last executing test programs: 6.053010824s ago: executing program 1 (id=2127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000010180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x17, &(0x7f0000000000)=""/23, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.928551879s ago: executing program 1 (id=2128): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c0010"], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000020700000008000a40000000000900400073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a300000000009"], 0xbc}}, 0x0) 5.798658145s ago: executing program 1 (id=2130): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e978000000f6f2e0e741cf3a3a000000000004000400"], 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r11 = accept$alg(r10, 0x0, 0x0) sendmmsg$sock(r11, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000700)="ee84547f0b864325f539180de64664585fd86b69148ac19b69cb491fe19b668b9ff423b7d5864507f9f4ac0e1dd7b4baa77cac37d5db7c1a48d4f8c5dc7c7adfac94ef2812f0999550b91295a051fec1db224575728a37f7c932ae15cd63342985f057c649c891fecac5ae23be68df911e5bd9f2cf10fd80edfd861e6b1931d9024722f22a29a7399650f2700da7a9108fce7a7df21555439f9dff5181b6c72f0e2c5b3b62d34e222c08e5d187bf2f6a3f70ed97fa780cfe4f45dea1e874482111554c26f38ec54a52338ffaa0f9cca5f97c2b91a9901c83ceb6ed1380cb3301e7fe94749edc82b9b864d2971613be859fd69d015d98dbf4bbc8203d02f3cc84216ff95a29202328c067089cfd3f13ddcbbe20700f1dfa4cfab4d63f272acd88659a80404b514d997e4997fe9e9bda9afc13e146d9990c73a11387ee0ab5f763112b0fd00e66c7133062bdd46ffff42ddb3763a07be15bf3d022c20d0ec317c96d82dc3948d529866def4d52c1956d6b1aef13f8284a8346e5ac6856ef048153a3d478ceca57c038481164a526f816f8c0ebf24f1bad9f956a8163f7cec59c1a004afeada9c9a9d49df0b51c01c2f429073d3d96e488ae34e84d6b59600479e30f73d78bef658d2321b6e4460fa37f2bcb1cf5ca1b9b6ed33e5cfcc7a5ac61185072a6a2f604de3165eaef10d8bb9e996ba00f2cadf41b6517f123a092bc6533769db80d0505051fe09637bbc6742657ebd8d764e30e596035f93906af68982350e9675431d42aed890d0888a181e27048d13a363f31203b8c091f1d9d733a95326f2deefcac9dcedba76d0e25515e6c9aafa6b00c20656339237fe0d67a2ae2b130b66f27bf07502ce930a854721b77a1d9ebf0c409709252b60f2eed27210c603da7e87e6d517c3a91ba862da3bf29d04f0b4eaa4771080c40d74022a1d7c28cb013053fb443ef4e7d170349cd86783d46c07137e0c173074c06837f35ec7a1a5f03865f758778f9977029c13f95983ee865a79bece67b21a8d44f60417c8172ee0f20f3c3d4052330cd096f4ebdf0e7cbf099b74c487ecf653c71c6a0ebacc6c6db7200fb17476efcc2ab5fc127a4a36435b38512045464bf371f300f9637ad37fecaf2a859ac93c4f4da007b0d929f7b7b11e44d57f8a477208854d582c96fdd46d813c1ebd99f5fa136305cf9da6bcf708a87d7a15997fbe56f01f1d580db9409cfd02f4825ca41c07c20ea58f5a0d2a1c58c210c0104032958d222fb8012221a374211a2efdbe9b4adcac8c21d20418481828be1f38fc280c53c2507d055df201ab4725aa26bc915464016ceb3f9f0508fe69aa81312118b25c66196f4fa197f084660672e63549ec718eda0066a2d572cd1e3bc6c2562ed602d4293386cb6b730fe5b242e8c854dfb4777393c6c653d2ace92583f8686289bcf0b69bd3ae67899636121e56f84813d34bbcaf3e9035dc0fbaf2f0094d95623b0d9a436177bf024181335260a480647c2b03a6254a3011966617b97088f8c998761945e04461e7216c37fbde39387f944f26fed697f09f3cd2e2702cac3ff33f2968f707724dd76908cf681efceb7abe42849c158b3f8ecde2a907e1f034870e5b80da8df0827d399b60e960e0c8bcad9b59243524c595969624c2ff9fb065220045ef48c4d30812d1f59bc9afcd0a5179b92a27ffb902d3a1ad594c5ebaaebc16af980e4af5f784eedead4fd42b9df97e2d938cee60a4411b7f3b9e572838cef39f901441116d699235ff6fee0e81b03ed6c6488780461776f64306f64c66f9c1f39c6ec806a7cdf1182a7bc9d8a71695683a704fb57af7924d42831750801732036e452ed8abd3682282997050317634571e31e7d228b10ff8e57cedf9866883e31ac5063c3f5dc3b669fc8d699fbe844527b2af4dfd5be5e414f221f054e9a2f9f35b445f20aeee47595ff8d6f5ff5193a33d5add7628895e05b4026eee8bb7a5ff6f9567eeb9437d6234314de48ebf34aac245a1a0c21f1afb20d2e95e0a05b7e022098256c1b543cec8e9a3137af1adec9c4fdd8b758cf78f0b77f6cd297ed1b6e3689cb605d833f9fd58668cad6195f9a528675eb995aefefd8269a8c019263eb5ae81e4c55b3a7cea3991f4d55b1571942c99298617a16efb87ea624410bbec144a992b9d3d211d0fa84ab06866ad332b63d0f5017872594b847c251d3ff4a7ec184039e10e053377cd03c20ef1427a012aa195ca0f2ef4d8b8565315af67ede9ad6ae20e7352e1bdc1cdbdfdec27b9e118d8d9288357aec26f071680752028d61a28e4336e044b0d4a45d3a09642289391106edb91ee40a6f55b01f389a4f52aec5d1f076bebbeba4476eb198f5dcb399fb70e54c10cfdfb3cfad65aa80514ff242cc31cfa0ae92469428d9d30f49e8822a8bf29b425606b08ece24cd3f8a56eda17369434f5067bf6e2b50fae0af74212f75aa8bed015fa31df64d83e3c23ea37a590fa2a8f0fefb64f1734194d6b538b34287afa2e3a0caa9ec4052b3a6e467734ac0b8bb37b1ec8924bdbfd3ad3ebdd4d7cdd3a866d6bba4706c717feab8e216b55e3e015c22d772265934ac381865ccc81455039a38aa005d2c5ae8156bb22880b37fffe9ed2e73a1691ec75b06569f3725904b659d7fa38c78ff1788681f7c0a6da30add3789b162dbbe8afa0688b95207680b087625dca6d05a3f497576c4ce3c70e2477c0f726c1365aa7d6ecfd150e2ef041589cb3caef6f0caa22d175df04d20b2b097b54ccb96a9fdfc7b44d2188b9011f0d0b24ce2c2097245fd2d74357ad711d8569420edc33d08725f03c504fbfe24aa918ead57e6ca5ad6a8cba01a0ae1611144738166e241ce8fe699bd867a00515bfe2d914491cfc097f74e5d205ddbeb8f713bfce19c5a317c6ae1402aa38f30acef31585cbbabdb41e4c78935345013483c5d236f4685d01a3d3e57014fb92ef1344871fe28ec9898930183191ec8fcd23dd2c94db3deb102573545c1e22e96efa26cd498e274dc889fb0e9580af8a11b60222aa912e3d24a3ea62fcd21f4c89f967e4c0235da0909bb8b8b5763e8bb43854762fd95e481e05b1f90206e2e602fd30275a3c70ae38817447df237171d20f2a6a71b8cb96b68b3baa4ef78829b9ed68727b5d2e8ab8a5e1ed2164e6bd4c1c4740f86ec272cfb7e0f3462ef98bb1b48ab453f265d8d5a2124d5b57ab9b9104fd8fc5eefdca70e70a33b85671ab041c41421e61162921d8229", 0x901}], 0x1}}], 0x1, 0x40810) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 4.729928874s ago: executing program 1 (id=2140): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000fbdbdf2505000000100003800400040001801400020073797a5f74756e000000000009000000"], 0x3c}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0xc}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000180)={0x5, 0xb794, 0x4, 0xffff}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0xc0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x7}}) 