last executing test programs: 3.473209571s ago: executing program 0 (id=4124): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.276671842s ago: executing program 0 (id=4130): socket$kcm(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001700090022bd70b6bb00000006080000"], 0x14}}, 0x84) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0xfffffffffffffe45) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)='J', 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01f29f14e160d528eb000202020005000380000000000900010073797a3100000000"], 0x28}, 0x1, 0x40030000000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) 2.477750925s ago: executing program 4 (id=4138): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a3100000000c4006b8aebc45357e8d853ce7dd4d7201715a375f4626f9c65c96f90fc29072eabfa"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6f9b, 0x81, 0xc, 0x1ff, 0x7fff, 0x9}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 2.364345178s ago: executing program 4 (id=4142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fdffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (fail_nth: 4) 2.285855422s ago: executing program 3 (id=4144): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x118, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.963777457s ago: executing program 4 (id=4146): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x17, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r1, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@datasec={0xc, 0x0, 0x0, 0xf, 0x2, [], 'Iw'}, @datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000140)=""/4, 0x3e, 0x4, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040)=r2, 0x4) 1.89340658s ago: executing program 2 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000005400000005d8354a45e0166eefa5da79947d773bb3f31babfcdb1442b254e08912f0223ed6c0dc88"], 0x14}}, 0x0) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000120001003dbd70000000000007000000dad177538b"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r5 = socket(0x10, 0x803, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000140), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000000000000000000000000c86cdabf070295e38780aac79a9bd19bd590c5765402067367b36d72ffe67a1870bc36ab6a735d49051ef6589036e6b650cd167d4cc9dee0d74a9997701638f16086d4f3eee693e473aaf1fa09000000000000002198e5f5adf2b93b2454f977c5a3baaf2b6fed77b30a0cc712d8d6848f80a50220d65ac032449fb2481ed929ec95786d447bb848293f2f082d9783f654787ed2f532837cb20020b946cbf75c43da7ef6ab958f29f318a5b601d509d6ef2f576f08423e253bca156195608e364bcf519432aaff03d8738a846bde4b8fcacdf0c4869bbe9124c090c92cf183a38c8b412dbe85140b077ae1312afce9f76d33df557a", @ANYRES32=0x0, @ANYBLOB="18820000000b0101240012800c0001006d6163766c616e001400028006000200000000000800010028000000"], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYRES64=r5, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0xc054}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000480)="1b03ed24e86fa5e9d227351ed479fecae1ae49d8e90ec3ca061197b862bb64d069220b573c95122fc04d39f347c5bc23211c96d466bb83336c24bf6433a925fee8ad246d3144c1a58ec4bb36f2e66a39af11dbf7fa8cd66330bd01ab72b6feab91db87608078c9cd5a56ea1817a4b8dad26ef0840c51bfda48a8351f306a1badc29a5aabb650c3b4c3f5d9042dcbf790a6dad07aba") sendmsg$unix(r9, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xa, 0x40000}, 0x20048040) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtclass={0x30, 0x28, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff2, 0x2}, {0x4, 0x5}, {0x5, 0x5}}, [@tclass_kind_options=@c_skbprio={0xc}]}, 0x30}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x480, 0x28, 0xd27, 0x1003ffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xffff, 0x9}, {0xc}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x450, 0x2, [@TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8009, 0x2d1e, 0xc, 0x9, 0x4, 0xfffffffe, 0xc9a3, 0x6, 0x0, 0x2, 0x8, 0x0, 0xc85, 0x2, 0x4, 0x9, 0xc, 0xe, 0x8e, 0x5, 0x7, 0x1, 0x7, 0x1000, 0x9, 0x6, 0x56cf, 0x8, 0x2, 0x9242, 0x10001, 0x1, 0x7, 0x1, 0x632, 0xe12, 0xf, 0x5, 0xa, 0x80000000, 0xfff, 0x1ff, 0x8, 0x4, 0x10, 0x1ff, 0x80000000, 0x6, 0x4, 0x5, 0x688699bd, 0x10001, 0xbfc, 0xb, 0x1, 0x7fffffff, 0x4, 0x0, 0x8, 0x5, 0x2, 0x3635, 0x5, 0x69634c36, 0x3, 0x0, 0x6, 0x7, 0x8001, 0xab7, 0x9, 0x10000, 0x800, 0x4, 0x3, 0x8, 0x3, 0x5, 0x4, 0x2, 0x3, 0x0, 0x7, 0x4, 0x3, 0x4e, 0xffff, 0x3, 0xfffeffff, 0x7fffffff, 0x3, 0x9, 0x359, 0x8, 0x8, 0x4, 0x7ff, 0x7ff, 0x7, 0x3ff, 0x5, 0x5, 0x0, 0x3, 0x64f87493, 0x6, 0x0, 0x0, 0x3, 0x0, 0xe3c, 0x2cef, 0xa, 0x5, 0x3, 0x8, 0x100, 0xba, 0x5, 0x2, 0x9, 0xf, 0x6, 0x3, 0x6, 0xfffffffa, 0x9, 0x9, 0xb, 0x9fa4, 0x100, 0x5, 0x3bac0000, 0x0, 0xc, 0x80, 0x200, 0x2, 0x0, 0x9, 0x40, 0x8, 0xd9, 0xffffffff, 0x9, 0x57, 0xdf14, 0x1, 0x9, 0x1, 0x5, 0xfff, 0x80000001, 0x1, 0xe7, 0x1, 0x400, 0x10001, 0x9, 0xffffffd2, 0xffffffff, 0x100, 0x28d891e7, 0x9, 0x8, 0x6, 0xa3, 0x99cf, 0x7fffffff, 0x800000, 0x4266, 0x6, 0xffffffff, 0xff, 0x72, 0x3, 0x8, 0x0, 0xa2, 0x0, 0x2, 0x7, 0x7, 0x7fff, 0x0, 0x3e0d, 0x401, 0x81, 0x6, 0xe, 0x4, 0x5, 0x40, 0x1, 0x2, 0xb, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3, 0x4, 0xa13, 0x9, 0x1a49, 0x1, 0xc, 0x2, 0x7, 0x9, 0x5, 0xfff, 0xc58b, 0x6, 0xfffff800, 0x5, 0xc0, 0x6, 0x6, 0x81, 0x20, 0x0, 0x5, 0x7, 0xb, 0xe0, 0x1ff, 0x2, 0x2, 0x6cb, 0xd172, 0x0, 0x3, 0x7fffffff, 0xd, 0x1800, 0x2, 0xb9f, 0x6, 0x9, 0x3ff, 0x0, 0x2, 0x9, 0x166, 0x2, 0x5f, 0x2, 0x6, 0x8001, 0xccd, 0xffffffff, 0x2, 0x3, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x2, 0xba9, 0x0, 0x2, {0x7, 0x2, 0x7ff, 0x5, 0x4, 0x2}, {0x4, 0x2, 0x5, 0x1, 0xf23b, 0x9}, 0x6, 0x4d, 0x1ff}}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8810}, 0x855) 1.875431759s ago: executing program 3 (id=4148): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x11, 0x3, "c6a41d106c72ffffffffffffff"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x4048010) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000300000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000180000000000000010010000"], 0x38}, 0x0) 1.87423054s ago: executing program 0 (id=4149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000000e0a20000000020a01020000000000000000020000050900010073797a3000000000140000001000010000000000000000000600000a"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={r4}, &(0x7f0000000000)=0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@deltaction={0xb4, 0x31, 0x104, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000014}, 0x8001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000000000000000000003000000000300000002000000000000000000000000000001050000000800000002000000000000080000000000002e00"], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf2543000000080003006ea61ef30d8af6e9875c9e57ce8d58cbb11d887aa308fd770488dbac64080839d5c08fac8734c40210338fe8c23b43afbf7e77e3c6e877933c7ded17f0c4450ca1488f3791684130c44749a38bfe136c6621d5e35b10c4ea83720fdd25194eeea32ec24b9f913a0cef9b95eb1739b1e0", @ANYRES32=0x0, @ANYBLOB="0c009900020000006a0000000c0058004a000000000000000c00580028000000000000000c00580043000000000000000c00580063000000000000000c00580033000000000000000c0058005600000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000132ae57f60014"], 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r12, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0xd4, 0x1, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4153}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x80000000, 0x8}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r13, 0x4040942c, &(0x7f0000000780)={0x0, 0x6, [0x4, 0x7, 0x4, 0x0, 0x3fffc00, 0x6]}) 1.872087991s ago: executing program 1 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000100601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fdffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1.77378367s ago: executing program 4 (id=4151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000022bd472f7000a38000000060a0b040020000000000000797a32000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000000000000054bb90d7f35cb45ae59c726649ccbcbe8deca0cc3125802e9bc9e228aedba890e4080dd7d33caf2d0a0f1bcf7c139ef47312755f4d984e59c6ca120be1513e143e67229ad12d8d9fd4f901c91e72b7"], 0x60}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 1.773276133s ago: executing program 2 (id=4152): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a3100000000c4006b8aebc45357e8d853ce7dd4d7201715a375f4626f9c65c96f90fc29072eabfa"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6f9b, 0x81, 0xc, 0x1ff, 0x7fff, 0x9}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 1.715402736s ago: executing program 3 (id=4153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00", @ANYRES32], 0x20}}, 0x10) (fail_nth: 6) 1.710032476s ago: executing program 1 (id=4154): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3800, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 1.434017152s ago: executing program 4 (id=4155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0xb0b}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="03008000", @ANYRES16=r8, @ANYBLOB="08002abd7000ffdbdf250a00000008000300", @ANYRES32=r9, @ANYBLOB="08003700000000000a000600ffffffffffff00100800090001ac0effeb000700f851cc1083000000040028000a00060008021100000100be0b30e870fd9a4a53fdc9552e0008003700020000"], 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x801) 1.258142278s ago: executing program 0 (id=4156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf2511"], 0x28}}, 0x844) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d0000000080211000001080211000e005050505050500000", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x5c, r8, 0x400, 0x70bd2c, 0x9, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2a}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e9f77c4abb7170744a4bf54492c1aad0"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "39f002860cc03563593357eb46a37bd9"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6ce004be9e1753916910d67d7fca45ca"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x10008080) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200bb0015000095000020000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.232908276s ago: executing program 2 (id=4157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c"], 0x250}}, 0x0) 1.121798797s ago: executing program 3 (id=4158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r5, 0x4}}]}, 0x144}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x100c2) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r6, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="39f0d3134eee"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) 1.121175039s ago: executing program 0 (id=4159): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x0, 0x803, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x69, 0xffff, 0xff, 0x0, 0x0, @empty, @loopback}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0}, 0x4040) socketpair(0x2, 0x5, 0x20000, &(0x7f0000000080)) 1.097224103s ago: executing program 2 (id=4160): socket$kcm(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001700090022bd70b6bb00000006080000"], 0x14}}, 0x84) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0xfffffffffffffe45) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)='J', 0x1}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000380)=' ', 0x1, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01f29f14e160d528eb000202020005000380000000000900010073797a3100000000"], 0x28}, 0x1, 0x40030000000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) 1.086515651s ago: executing program 1 (id=4161): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c000004001280140001800800"], 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 958.489112ms ago: executing program 1 (id=4162): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 918.312102ms ago: executing program 1 (id=4163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x800000000000000}, 0x40864) 812.7648ms ago: executing program 3 (id=4164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="fd3b6441ffd687e4a172454d8f827dac", 0x10}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x4044094) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/103, 0x67}], 0x1}}], 0x1, 0x42, 0x0) (fail_nth: 3) 761.600328ms ago: executing program 1 (id=4165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a986", 0x2}], 0x1, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/7, 0x7}], 0x1}, 0x222) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r3, 0x5, 0x0, 0x25df5bfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x40050) 736.903024ms ago: executing program 0 (id=4166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 731.546153ms ago: executing program 4 (id=4167): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a3100000000c4006b8aebc45357e8d853ce7dd4d7201715a375f4626f9c65c96f90fc29072eabfa"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6f9b, 0x81, 0xc, 0x1ff, 0x7fff, 0x9}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 621.58423ms ago: executing program 3 (id=4168): socket$packet(0x11, 0x2, 0x300) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_ZONE={0x34, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x0, 0x1a, 0x1, 0x0, 0x5}]}, 0x1b}}, 0x801) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @remote}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) unshare(0x400) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x10b2, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x28, 0x4, 0x3, 0x29, 0x10a0, 0x68, 0x0, 0x4, 0x0, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x2c, 0xcd, 0x1, 0x5, [{@broadcast, 0xe565}, {@local}, {@loopback, 0x4000}, {@multicast2, 0x401}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}]}, @timestamp={0x44, 0x20, 0x7a, 0x0, 0x1, [0x8, 0x5, 0x7fffffff, 0x565f, 0x1, 0x8, 0x1aae0f7a]}, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0xa, [{@local, 0x7}]}, @timestamp={0x44, 0x18, 0x87, 0x0, 0x0, [0x475, 0x1, 0x7, 0x707f, 0x4]}, @timestamp={0x44, 0x14, 0x70, 0x0, 0x5, [0x615, 0x6e0, 0x4, 0x7]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}, "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"}}}}, &(0x7f0000000240)={0x0, 0x2, [0x7b5, 0x697, 0x3fa, 0x290]}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) 85.678275ms ago: executing program 2 (id=4169): syz_emit_ethernet(0x102, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x16, 0x4, 0x0, 0x0, 0xf4, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local, {[@timestamp_addr={0x44, 0x44, 0x12, 0x1, 0x4, [{@loopback, 0x6}, {@remote, 0x8}, {@local, 0x7}, {@multicast2}, {@loopback, 0x10000}, {@loopback, 0x3}, {@multicast1, 0x81}, {@broadcast, 0x1}]}]}}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b007d624d339fa9d22cb6de324ff596f"}]}}}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000500)={@dev, 0x0}, &(0x7f0000000540)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x4, [@enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0xc, [{0xb, 0x81, 0x311}, {0xb, 0x908d, 0x40}, {0xa, 0x10001, 0x1ff}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @var={0xd, 0x0, 0x0, 0xe, 0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xf}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0x6, [{0xb, 0x4, 0x800}, {0x4, 0x2, 0x1000}, {0x1, 0x0, 0x5}]}, @var={0x10, 0x0, 0x0, 0xe, 0x5}, @const={0xe, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000680)=""/251, 0xcc, 0xfb, 0x0, 0xa, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x17, &(0x7f0000000040)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd}}, @generic={0x81, 0x4, 0x3, 0x9, 0xffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x76}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000000140)='syzkaller\x00', 0xb64c, 0xe1, &(0x7f0000000400)=""/225, 0x40f00, 0x2, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000007c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xf, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x5, 0x5, 0xc, 0xc}], 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xf2, &(0x7f00000001c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "ae8e3a", 0xbc, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}, @local, {[@srh={0x87, 0x4, 0x4, 0x2, 0x7, 0x48, 0x8, [@local, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x2f, 0x2, 0x4, 0x1, 0x60, 0x0, 0x7, [@loopback]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x2, 0x0, 0x5, 0x6e, 0xffff, 0x0, 0x4e24, 0x4e20, 0x875, 0x1}, [{0x800, 0x9035, 0x7, 0x87, 0x81, 0xec0c6280, 0x1, 0x31}, {0x8, 0x3, 0x0, 0xfffff979, 0x3, 0x5, 0x8, 0x6}, {0x0, 0x5, 0x4, 0x6, 0x4, 0x80, 0x7, 0x4}]}}}}}}, 0x0) 0s ago: executing program 2 (id=4170): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000041000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101000000000000000001000000090001"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%pB \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, 0x0, &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40600", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): y attribute missing. [ 392.409622][T16276] netlink: 308 bytes leftover after parsing attributes in process `syz.3.3743'. [ 392.462165][T16276] netlink: 'syz.3.3743': attribute type 10 has an invalid length. [ 392.470438][T16276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3743'. [ 392.479576][T16278] dvmrp0: entered allmulticast mode [ 392.543564][T16276] team0: Port device geneve0 added [ 392.618479][T16286] dvmrp0: left allmulticast mode [ 392.631712][T16278] block nbd0: server does not support multiple connections per device. [ 392.646641][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.655939][T16278] block nbd0: shutting down sockets [ 392.833455][T16297] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3748'. [ 392.888041][T16298] FAULT_INJECTION: forcing a failure. [ 392.888041][T16298] name failslab, interval 1, probability 0, space 0, times 0 [ 392.911124][T16298] CPU: 0 UID: 0 PID: 16298 Comm: syz.4.3750 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 392.911152][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 392.911164][T16298] Call Trace: [ 392.911172][T16298] [ 392.911181][T16298] dump_stack_lvl+0x189/0x250 [ 392.911216][T16298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.911244][T16298] ? __pfx__printk+0x10/0x10 [ 392.911270][T16298] ? ref_tracker_alloc+0x318/0x460 [ 392.911293][T16298] should_fail_ex+0x414/0x560 [ 392.911329][T16298] should_failslab+0xa8/0x100 [ 392.911356][T16298] kmem_cache_alloc_noprof+0x73/0x3c0 [ 392.911379][T16298] ? skb_clone+0x212/0x3a0 [ 392.911408][T16298] skb_clone+0x212/0x3a0 [ 392.911439][T16298] __netlink_deliver_tap+0x404/0x850 [ 392.911474][T16298] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.911497][T16298] netlink_deliver_tap+0x19c/0x1b0 [ 392.911519][T16298] netlink_unicast+0x72f/0x8d0 [ 392.911548][T16298] netlink_sendmsg+0x805/0xb30 [ 