mm+0x1da/0x2c0 [ 202.670721][ T5835] do_exit+0x859/0x2550 [ 202.674898][ T5835] do_group_exit+0x21c/0x2d0 [ 202.679521][ T5835] __x64_sys_exit_group+0x3f/0x40 [ 202.684586][ T5835] x64_sys_call+0x21ba/0x21c0 [ 202.689293][ T5835] do_syscall_64+0xf6/0x210 [ 202.693910][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.699812][ T5835] [ 202.702151][ T5835] Memory state around the buggy address: [ 202.707889][ T5835] ffff8880756c0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.715968][ T5835] ffff8880756c0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.724056][ T5835] >ffff8880756c1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.732134][ T5835] ^ [ 202.740135][ T5835] ffff8880756c1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.748211][ T5835] ffff8880756c1100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.756290][ T5835] ================================================================== [ 202.764889][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.775940][ T5835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 202.783211][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:3 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 202.795385][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.805458][ T5835] Workqueue: nbd11-recv recv_work [ 202.810502][ T5835] Call Trace: [ 202.813837][ T5835] [ 202.816793][ T5835] dump_stack_lvl+0x99/0x250 [ 202.821499][ T5835] ? __asan_memcpy+0x40/0x70 [ 202.826142][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.831369][ T5835] ? __pfx__printk+0x10/0x10 [ 202.836062][ T5835] panic+0x2db/0x790 [ 202.839977][ T5835] ? __pfx_panic+0x10/0x10 [ 202.844405][ T5835] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 202.850312][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 202.856735][ T5835] ? print_memory_metadata+0x314/0x400 [ 202.862237][ T5835] ? recv_work+0x215e/0x24f0 [ 202.866866][ T5835] check_panic_on_warn+0x89/0xb0 [ 202.871822][ T5835] ? recv_work+0x215e/0x24f0 [ 202.876421][ T5835] end_report+0x78/0x160 [ 202.880675][ T5835] kasan_report+0x129/0x150 [ 202.885189][ T5835] ? recv_work+0x215e/0x24f0 [ 202.889788][ T5835] kasan_check_range+0x29a/0x2b0 [ 202.894739][ T5835] recv_work+0x215e/0x24f0 [ 202.899196][ T5835] ? arch_stack_walk+0x11c/0x150 [ 202.904152][ T5835] ? stack_trace_save+0x9c/0xe0 [ 202.909016][ T5835] ? __pfx_recv_work+0x10/0x10 [ 202.913792][ T5835] ? lockdep_unlock+0x89/0x120 [ 202.918580][ T5835] ? validate_chain+0x897/0x2140 [ 202.923594][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.928805][ T5835] ? process_scheduled_works+0x9ec/0x17a0 [ 202.934542][ T5835] ? process_scheduled_works+0x9ec/0x17a0 [ 202.940283][ T5835] process_scheduled_works+0xadb/0x17a0 [ 202.945867][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 202.951866][ T5835] worker_thread+0x8a0/0xda0 [ 202.956469][ T5835] kthread+0x70e/0x8a0 [ 202.960554][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 202.965677][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.970276][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.974876][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.980092][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.985306][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.989904][ T5835] ret_from_fork+0x4b/0x80 [ 202.994324][ T5835] ? __pfx_kthread+0x10/0x10 [ 202.998934][ T5835] ret_from_fork_asm+0x1a/0x30 [ 203.003711][ T5835] [ 203.007001][ T5835] Kernel Offset: disabled [ 203.011331][ T5835] Rebooting in 86400 seconds..