4.316756546s ago: executing program 3 (id=2148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r3], 0x4c}}, 0x0) 4.159027237s ago: executing program 3 (id=2149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) 3.81630226s ago: executing program 3 (id=2153): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x2000000000000003}, 0x0, &(0x7f00000002c0)={0x3df, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r4, &(0x7f00000002c0)="b46ecb31ef33e5e4be6beeaec3700c13af8cdfbab2213d1467bcb4b20004d1f4427a3aa6291830afba86927578fe4e8c3482ee92bd4795b44a0757340450d9b0d5d3b75d5e1f4a040a9786474391cc2735bf5e64e4aece830ca864a37e004c084b73284028d8a09f6a682aeee0783eb35d55e5b0055b20e4e64aaa61238a783101eddf87a098674e204b566b6f3f49f7fa29de31f7bc8eecea6207ed83b65737e5023a024cfdaadc1b3fa4a7b2ac9853246ef266a7053626bcc9d462ccd9addc84d91341553374707365011618296e8a71c097d91ee34f77abbc186b2624542d3252c1d42afbcde3f8b271", 0xeb, 0x4010, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40040) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000240), 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44800}, 0x0) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3.723311886s ago: executing program 1 (id=2156): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x10, 0xe00, 0x8000, 0xfffffff8}, 0x10) (async) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/192, 0xc0}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/72, 0x48}], 0x6, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x2002) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) (async) sendmmsg$inet(r0, &(0x7f0000002100)=[{{&(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)="8c256f41ddcaf6bf2dc89fa124113ea058629e3c258e38ca1e04434ff1ba56ad859afb94b695d7fe73a0dbd1d6ace998a27d79c78e1c2a4f569a29b0", 0x3c}, {&(0x7f00000005c0)="6f84a28d2abbb69160d1e4163818cb961e6eabd76ad6373e98174d1bc532486f2990f1017615772434de70bd9d370684f9ffe982bed04b277a048c7dfea1fc7d46777d78be6e4bba06099caca63ecd490bf2816940157be2a50e70e6da6c92f68bc28ccfe84be6bc922eb340683601c11952966c69b2edc58425d47b26754482532c45044ac96605091dbb7b5a4fa877353baba44f573fe720127c127d8753de34c2c5a9ba1721b39f8855cf2603a2bc7994fa3097b73ea489b81331bef218723bc38abd0b43b3e8e3a634eb", 0xcc}, {&(0x7f00000006c0)="8b2977327e9e1b5c1406c8bf0f853e11f74ec2043d1f4fc6b0fec68d4b405d1e2a9b3d5a37b123c85c1c1bee12e2bd9d6d79b7269a91da1693075a3c93dcf34e8a3afe1e5e8b8ead8d1b406fa6c92e8201d241e0e20fa7a776b4406b410e123ef850505e57676561ec9b57cf673810336f472ba3f4ab17d85a561d0708aa2dd15f851c734833603a5a82c1c2fec15b5e317b8a17208888757c0127375343361112fd01713542de6162", 0xa9}, {&(0x7f0000000780)="311a21a984426d928afcec4cd09af408a9625f4a01f52739e8c09da27d13ca87d2475aefbec7d53b29dad1257d8ccd315b37c2107d23f55c1c1ab899c5c9ed067523b086f7f7d3ed", 0x48}], 