392.911580][T16298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.911605][T16298] ? aa_sock_msg_perm+0x94/0x160 [ 392.911627][T16298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.911648][T16298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.911671][T16298] __sock_sendmsg+0x219/0x270 [ 392.911705][T16298] ____sys_sendmsg+0x505/0x830 [ 392.911736][T16298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.911772][T16298] ? import_iovec+0x74/0xa0 [ 392.911800][T16298] ___sys_sendmsg+0x21f/0x2a0 [ 392.911828][T16298] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.911910][T16298] ? __fget_files+0x2a/0x420 [ 392.911947][T16298] ? __fget_files+0x3a0/0x420 [ 392.911983][T16298] __x64_sys_sendmsg+0x19b/0x260 [ 392.912019][T16298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.912061][T16298] ? do_syscall_64+0xba/0x210 [ 392.912095][T16298] do_syscall_64+0xf6/0x210 [ 392.912125][T16298] ? clear_bhb_loop+0x45/0xa0 [ 392.912149][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.912167][T16298] RIP: 0033:0x7f87b258e969 [ 392.912185][T16298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.912201][T16298] RSP: 002b:00007f87b333f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.912221][T16298] RAX: ffffffffffffffda RBX: 00007f87b27b5fa0 RCX: 00007f87b258e969 [ 392.912235][T16298] RDX: 0000000000008004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 392.912247][T16298] RBP: 00007f87b333f090 R08: 0000000000000000 R09: 0000000000000000 [ 392.912259][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.912270][T16298] R13: 0000000000000000 R14: 00007f87b27b5fa0 R15: 00007ffe14c1a9c8 [ 392.912301][T16298] [ 393.203694][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 393.277085][T16307] openvswitch: netlink: Message has 8 unknown bytes. [ 393.467776][T16313] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 393.703793][T16315] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 393.739235][T16315] lo speed is unknown, defaulting to 1000 [ 393.745522][T16315] lo speed is unknown, defaulting to 1000 [ 393.754504][T16315] lo speed is unknown, defaulting to 1000 [ 393.768288][T16315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.804128][T16328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.821736][T16315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 393.918895][T16315] lo speed is unknown, defaulting to 1000 [ 393.926154][T16333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3765'. [ 393.953819][T16315] lo speed is unknown, defaulting to 1000 [ 393.979643][T16315] lo speed is unknown, defaulting to 1000 [ 394.002248][T16315] lo speed is unknown, defaulting to 1000 [ 394.034067][T16315] lo speed is unknown, defaulting to 1000 [ 394.061249][T16315] lo speed is unknown, defaulting to 1000 [ 394.148325][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'. [ 394.429509][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 394.455471][T16352] netlink: 'syz.3.3773': attribute type 15 has an invalid length. [ 394.471582][T16348] ipvlan2: entered promiscuous mode [ 394.554721][T16354] batadv0: entered promiscuous mode [ 394.569971][T16354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.690883][T16359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.716565][ C0] net_ratelimit: 3 callbacks suppressed [ 394.716584][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.820812][T16369] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 395.013890][T16376] tap0: tun_chr_ioctl cmd 1074025677 [ 395.021371][T16376] tap0: linktype set to 778 [ 395.070495][T16379] netlink: 'syz.0.3787': attribute type 1 has an invalid length. [ 395.080118][T16380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3786'. [ 395.137689][T16379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.151752][T16384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3787'. [ 395.228324][T16387] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3786'. [ 395.276009][T16387] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 395.294196][T16389] FAULT_INJECTION: forcing a failure. [ 395.294196][T16389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.308609][T16389] CPU: 1 UID: 0 PID: 16389 Comm: syz.3.3790 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 395.308637][T16389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 395.308649][T16389] Call Trace: [ 395.308657][T16389] [ 395.308665][T16389] dump_stack_lvl+0x189/0x250 [ 395.308697][T16389] ? __lock_acquire+0xaac/0xd20 [ 395.308727][T16389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.308755][T16389] ? __pfx__printk+0x10/0x10 [ 395.308774][T16389] ? __might_fault+0xb0/0x130 [ 395.308811][T16389] should_fail_ex+0x414/0x560 [ 395.308855][T16389] _copy_from_user+0x2d/0xb0 [ 395.308881][T16389] ___sys_sendmsg+0x158/0x2a0 [ 395.308910][T16389] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.308971][T16389] ? __fget_files+0x2a/0x420 [ 395.308996][T16389] ? __fget_files+0x3a0/0x420 [ 395.309031][T16389] __x64_sys_sendmsg+0x19b/0x260 [ 395.309059][T16389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.309100][T16389] ? do_syscall_64+0xba/0x210 [ 395.309134][T16389] do_syscall_64+0xf6/0x210 [ 395.309163][T16389] ? clear_bhb_loop+0x45/0xa0 [ 395.309186][T16389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.309205][T16389] RIP: 0033:0x7f071ff8e969 [ 395.309222][T16389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.309239][T16389] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.309259][T16389] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 395.309273][T16389] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 395.309285][T16389] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 395.309297][T16389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.309308][T16389] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 395.309338][T16389] [ 395.614959][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 395.705107][T16394] ipvlan2: entered promiscuous mode [ 395.766974][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.979038][T16405] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 396.133414][T16411] FAULT_INJECTION: forcing a failure. [ 396.133414][T16411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.167879][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.4.3797 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 396.167909][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 396.167922][T16411] Call Trace: [ 396.167929][T16411] [ 396.167938][T16411] dump_stack_lvl+0x189/0x250 [ 396.167969][T16411] ? __lock_acquire+0xaac/0xd20 [ 396.168008][T16411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.168034][T16411] ? __pfx__printk+0x10/0x10 [ 396.168070][T16411] ? __might_fault+0xb0/0x130 [ 396.168106][T16411] should_fail_ex+0x414/0x560 [ 396.168141][T16411] _copy_from_user+0x2d/0xb0 [ 396.168168][T16411] ___sys_sendmsg+0x158/0x2a0 [ 396.168197][T16411] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.168258][T16411] ? __fget_files+0x2a/0x420 [ 396.168282][T16411] ? __fget_files+0x3a0/0x420 [ 396.168318][T16411] __x64_sys_sendmsg+0x19b/0x260 [ 396.168346][T16411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.168388][T16411] ? do_syscall_64+0xba/0x210 [ 396.168421][T16411] do_syscall_64+0xf6/0x210 [ 396.168450][T16411] ? clear_bhb_loop+0x45/0xa0 [ 396.168475][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.168493][T16411] RIP: 0033:0x7f87b258e969 [ 396.168510][T16411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.168526][T16411] RSP: 002b:00007f87b333f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.168546][T16411] RAX: ffffffffffffffda RBX: 00007f87b27b5fa0 RCX: 00007f87b258e969 [ 396.168561][T16411] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 396.168572][T16411] RBP: 00007f87b333f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.168584][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.168595][T16411] R13: 0000000000000000 R14: 00007f87b27b5fa0 R15: 00007ffe14c1a9c8 [ 396.168625][T16411] [ 396.431913][T16417] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 396.563718][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3801'. [ 396.666717][T16426] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.806614][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.034391][T16419] FAULT_INJECTION: forcing a failure. [ 397.034391][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 397.092014][T16442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 397.116846][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.0.3799 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 397.116874][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 397.116886][T16419] Call Trace: [ 397.116894][T16419] [ 397.116903][T16419] dump_stack_lvl+0x189/0x250 [ 397.116940][T16419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.116969][T16419] ? __pfx__printk+0x10/0x10 [ 397.117001][T16419] ? __pfx___might_resched+0x10/0x10 [ 397.117019][T16419] ? fs_reclaim_acquire+0x7d/0x100 [ 397.117052][T16419] should_fail_ex+0x414/0x560 [ 397.117089][T16419] should_failslab+0xa8/0x100 [ 397.117117][T16419] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 397.117143][T16419] ? __alloc_skb+0x112/0x2d0 [ 397.117170][T16419] __alloc_skb+0x112/0x2d0 [ 397.117196][T16419] netlink_ack+0x146/0xa50 [ 397.117217][T16419] ? is_bpf_text_address+0x26/0x2b0 [ 397.117249][T16419] ? is_bpf_text_address+0x292/0x2b0 [ 397.117284][T16419] netlink_rcv_skb+0x2a0/0x490 [ 397.117308][T16419] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 397.117340][T16419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.117375][T16419] ? apparmor_capable+0x137/0x1b0 [ 397.117405][T16419] ? bpf_lsm_capable+0x9/0x20 [ 397.117431][T16419] ? security_capable+0x7e/0x2e0 [ 397.117459][T16419] nfnetlink_rcv+0x273/0x2530 [ 397.117491][T16419] ? kernel_text_address+0xa5/0xe0 [ 397.117518][T16419] ? __kernel_text_address+0xd/0x40 [ 397.117543][T16419] ? unwind_get_return_address+0x4d/0x90 [ 397.117566][T16419] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.117587][T16419] ? arch_stack_walk+0xfc/0x150 [ 397.117625][T16419] ? stack_trace_save+0x9c/0xe0 [ 397.117648][T16419] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 397.117673][T16419] ? stack_depot_save_flags+0x40/0x910 [ 397.117701][T16419] ? kasan_save_track+0x4f/0x80 [ 397.117721][T16419] ? kasan_save_track+0x3e/0x80 [ 397.117749][T16419] ? __lock_acquire+0xaac/0xd20 [ 397.117800][T16419] ? __lock_acquire+0xaac/0xd20 [ 397.117836][T16419] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.117865][T16419] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.117887][T16419] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.117914][T16419] netlink_unicast+0x758/0x8d0 [ 397.117946][T16419] netlink_sendmsg+0x805/0xb30 [ 397.117980][T16419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.118013][T16419] ? aa_sock_msg_perm+0x94/0x160 [ 397.118036][T16419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.118059][T16419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.118083][T16419] __sock_sendmsg+0x219/0x270 [ 397.118117][T16419] ____sys_sendmsg+0x505/0x830 [ 397.118149][T16419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.118183][T16419] ? import_iovec+0x74/0xa0 [ 397.118214][T16419] ___sys_sendmsg+0x21f/0x2a0 [ 397.118242][T16419] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.118304][T16419] ? __fget_files+0x2a/0x420 [ 397.118329][T16419] ? __fget_files+0x3a0/0x420 [ 397.118366][T16419] __x64_sys_sendmsg+0x19b/0x260 [ 397.118395][T16419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.118438][T16419] ? do_syscall_64+0xba/0x210 [ 397.118473][T16419] do_syscall_64+0xf6/0x210 [ 397.118504][T16419] ? clear_bhb_loop+0x45/0xa0 [ 397.118528][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.118546][T16419] RIP: 0033:0x7f625e98e969 [ 397.118562][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.118578][T16419] RSP: 002b:00007f625f8b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.118599][T16419] RAX: ffffffffffffffda RBX: 00007f625ebb5fa0 RCX: 00007f625e98e969 [ 397.118625][T16419] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 397.118637][T16419] RBP: 00007f625f8b3090 R08: 0000000000000000 R09: 0000000000000000 [ 397.118648][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.118659][T16419] R13: 0000000000000000 R14: 00007f625ebb5fa0 R15: 00007ffc2e46c848 [ 397.118687][T16419] [ 397.583326][T16448] FAULT_INJECTION: forcing a failure. [ 397.583326][T16448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.597111][T16448] CPU: 1 UID: 0 PID: 16448 Comm: syz.2.3812 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 397.597137][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 397.597148][T16448] Call Trace: [ 397.597156][T16448] [ 397.597165][T16448] dump_stack_lvl+0x189/0x250 [ 397.597195][T16448] ? __lock_acquire+0xaac/0xd20 [ 397.597224][T16448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.597251][T16448] ? __pfx__printk+0x10/0x10 [ 397.597271][T16448] ? __might_fault+0xb0/0x130 [ 397.597305][T16448] should_fail_ex+0x414/0x560 [ 397.597342][T16448] _copy_from_iter+0x1db/0x15a0 [ 397.597373][T16448] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 397.597395][T16448] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 397.597422][T16448] ? __pfx__copy_from_iter+0x10/0x10 [ 397.597447][T16448] ? __build_skb_around+0x257/0x3e0 [ 397.597472][T16448] ? netlink_sendmsg+0x642/0xb30 [ 397.597492][T16448] ? skb_put+0x11b/0x210 [ 397.597519][T16448] netlink_sendmsg+0x6b2/0xb30 [ 397.597552][T16448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.597577][T16448] ? aa_sock_msg_perm+0x94/0x160 [ 397.597601][T16448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.597634][T16448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.597659][T16448] __sock_sendmsg+0x219/0x270 [ 397.597691][T16448] ____sys_sendmsg+0x505/0x830 [ 397.597721][T16448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.597758][T16448] ? import_iovec+0x74/0xa0 [ 397.597789][T16448] ___sys_sendmsg+0x21f/0x2a0 [ 397.597816][T16448] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.597880][T16448] ? __fget_files+0x2a/0x420 [ 397.597906][T16448] ? __fget_files+0x3a0/0x420 [ 397.597941][T16448] __x64_sys_sendmsg+0x19b/0x260 [ 397.597970][T16448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.598013][T16448] ? do_syscall_64+0xba/0x210 [ 397.598048][T16448] do_syscall_64+0xf6/0x210 [ 397.598078][T16448] ? clear_bhb_loop+0x45/0xa0 [ 397.598102][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.598121][T16448] RIP: 0033:0x7ff186b8e969 [ 397.598138][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.598155][T16448] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.598175][T16448] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 397.598189][T16448] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 397.598201][T16448] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 397.598213][T16448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.598225][T16448] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 397.598255][T16448] [ 397.866784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.995319][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 398.273357][T16468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 398.453930][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'. [ 398.840835][T16502] FAULT_INJECTION: forcing a failure. [ 398.840835][T16502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.862856][T16502] CPU: 1 UID: 0 PID: 16502 Comm: syz.4.3831 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 398.862886][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 398.862899][T16502] Call Trace: [ 398.862906][T16502] [ 398.862915][T16502] dump_stack_lvl+0x189/0x250 [ 398.862948][T16502] ? __lock_acquire+0xaac/0xd20 [ 398.862979][T16502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.863007][T16502] ? __pfx__printk+0x10/0x10 [ 398.863027][T16502] ? __might_fault+0xb0/0x130 [ 398.863064][T16502] should_fail_ex+0x414/0x560 [ 398.863101][T16502] _copy_from_iter+0x1db/0x15a0 [ 398.863132][T16502] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 398.863155][T16502] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 398.863182][T16502] ? __pfx__copy_from_iter+0x10/0x10 [ 398.863207][T16502] ? __build_skb_around+0x257/0x3e0 [ 398.863234][T16502] ? netlink_sendmsg+0x642/0xb30 [ 398.863255][T16502] ? skb_put+0x11b/0x210 [ 398.863282][T16502] netlink_sendmsg+0x6b2/0xb30 [ 398.863314][T16502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.863340][T16502] ? aa_sock_msg_perm+0x94/0x160 [ 398.863363][T16502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.863385][T16502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.863408][T16502] __sock_sendmsg+0x219/0x270 [ 398.863443][T16502] ____sys_sendmsg+0x505/0x830 [ 398.863474][T16502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.863509][T16502] ? import_iovec+0x74/0xa0 [ 398.863541][T16502] ___sys_sendmsg+0x21f/0x2a0 [ 398.863569][T16502] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.863633][T16502] ? __fget_files+0x2a/0x420 [ 398.863658][T16502] ? __fget_files+0x3a0/0x420 [ 398.863694][T16502] __x64_sys_sendmsg+0x19b/0x260 [ 398.863722][T16502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.863773][T16502] ? do_syscall_64+0xba/0x210 [ 398.863807][T16502] do_syscall_64+0xf6/0x210 [ 398.863836][T16502] ? clear_bhb_loop+0x45/0xa0 [ 398.863860][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.863879][T16502] RIP: 0033:0x7f87b258e969 [ 398.863896][T16502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.863924][T16502] RSP: 002b:00007f87b333f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.863944][T16502] RAX: ffffffffffffffda RBX: 00007f87b27b5fa0 RCX: 00007f87b258e969 [ 398.863958][T16502] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 398.863970][T16502] RBP: 00007f87b333f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.863982][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.863993][T16502] R13: 0000000000000000 R14: 00007f87b27b5fa0 R15: 00007ffe14c1a9c8 [ 398.864023][T16502] [ 398.926584][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.180922][T16510] netlink: 'syz.2.3834': attribute type 1 has an invalid length. [ 399.371727][T16510] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.464488][T16516] veth9: entered promiscuous mode [ 399.494080][T16516] bond6: (slave veth9): Enslaving as an active interface with a down link [ 399.569482][T16523] sctp: [Deprecated]: syz.1.3839 (pid 16523) Use of int in max_burst socket option. [ 399.569482][T16523] Use struct sctp_assoc_value instead [ 399.840480][T16530] FAULT_INJECTION: forcing a failure. [ 399.840480][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 399.894230][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.2.3842 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 399.894260][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 399.894273][T16530] Call Trace: [ 399.894281][T16530] [ 399.894290][T16530] dump_stack_lvl+0x189/0x250 [ 399.894327][T16530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.894356][T16530] ? __pfx__printk+0x10/0x10 [ 399.894392][T16530] ? __pfx___might_resched+0x10/0x10 [ 399.894417][T16530] should_fail_ex+0x414/0x560 [ 399.894451][T16530] should_failslab+0xa8/0x100 [ 399.894477][T16530] __kmalloc_noprof+0xcb/0x4f0 [ 399.894499][T16530] ? sock_kmalloc+0xd6/0x160 [ 399.894528][T16530] sock_kmalloc+0xd6/0x160 [ 399.894555][T16530] af_alg_alloc_areq+0x8d/0x260 [ 399.894585][T16530] skcipher_recvmsg+0x356/0x11c0 [ 399.894607][T16530] ? aa_sk_perm+0x81e/0x950 [ 399.894636][T16530] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 399.894659][T16530] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 399.894678][T16530] ? security_socket_recvmsg+0x7e/0x2e0 [ 399.894709][T16530] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 399.894728][T16530] sock_recvmsg+0x229/0x270 [ 399.894749][T16530] ____sys_recvmsg+0x1c9/0x460 [ 399.894783][T16530] ? __pfx_____sys_recvmsg+0x10/0x10 [ 399.894823][T16530] ? import_iovec+0x74/0xa0 [ 399.894852][T16530] ___sys_recvmsg+0x1b5/0x510 [ 399.894883][T16530] ? __pfx____sys_recvmsg+0x10/0x10 [ 399.894951][T16530] ? __fget_files+0x3a0/0x420 [ 399.894989][T16530] do_recvmmsg+0x307/0x760 [ 399.895026][T16530] ? __pfx_do_recvmmsg+0x10/0x10 [ 399.895067][T16530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.895117][T16530] __x64_sys_recvmmsg+0x190/0x240 [ 399.895143][T16530] ? rcu_is_watching+0x15/0xb0 [ 399.895175][T16530] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 399.895206][T16530] ? do_syscall_64+0xba/0x210 [ 399.895240][T16530] do_syscall_64+0xf6/0x210 [ 399.895270][T16530] ? clear_bhb_loop+0x45/0xa0 [ 399.895295][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.895314][T16530] RIP: 0033:0x7ff186b8e969 [ 399.895332][T16530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.895348][T16530] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 399.895369][T16530] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 399.895384][T16530] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 399.895396][T16530] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 399.895409][T16530] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 399.895420][T16530] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 399.895452][T16530] [ 399.895865][T16531] vlan2: entered promiscuous mode [ 400.006557][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.051401][T16531] bridge0: entered promiscuous mode [ 400.235918][T16531] vlan2: entered allmulticast mode [ 400.266820][T16531] bridge0: entered allmulticast mode [ 400.301895][T16539] FAULT_INJECTION: forcing a failure. [ 400.301895][T16539] name failslab, interval 1, probability 0, space 0, times 0 [ 400.319534][T16539] CPU: 0 UID: 0 PID: 16539 Comm: syz.2.3846 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 400.319565][T16539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 400.319577][T16539] Call Trace: [ 400.319585][T16539] [ 400.319594][T16539] dump_stack_lvl+0x189/0x250 [ 400.319631][T16539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.319660][T16539] ? __pfx__printk+0x10/0x10 [ 400.319688][T16539] ? ref_tracker_alloc+0x318/0x460 [ 400.319712][T16539] should_fail_ex+0x414/0x560 [ 400.319749][T16539] should_failslab+0xa8/0x100 [ 400.319777][T16539] kmem_cache_alloc_noprof+0x73/0x3c0 [ 400.319802][T16539] ? skb_clone+0x212/0x3a0 [ 400.319834][T16539] skb_clone+0x212/0x3a0 [ 400.319865][T16539] __netlink_deliver_tap+0x404/0x850 [ 400.319901][T16539] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.319926][T16539] netlink_deliver_tap+0x19c/0x1b0 [ 400.319949][T16539] netlink_unicast+0x72f/0x8d0 [ 400.319981][T16539] netlink_sendmsg+0x805/0xb30 [ 400.320014][T16539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.320040][T16539] ? aa_sock_msg_perm+0x94/0x160 [ 400.320063][T16539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.320085][T16539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.320109][T16539] __sock_sendmsg+0x219/0x270 [ 400.320143][T16539] ____sys_sendmsg+0x505/0x830 [ 400.320176][T16539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.320212][T16539] ? import_iovec+0x74/0xa0 [ 400.320243][T16539] ___sys_sendmsg+0x21f/0x2a0 [ 400.320284][T16539] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.320349][T16539] ? __fget_files+0x2a/0x420 [ 400.320372][T16539] ? __fget_files+0x3a0/0x420 [ 400.320414][T16539] __x64_sys_sendmsg+0x19b/0x260 [ 400.320443][T16539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.320486][T16539] ? do_syscall_64+0xba/0x210 [ 400.320520][T16539] do_syscall_64+0xf6/0x210 [ 400.320549][T16539] ? clear_bhb_loop+0x45/0xa0 [ 400.320573][T16539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.320591][T16539] RIP: 0033:0x7ff186b8e969 [ 400.320608][T16539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.320625][T16539] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.320645][T16539] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 400.320658][T16539] RDX: 0000000000040864 RSI: 00002000000001c0 RDI: 0000000000000003 [ 400.320691][T16539] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 400.320703][T16539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.320715][T16539] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 400.320748][T16539] [ 400.698159][T16542] __nla_validate_parse: 1 callbacks suppressed [ 400.698179][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3847'. [ 400.860384][T16552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3852'. [ 401.019877][T16561] siw: device registration error -23 [ 401.036530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.056666][T16567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3859'. [ 401.082463][T16565] lo speed is unknown, defaulting to 1000 [ 401.372743][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'. [ 401.421417][T16573] pim6reg1: entered promiscuous mode [ 401.432075][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 401.441632][T16573] pim6reg1: entered allmulticast mode [ 401.474869][T16584] netlink: 'syz.3.3865': attribute type 10 has an invalid length. [ 401.583770][T16584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 401.723867][T16593] FAULT_INJECTION: forcing a failure. [ 401.723867][T16593] name failslab, interval 1, probability 0, space 0, times 0 [ 401.758250][T16593] CPU: 1 UID: 0 PID: 16593 Comm: syz.3.3868 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 401.758279][T16593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 401.758291][T16593] Call Trace: [ 401.758306][T16593] [ 401.758315][T16593] dump_stack_lvl+0x189/0x250 [ 401.758352][T16593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.758379][T16593] ? __pfx__printk+0x10/0x10 [ 401.758404][T16593] ? __pfx___might_resched+0x10/0x10 [ 401.758425][T16593] should_fail_ex+0x414/0x560 [ 401.758459][T16593] ? bpf_test_run_xdp_live+0x191/0x1aa0 [ 401.758479][T16593] should_failslab+0xa8/0x100 [ 401.758505][T16593] __kvmalloc_node_noprof+0x168/0x5e0 [ 401.758530][T16593] ? bpf_test_run_xdp_live+0x191/0x1aa0 [ 401.758555][T16593] bpf_test_run_xdp_live+0x191/0x1aa0 [ 401.758582][T16593] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 401.758618][T16593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.758644][T16593] ? synchronize_rcu+0x11a/0x310 [ 401.758662][T16593] ? __pfx_synchronize_rcu+0x10/0x10 [ 401.758682][T16593] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 401.758704][T16593] ? 0xffffffffa00038c0 [ 401.758736][T16593] ? 0xffffffffa000081c [ 401.758778][T16593] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 401.758811][T16593] ? _copy_from_user+0x94/0xb0 [ 401.758839][T16593] ? bpf_test_init+0x133/0x170 [ 401.758857][T16593] ? xdp_convert_md_to_buff+0x5b/0x330 [ 401.758881][T16593] bpf_prog_test_run_xdp+0x713/0xf90 [ 401.758920][T16593] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 401.758947][T16593] ? __fget_files+0x2a/0x420 [ 401.758978][T16593] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 401.759001][T16593] bpf_prog_test_run+0x2a9/0x340 [ 401.759030][T16593] __sys_bpf+0x4a4/0x860 [ 401.759057][T16593] ? __pfx___sys_bpf+0x10/0x10 [ 401.759094][T16593] ? ksys_write+0x1f0/0x250 [ 401.759127][T16593] __x64_sys_bpf+0x7c/0x90 [ 401.759149][T16593] do_syscall_64+0xf6/0x210 [ 401.759178][T16593] ? clear_bhb_loop+0x45/0xa0 [ 401.759202][T16593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.759220][T16593] RIP: 0033:0x7f071ff8e969 [ 401.759236][T16593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.759253][T16593] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.759273][T16593] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 401.759287][T16593] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 000000000000000a [ 401.759306][T16593] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 401.759318][T16593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.759329][T16593] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 401.759360][T16593] [ 402.076588][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.279752][T16565] lo speed is unknown, defaulting to 1000 [ 402.584648][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'. [ 403.116577][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.131496][T16645] lo: entered allmulticast mode [ 403.203010][T16645] tunl0: entered allmulticast mode [ 403.245277][T16645] gre0: entered allmulticast mode [ 403.322474][T16645] gretap0: entered allmulticast mode [ 403.340332][T16645] ip_vti0: entered allmulticast mode [ 403.351989][T16645] ip6_vti0: entered allmulticast mode [ 403.361478][T16645] sit0: entered allmulticast mode [ 403.383241][T16645] ip6tnl0: entered allmulticast mode [ 403.398620][T16645] ip6gre0: entered allmulticast mode [ 403.417960][T16645] syz_tun: entered allmulticast mode [ 403.432997][T16645] ip6gretap0: entered allmulticast mode [ 403.443159][T16645] bridge0: port 3(dummy0) entered disabled state [ 403.449828][T16645] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.458478][T16645] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.478464][T16645] vcan0: entered allmulticast mode [ 403.486827][T16645] bond0: entered allmulticast mode [ 403.492237][T16645] bond_slave_0: entered allmulticast mode [ 403.500443][T16645] bond_slave_1: entered allmulticast mode [ 403.511408][T16645] team0: entered allmulticast mode [ 403.516842][T16645] C: entered allmulticast mode [ 403.521731][T16645] team_slave_1: entered allmulticast mode [ 403.536381][T16645] nlmon0: entered allmulticast mode [ 403.543662][T16645] caif0: entered allmulticast mode [ 403.549607][T16645] vxcan0: entered allmulticast mode [ 403.555827][T16645] vxcan1: entered allmulticast mode [ 403.562836][T16645] veth0: entered allmulticast mode [ 403.571875][T16645] veth1: entered allmulticast mode [ 403.581405][T16645] wg1: entered allmulticast mode [ 403.591147][T16645] wg2: entered allmulticast mode [ 403.598789][T16645] veth0_to_bridge: entered allmulticast mode [ 403.610813][T16645] veth1_to_bridge: entered allmulticast mode [ 403.622707][T16645] veth0_to_bond: entered allmulticast mode [ 403.631903][T16645] veth1_to_bond: entered allmulticast mode [ 403.641517][T16645] veth0_to_team: entered allmulticast mode [ 403.652835][T16645] veth1_to_team: entered allmulticast mode [ 403.664080][T16645] veth0_to_batadv: entered allmulticast mode [ 403.674314][T16645] batadv_slave_0: entered allmulticast mode [ 403.684092][T16645] xfrm0: entered allmulticast mode [ 403.691918][T16645] veth0_to_hsr: entered allmulticast mode [ 403.703105][T16645] hsr_slave_0: entered allmulticast mode [ 403.713171][T16645] veth1_to_hsr: entered allmulticast mode [ 403.722859][T16645] hsr_slave_1: entered allmulticast mode [ 403.732486][T16645] hsr0: entered allmulticast mode [ 403.740664][T16645] veth1_virt_wifi: entered allmulticast mode [ 403.750363][T16645] veth0_virt_wifi: entered allmulticast mode [ 403.759754][T16645] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 403.768305][T16645] veth1_vlan: entered allmulticast mode [ 403.778844][T16645] veth0_vlan: entered allmulticast mode [ 403.793285][T16645] vlan0: entered allmulticast mode [ 403.799600][T16645] vlan1: entered allmulticast mode [ 403.805703][T16645] macvlan0: entered allmulticast mode [ 403.812493][T16645] macvlan1: entered allmulticast mode [ 403.820879][T16645] ipvlan0: entered allmulticast mode [ 403.826344][T16645] ipvlan1: entered allmulticast mode [ 403.834269][T16645] veth1_macvtap: entered allmulticast mode [ 403.845295][T16645] veth0_macvtap: entered allmulticast mode [ 403.855106][T16645] macvtap0: entered allmulticast mode [ 403.864063][T16645] macsec0: entered allmulticast mode [ 403.873486][T16645] geneve0: entered allmulticast mode [ 403.882339][T16645] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 403.889980][T16645] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 403.902059][T16645] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 403.916421][T16645] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 403.926929][T16645] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 403.943060][T16645] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 403.957720][T16645] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 403.966121][T16645] veth2: entered allmulticast mode [ 403.971828][T16645] veth3: entered allmulticast mode [ 403.978171][T16645] bond1: entered allmulticast mode [ 403.983942][T16645] gretap1: entered allmulticast mode [ 403.991911][T16645] sit1: entered allmulticast mode [ 404.017943][T16645] syztnl0: entered allmulticast mode [ 404.023425][T16645] bond2: entered allmulticast mode [ 404.029010][T16645] veth4: entered allmulticast mode [ 404.034592][T16645] veth5: left promiscuous mode [ 404.039818][T16645] veth5: entered allmulticast mode [ 404.045664][T16645] veth1_to_team.0: entered allmulticast mode [ 404.054059][T16645] gretap2: left promiscuous mode [ 404.061015][T16645] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.070567][T16645] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.079728][T16645] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.089553][T16645] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.099247][T16645] geneve2: left promiscuous mode [ 404.104217][T16645] geneve2: entered allmulticast mode [ 404.111710][T16645] bond3: entered allmulticast mode [ 404.119298][T16645] veth6: entered allmulticast mode [ 404.124593][T16645] veth7: left promiscuous mode [ 404.129948][T16645] veth7: entered allmulticast mode [ 404.135227][T16645] bond4: entered allmulticast mode [ 404.141191][T16645] bond5: entered allmulticast mode [ 404.149488][T16645] veth8: entered allmulticast mode [ 404.154789][T16645] veth9: left promiscuous mode [ 404.160410][T16645] veth9: entered allmulticast mode [ 404.166226][T16645] bond6: entered allmulticast mode [ 404.166585][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.172909][T16645] veth10: entered allmulticast mode [ 404.185280][T16645] veth11: left promiscuous mode [ 404.190623][T16645] veth11: entered allmulticast mode [ 404.196746][T16645] vxcan2: entered allmulticast mode [ 404.202117][T16645] vxcan3: entered allmulticast mode [ 404.207709][T16645] ip6erspan0: left promiscuous mode [ 404.212907][T16645] ip6erspan0: entered allmulticast mode [ 404.220013][T16645] batadv0: left promiscuous mode [ 404.224963][T16645] batadv0: entered allmulticast mode [ 404.232337][T16645] vlan2: left promiscuous mode [ 404.237426][T16645] bridge0: left promiscuous mode [ 404.262150][T16653] tipc: Invalid UDP bearer configuration [ 404.262203][T16653] tipc: Enabling of bearer rejected, failed to enable media [ 404.514476][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 404.724779][T16696] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 404.880085][T16699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 405.174478][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'. [ 405.196520][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.484448][T16728] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 405.513509][T16732] FAULT_INJECTION: forcing a failure. [ 405.513509][T16732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.545135][T16732] CPU: 1 UID: 0 PID: 16732 Comm: syz.3.3916 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 405.545165][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.545176][T16732] Call Trace: [ 405.545184][T16732] [ 405.545193][T16732] dump_stack_lvl+0x189/0x250 [ 405.545224][T16732] ? __lock_acquire+0xaac/0xd20 [ 405.545264][T16732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.545292][T16732] ? __pfx__printk+0x10/0x10 [ 405.545312][T16732] ? __might_fault+0xb0/0x130 [ 405.545345][T16732] should_fail_ex+0x414/0x560 [ 405.545380][T16732] _copy_from_user+0x2d/0xb0 [ 405.545409][T16732] __sys_bpf+0x1ed/0x860 [ 405.545436][T16732] ? __pfx___sys_bpf+0x10/0x10 [ 405.545473][T16732] ? ksys_write+0x1f0/0x250 [ 405.545495][T16732] ? rcu_is_watching+0x15/0xb0 [ 405.545540][T16732] __x64_sys_bpf+0x7c/0x90 [ 405.545563][T16732] do_syscall_64+0xf6/0x210 [ 405.545594][T16732] ? clear_bhb_loop+0x45/0xa0 [ 405.545619][T16732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.545639][T16732] RIP: 0033:0x7f071ff8e969 [ 405.545655][T16732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.545673][T16732] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.545694][T16732] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 405.545709][T16732] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 405.545721][T16732] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 405.545732][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.545744][T16732] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 405.545777][T16732] [ 405.627364][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 405.973523][T16744] netlink: 'syz.1.3921': attribute type 15 has an invalid length. [ 406.236545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.282031][T16765] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 406.665330][T16783] netlink: 'syz.2.3934': attribute type 1 has an invalid length. [ 406.679406][T16783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3934'. [ 407.239821][T16796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.272217][T16799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.282486][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.308467][T16799] FAULT_INJECTION: forcing a failure. [ 407.308467][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 407.321928][T16799] CPU: 1 UID: 0 PID: 16799 Comm: syz.3.3942 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 407.321958][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 407.321970][T16799] Call