0x4}}, {{&(0x7f0000000840)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000880)="e30167d06898eea3976f207852f25da142043d6944abbb5480c4790da442a619e00dd9d36b64d885494f28f83ac9035aac63be3e046943ce250df47690b99f741b46e6728c378dd818ded18dcc8b175f6e603c55856cbae3df10cbdb6c225935df1d079edf7294b983bb32c968ec7deb4bf20efc3d5f5f3c32a03ee4f9cc11c4a56a82c74128b1f147b7122cfa40e328aa9d04e9f19a2b66d8fb168cf27ca0276282f7bfc70d934f42fd858ca63aa3ee03e84ab90296416d84e56920a6a3842bf0515b4714c6d42772064a5edc9178729ff8570b57a887af762e1015a4fbb0", 0xdf}, {&(0x7f0000000980)="3e55b4cb8bfcb40bc7c9b99b40b0c4456701752bf37c2d6eac2471a04a8e4057c5680debc163fb36297ce563e4eee42dcacdd671b5aa1ef1bfc9f0882d0845925b7c5165be3866fd4bccecd8046bc39b25fb870aec2e546f52cbb5b35dfd8a431bfce28d225600e4000de9cb7d293226899a5a6fddc2c493097b18", 0x7b}, {&(0x7f0000000a00)="dd0c7b98698c347af2654fddd2bbe55e73ff6dce4fde382205c41951f4032ad822fc16d658597b4e4f155edb517284385e3645995b4883ed8423ab61b7343f0287352cb1760cdb9b0d", 0x49}], 0x3, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@local, 0x7}, {@empty, 0x9a5}, {@private=0xa010100, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed5e}}], 0xe0}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000c00)="e93b3d7c664cae88b85d68321f6381f9dd33f0949ec05c4a0fcd6087de54bec050f8f3a4771fd9c3ad874b0f058b8298720d320a38460fc592ab602a9af7f13249127532e40c5b6d7597454d1b76bf4425e0b53e6c73f31f79d4c66c4cd2d932276381712dbd531af75ed63ce03a1a409c27a05c438bee95f1e79f7e45a8d1d0e9219bcc56b177eccf94ad62c38bb11e31f0baabd97d96bce8fa9d9e11100910cb34d1bac31b78b102e2d6f454678a0b05da20b012a0ef69a2b17392a263a95d535c2b9342492e5ca18b5889bfbc492c92404245c4c47cebe646e74b6087cbc1650435c1d584e81480a5a09a30c02660a5df7622176936f92edffe2d758458d80ecf51cf58bc7305f64d29162eb02315d299b16b8d7cf1aa38019ce47074184c85dae8fc5c6879f88ac092a6efdfc9e9b4cd2661509c91790d3cc7a3d56e986d59d6096834b42c72aa81908ef468cd63e8f33167f2adfde49b7eddd8a997c825035e47b28a385fcc23e4976191485ae31f56b8f0c4f8720777f5e91a57dd1da862f228845c5175ba121a1ac607df0340aeabe52fd5d1c96def1872badd5cf43d53ace220fbb64f51a2466d9c0bdf5fe749ee3995d414107cdbda05d30a2bc0e3865329350feef261eeda0faad73cbef2e141e14f3ea300639ca4128db5713356072d4de46f5e5341a967505974febe470f649587d19a09df9f81eb0ae7dc65c54db5b43218b4f923c855ff9995a927c3bceaff6e03747ad5b3e208fc6ebf16fd7f1c47e9f5fcc3102f016a64e92546ce3e492ae13e354530953ca598c9b9433bdbf17b6ef2a6454587e95504e7e6a8404d22e367ffa93207fdc859355a61b3b79e257098b3a135b54104b0fd3c2a91a658f4f2e573e7826f99846c75b64f08aadc12fa2f109dbc208ec205eea5da7590b695fd60cb6c1607667345b4bef9124c5323dec93b313f3f0535668d319da01a1d08eb4f93eed5c92568b2ba6fe412874bca5f6752272f07dab216e50e256c5c0b26b06dc1fe84e3498d595553a90ca7137c0d3700b58fcff74906d51866906546c2d92662051a3b3b4606616a7e0f897ce11f59a2494b0bc276753f7272e76a9f6e66c7d2071e9bd53ce8a1fc3f077a20e87e41b732d01c600c6cc8b9b8eba93dc2610cae71e7a957174ccaecb4e7abd2740a00652749c5d535d6d558f019e81a521493d728a073258516ca883fbfb6109ff13b2372af285427de87e57d7785515090fd14a54b6eb6dde921725476168041f04f4decdf0d2f2c2a5c557f39bd7802744bcba217c95c5565da5d3e47ce67bffd3215f7dfc189f6023a1c8c5cfa40848ad0773815dbbee30d0f