Trace: [ 407.321978][T16799] [ 407.321986][T16799] dump_stack_lvl+0x189/0x250 [ 407.322022][T16799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.322051][T16799] ? __pfx__printk+0x10/0x10 [ 407.322078][T16799] ? __pfx___might_resched+0x10/0x10 [ 407.322104][T16799] ? fs_reclaim_acquire+0x7d/0x100 [ 407.322139][T16799] should_fail_ex+0x414/0x560 [ 407.322178][T16799] should_failslab+0xa8/0x100 [ 407.322206][T16799] __kmalloc_noprof+0xcb/0x4f0 [ 407.322229][T16799] ? kfree+0x4d/0x440 [ 407.322247][T16799] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 407.322276][T16799] tomoyo_realpath_from_path+0xe3/0x5d0 [ 407.322301][T16799] ? tomoyo_domain+0xda/0x130 [ 407.322331][T16799] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 407.322363][T16799] tomoyo_path_number_perm+0x1e8/0x5a0 [ 407.322396][T16799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 407.322458][T16799] ? __lock_acquire+0xaac/0xd20 [ 407.322504][T16799] ? __fget_files+0x2a/0x420 [ 407.322533][T16799] ? __fget_files+0x3a0/0x420 [ 407.322556][T16799] ? __fget_files+0x2a/0x420 [ 407.322584][T16799] security_file_ioctl+0xcb/0x2d0 [ 407.322615][T16799] __se_sys_ioctl+0x47/0x170 [ 407.322638][T16799] do_syscall_64+0xf6/0x210 [ 407.322670][T16799] ? clear_bhb_loop+0x45/0xa0 [ 407.322694][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.322713][T16799] RIP: 0033:0x7f071ff8e969 [ 407.322749][T16799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.322766][T16799] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.322787][T16799] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 407.322801][T16799] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000006 [ 407.322814][T16799] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 407.322826][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.322838][T16799] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 407.322869][T16799] [ 407.325052][T16799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 407.469373][T16802] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 407.772633][T16817] netlink: set zone limit has 8 unknown bytes [ 408.110534][T16836] FAULT_INJECTION: forcing a failure. [ 408.110534][T16836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.124189][T16836] CPU: 0 UID: 0 PID: 16836 Comm: syz.3.3957 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 408.124215][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 408.124227][T16836] Call Trace: [ 408.124235][T16836] [ 408.124243][T16836] dump_stack_lvl+0x189/0x250 [ 408.124274][T16836] ? __lock_acquire+0xaac/0xd20 [ 408.124304][T16836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.124331][T16836] ? __pfx__printk+0x10/0x10 [ 408.124351][T16836] ? __might_fault+0xb0/0x130 [ 408.124386][T16836] should_fail_ex+0x414/0x560 [ 408.124421][T16836] _copy_from_iter+0x1db/0x15a0 [ 408.124452][T16836] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 408.124474][T16836] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 408.124499][T16836] ? __pfx__copy_from_iter+0x10/0x10 [ 408.124524][T16836] ? __build_skb_around+0x257/0x3e0 [ 408.124550][T16836] ? netlink_sendmsg+0x642/0xb30 [ 408.124570][T16836] ? skb_put+0x11b/0x210 [ 408.124596][T16836] netlink_sendmsg+0x6b2/0xb30 [ 408.124627][T16836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.124652][T16836] ? aa_sock_msg_perm+0x94/0x160 [ 408.124674][T16836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.124696][T16836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.124720][T16836] __sock_sendmsg+0x219/0x270 [ 408.124753][T16836] ____sys_sendmsg+0x505/0x830 [ 408.124783][T16836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.124816][T16836] ? import_iovec+0x74/0xa0 [ 408.124845][T16836] ___sys_sendmsg+0x21f/0x2a0 [ 408.124873][T16836] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.124934][T16836] ? __fget_files+0x2a/0x420 [ 408.124957][T16836] ? __fget_files+0x3a0/0x420 [ 408.124992][T16836] __x64_sys_sendmsg+0x19b/0x260 [ 408.125019][T16836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.125071][T16836] ? do_syscall_64+0xba/0x210 [ 408.125103][T16836] do_syscall_64+0xf6/0x210 [ 408.125132][T16836] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.125151][T16836] ? clear_bhb_loop+0x45/0xa0 [ 408.125174][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.125192][T16836] RIP: 0033:0x7f071ff8e969 [ 408.125208][T16836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.125225][T16836] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.125246][T16836] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 408.125260][T16836] RDX: 0000000000040864 RSI: 00002000000001c0 RDI: 0000000000000003 [ 408.125272][T16836] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 408.125284][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.125295][T16836] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 408.125324][T16836] [ 408.394938][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.593515][T16840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.612104][T16840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.779278][T16846] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 408.797426][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 408.853891][T16846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.925811][T16850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.949323][T16850] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 408.978962][T16850] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 409.095347][T16846] veth3: entered promiscuous mode [ 409.107199][T16863] netlink: 'syz.0.3965': attribute type 8 has an invalid length. [ 409.115024][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'. [ 409.133008][T16846] bond1: (slave veth3): Enslaving as an active interface with a down link [ 409.184420][T16857] bond1: (slave erspan0): making interface the new active one [ 409.220088][T16857] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 409.233461][T16863] bridge0: entered allmulticast mode [ 409.325773][T16856] lo speed is unknown, defaulting to 1000 [ 409.436569][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.654284][T16856] lo speed is unknown, defaulting to 1000 [ 409.654318][T16853] lo speed is unknown, defaulting to 1000 [ 409.975893][T16865] lo speed is unknown, defaulting to 1000 [ 410.138273][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 410.180370][T16865] lo speed is unknown, defaulting to 1000 [ 410.189427][T16853] lo speed is unknown, defaulting to 1000 [ 410.476528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.498976][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 410.531917][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3978'. [ 410.543574][T16891] syz_tun: entered promiscuous mode [ 410.558108][T16891] syz_tun: left promiscuous mode [ 410.751790][T16899] FAULT_INJECTION: forcing a failure. [ 410.751790][T16899] name failslab, interval 1, probability 0, space 0, times 0 [ 410.764551][T16899] CPU: 0 UID: 0 PID: 16899 Comm: syz.3.3979 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 410.764580][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 410.764592][T16899] Call Trace: [ 410.764600][T16899] [ 410.764609][T16899] dump_stack_lvl+0x189/0x250 [ 410.764647][T16899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.764676][T16899] ? __pfx__printk+0x10/0x10 [ 410.764714][T16899] should_fail_ex+0x414/0x560 [ 410.764752][T16899] should_failslab+0xa8/0x100 [ 410.764781][T16899] kmem_cache_alloc_noprof+0x73/0x3c0 [ 410.764806][T16899] ? skb_clone+0x212/0x3a0 [ 410.764839][T16899] skb_clone+0x212/0x3a0 [ 410.764871][T16899] ? skb_checksum_trimmed+0x187/0x6f0 [ 410.764899][T16899] skb_checksum_trimmed+0x1ac/0x6f0 [ 410.764922][T16899] ? __pfx_ip_mc_validate_checksum+0x10/0x10 [ 410.764955][T16899] ip_mc_check_igmp+0x758/0x1a70 [ 410.764993][T16899] br_multicast_rcv+0x54c/0x74b0 [ 410.765060][T16899] ? __pfx_br_multicast_rcv+0x10/0x10 [ 410.765131][T16899] ? __lock_acquire+0xaac/0xd20 [ 410.765175][T16899] ? __lock_acquire+0xaac/0xd20 [ 410.765231][T16899] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 410.765269][T16899] ? __lock_acquire+0xaac/0xd20 [ 410.765302][T16899] ? br_dev_xmit+0x185/0x1840 [ 410.765329][T16899] ? br_allowed_ingress+0xd3/0x1040 [ 410.765371][T16899] br_dev_xmit+0xaf7/0x1840 [ 410.765398][T16899] ? br_dev_xmit+0x185/0x1840 [ 410.765431][T16899] ? __pfx_br_dev_xmit+0x10/0x10 [ 410.765473][T16899] ? __pfx_skb_network_protocol+0x10/0x10 [ 410.765509][T16899] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 410.765532][T16899] ? rcu_read_lock_bh_held+0x79/0xe0 [ 410.765551][T16899] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 410.765588][T16899] dev_hard_start_xmit+0x2d4/0x830 [ 410.765618][T16899] ? rcu_read_lock_bh_held+0x79/0xe0 [ 410.765652][T16899] __dev_queue_xmit+0x1adf/0x3a70 [ 410.765693][T16899] ? __dev_queue_xmit+0x27e/0x3a70 [ 410.765739][T16899] ? __pfx___dev_queue_xmit+0x10/0x10 [ 410.765765][T16899] ? _copy_from_iter+0x67f/0x15a0 [ 410.765805][T16899] ? packet_parse_headers+0x7ff/0xb60 [ 410.765836][T16899] ? packet_parse_headers+0x88c/0xb60 [ 410.765880][T16899] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 410.765910][T16899] ? __pfx_packet_parse_headers+0x10/0x10 [ 410.765942][T16899] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 410.765977][T16899] ? packet_xmit+0x68/0x330 [ 410.766011][T16899] packet_sendmsg+0x41be/0x5400 [ 410.766074][T16899] ? __pfx___might_resched+0x10/0x10 [ 410.766125][T16899] ? __pfx_packet_sendmsg+0x10/0x10 [ 410.766147][T16899] ? aa_sk_perm+0x81e/0x950 [ 410.766174][T16899] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 410.766205][T16899] ? aa_sock_msg_perm+0x94/0x160 [ 410.766228][T16899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.766250][T16899] ? __pfx_packet_sendmsg+0x10/0x10 [ 410.766276][T16899] __sock_sendmsg+0x219/0x270 [ 410.766312][T16899] ____sys_sendmsg+0x505/0x830 [ 410.766344][T16899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.766380][T16899] ? import_iovec+0x74/0xa0 [ 410.766410][T16899] ___sys_sendmsg+0x21f/0x2a0 [ 410.766443][T16899] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.766506][T16899] ? __fget_files+0x2a/0x420 [ 410.766532][T16899] ? __fget_files+0x3a0/0x420 [ 410.766569][T16899] __x64_sys_sendmsg+0x19b/0x260 [ 410.766598][T16899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.766637][T16899] ? rcu_is_watching+0x15/0xb0 [ 410.766676][T16899] do_syscall_64+0xf6/0x210 [ 410.766708][T16899] ? clear_bhb_loop+0x45/0xa0 [ 410.766732][T16899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.766752][T16899] RIP: 0033:0x7f071ff8e969 [ 410.766770][T16899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.766788][T16899] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.766810][T16899] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 410.766825][T16899] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 410.766837][T16899] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 410.766856][T16899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.766868][T16899] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 410.766900][T16899] [ 411.416182][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 411.516629][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.685408][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 411.760526][T16930] FAULT_INJECTION: forcing a failure. [ 411.760526][T16930] name failslab, interval 1, probability 0, space 0, times 0 [ 411.780984][T16930] CPU: 1 UID: 0 PID: 16930 Comm: syz.4.3986 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 411.781014][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 411.781026][T16930] Call Trace: [ 411.781034][T16930] [ 411.781043][T16930] dump_stack_lvl+0x189/0x250 [ 411.781081][T16930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.781110][T16930] ? __pfx__printk+0x10/0x10 [ 411.781135][T16930] ? __pfx___might_resched+0x10/0x10 [ 411.781153][T16930] ? fs_reclaim_acquire+0x7d/0x100 [ 411.781186][T16930] should_fail_ex+0x414/0x560 [ 411.781223][T16930] should_failslab+0xa8/0x100 [ 411.781250][T16930] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 411.781276][T16930] ? __alloc_skb+0x112/0x2d0 [ 411.781303][T16930] __alloc_skb+0x112/0x2d0 [ 411.781330][T16930] netlink_ack+0x146/0xa50 [ 411.781369][T16930] netlink_rcv_skb+0x2a0/0x490 [ 411.781391][T16930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 411.781421][T16930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.781440][T16930] ? kasan_quarantine_put+0xdd/0x220 [ 411.781475][T16930] ? apparmor_capable+0x137/0x1b0 [ 411.781502][T16930] ? bpf_lsm_capable+0x9/0x20 [ 411.781529][T16930] ? security_capable+0x7e/0x2e0 [ 411.781558][T16930] nfnetlink_rcv+0x273/0x2530 [ 411.781588][T16930] ? __dev_queue_xmit+0x27e/0x3a70 [ 411.781616][T16930] ? __dev_queue_xmit+0x27e/0x3a70 [ 411.781641][T16930] ? __dev_queue_xmit+0x27e/0x3a70 [ 411.781669][T16930] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 411.781705][T16930] ? __dev_queue_xmit+0x27e/0x3a70 [ 411.781733][T16930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.781757][T16930] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.781797][T16930] ? __pfx___dev_queue_xmit+0x10/0x10 [ 411.781839][T16930] ? ref_tracker_free+0x63a/0x7d0 [ 411.781859][T16930] ? __copy_skb_header+0xa7/0x550 [ 411.781886][T16930] ? __pfx_ref_tracker_free+0x10/0x10 [ 411.781907][T16930] ? __skb_clone+0x63/0x7a0 [ 411.781938][T16930] ? __skb_clone+0x483/0x7a0 [ 411.781971][T16930] ? skb_clone+0x246/0x3a0 [ 411.782000][T16930] ? __netlink_deliver_tap+0x807/0x850 [ 411.782022][T16930] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.782051][T16930] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.782073][T16930] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.782100][T16930] netlink_unicast+0x758/0x8d0 [ 411.782131][T16930] netlink_sendmsg+0x805/0xb30 [ 411.782164][T16930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.782190][T16930] ? aa_sock_msg_perm+0x94/0x160 [ 411.782212][T16930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.782234][T16930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.782258][T16930] __sock_sendmsg+0x219/0x270 [ 411.782292][T16930] ____sys_sendmsg+0x505/0x830 [ 411.782324][T16930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.782358][T16930] ? import_iovec+0x74/0xa0 [ 411.782389][T16930] ___sys_sendmsg+0x21f/0x2a0 [ 411.782417][T16930] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.782479][T16930] ? __fget_files+0x2a/0x420 [ 411.782504][T16930] ? __fget_files+0x3a0/0x420 [ 411.782540][T16930] __x64_sys_sendmsg+0x19b/0x260 [ 411.782569][T16930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.782611][T16930] ? do_syscall_64+0xba/0x210 [ 411.782645][T16930] do_syscall_64+0xf6/0x210 [ 411.782674][T16930] ? clear_bhb_loop+0x45/0xa0 [ 411.782703][T16930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.782722][T16930] RIP: 0033:0x7f87b258e969 [ 411.782757][T16930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.782774][T16930] RSP: 002b:00007f87b333f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.782801][T16930] RAX: ffffffffffffffda RBX: 00007f87b27b5fa0 RCX: 00007f87b258e969 [ 411.782816][T16930] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000005 [ 411.782830][T16930] RBP: 00007f87b333f090 R08: 0000000000000000 R09: 0000000000000000 [ 411.782843][T16930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.782855][T16930] R13: 0000000000000000 R14: 00007f87b27b5fa0 R15: 00007ffe14c1a9c8 [ 411.782887][T16930] [ 412.193444][T16932] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 412.200955][T16932] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 412.264326][T16936] netlink: 'syz.3.3984': attribute type 8 has an invalid length. [ 412.276793][T16936] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.284485][T16936] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.318818][T16936] bridge0: entered allmulticast mode [ 412.551575][T16946] netlink: zone id is out of range [ 412.566543][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.786935][T16948] xt_CT: No such helper "pptp" [ 412.830614][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'. [ 412.977918][T16966] FAULT_INJECTION: forcing a failure. [ 412.977918][T16966] name failslab, interval 1, probability 0, space 0, times 0 [ 412.979448][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 412.991207][T16966] CPU: 0 UID: 0 PID: 16966 Comm: syz.3.3998 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 412.991248][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.991265][T16966] Call Trace: [ 412.991272][T16966] [ 412.991282][T16966] dump_stack_lvl+0x189/0x250 [ 412.991324][T16966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.991356][T16966] ? __pfx__printk+0x10/0x10 [ 412.991383][T16966] ? __lock_acquire+0xaac/0xd20 [ 412.991421][T16966] should_fail_ex+0x414/0x560 [ 412.991469][T16966] should_failslab+0xa8/0x100 [ 412.991500][T16966] __kmalloc_cache_noprof+0x70/0x3d0 [ 412.991528][T16966] ? instance_create+0xd0/0x360 [ 412.991566][T16966] instance_create+0xd0/0x360 [ 412.991601][T16966] nfqnl_recv_config+0x6cc/0xae0 [ 412.991637][T16966] ? nfqnl_recv_config+0x1d2/0xae0 [ 412.991673][T16966] nfnetlink_rcv_msg+0xb4a/0x1130 [ 412.991701][T16966] ? unwind_get_return_address+0x4d/0x90 [ 412.991727][T16966] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.991750][T16966] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 412.991802][T16966] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 412.991830][T16966] ? stack_depot_save_flags+0x40/0x910 [ 412.991908][T16966] netlink_rcv_skb+0x219/0x490 [ 412.991932][T16966] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 412.991965][T16966] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.991985][T16966] ? kasan_quarantine_put+0xdd/0x220 [ 412.992024][T16966] ? apparmor_capable+0x137/0x1b0 [ 412.992054][T16966] ? bpf_lsm_capable+0x9/0x20 [ 412.992083][T16966] ? security_capable+0x7e/0x2e0 [ 412.992114][T16966] nfnetlink_rcv+0x273/0x2530 [ 412.992146][T16966] ? __dev_queue_xmit+0x27e/0x3a70 [ 412.992176][T16966] ? __dev_queue_xmit+0x27e/0x3a70 [ 412.992204][T16966] ? __dev_queue_xmit+0x27e/0x3a70 [ 412.992234][T16966] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 412.992275][T16966] ? __dev_queue_xmit+0x27e/0x3a70 [ 412.992305][T16966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.992331][T16966] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 412.992368][T16966] ? __pfx___dev_queue_xmit+0x10/0x10 [ 412.992414][T16966] ? ref_tracker_free+0x63a/0x7d0 [ 412.992441][T16966] ? __copy_skb_header+0xa7/0x550 [ 412.992471][T16966] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.992493][T16966] ? __skb_clone+0x63/0x7a0 [ 412.992526][T16966] ? __skb_clone+0x483/0x7a0 [ 412.992562][T16966] ? skb_clone+0x246/0x3a0 [ 412.992595][T16966] ? __netlink_deliver_tap+0x807/0x850 [ 412.992618][T16966] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.992650][T16966] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.992673][T16966] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.992703][T16966] netlink_unicast+0x758/0x8d0 [ 412.992757][T16966] netlink_sendmsg+0x805/0xb30 [ 412.992794][T16966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.992824][T16966] ? aa_sock_msg_perm+0x94/0x160 [ 412.992851][T16966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.992875][T16966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.992902][T16966] __sock_sendmsg+0x219/0x270 [ 412.992940][T16966] ____sys_sendmsg+0x505/0x830 [ 412.992975][T16966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.993015][T16966] ? import_iovec+0x74/0xa0 [ 412.993050][T16966] ___sys_sendmsg+0x21f/0x2a0 [ 412.993081][T16966] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.993154][T16966] ? __fget_files+0x2a/0x420 [ 412.993181][T16966] ? __fget_files+0x3a0/0x420 [ 412.993222][T16966] __x64_sys_sendmsg+0x19b/0x260 [ 412.993254][T16966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.993303][T16966] ? do_syscall_64+0xba/0x210 [ 412.993341][T16966] do_syscall_64+0xf6/0x210 [ 412.993375][T16966] ? clear_bhb_loop+0x45/0xa0 [ 412.993401][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.993423][T16966] RIP: 0033:0x7f071ff8e969 [ 412.993461][T16966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.993481][T16966] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.993504][T16966] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 412.993521][T16966] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 412.993535][T16966] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 412.993550][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.993563][T16966] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 412.993599][T16966] [ 413.117748][T16965] lo speed is unknown, defaulting to 1000 [ 413.517847][T16973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4003'. [ 413.596543][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.003723][T16987] macvlan2: entered promiscuous mode [ 414.025592][T16987] bridge0: entered promiscuous mode [ 414.049891][T16987] bridge0: port 4(macvlan2) entered blocking state [ 414.061460][T16990] netlink: 'syz.1.4007': attribute type 10 has an invalid length. [ 414.080493][T16987] bridge0: port 4(macvlan2) entered disabled state [ 414.091851][T16987] macvlan2: entered allmulticast mode [ 414.097154][T16990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4007'. [ 414.112957][T16987] macvlan2: left allmulticast mode [ 414.135950][T16987] bridge0: left promiscuous mode [ 414.279260][T16971] lo speed is unknown, defaulting to 1000 [ 414.286118][T16965] lo speed is unknown, defaulting to 1000 [ 414.345068][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 414.357568][T16993] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 414.365261][T16993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.503984][T16995] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4009'. [ 414.636508][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.749801][T17005] FAULT_INJECTION: forcing a failure. [ 414.749801][T17005] name failslab, interval 1, probability 0, space 0, times 0 [ 414.866944][T17005] CPU: 1 UID: 0 PID: 17005 Comm: syz.2.4012 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 414.866975][T17005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.866988][T17005] Call Trace: [ 414.866997][T17005] [ 414.867006][T17005] dump_stack_lvl+0x189/0x250 [ 414.867044][T17005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.867074][T17005] ? __pfx__printk+0x10/0x10 [ 414.867097][T17005] ? __pfx___might_resched+0x10/0x10 [ 414.867117][T17005] ? fs_reclaim_acquire+0x7d/0x100 [ 414.867151][T17005] should_fail_ex+0x414/0x560 [ 414.867189][T17005] should_failslab+0xa8/0x100 [ 414.867218][T17005] __kmalloc_noprof+0xcb/0x4f0 [ 414.867242][T17005] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 414.867286][T17005] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 414.867325][T17005] genl_family_rcv_msg_doit+0xb8/0x300 [ 414.867365][T17005] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.867407][T17005] ? rcu_is_watching+0x15/0xb0 [ 414.867439][T17005] ? apparmor_capable+0x137/0x1b0 [ 414.867467][T17005] ? bpf_lsm_capable+0x9/0x20 [ 414.867492][T17005] ? security_capable+0x7e/0x2e0 [ 414.867529][T17005] genl_rcv_msg+0x60e/0x790 [ 414.867560][T17005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.867584][T17005] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 414.867613][T17005] ? ref_tracker_free+0x63a/0x7d0 [ 414.867630][T17005] ? __copy_skb_header+0xa7/0x550 [ 414.867662][T17005] netlink_rcv_skb+0x219/0x490 [ 414.867684][T17005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.867710][T17005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.867752][T17005] ? down_read+0x1ad/0x2e0 [ 414.867772][T17005] genl_rcv+0x28/0x40 [ 414.867794][T17005] netlink_unicast+0x758/0x8d0 [ 414.867822][T17005] netlink_sendmsg+0x805/0xb30 [ 414.867852][T17005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.867876][T17005] ? aa_sock_msg_perm+0x94/0x160 [ 414.867896][T17005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.867915][T17005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.867937][T17005] __sock_sendmsg+0x219/0x270 [ 414.867967][T17005] ____sys_sendmsg+0x505/0x830 [ 414.867996][T17005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.868028][T17005] ? import_iovec+0x74/0xa0 [ 414.868055][T17005] ___sys_sendmsg+0x21f/0x2a0 [ 414.868080][T17005] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.868137][T17005] ? __fget_files+0x2a/0x420 [ 414.868159][T17005] ? __fget_files+0x3a0/0x420 [ 414.868198][T17005] __x64_sys_sendmsg+0x19b/0x260 [ 414.868224][T17005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.868267][T17005] ? do_syscall_64+0xba/0x210 [ 414.868298][T17005] do_syscall_64+0xf6/0x210 [ 414.868325][T17005] ? clear_bhb_loop+0x45/0xa0 [ 414.868347][T17005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.868364][T17005] RIP: 0033:0x7ff186b8e969 [ 414.868380][T17005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.868396][T17005] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.868415][T17005] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 414.868427][T17005] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 414.868439][T17005] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 414.868450][T17005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.868460][T17005] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 414.868507][T17005] [ 415.279627][T16971] lo speed is unknown, defaulting to 1000 [ 415.676549][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.740299][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'. [ 415.796102][T17015] syz_tun: entered promiscuous mode [ 415.809908][T17015] syz_tun: left promiscuous mode [ 415.836411][T17020] xt_hashlimit: size too large, truncated to 1048576 [ 415.852512][T17022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4016'. [ 415.863269][T17023] netlink: 'syz.0.4017': attribute type 10 has an invalid length. [ 415.883429][T17023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4017'. [ 415.899998][T17023] dummy0: entered promiscuous mode [ 415.919279][T17025] netlink: 'syz.0.4017': attribute type 11 has an invalid length. [ 415.927437][T17023] dummy0: entered allmulticast mode [ 415.927926][T17023] batman_adv: batadv0: Interface activated: dummy0 [ 415.982153][T17025] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4017'. [ 416.019221][T17023] batadv0: mtu less than device minimum [ 416.091917][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.104332][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.116171][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.128053][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.139951][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.151885][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.163810][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.175881][T17023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 416.216891][T17023] batman_adv: batadv0: Interface deactivated: dummy0 [ 416.243923][T17023] batman_adv: batadv0: Removing interface: dummy0 [ 416.295162][T17023] bridge0: port 3(dummy0) entered blocking state [ 416.313234][T17023] bridge0: port 3(dummy0) entered disabled state [ 416.397204][ T5839] Bluetooth: hci5: command 0x0419 tx timeout [ 416.510577][T17039] syzkaller0: entered promiscuous mode [ 416.516129][T17039] syzkaller0: entered allmulticast mode [ 418.226650][T17067] __nla_validate_parse: 2 callbacks suppressed [ 418.226669][T17067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4030'. [ 418.343711][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 418.361450][T17072] FAULT_INJECTION: forcing a failure. [ 418.361450][T17072] name failslab, interval 1, probability 0, space 0, times 0 [ 418.381006][T17070] ipvlan2: entered promiscuous mode [ 418.396635][T17072] CPU: 0 UID: 0 PID: 17072 Comm: syz.1.4033 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 418.396664][T17072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 418.396678][T17072] Call Trace: [ 418.396686][T17072] [ 418.396696][T17072] dump_stack_lvl+0x189/0x250 [ 418.396734][T17072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.396764][T17072] ? __pfx__printk+0x10/0x10 [ 418.396788][T17072] ? __pfx___might_resched+0x10/0x10 [ 418.396808][T17072] ? fs_reclaim_acquire+0x7d/0x100 [ 418.396843][T17072] should_fail_ex+0x414/0x560 [ 418.396881][T17072] should_failslab+0xa8/0x100 [ 418.396909][T17072] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 418.396935][T17072] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 418.396957][T17072] ? page_pool_create_percpu+0x76/0xbe0 [ 418.396991][T17072] page_pool_create_percpu+0x76/0xbe0 [ 418.397017][T17072] ? __kvmalloc_node_noprof+0x338/0x5e0 [ 418.397043][T17072] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 418.397084][T17072] bpf_test_run_xdp_live+0x1cd/0x1aa0 [ 418.397114][T17072] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 418.397150][T17072] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.397178][T17072] ? synchronize_rcu+0x11a/0x310 [ 418.397197][T17072] ? __pfx_synchronize_rcu+0x10/0x10 [ 418.397220][T17072] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 418.397253][T17072] ? 0xffffffffa00038c0 [ 418.397288][T17072] ? 0xffffffffa00007d4 [ 418.397333][T17072] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 418.397367][T17072] ? _copy_from_user+0x94/0xb0 [ 418.397394][T17072] ? bpf_test_init+0x133/0x170 [ 418.397413][T17072] ? xdp_convert_md_to_buff+0x5b/0x330 [ 418.397438][T17072] bpf_prog_test_run_xdp+0x713/0xf90 [ 418.397476][T17072] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.397504][T17072] ? __fget_files+0x2a/0x420 [ 418.397535][T17072] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.397559][T17072] bpf_prog_test_run+0x2a9/0x340 [ 418.397589][T17072] __sys_bpf+0x4a4/0x860 [ 418.397616][T17072] ? __pfx___sys_bpf+0x10/0x10 [ 418.397654][T17072] ? ksys_write+0x1f0/0x250 [ 418.397688][T17072] __x64_sys_bpf+0x7c/0x90 [ 418.397710][T17072] do_syscall_64+0xf6/0x210 [ 418.397741][T17072] ? clear_bhb_loop+0x45/0xa0 [ 418.397764][T17072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.397783][T17072] RIP: 0033:0x7f7c8ef8e969 [ 418.397799][T17072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.397818][T17072] RSP: 002b:00007f7c8fe64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.397838][T17072] RAX: ffffffffffffffda RBX: 00007f7c8f1b5fa0 RCX: 00007f7c8ef8e969 [ 418.397853][T17072] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 418.397865][T17072] RBP: 00007f7c8fe64090 R08: 0000000000000000 R09: 0000000000000000 [ 418.397878][T17072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.397890][T17072] R13: 0000000000000000 R14: 00007f7c8f1b5fa0 R15: 00007ffc6b762548 [ 418.397920][T17072] [ 418.932720][T17057] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4028'. [ 418.966093][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4037'. [ 419.003693][T17084] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4037'. [ 419.212348][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 419.265928][T17086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4038'. [ 419.546962][T17109] FAULT_INJECTION: forcing a failure. [ 419.546962][T17109] name failslab, interval 1, probability 0, space 0, times 0 [ 419.563654][T17109] CPU: 1 UID: 0 PID: 17109 Comm: syz.0.4046 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 419.563684][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 419.563697][T17109] Call Trace: [ 419.563706][T17109] [ 419.563715][T17109] dump_stack_lvl+0x189/0x250 [ 419.563753][T17109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.563783][T17109] ? __pfx__printk+0x10/0x10 [ 419.563812][T17109] ? __pfx___might_resched+0x10/0x10 [ 419.563836][T17109] should_fail_ex+0x414/0x560 [ 419.563875][T17109] should_failslab+0xa8/0x100 [ 419.563905][T17109] __kmalloc_cache_noprof+0x70/0x3d0 [ 419.563931][T17109] ? call_usermodehelper_setup+0x8e/0x270 [ 419.563960][T17109] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 419.563992][T17109] call_usermodehelper_setup+0x8e/0x270 [ 419.564021][T17109] ? __pfx_free_modprobe_argv+0x10/0x10 [ 419.564054][T17109] __request_module+0x39f/0x5e0 [ 419.564091][T17109] ? __pfx___request_module+0x10/0x10 [ 419.564133][T17109] ? rtnl_link_ops_get+0x23/0x250 [ 419.564156][T17109] ? rtnl_link_ops_get+0x23/0x250 [ 419.564186][T17109] ? rtnl_link_ops_get+0x215/0x250 [ 419.564215][T17109] rtnl_newlink+0x64f/0x1c70 [ 419.564240][T17109] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.564263][T17109] ? arch_stack_walk+0x10d/0x150 [ 419.564296][T17109] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.564326][T17109] ? __lock_acquire+0xaac/0xd20 [ 419.564372][T17109] ? __lock_acquire+0xaac/0xd20 [ 419.564414][T17109] ? __lock_acquire+0xaac/0xd20 [ 419.564462][T17109] ? is_bpf_text_address+0x26/0x2b0 [ 419.564497][T17109] ? aa_get_newest_label+0xf7/0x5d0 [ 419.564523][T17109] ? __lock_acquire+0xaac/0xd20 [ 419.564577][T17109] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.564598][T17109] rtnetlink_rcv_msg+0x7cc/0xb70 [ 419.564629][T17109] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 419.564650][T17109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.564685][T17109] ? __lock_acquire+0xaac/0xd20 [ 419.564726][T17109] netlink_rcv_skb+0x219/0x490 [ 419.564768][T17109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.564810][T17109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.564856][T17109] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.564878][T17109] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.564907][T17109] netlink_unicast+0x758/0x8d0 [ 419.564940][T17109] netlink_sendmsg+0x805/0xb30 [ 419.564975][T17109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.565003][T17109] ? aa_sock_msg_perm+0x94/0x160 [ 419.565026][T17109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.565048][T17109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.565074][T17109] __sock_sendmsg+0x219/0x270 [ 419.565109][T17109] sock_sendmsg+0x158/0x230 [ 419.565143][T17109] ? __pfx_sock_sendmsg+0x10/0x10 [ 419.565195][T17109] ? __asan_memset+0x22/0x50 [ 419.565215][T17109] ? iov_iter_bvec+0xb8/0x180 [ 419.565244][T17109] splice_to_socket+0x8ff/0xf10 [ 419.565295][T17109] ? __pfx_splice_to_socket+0x10/0x10 [ 419.565317][T17109] ? aa_file_perm+0x3e7/0xed0 [ 419.565369][T17109] ? get_pid_task+0x20/0x1f0 [ 419.565411][T17109] ? bpf_lsm_file_permission+0x9/0x20 [ 419.565436][T17109] ? security_file_permission+0x75/0x290 [ 419.565468][T17109] ? rw_verify_area+0x258/0x650 [ 419.565493][T17109] ? __pfx_splice_to_socket+0x10/0x10 [ 419.565517][T17109] do_splice+0xc76/0x1660 [ 419.565570][T17109] ? __pfx_do_splice+0x10/0x10 [ 419.565607][T17109] __se_sys_splice+0x2e1/0x460 [ 419.565640][T17109] ? __pfx___se_sys_splice+0x10/0x10 [ 419.565670][T17109] ? __x64_sys_splice+0x21/0xf0 [ 419.565700][T17109] do_syscall_64+0xf6/0x210 [ 419.565732][T17109] ? clear_bhb_loop+0x45/0xa0 [ 419.565758][T17109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.565778][T17109] RIP: 0033:0x7f625e98e969 [ 419.565797][T17109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.565816][T17109] RSP: 002b:00007f625f8b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 419.565837][T17109] RAX: ffffffffffffffda RBX: 00007f625ebb5fa0 RCX: 00007f625e98e969 [ 419.565852][T17109] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.565864][T17109] RBP: 00007f625f8b3090 R08: 0000000000010d00 R09: 0000000000000000 [ 419.565878][T17109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.565890][T17109] R13: 0000000000000000 R14: 00007f625ebb5fa0 R15: 00007ffc2e46c848 [ 419.565923][T17109] [ 419.566065][T17109] netlink: 'syz.0.4046': attribute type 5 has an invalid length. [ 420.127990][T17117] FAULT_INJECTION: forcing a failure. [ 420.127990][T17117] name failslab, interval 1, probability 0, space 0, times 0 [ 420.140841][T17117] CPU: 1 UID: 0 PID: 17117 Comm: syz.2.4050 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 420.140868][T17117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 420.140881][T17117] Call Trace: [ 420.140890][T17117] [ 420.140899][T17117] dump_stack_lvl+0x189/0x250 [ 420.140937][T17117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.140968][T17117] ? __pfx__printk+0x10/0x10 [ 420.140995][T17117] ? __pfx___might_resched+0x10/0x10 [ 420.141014][T17117] ? fs_reclaim_acquire+0x7d/0x100 [ 420.141049][T17117] should_fail_ex+0x414/0x560 [ 420.141087][T17117] should_failslab+0xa8/0x100 [ 420.141116][T17117] __kmalloc_cache_noprof+0x70/0x3d0 [ 420.141148][T17117] ? rtnl_newlink+0xed/0x1c70 [ 420.141174][T17117] rtnl_newlink+0xed/0x1c70 [ 420.141194][T17117] ? __kasan_slab_free+0x62/0x70 [ 420.141216][T17117] ? kmem_cache_free+0x192/0x3f0 [ 420.141239][T17117] ? nlmon_xmit+0xb0/0x100 [ 420.141265][T17117] ? dev_hard_start_xmit+0x2d4/0x830 [ 420.141290][T17117] ? __dev_queue_xmit+0x1adf/0x3a70 [ 420.141317][T17117] ? __netlink_deliver_tap+0x5ad/0x850 [ 420.141339][T17117] ? netlink_deliver_tap+0x19c/0x1b0 [ 420.141360][T17117] ? netlink_unicast+0x72f/0x8d0 [ 420.141377][T17117] ? netlink_sendmsg+0x805/0xb30 [ 420.141398][T17117] ? __sock_sendmsg+0x219/0x270 [ 420.141427][T17117] ? ____sys_sendmsg+0x505/0x830 [ 420.141450][T17117] ? ___sys_sendmsg+0x21f/0x2a0 [ 420.141474][T17117] ? __x64_sys_sendmsg+0x19b/0x260 [ 420.141498][T17117] ? do_syscall_64+0xf6/0x210 [ 420.141527][T17117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.141548][T17117] ? __pfx_rtnl_newlink+0x10/0x10 [ 420.141601][T17117] ? kasan_quarantine_put+0xdd/0x220 [ 