24f9c3a47964bb7687f2bbf8adbdca4302cac831de03bb2460c52ea6fdc3cc6ec22ccece4f33ab0cbe36b996fe6354603456eabb53f9ace309ca237fe86a03e4310da4e31129e2d4ddb256bc81a9e31241ca655878b576f36eb3c626e6c74a806b32556dbec9a375b5c5690c76e5e6bfdebb32e8bb0138bce4b8956dc07299213aec0ef3d68aa7d06a01b29011a870c1c9aafcf61068fbdc9a6f07e946c040beb1beb5679ecf842c47d14c68c9251fac74af037ca00f0df5af9d48630b5d244d47fc7af7a1983a85fad7b67a702042d246b822b560ab222f84921d7549d4c4f41598bb15aff37066f211e89eb2b2594dc1057f95f14a26fddb47fedc89e22c5c9bcf43fb1fb01d3e71adee57df6ee0493ab69f1c986b4a2e5d0a61557d1a3380930b75a444d932ccc21ce6bc6902b2724838bc84634c947679d53e1f0a4317135a47a23dde31c2e815490928b44ff73482d228c1ebfd7875c3b27b7c24346453f75351b023d71dc91b9dbba1d8fcac58a6d78f61936f3764743aa8b39acf3a3969ea634665c939397274878db6c748b288ca5155b5afb109d6853deed71809da3fd83478d82fc19e26e57ac95fbc00b230992955d504965734666d21a5b1c71bec7b2a23641e50c52780baa96f7725dd0533a5b8b903a5e9f6e1810d91bdeb2e872d64f5296bac8857ce57f2ab20aa1de42e81d668c386488f92840e24c97ce28d80bb8f34e3864a6f8b705304686911da1254944cb0ae31e3bd1ca435c990539db0cc205d89ba971b3d179181a77688ffcdc8eda6b824fe6ed9e54312cfdc10b090072343617ea96d5896c7160c7d349fb741e2c269023a212b24c70cc25f1c2e4576a126a773ff687eab293aee78661ebf8530b4defc7d8e4944b865a56b6f8474a6de953e7cf69b2dd0a716ef306f9053a6b63f11ac420396f370f7baab79c02cad627e97848ebc2c41bf98bb2a4ba4a531ac2e4e233051ec0c6090a93d6ce58606e81e797a4c1c9e73e4078b71a5d71e64e6249ddb347dbced7a1c09995fc914267c4361d40feba97292b5027fb4d88324755d244746f75eb79eb3ebde5cdc99951fa5ecf0ce19dbfb4e334375f09290fd5c9e42d836e7b7ef7cb028b5b10d540af62d8735a80899378dc5779bd70bc0652dcc7fb93f2a38b36066459b8b21bae377e0171e1610577898f56c1d9e152f25f86e6a5f5af16c3520aa42691903e2b26193dfa873e80f820436ec0b99d2cd620f0d70d6d00acad328436d6e0b719364c909e7aabe9a7406aeba1717b3a841f80a2a29b5f5ccd94ddbea2e028bb6329184e802fac28c0dbfa8bfefef2e4be9ee9960f70d484137a966f3fc0f219ff65654844b173ecd0c8de55d3d02e34375e79a5756deee86c5510eb441c5da903a64c9af5ed64da9054aa44264bc22291a69db2cf46baa9528974aabbfddbe8d0dfcfca41fc26e2c7128175ab49e0ef505ef6b243b44253587fda0fffb5f616bbdb3627bee08ffb7a2615ef3d505bae4b30cc3f9d3702c898aa7c94ab0a5230470b58e987808100d812b5e80116380baa2914b3b675fada994659d61714faa1fd1be5adbf5b4cee662bf39881354432c5877ff1141118c3005b4b7cdc63fa9499feebf99c708f10e215b54cfbaf56ed93a800b812de519987fb7187e9728c843af653c6ca9d3224e63a164e76862a242f81553eeea3c1bedb0d4cb6a1e0b1d74c28a1441d3f675c6ec60e3556b622de124260a3381c9a68812c5f28ac8ad8758ea537cd9d44c791c576c68fde4b1552e36f1a3db5ca1d9e49d75415feedd7c4fd77de873b08327d7d6e73005d50b8164beba2a4bc84f145a38d2b9c198208494fced0de49e8861c3a86b042c71a03680cfa3d8ff562385bca51d7d688d35cecf0a2f5025cde35cd6fc1d5dccc9657ea729e513b3dfbfff6fc51fdf4a5f6d3f1a50c236382b357989a4e299e0d761e13a1c2e5d9db42b9c86d5de6f613dc56298364fa58646e91a2668927a2f699d4b69afccba3f5207322ac182c19a6b461629bcb26122a044f6701117ad849b363df869a8d4a7cb04c48e83834ba750816684f459a933965e252b70b50bb776b7deebd6d1978517