420.141624][T17117] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.141658][T17117] ? nlmon_xmit+0xb0/0x100 [ 420.141684][T17117] ? kmem_cache_free+0x192/0x3f0 [ 420.141717][T17117] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.141748][T17117] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.141778][T17117] ? __local_bh_enable_ip+0x12d/0x1c0 [ 420.141809][T17117] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 420.141853][T17117] ? aa_get_newest_label+0xf7/0x5d0 [ 420.141878][T17117] ? __lock_acquire+0xaac/0xd20 [ 420.141931][T17117] ? __pfx_rtnl_newlink+0x10/0x10 [ 420.141952][T17117] rtnetlink_rcv_msg+0x7cc/0xb70 [ 420.141978][T17117] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 420.141998][T17117] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.142023][T17117] ? ref_tracker_free+0x63a/0x7d0 [ 420.142043][T17117] ? __copy_skb_header+0xa7/0x550 [ 420.142080][T17117] netlink_rcv_skb+0x219/0x490 [ 420.142105][T17117] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.142135][T17117] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.142176][T17117] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.142198][T17117] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.142226][T17117] netlink_unicast+0x758/0x8d0 [ 420.142255][T17117] netlink_sendmsg+0x805/0xb30 [ 420.142285][T17117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.142309][T17117] ? aa_sock_msg_perm+0x94/0x160 [ 420.142329][T17117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.142347][T17117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.142368][T17117] __sock_sendmsg+0x219/0x270 [ 420.142402][T17117] ____sys_sendmsg+0x505/0x830 [ 420.142433][T17117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.142468][T17117] ? import_iovec+0x74/0xa0 [ 420.142498][T17117] ___sys_sendmsg+0x21f/0x2a0 [ 420.142527][T17117] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.142593][T17117] ? __fget_files+0x2a/0x420 [ 420.142619][T17117] ? __fget_files+0x3a0/0x420 [ 420.142657][T17117] __x64_sys_sendmsg+0x19b/0x260 [ 420.142687][T17117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.142738][T17117] ? do_syscall_64+0xba/0x210 [ 420.142772][T17117] do_syscall_64+0xf6/0x210 [ 420.142804][T17117] ? clear_bhb_loop+0x45/0xa0 [ 420.142830][T17117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.142851][T17117] RIP: 0033:0x7ff186b8e969 [ 420.142869][T17117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.142888][T17117] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.142910][T17117] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 420.142926][T17117] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 420.142939][T17117] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 420.142952][T17117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.142964][T17117] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 420.142996][T17117] [ 420.594159][T17118] tipc: Started in network mode [ 420.599476][T17118] tipc: Node identity 2e1ff2be3987, cluster identity 4711 [ 420.607400][T17118] tipc: Enabled bearer , priority 0 [ 420.615202][T17118] syzkaller0: entered promiscuous mode [ 420.620776][T17118] syzkaller0: entered allmulticast mode [ 420.632706][T17118] tipc: Resetting bearer [ 420.661916][T17114] tipc: Resetting bearer [ 420.727255][T17114] tipc: Disabling bearer [ 420.876607][ C0] net_ratelimit: 17 callbacks suppressed [ 420.876629][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.935173][T17136] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 420.951367][T17138] FAULT_INJECTION: forcing a failure. [ 420.951367][T17138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.003340][T17138] CPU: 1 UID: 0 PID: 17138 Comm: syz.1.4057 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 421.003371][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 421.003384][T17138] Call Trace: [ 421.003393][T17138] [ 421.003402][T17138] dump_stack_lvl+0x189/0x250 [ 421.003440][T17138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.003470][T17138] ? __pfx__printk+0x10/0x10 [ 421.003505][T17138] should_fail_ex+0x414/0x560 [ 421.003544][T17138] _copy_to_user+0x31/0xb0 [ 421.003574][T17138] simple_read_from_buffer+0xe1/0x170 [ 421.003606][T17138] proc_fail_nth_read+0x1df/0x250 [ 421.003639][T17138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.003671][T17138] ? rw_verify_area+0x258/0x650 [ 421.003693][T17138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.003724][T17138] vfs_read+0x1fd/0x980 [ 421.003752][T17138] ? __pfx___mutex_lock+0x10/0x10 [ 421.003791][T17138] ? __pfx_vfs_read+0x10/0x10 [ 421.003815][T17138] ? __fget_files+0x2a/0x420 [ 421.003847][T17138] ? __fget_files+0x3a0/0x420 [ 421.003872][T17138] ? __fget_files+0x2a/0x420 [ 421.003908][T17138] ksys_read+0x145/0x250 [ 421.003940][T17138] ? rcu_is_watching+0x15/0xb0 [ 421.003972][T17138] ? __pfx_ksys_read+0x10/0x10 [ 421.003999][T17138] ? do_syscall_64+0xba/0x210 [ 421.004034][T17138] do_syscall_64+0xf6/0x210 [ 421.004065][T17138] ? clear_bhb_loop+0x45/0xa0 [ 421.004089][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.004109][T17138] RIP: 0033:0x7f7c8ef8d37c [ 421.004126][T17138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.004144][T17138] RSP: 002b:00007f7c8fe64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.004166][T17138] RAX: ffffffffffffffda RBX: 00007f7c8f1b5fa0 RCX: 00007f7c8ef8d37c [ 421.004181][T17138] RDX: 000000000000000f RSI: 00007f7c8fe640a0 RDI: 0000000000000007 [ 421.004194][T17138] RBP: 00007f7c8fe64090 R08: 0000000000000000 R09: 0000000000000000 [ 421.004206][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.004219][T17138] R13: 0000000000000000 R14: 00007f7c8f1b5fa0 R15: 00007ffc6b762548 [ 421.004251][T17138] [ 421.415801][T17153] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 421.419042][T17151] IPv6: Can't replace route, no match found [ 421.484223][T17151] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 421.516865][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 421.770733][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4067'. [ 421.792111][T17174] batadv_slave_0: entered promiscuous mode [ 421.865486][T17174] batadv_slave_0: left promiscuous mode [ 421.916618][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.044772][T17183] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4068'. [ 422.171269][T17188] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4071'. [ 422.377121][T17193] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 422.600520][T17199] dummy0: Device is already in use. [ 422.609409][T17197] netlink: 'syz.2.4075': attribute type 5 has an invalid length. [ 422.646075][T17201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.653409][T17187] tipc: Started in network mode [ 422.660234][T17187] tipc: Node identity ac1414aa, cluster identity 4711 [ 422.679393][T17187] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 422.703326][T17187] tipc: Enabled bearer , priority 10 [ 422.799559][T17207] batadv_slave_0: entered promiscuous mode [ 422.816608][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 422.922955][T17207] batadv_slave_0: left promiscuous mode [ 422.956583][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.963626][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 423.014414][T17214] FAULT_INJECTION: forcing a failure. [ 423.014414][T17214] name failslab, interval 1, probability 0, space 0, times 0 [ 423.058733][T17214] CPU: 1 UID: 0 PID: 17214 Comm: syz.1.4082 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 423.058761][T17214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 423.058773][T17214] Call Trace: [ 423.058781][T17214] [ 423.058789][T17214] dump_stack_lvl+0x189/0x250 [ 423.058825][T17214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.058853][T17214] ? __pfx__printk+0x10/0x10 [ 423.058877][T17214] ? __pfx___might_resched+0x10/0x10 [ 423.058895][T17214] ? fs_reclaim_acquire+0x7d/0x100 [ 423.058927][T17214] should_fail_ex+0x414/0x560 [ 423.058962][T17214] should_failslab+0xa8/0x100 [ 423.058987][T17214] __kmalloc_cache_noprof+0x70/0x3d0 [ 423.059010][T17214] ? nfnetlink_rcv+0x8fc/0x2530 [ 423.059041][T17214] nfnetlink_rcv+0x8fc/0x2530 [ 423.059096][T17214] ? arch_stack_walk+0xfc/0x150 [ 423.059134][T17214] ? stack_trace_save+0x9c/0xe0 [ 423.059158][T17214] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 423.059183][T17214] ? stack_depot_save_flags+0x40/0x910 [ 423.059250][T17214] ? __lock_acquire+0xaac/0xd20 [ 423.059287][T17214] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.059317][T17214] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.059338][T17214] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.059366][T17214] netlink_unicast+0x758/0x8d0 [ 423.059397][T17214] netlink_sendmsg+0x805/0xb30 [ 423.059429][T17214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.059455][T17214] ? aa_sock_msg_perm+0x94/0x160 [ 423.059478][T17214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.059500][T17214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.059524][T17214] __sock_sendmsg+0x219/0x270 [ 423.059558][T17214] ____sys_sendmsg+0x505/0x830 [ 423.059590][T17214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.059624][T17214] ? import_iovec+0x74/0xa0 [ 423.059674][T17214] ___sys_sendmsg+0x21f/0x2a0 [ 423.059700][T17214] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.059759][T17214] ? __fget_files+0x2a/0x420 [ 423.059782][T17214] ? __fget_files+0x3a0/0x420 [ 423.059815][T17214] __x64_sys_sendmsg+0x19b/0x260 [ 423.059842][T17214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.059901][T17214] ? do_syscall_64+0xba/0x210 [ 423.059935][T17214] do_syscall_64+0xf6/0x210 [ 423.059969][T17214] ? clear_bhb_loop+0x45/0xa0 [ 423.059992][T17214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.060011][T17214] RIP: 0033:0x7f7c8ef8e969 [ 423.060029][T17214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.060046][T17214] RSP: 002b:00007f7c8fe64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.060066][T17214] RAX: ffffffffffffffda RBX: 00007f7c8f1b5fa0 RCX: 00007f7c8ef8e969 [ 423.060081][T17214] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.060094][T17214] RBP: 00007f7c8fe64090 R08: 0000000000000000 R09: 0000000000000000 [ 423.060107][T17214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.060118][T17214] R13: 0000000000000000 R14: 00007f7c8f1b5fa0 R15: 00007ffc6b762548 [ 423.060149][T17214] [ 423.456148][T17218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 423.652325][T17237] FAULT_INJECTION: forcing a failure. [ 423.652325][T17237] name failslab, interval 1, probability 0, space 0, times 0 [ 423.665035][T17237] CPU: 1 UID: 0 PID: 17237 Comm: syz.4.4090 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 423.665062][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 423.665075][T17237] Call Trace: [ 423.665084][T17237] [ 423.665093][T17237] dump_stack_lvl+0x189/0x250 [ 423.665130][T17237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.665158][T17237] ? __pfx__printk+0x10/0x10 [ 423.665184][T17237] ? __pfx___might_resched+0x10/0x10 [ 423.665208][T17237] should_fail_ex+0x414/0x560 [ 423.665244][T17237] ? translate_table+0x198/0x2000 [ 423.665263][T17237] should_failslab+0xa8/0x100 [ 423.665291][T17237] __kvmalloc_node_noprof+0x168/0x5e0 [ 423.665318][T17237] ? translate_table+0x198/0x2000 [ 423.665344][T17237] translate_table+0x198/0x2000 [ 423.665387][T17237] ? __pfx_translate_table+0x10/0x10 [ 423.665410][T17237] ? __might_fault+0xb0/0x130 [ 423.665454][T17237] ? _copy_from_user+0x94/0xb0 [ 423.665486][T17237] do_ipt_set_ctl+0x967/0xcd0 [ 423.665514][T17237] ? rcu_is_watching+0x15/0xb0 [ 423.665544][T17237] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 423.665591][T17237] ? __pfx___mutex_lock+0x10/0x10 [ 423.665621][T17237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.665648][T17237] ? aa_sk_perm+0x81e/0x950 [ 423.665671][T17237] ? __pfx_aa_sk_perm+0x10/0x10 [ 423.665696][T17237] nf_setsockopt+0x26c/0x290 [ 423.665722][T17237] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 423.665745][T17237] do_sock_setsockopt+0x257/0x3e0 [ 423.665772][T17237] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 423.665793][T17237] ? __fget_files+0x2a/0x420 [ 423.665822][T17237] ? __fget_files+0x3a0/0x420 [ 423.665846][T17237] ? __fget_files+0x2a/0x420 [ 423.665878][T17237] __x64_sys_setsockopt+0x18b/0x220 [ 423.665909][T17237] do_syscall_64+0xf6/0x210 [ 423.665940][T17237] ? clear_bhb_loop+0x45/0xa0 [ 423.665965][T17237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.665983][T17237] RIP: 0033:0x7f87b258e969 [ 423.666013][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.666029][T17237] RSP: 002b:00007f87b333f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 423.666049][T17237] RAX: ffffffffffffffda RBX: 00007f87b27b5fa0 RCX: 00007f87b258e969 [ 423.666063][T17237] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 423.666074][T17237] RBP: 00007f87b333f090 R08: 00000000000003c8 R09: 0000000000000000 [ 423.666086][T17237] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 423.666098][T17237] R13: 0000000000000000 R14: 00007f87b27b5fa0 R15: 00007ffe14c1a9c8 [ 423.666126][T17237] [ 423.925212][ T5883] tipc: Node number set to 2886997162 [ 424.013017][T17243] __nla_validate_parse: 6 callbacks suppressed [ 424.013040][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4089'. [ 424.043162][T17243] ipvlan2: entered promiscuous mode [ 424.068834][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'. [ 424.342698][T17258] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 424.369542][T17256] netlink: 185436 bytes leftover after parsing attributes in process `syz.0.4095'. [ 424.588693][T17272] FAULT_INJECTION: forcing a failure. [ 424.588693][T17272] name failslab, interval 1, probability 0, space 0, times 0 [ 424.614561][T17272] CPU: 1 UID: 0 PID: 17272 Comm: syz.2.4104 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 424.614591][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.614603][T17272] Call Trace: [ 424.614613][T17272] [ 424.614623][T17272] dump_stack_lvl+0x189/0x250 [ 424.614661][T17272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.614692][T17272] ? __pfx__printk+0x10/0x10 [ 424.614717][T17272] ? __pfx___might_resched+0x10/0x10 [ 424.614736][T17272] ? fs_reclaim_acquire+0x7d/0x100 [ 424.614773][T17272] should_fail_ex+0x414/0x560 [ 424.614811][T17272] should_failslab+0xa8/0x100 [ 424.614841][T17272] __kmalloc_noprof+0xcb/0x4f0 [ 424.614865][T17272] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 424.614903][T17272] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 424.614942][T17272] genl_start+0x180/0x6c0 [ 424.614969][T17272] ? netlink_lookup+0x30/0x200 [ 424.614998][T17272] __netlink_dump_start+0x466/0x7e0 [ 424.615031][T17272] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 424.615066][T17272] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 424.615093][T17272] ? genl_get_cmd+0x67f/0x910 [ 424.615124][T17272] ? __pfx___mutex_lock+0x10/0x10 [ 424.615153][T17272] ? __pfx_genl_start+0x10/0x10 [ 424.615179][T17272] ? __pfx_genl_dumpit+0x10/0x10 [ 424.615204][T17272] ? __pfx_genl_done+0x10/0x10 [ 424.615250][T17272] genl_rcv_msg+0x5da/0x790 [ 424.615287][T17272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.615314][T17272] ? __pfx_tipc_nl_node_dump_monitor_peer+0x10/0x10 [ 424.615337][T17272] ? ref_tracker_free+0x63a/0x7d0 [ 424.615357][T17272] ? __copy_skb_header+0xa7/0x550 [ 424.615396][T17272] netlink_rcv_skb+0x219/0x490 [ 424.615419][T17272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.615449][T17272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.615500][T17272] ? down_read+0x1ad/0x2e0 [ 424.615532][T17272] genl_rcv+0x28/0x40 [ 424.615559][T17272] netlink_unicast+0x758/0x8d0 [ 424.615593][T17272] netlink_sendmsg+0x805/0xb30 [ 424.615628][T17272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.615655][T17272] ? aa_sock_msg_perm+0x94/0x160 [ 424.615680][T17272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.615703][T17272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.615728][T17272] __sock_sendmsg+0x219/0x270 [ 424.615763][T17272] ____sys_sendmsg+0x505/0x830 [ 424.615798][T17272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.615836][T17272] ? import_iovec+0x74/0xa0 [ 424.615872][T17272] ___sys_sendmsg+0x21f/0x2a0 [ 424.615902][T17272] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.615972][T17272] ? __fget_files+0x2a/0x420 [ 424.615997][T17272] ? __fget_files+0x3a0/0x420 [ 424.616036][T17272] __x64_sys_sendmsg+0x19b/0x260 [ 424.616066][T17272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.616114][T17272] ? do_syscall_64+0xba/0x210 [ 424.616150][T17272] do_syscall_64+0xf6/0x210 [ 424.616180][T17272] ? clear_bhb_loop+0x45/0xa0 [ 424.616207][T17272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.616227][T17272] RIP: 0033:0x7ff186b8e969 [ 424.616246][T17272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.616264][T17272] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.616287][T17272] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 424.616302][T17272] RDX: 0000000000000800 RSI: 0000200000000500 RDI: 0000000000000003 [ 424.616316][T17272] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 424.616328][T17272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.616341][T17272] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 424.616375][T17272] [ 425.142294][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4106'. [ 425.258350][T17288] siw: device registration error -23 [ 425.394797][T17297] siw: device registration error -23 [ 425.430304][T17299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4112'. [ 425.597221][T17306] FAULT_INJECTION: forcing a failure. [ 425.597221][T17306] name failslab, interval 1, probability 0, space 0, times 0 [ 425.611696][T17306] CPU: 0 UID: 0 PID: 17306 Comm: syz.3.4115 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 425.611723][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 425.611735][T17306] Call Trace: [ 425.611744][T17306] [ 425.611752][T17306] dump_stack_lvl+0x189/0x250 [ 425.611789][T17306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.611817][T17306] ? __pfx__printk+0x10/0x10 [ 425.611843][T17306] ? __pfx___might_resched+0x10/0x10 [ 425.611867][T17306] should_fail_ex+0x414/0x560 [ 425.611903][T17306] should_failslab+0xa8/0x100 [ 425.611933][T17306] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 425.611959][T17306] ? __alloc_skb+0x112/0x2d0 [ 425.611987][T17306] __alloc_skb+0x112/0x2d0 [ 425.612014][T17306] netlink_sendmsg+0x5c6/0xb30 [ 425.612047][T17306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.612073][T17306] ? aa_sock_msg_perm+0x94/0x160 [ 425.612097][T17306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.612118][T17306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.612141][T17306] __sock_sendmsg+0x219/0x270 [ 425.612175][T17306] ____sys_sendmsg+0x505/0x830 [ 425.612207][T17306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.612243][T17306] ? import_iovec+0x74/0xa0 [ 425.612274][T17306] ___sys_sendmsg+0x21f/0x2a0 [ 425.612302][T17306] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.612365][T17306] ? __fget_files+0x2a/0x420 [ 425.612389][T17306] ? __fget_files+0x3a0/0x420 [ 425.612432][T17306] __x64_sys_sendmsg+0x19b/0x260 [ 425.612461][T17306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.612503][T17306] ? do_syscall_64+0xba/0x210 [ 425.612538][T17306] do_syscall_64+0xf6/0x210 [ 425.612568][T17306] ? clear_bhb_loop+0x45/0xa0 [ 425.612592][T17306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.612611][T17306] RIP: 0033:0x7f071ff8e969 [ 425.612629][T17306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.612646][T17306] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.612667][T17306] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 425.612682][T17306] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 425.612699][T17306] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 425.612711][T17306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.612723][T17306] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 425.612771][T17306] [ 425.944584][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'. [ 425.955746][T17311] FAULT_INJECTION: forcing a failure. [ 425.955746][T17311] name failslab, interval 1, probability 0, space 0, times 0 [ 425.973403][T17311] CPU: 1 UID: 0 PID: 17311 Comm: syz.3.4117 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 425.973432][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 425.973444][T17311] Call Trace: [ 425.973453][T17311] [ 425.973462][T17311] dump_stack_lvl+0x189/0x250 [ 425.973502][T17311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.973531][T17311] ? __pfx__printk+0x10/0x10 [ 425.973556][T17311] ? __pfx___might_resched+0x10/0x10 [ 425.973579][T17311] should_fail_ex+0x414/0x560 [ 425.973614][T17311] should_failslab+0xa8/0x100 [ 425.973650][T17311] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 425.973676][T17311] ? __alloc_skb+0x112/0x2d0 [ 425.973702][T17311] __alloc_skb+0x112/0x2d0 [ 425.973729][T17311] netlink_sendmsg+0x5c6/0xb30 [ 425.973761][T17311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.973787][T17311] ? aa_sock_msg_perm+0x94/0x160 [ 425.973809][T17311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.973831][T17311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.973855][T17311] __sock_sendmsg+0x219/0x270 [ 425.973889][T17311] ____sys_sendmsg+0x505/0x830 [ 425.973919][T17311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.973953][T17311] ? import_iovec+0x74/0xa0 [ 425.973982][T17311] ___sys_sendmsg+0x21f/0x2a0 [ 425.974008][T17311] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.974071][T17311] ? __fget_files+0x2a/0x420 [ 425.974098][T17311] ? __fget_files+0x3a0/0x420 [ 425.974135][T17311] __x64_sys_sendmsg+0x19b/0x260 [ 425.974166][T17311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.974211][T17311] ? do_syscall_64+0xba/0x210 [ 425.974248][T17311] do_syscall_64+0xf6/0x210 [ 425.974280][T17311] ? clear_bhb_loop+0x45/0xa0 [ 425.974305][T17311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.974325][T17311] RIP: 0033:0x7f071ff8e969 [ 425.974339][T17311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.974352][T17311] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.974368][T17311] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 425.974383][T17311] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 425.974393][T17311] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 425.974402][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.974411][T17311] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 425.974433][T17311] [ 426.076749][ C0] net_ratelimit: 11 callbacks suppressed [ 426.076768][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.358856][T17314] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4118'. [ 426.486241][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4123'. [ 426.584556][T17332] FAULT_INJECTION: forcing a failure. [ 426.584556][T17332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.618519][T17332] CPU: 1 UID: 0 PID: 17332 Comm: syz.2.4126 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 426.618547][T17332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 426.618559][T17332] Call Trace: [ 426.618575][T17332] [ 426.618584][T17332] dump_stack_lvl+0x189/0x250 [ 426.618619][T17332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.618646][T17332] ? __pfx__printk+0x10/0x10 [ 426.618677][T17332] should_fail_ex+0x414/0x560 [ 426.618712][T17332] _copy_to_user+0x31/0xb0 [ 426.618748][T17332] simple_read_from_buffer+0xe1/0x170 [ 426.618775][T17332] proc_fail_nth_read+0x1df/0x250 [ 426.618805][T17332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.618834][T17332] ? rw_verify_area+0x258/0x650 [ 426.618854][T17332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.618881][T17332] vfs_read+0x1fd/0x980 [ 426.618907][T17332] ? __pfx___mutex_lock+0x10/0x10 [ 426.618935][T17332] ? __pfx_vfs_read+0x10/0x10 [ 426.618957][T17332] ? __fget_files+0x2a/0x420 [ 426.618985][T17332] ? __fget_files+0x3a0/0x420 [ 426.619007][T17332] ? __fget_files+0x2a/0x420 [ 426.619040][T17332] ksys_read+0x145/0x250 [ 426.619059][T17332] ? rcu_is_watching+0x15/0xb0 [ 426.619088][T17332] ? __pfx_ksys_read+0x10/0x10 [ 426.619113][T17332] ? do_syscall_64+0xba/0x210 [ 426.619145][T17332] do_syscall_64+0xf6/0x210 [ 426.619173][T17332] ? clear_bhb_loop+0x45/0xa0 [ 426.619196][T17332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.619214][T17332] RIP: 0033:0x7ff186b8d37c [ 426.619249][T17332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 426.619266][T17332] RSP: 002b:00007ff1879aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.619286][T17332] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8d37c [ 426.619301][T17332] RDX: 000000000000000f RSI: 00007ff1879aa0a0 RDI: 0000000000000008 [ 426.619313][T17332] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 426.619325][T17332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.619336][T17332] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 426.619378][T17332] [ 426.693235][T17337] netlink: 'syz.1.4128': attribute type 10 has an invalid length. [ 426.857875][T17337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4128'. [ 426.876500][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 426.984581][T17349] FAULT_INJECTION: forcing a failure. [ 426.984581][T17349] name failslab, interval 1, probability 0, space 0, times 0 [ 427.001268][T17346] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 427.010935][T17349] CPU: 1 UID: 0 PID: 17349 Comm: syz.2.4133 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 427.010960][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 427.010972][T17349] Call Trace: [ 427.010981][T17349] [ 427.010989][T17349] dump_stack_lvl+0x189/0x250 [ 427.011044][T17349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.011074][T17349] ? __pfx__printk+0x10/0x10 [ 427.011102][T17349] ? ref_tracker_alloc+0x318/0x460 [ 427.011129][T17349] should_fail_ex+0x414/0x560 [ 427.011167][T17349] should_failslab+0xa8/0x100 [ 427.011196][T17349] kmem_cache_alloc_noprof+0x73/0x3c0 [ 427.011221][T17349] ? skb_clone+0x212/0x3a0 [ 427.011253][T17349] skb_clone+0x212/0x3a0 [ 427.011285][T17349] __netlink_deliver_tap+0x404/0x850 [ 427.011322][T17349] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.011348][T17349] netlink_deliver_tap+0x19c/0x1b0 [ 427.011372][T17349] netlink_unicast+0x72f/0x8d0 [ 427.011404][T17349] netlink_sendmsg+0x805/0xb30 [ 427.011438][T17349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.011466][T17349] ? aa_sock_msg_perm+0x94/0x160 [ 427.011490][T17349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.011513][T17349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.011537][T17349] __sock_sendmsg+0x219/0x270 [ 427.011580][T17349] ____sys_sendmsg+0x505/0x830 [ 427.011613][T17349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.011649][T17349] ? import_iovec+0x74/0xa0 [ 427.011681][T17349] ___sys_sendmsg+0x21f/0x2a0 [ 427.011710][T17349] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.011776][T17349] ? __fget_files+0x2a/0x420 [ 427.011802][T17349] ? __fget_files+0x3a0/0x420 [ 427.011839][T17349] __x64_sys_sendmsg+0x19b/0x260 [ 427.011870][T17349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.011916][T17349] ? do_syscall_64+0xba/0x210 [ 427.011951][T17349] do_syscall_64+0xf6/0x210 [ 427.011982][T17349] ? clear_bhb_loop+0x45/0xa0 [ 427.012008][T17349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.012028][T17349] RIP: 0033:0x7ff186b8e969 [ 427.012046][T17349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.012064][T17349] RSP: 002b:00007ff1879aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.012087][T17349] RAX: ffffffffffffffda RBX: 00007ff186db5fa0 RCX: 00007ff186b8e969 [ 427.012102][T17349] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 427.012115][T17349] RBP: 00007ff1879aa090 R08: 0000000000000000 R09: 0000000000000000 [ 427.012129][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.012141][T17349] R13: 0000000000000000 R14: 00007ff186db5fa0 R15: 00007ffe1a7aa1c8 [ 427.012173][T17349] [ 427.014294][T17347] siw: device registration error -23 [ 427.116191][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 427.118280][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.360742][T17359] syz_tun: entered promiscuous mode [ 427.389789][T17359] syz_tun: left promiscuous mode [ 427.557125][T17368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.630271][T17373] FAULT_INJECTION: forcing a failure. [ 427.630271][T17373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.644593][T17373] CPU: 1 UID: 0 PID: 17373 Comm: syz.4.4142 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 427.644622][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 427.644635][T17373] Call Trace: [ 427.644643][T17373] [ 427.644653][T17373] dump_stack_lvl+0x189/0x250 [ 427.644685][T17373] ? __lock_acquire+0xaac/0xd20 [ 427.644716][T17373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.644745][T17373] ? __pfx__printk+0x10/0x10 [ 427.644765][T17373] ? __might_fault+0xb0/0x130 [ 427.644802][T17373] should_fail_ex+0x414/0x560 [ 427.644839][T17373] _copy_from_iter+0x1db/0x15a0 [ 427.644871][T17373] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 427.644912][T17373] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 427.644940][T17373] ? __pfx__copy_from_iter+0x10/0x10 [ 427.644966][T17373] ? __build_skb_around+0x257/0x3e0 [ 427.644995][T17373] ? netlink_sendmsg+0x642/0xb30 [ 427.645016][T17373] ? skb_put+0x11b/0x210 [ 427.645045][T17373] netlink_sendmsg+0x6b2/0xb30 [ 427.645078][T17373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.645105][T17373] ? aa_sock_msg_perm+0x94/0x160 [ 427.645131][T17373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.645154][T17373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.645178][T17373] __sock_sendmsg+0x219/0x270 [ 427.645214][T17373] ____sys_sendmsg+0x505/0x830 [ 427.645246][T17373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.645282][T17373] ? import_iovec+0x74/0xa0 [ 427.645312][T17373] ___sys_sendmsg+0x21f/0x2a0 [ 427.645342][T17373] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.645407][T17373] ? __fget_files+0x2a/0x420 [ 427.645432][T17373] ? __fget_files+0x3a0/0x420 [ 427.645470][T17373] __x64_sys_sendmsg+0x19b/0x260 [ 427.645499][T17373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.645552][T17373] ? do_syscall_64+0xba/0x210 [ 427.645586][T17373] do_syscall_64+0xf6/0x210 [ 427.645618][T17373] ? clear_bhb_loop+0x45/0xa0 [ 427.645643][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.645663][T17373] RIP: 0033:0x7f87b258e969 [ 427.645681][T17373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.645699][T17373] RSP: 002b:00007f87b333f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.645720][T17373] RAX: ffffffffffffffda RBX: 00007f87b27b5fa0 RCX: 00007f87b258e969 [ 427.645735][T17373] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 427.645749][T17373] RBP: 00007f87b333f090 R08: 0000000000000000 R09: 0000000000000000 [ 427.645762][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.645775][T17373] R13: 0000000000000000 R14: 00007f87b27b5fa0 R15: 00007ffe14c1a9c8 [ 427.645806][T17373] [ 427.916546][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 428.156624][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.245793][T17393] FAULT_INJECTION: forcing a failure. [ 428.245793][T17393] name failslab, interval 1, probability 0, space 0, times 0 [ 428.265110][T17393] CPU: 1 UID: 0 PID: 17393 Comm: syz.3.4153 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 428.265140][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 428.265153][T17393] Call Trace: [ 428.265162][T17393] [ 428.265170][T17393] dump_stack_lvl+0x189/0x250 [ 428.265219][T17393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.265250][T17393] ? __pfx__printk+0x10/0x10 [ 428.265274][T17393] ? __pfx___might_resched+0x10/0x10 [ 428.265294][T17393] ? fs_reclaim_acquire+0x7d/0x100 [ 428.265330][T17393] should_fail_ex+0x414/0x560 [ 428.265369][T17393] should_failslab+0xa8/0x100 [ 428.265397][T17393] __kmalloc_noprof+0xcb/0x4f0 [ 428.265422][T17393] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 428.265460][T17393] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 428.265498][T17393] genl_start+0x180/0x6c0 [ 428.265525][T17393] ? netlink_lookup+0x30/0x200 [ 428.265555][T17393] __netlink_dump_start+0x466/0x7e0 [ 428.265588][T17393] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 428.265622][T17393] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 428.265651][T17393] ? genl_get_cmd+0x67f/0x910 [ 428.265685][T17393] ? __pfx_genl_start+0x10/0x10 [ 428.265711][T17393] ? __pfx_genl_dumpit+0x10/0x10 [ 428.265737][T17393] ? __pfx_genl_done+0x10/0x10 [ 428.265794][T17393] genl_rcv_msg+0x5da/0x790 [ 428.265829][T17393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.265855][T17393] ? __pfx_ethnl_tunnel_info_start+0x10/0x10 [ 428.265877][T17393] ? __pfx_ethnl_tunnel_info_dumpit+0x10/0x10 [ 428.265903][T17393] ? ref_tracker_free+0x63a/0x7d0 [ 428.265922][T17393] ? __copy_skb_header+0xa7/0x550 [ 428.265960][T17393] netlink_rcv_skb+0x219/0x490 [ 428.265983][T17393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.266013][T17393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.266062][T17393] ? down_read+0x1ad/0x2e0 [ 428.266084][T17393] genl_rcv+0x28/0x40 [ 428.266109][T17393] netlink_unicast+0x758/0x8d0 [ 428.266141][T17393] netlink_sendmsg+0x805/0xb30 [ 428.266175][T17393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.266202][T17393] ? aa_sock_msg_perm+0x94/0x160 [ 428.266276][T17393] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.266299][T17393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.266324][T17393] __sock_sendmsg+0x219/0x270 [ 428.266360][T17393] ____sys_sendmsg+0x505/0x830 [ 428.266393][T17393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.266430][T17393] ? import_iovec+0x74/0xa0 [ 428.266466][T17393] ___sys_sendmsg+0x21f/0x2a0 [ 428.266496][T17393] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.266562][T17393] ? __fget_files+0x2a/0x420 [ 428.266587][T17393] ? __fget_files+0x3a0/0x420 [ 428.266626][T17393] __x64_sys_sendmsg+0x19b/0x260 [ 428.266656][T17393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.266703][T17393] ? do_syscall_64+0xba/0x210 [ 428.266738][T17393] do_syscall_64+0xf6/0x210 [ 428.266769][T17393] ? clear_bhb_loop+0x45/0xa0 [ 428.266795][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.266814][T17393] RIP: 0033:0x7f071ff8e969 [ 428.266833][T17393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.266851][T17393] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.266872][T17393] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 428.266887][T17393] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 428.266900][T17393] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 428.266913][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.266925][T17393] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 428.266958][T17393] [ 428.780802][T17403] bridge0: entered promiscuous mode [ 428.787861][T17405] netlink: 'syz.0.4159': attribute type 10 has an invalid length. [ 428.839817][T17403] macvlan2: entered promiscuous mode [ 428.856316][T17403] bridge0: port 4(macvlan2) entered blocking state [ 428.865953][T17403] bridge0: port 4(macvlan2) entered disabled state [ 428.873392][T17403] macvlan2: entered allmulticast mode [ 428.879250][T17403] bridge0: entered allmulticast mode [ 428.897075][T17403] macvlan2: left allmulticast mode [ 428.897851][T17413] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 428.902328][T17403] bridge0: left allmulticast mode [ 428.916311][T17403] bridge0: left promiscuous mode [ 428.956584][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 428.971156][T17415] siw: device registration error -23 [ 429.004448][T17405] batman_adv: batadv0: Adding interface: macvtap0 [ 429.011784][T17405] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.041548][T17405] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 429.147871][T17422] FAULT_INJECTION: forcing a failure. [ 429.147871][T17422] name failslab, interval 1, probability 0, space 0, times 0 [ 429.175315][T17422] CPU: 1 UID: 0 PID: 17422 Comm: syz.3.4164 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 429.175344][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 429.175356][T17422] Call Trace: [ 429.175364][T17422] [ 429.175373][T17422] dump_stack_lvl+0x189/0x250 [ 429.175418][T17422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.175447][T17422] ? __pfx__printk+0x10/0x10 [ 429.175470][T17422] ? __pfx___might_resched+0x10/0x10 [ 429.175489][T17422] ? fs_reclaim_acquire+0x7d/0x100 [ 429.175523][T17422] should_fail_ex+0x414/0x560 [ 429.175560][T17422] should_failslab+0xa8/0x100 [ 429.175589][T17422] __kmalloc_noprof+0xcb/0x4f0 [ 429.175613][T17422] ? sock_kmalloc+0xd6/0x160 [ 429.175645][T17422] sock_kmalloc+0xd6/0x160 [ 429.175675][T17422] skcipher_recvmsg+0x55c/0x11c0 [ 429.175717][T17422] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 429.175743][T17422] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 429.175764][T17422] ? security_socket_recvmsg+0x7e/0x2e0 [ 429.175790][T17422] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 429.175812][T17422] sock_recvmsg+0x229/0x270 [ 429.175836][T17422] ____sys_recvmsg+0x1c9/0x460 [ 429.175872][T17422] ? __pfx_____sys_recvmsg+0x10/0x10 [ 429.175916][T17422] ? import_iovec+0x74/0xa0 [ 429.175947][T17422] ___sys_recvmsg+0x1b5/0x510 [ 429.175980][T17422] ? __pfx____sys_recvmsg+0x10/0x10 [ 429.176034][T17422] ? __fget_files+0x3a0/0x420 [ 429.176072][T17422] do_recvmmsg+0x307/0x760 [ 429.176109][T17422] ? __pfx_do_recvmmsg+0x10/0x10 [ 429.176148][T17422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.176198][T17422] __x64_sys_recvmmsg+0x190/0x240 [ 429.176225][T17422] ? rcu_is_watching+0x15/0xb0 [ 429.176256][T17422] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 429.176288][T17422] ? do_syscall_64+0xba/0x210 [ 429.176321][T17422] do_syscall_64+0xf6/0x210 [ 429.176352][T17422] ? clear_bhb_loop+0x45/0xa0 [ 429.176377][T17422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.176402][T17422] RIP: 0033:0x7f071ff8e969 [ 429.176424][T17422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.176442][T17422] RSP: 002b:00007f0720dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.176463][T17422] RAX: ffffffffffffffda RBX: 00007f07201b5fa0 RCX: 00007f071ff8e969 [ 429.176478][T17422] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 429.176490][T17422] RBP: 00007f0720dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 429.176502][T17422] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 429.176515][T17422] R13: 0000000000000000 R14: 00007f07201b5fa0 R15: 00007ffd5992d7d8 [ 429.176546][T17422] [ 429.196663][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.301289][T17426] vlan2: entered promiscuous mode [ 429.446818][T17432] __nla_validate_parse: 11 callbacks suppressed [ 429.446844][T17432] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4167'. [ 429.465194][T17426] bridge0: entered promiscuous mode [ 429.482674][T17426] vlan2: entered allmulticast mode [ 429.502948][T17429] bond1: (slave erspan0): Releasing active interface [ 429.529687][T17429] bond0: (slave bridge0): Releasing backup interface [ 429.555777][T17429] bridge_slave_0: left allmulticast mode [ 429.564129][T17429] bridge_slave_0: left promiscuous mode [ 429.573262][T17429] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.591865][T17429] bridge_slave_1: left allmulticast mode [ 429.611221][T17429] bridge_slave_1: left promiscuous mode [ 429.618005][T17429] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.635801][T17429] bond0: (slave bond_slave_0): Releasing backup interface [ 429.655953][T17429] bond0: (slave bond_slave_1): Releasing backup interface [ 429.724553][T17429] team0: Port device team_slave_0 removed [ 429.753380][T17429] team0: Port device team_slave_1 removed [ 429.823650][T17429] team0: Port device geneve0 removed [ 429.878118][T17429] bond0: (slave wlan1): Releasing backup interface [ 429.919301][T17429] ------------[ cut here ]------------ [ 429.925136][T17429] WARNING: CPU: 1 PID: 17429 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 429.934209][T17429] Modules linked in: [ 429.938285][T17429] CPU: 1 UID: 0 PID: 17429 Comm: syz.3.4168 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 429.950380][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 429.960437][T17429] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 429.966185][T17429] Code: ff 4c 89 ff be 03 00 00 00 e8 f2 8a f8 02 e9 eb fa ff ff e8 e8 28 97 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 ce 42 97 09 89 c0 48 c7 c7 68 73 76 92 48 03 3c c5 10 [ 429.985802][T17429] RSP: 0018:ffffc9000b33e1b0 EFLAGS: 00010002 [ 429.991881][T17429] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 429.996504][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 429.999843][T17429] RDX: 0000000000030000 RSI: ffffffff8d93ad0f RDI: ffffffff8bc1d020 [ 430.014767][T17429] RBP: ffffc9000b33e410 R08: ffffc9000b33df40 R09: 0000000000000020 [ 430.022785][T17429] R10: 0000000000000000 R11: ffffffff819e7ee0 R12: ffff8880b8928368 [ 430.030770][T17429] R13: ffffffff81bfc9f7 R14: ffff88807eb8da00 R15: 0000000000000000 [ 430.038744][T17429] FS: 00007f0720db76c0(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 430.047696][T17429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.054286][T17429] CR2: 00007f9bc09f3438 CR3: 000000001bf80000 CR4: 00000000003526f0 [ 430.062286][T17429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.070262][T17429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.078239][T17429] Call Trace: [ 430.081522][T17429] [ 430.084468][T17429] ieee80211_rx_list+0x53a/0x2d80 [ 430.089518][T17429] ? __d_instantiate+0x197/0x740 [ 430.094470][T17429] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 430.099935][T17429] ? __lock_acquire+0xaac/0xd20 [ 430.104797][T17429] ? ieee80211_rx_napi+0xca/0x3d0 [ 430.109834][T17429] ? ieee80211_rx_napi+0xca/0x3d0 [ 430.114867][T17429] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 430.120770][T17429] ? ieee80211_rx_napi+0xca/0x3d0 [ 430.125804][T17429] ieee80211_rx_napi+0x1a8/0x3d0 [ 430.130757][T17429] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 430.136224][T17429] ? skb_dequeue+0x10e/0x150 [ 430.140820][T17429] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 430.146815][T17429] ? ieee80211_stop_device+0x29/0xf0 [ 430.152196][T17429] ieee80211_stop_device+0x3e/0xf0 [ 430.157318][T17429] ieee80211_do_stop+0x17b9/0x1f80 [ 430.162453][T17429] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.167833][T17429] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 430.173315][T17429] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 430.179219][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.184431][T17429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.190778][T17429] ieee80211_stop+0x444/0x4a0 [ 430.195455][T17429] ? dev_deactivate_many+0x258/0xd40 [ 430.200748][T17429] ? __pfx_ieee80211_stop+0x10/0x10 [ 430.205955][T17429] __dev_close_many+0x361/0x6f0 [ 430.210820][T17429] ? __pfx___dev_close_many+0x10/0x10 [ 430.216210][T17429] dev_close_many+0x225/0x410 [ 430.220894][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.226111][T17429] ? __pfx_dev_close_many+0x10/0x10 [ 430.231329][T17429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.237666][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 430.243061][T17429] netif_close+0x158/0x210 [ 430.247485][T17429] ? __pfx_netif_close+0x10/0x10 [ 430.252424][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 430.257833][T17429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 430.263576][T17429] dev_close+0x10a/0x220 [ 430.267836][T17429] __bond_release_one+0xbb5/0x10e0 [ 430.272971][T17429] ? __pfx___bond_release_one+0x10/0x10 [ 430.278543][T17429] ? netif_state_change+0x29e/0x3a0 [ 430.283747][T17429] ? mutex_is_locked+0x17/0x50 [ 430.288521][T17429] do_set_master+0x30f/0x6d0 [ 430.293136][T17429] do_setlink+0xd47/0x40d0 [ 430.297574][T17429] ? __pfx_do_setlink+0x10/0x10 [ 430.302429][T17429] ? do_raw_spin_lock+0x121/0x290 [ 430.307472][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.312686][T17429] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 430.318613][T17429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.324954][T17429] ? rcu_is_watching+0x15/0xb0 [ 430.329733][T17429] ? __mutex_lock+0xa6d/0xe80 [ 430.334426][T17429] ? __mutex_lock+0x51b/0xe80 [ 430.339120][T17429] ? rtnl_newlink+0x8db/0x1c70 [ 430.343893][T17429] ? __pfx___mutex_lock+0x10/0x10 [ 430.348966][T17429] ? ns_capable+0x8a/0xf0 [ 430.353300][T17429] ? rtnl_link_get_net_capable+0x16a/0x350 [ 430.359122][T17429] rtnl_newlink+0x149f/0x1c70 [ 430.363801][T17429] ? __kasan_slab_free+0x62/0x70 [ 430.368756][T17429] ? __pfx_rtnl_newlink+0x10/0x10 [ 430.373812][T17429] ? kasan_quarantine_put+0xdd/0x220 [ 430.379108][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.384322][T17429] ? nlmon_xmit+0xb0/0x100 [ 430.388749][T17429] ? kmem_cache_free+0x192/0x3f0 [ 430.393702][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 430.399109][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.404325][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 430.409708][T17429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 430.415446][T17429] ? aa_get_newest_label+0xf7/0x5d0 [ 430.420666][T17429] ? __lock_acquire+0xaac/0xd20 [ 430.425548][T17429] ? __pfx_rtnl_newlink+0x10/0x10 [ 430.430584][T17429] rtnetlink_rcv_msg+0x7cc/0xb70 [ 430.435550][T17429] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 430.440690][T17429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.446193][T17429] ? ref_tracker_free+0x63a/0x7d0 [ 430.451238][T17429] ? __copy_skb_header+0xa7/0x550 [ 430.456295][T17429] netlink_rcv_skb+0x219/0x490 [ 430.461103][T17429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 430.466580][T17429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.471896][T17429] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.477111][T17429] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.482326][T17429] netlink_unicast+0x758/0x8d0 [ 430.487108][T17429] netlink_sendmsg+0x805/0xb30 [ 430.491894][T17429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.497194][T17429] ? aa_sock_msg_perm+0x94/0x160 [ 430.502147][T17429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.507465][T17429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.512799][T17429] __sock_sendmsg+0x219/0x270 [ 430.517517][T17429] ____sys_sendmsg+0x505/0x830 [ 430.522320][T17429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.527642][T17429] ? import_iovec+0x74/0xa0 [ 430.532169][T17429] ___sys_sendmsg+0x21f/0x2a0 [ 430.536863][T17429] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.542119][T17429] ? futex_wake+0x458/0x500 [ 430.546659][T17429] ? tun_chr_write_iter+0x18a/0x200 [ 430.551899][T17429] ? __lock_acquire+0xaac/0xd20 [ 430.556787][T17429] __x64_sys_sendmsg+0x19b/0x260 [ 430.561750][T17429] ? __might_fault+0xb0/0x130 [ 430.566464][T17429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.571971][T17429] ? rcu_is_watching+0x15/0xb0 [ 430.576780][T17429] do_syscall_64+0xf6/0x210 [ 430.581321][T17429] ? clear_bhb_loop+0x45/0xa0 [ 430.586028][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.592029][T17429] RIP: 0033:0x7f071ff8e969 [ 430.596479][T17429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.616100][T17429] RSP: 002b:00007f0720db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.624529][T17429] RAX: ffffffffffffffda RBX: 00007f07201b6080 RCX: 00007f071ff8e969 [ 430.632528][T17429] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000009 [ 430.640526][T17429] RBP: 00007f0720010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 430.648517][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.656514][T17429] R13: 0000000000000000 R14: 00007f07201b6080 R15: 00007ffd5992d7d8 [ 430.664532][T17429] [ 430.667578][T17429] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 430.674866][T17429] CPU: 1 UID: 0 PID: 17429 Comm: syz.3.4168 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 430.686937][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 430.697020][T17429] Call Trace: [ 430.700306][T17429] [ 430.703252][T17429] dump_stack_lvl+0x99/0x250 [ 430.707870][T17429] ? __asan_memcpy+0x40/0x70 [ 430.712473][T17429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.717691][T17429] ? __pfx__printk+0x10/0x10 [ 430.722306][T17429] panic+0x2db/0x790 [ 430.726221][T17429] ? __pfx_panic+0x10/0x10 [ 430.730672][T17429] __warn+0x31b/0x4b0 [ 430.734666][T17429] ? kcov_remote_start+0x55a/0x7f0 [ 430.739791][T17429] ? kcov_remote_start+0x55a/0x7f0 [ 430.744914][T17429] report_bug+0x2be/0x4f0 [ 430.749259][T17429] ? kcov_remote_start+0x55a/0x7f0 [ 430.754383][T17429] ? kcov_remote_start+0x55a/0x7f0 [ 430.759507][T17429] ? kcov_remote_start+0x55c/0x7f0 [ 430.764624][T17429] handle_bug+0x84/0x160 [ 430.768871][T17429] exc_invalid_op+0x1a/0x50 [ 430.773375][T17429] asm_exc_invalid_op+0x1a/0x20 [ 430.778442][T17429] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 430.784175][T17429] Code: ff 4c 89 ff be 03 00 00 00 e8 f2 8a f8 02 e9 eb fa ff ff e8 e8 28 97 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 ce 42 97 09 89 c0 48 c7 c7 68 73 76 92 48 03 3c c5 10 [ 430.803792][T17429] RSP: 0018:ffffc9000b33e1b0 EFLAGS: 00010002 [ 430.809867][T17429] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 430.817842][T17429] RDX: 0000000000030000 RSI: ffffffff8d93ad0f RDI: ffffffff8bc1d020 [ 430.825821][T17429] RBP: ffffc9000b33e410 R08: ffffc9000b33df40 R09: 0000000000000020 [ 430.833895][T17429] R10: 0000000000000000 R11: ffffffff819e7ee0 R12: ffff8880b8928368 [ 430.841882][T17429] R13: ffffffff81bfc9f7 R14: ffff88807eb8da00 R15: 0000000000000000 [ 430.849888][T17429] ? kcov_remote_start+0x97/0x7f0 [ 430.854925][T17429] ? __pfx_hlock_conflict+0x10/0x10 [ 430.860146][T17429] ieee80211_rx_list+0x53a/0x2d80 [ 430.865190][T17429] ? __d_instantiate+0x197/0x740 [ 430.870147][T17429] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 430.875623][T17429] ? __lock_acquire+0xaac/0xd20 [ 430.880487][T17429] ? ieee80211_rx_napi+0xca/0x3d0 [ 430.885523][T17429] ? ieee80211_rx_napi+0xca/0x3d0 [ 430.890564][T17429] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 430.896478][T17429] ? ieee80211_rx_napi+0xca/0x3d0 [ 430.901507][T17429] ieee80211_rx_napi+0x1a8/0x3d0 [ 430.906463][T17429] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 430.911939][T17429] ? skb_dequeue+0x10e/0x150 [ 430.916537][T17429] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 430.922529][T17429] ? ieee80211_stop_device+0x29/0xf0 [ 430.927825][T17429] ieee80211_stop_device+0x3e/0xf0 [ 430.932950][T17429] ieee80211_do_stop+0x17b9/0x1f80 [ 430.938096][T17429] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.943480][T17429] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 430.948972][T17429] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 430.954893][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.960113][T17429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 430.966467][T17429] ieee80211_stop+0x444/0x4a0 [ 430.971151][T17429] ? dev_deactivate_many+0x258/0xd40 [ 430.976450][T17429] ? __pfx_ieee80211_stop+0x10/0x10 [ 430.981660][T17429] __dev_close_many+0x361/0x6f0 [ 430.986539][T17429] ? __pfx___dev_close_many+0x10/0x10 [ 430.991926][T17429] dev_close_many+0x225/0x410 [ 430.996609][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.001821][T17429] ? __pfx_dev_close_many+0x10/0x10 [ 431.007026][T17429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 431.013363][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 431.018758][T17429] netif_close+0x158/0x210 [ 431.023180][T17429] ? __pfx_netif_close+0x10/0x10 [ 431.028120][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 431.033504][T17429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 431.039246][T17429] dev_close+0x10a/0x220 [ 431.043516][T17429] __bond_release_one+0xbb5/0x10e0 [ 431.048666][T17429] ? __pfx___bond_release_one+0x10/0x10 [ 431.054242][T17429] ? netif_state_change+0x29e/0x3a0 [ 431.059457][T17429] ? mutex_is_locked+0x17/0x50 [ 431.064231][T17429] do_set_master+0x30f/0x6d0 [ 431.068850][T17429] do_setlink+0xd47/0x40d0 [ 431.073294][T17429] ? __pfx_do_setlink+0x10/0x10 [ 431.078157][T17429] ? do_raw_spin_lock+0x121/0x290 [ 431.083201][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.088416][T17429] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 431.094317][T17429] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 431.100679][T17429] ? rcu_is_watching+0x15/0xb0 [ 431.105463][T17429] ? __mutex_lock+0xa6d/0xe80 [ 431.110169][T17429] ? __mutex_lock+0x51b/0xe80 [ 431.114871][T17429] ? rtnl_newlink+0x8db/0x1c70 [ 431.119651][T17429] ? __pfx___mutex_lock+0x10/0x10 [ 431.124701][T17429] ? ns_capable+0x8a/0xf0 [ 431.129046][T17429] ? rtnl_link_get_net_capable+0x16a/0x350 [ 431.134885][T17429] rtnl_newlink+0x149f/0x1c70 [ 431.139573][T17429] ? __kasan_slab_free+0x62/0x70 [ 431.144538][T17429] ? __pfx_rtnl_newlink+0x10/0x10 [ 431.149604][T17429] ? kasan_quarantine_put+0xdd/0x220 [ 431.154920][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.160142][T17429] ? nlmon_xmit+0xb0/0x100 [ 431.164568][T17429] ? kmem_cache_free+0x192/0x3f0 [ 431.169538][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 431.174936][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.180147][T17429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 431.185791][T17429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 431.191545][T17429] ? aa_get_newest_label+0xf7/0x5d0 [ 431.196751][T17429] ? __lock_acquire+0xaac/0xd20 [ 431.201635][T17429] ? __pfx_rtnl_newlink+0x10/0x10 [ 431.206668][T17429] rtnetlink_rcv_msg+0x7cc/0xb70 [ 431.211611][T17429] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 431.216727][T17429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.222197][T17429] ? ref_tracker_free+0x63a/0x7d0 [ 431.227227][T17429] ? __copy_skb_header+0xa7/0x550 [ 431.232273][T17429] netlink_rcv_skb+0x219/0x490 [ 431.237055][T17429] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.242540][T17429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.247852][T17429] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.253063][T17429] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.258282][T17429] netlink_unicast+0x758/0x8d0 [ 431.263072][T17429] netlink_sendmsg+0x805/0xb30 [ 431.267856][T17429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.273154][T17429] ? aa_sock_msg_perm+0x94/0x160 [ 431.278109][T17429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.283492][T17429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.288787][T17429] __sock_sendmsg+0x219/0x270 [ 431.293485][T17429] ____sys_sendmsg+0x505/0x830 [ 431.298265][T17429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.303570][T17429] ? import_iovec+0x74/0xa0 [ 431.308089][T17429] ___sys_sendmsg+0x21f/0x2a0 [ 431.312793][T17429] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.318003][T17429] ? futex_wake+0x458/0x500 [ 431.322523][T17429] ? tun_chr_write_iter+0x18a/0x200 [ 431.327743][T17429] ? __lock_acquire+0xaac/0xd20 [ 431.332614][T17429] __x64_sys_sendmsg+0x19b/0x260 [ 431.337648][T17429] ? __might_fault+0xb0/0x130 [ 431.342339][T17429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.347818][T17429] ? rcu_is_watching+0x15/0xb0 [ 431.352606][T17429] do_syscall_64+0xf6/0x210 [ 431.357132][T17429] ? clear_bhb_loop+0x45/0xa0 [ 431.361818][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.367717][T17429] RIP: 0033:0x7f071ff8e969 [ 431.372141][T17429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.391749][T17429] RSP: 002b:00007f0720db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.400169][T17429] RAX: ffffffffffffffda RBX: 00007f07201b6080 RCX: 00007f071ff8e969 [ 431.408165][T17429] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000009 [ 431.416136][T17429] RBP: 00007f0720010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 431.424111][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.432096][T17429] R13: 0000000000000000 R14: 00007f07201b6080 R15: 00007ffd5992d7d8 [ 431.440086][T17429] [ 431.443371][T17429] Kernel Offset: disabled [ 431.447705][T17429] Rebooting in 86400 seconds..