a4013f9a15a450c477d4c046ed30f1de3f631b8ec07f0aa27c55c850f47ea68eca19536a32579600706788bfbbd9a6d51e2de7a34535304e1c28653d71dddf80f8c55e803ddb2c14f7aa78ba133e7663071d21e81e30f6c37b64f97c964564c28d0e2715b71f46f24c3171e5995236d5a4cc8b07495fe124af5fe838e65c44907878846e46c81da988f28ca3268a33764deb7198dd7a93e86d634409bbe6727c506b008644e2944039cd9fed7ea94ba5b4e33ee734d24566f8a915a5fa4978f77373a4cd32dc2ad58da2bc1f3e6433486315b3561f02d2fdeb00b9ba08eec8824eed8ad6af791ed345550fb6c384c95b9aea264ebd0b5ffb93aebefcf36aea44238f2adf2882d2f71f017dda966b5f8d09b2229beee55f4532510f40516f5dd7f7d8e3d3a73e17326ac0042e8d612879b0187cf4ce19bff8a2b25f9e13a9c4e3f10cdebc6eb0533c6c91eaf052b2b0d6f6bfb2bf6392478f42d8ce9fc446bf3f098f2fe6dba9f9a44ad34e4df86f1ab13ca965947db504f7477a67628975afd7af886a0148a84dbea1fe366621590cc8b84f4e6c9e4c9d282aecb046ce7153838aa82444519e12b46d025f32179f85fade14146b8b70533577b99d42c67d006f2b71885c649c5f7b34c7b345f520175b534970c12bfea6905434cca133f244f247d2dad3366a62403c05507cf14019fefcd8916d6f905080b57f713d146138f5f821bf04be1e49245e2be50ea27ab1d45e49f8bc5a57ec6f4289b14a94d6bd66bf3474a45d8950a55c5c0ec2a27410a2cd68eafa802cd94d706229ad02342d2c3e3f9cff3f756a415e27a7b947464023081c7c93c726260b1a5867bc87d7c955d73559c764b456bf63021fbccfb524ffa3251ef065e54b76f9132443cc9efde4ca8f1398eb13b5745ed03a223c2f4ace04972caf3679f76ae7073ca84400d9058d17cf8c48ca6194d2a3a6c48544d55aa0ab91437448628e18677ef5787b6212090529cb8ad162a066e89f3695fc53a53cb678d2bb46c10fda1d0099a139b18fd4d8b7b78948a72f82e0d8f22c666892deb96bb84ec952cfa3810f0b6364bd6969fc5ed65004d0894d546df0e75f06ecd93709f3d6038542cd74d0df571a71244802162a99842c7912ffa9f0afc81e207c738a94a730863ca5161716b06af75f8f583f99739e001fa28019ed31cc90c716648d590b9e71feef1d249a23328b63b233fca416991d460d9732fe27e765d307f9d148acc3fa89107343712b2c8d1cd886f8c52e7d18b636fe42b1a4f418aefc4683e2b2ab0c5826be6f4dcc01123cdae2539a5f8ab564fbd2f78f5af5d7cfc53fd6331e8f59a36da1426b0a4584dfe9d0926cec6eecad6267b47764922c9ebc6f9aa7808fc8aa1acd4b28ab44d4032ea6b7c07b0805620e118422f3ae0269de224555032671d21b3327a6647feaf33b03fdbc56617ec0d203b426abe85f9c7d7d68e947a4394743ea97336ee7cf325e61936e90367eba0981b9c6ff6e76c46eb8c44229401581aedea0dce2f3ba66f35747c0fe0970c342f6920857c969f33721c5af29c41eb59f14be2d4e69c288e9d5694b7855c2cf2ad42bc615d406eaacaaef56fb020960d0bee2c7d4e54e25077c9e2ed1fd6857e61e35e5e63cce5a85c38178f108ca891960ab45e6d22056ed9845c2581cec6b80cd77b6940c241a5956761bc08695d0bc628f7f67244aae051e073ae7754ebda68c5d11212f44270407c0f75237e4e5c086aa80166276f62dcf0785ba3603277b54f08857f613d99b5a56ee3a7373ec694ab9c822ccb49080aeaf8d2065bb4375c2f7aceb39d98a9fcc467204b9ef962751f82ca10dfa68a1a749f3baaa44a030e2212c30c28d0be9d6344eb4514559d80a1b5bffb1fd4a9d266f4d8ad16f976286d0cd434a86991f5e0f958a50d914445102f66d1433d2f095f715b3fa4e6b0a0c04a58d55569bbff2c9404ffe979043fbb483e086f94fecc3d589db287c1c5f79ae918ff206ca999110455e57390e6dfd35e650dd9b5eb2c45cf516f1276c09324ddc11769936ba7bf25161c91bdc88a4689be91f70d74e56fb8cb4decca267ee61b766ccf752a8d667b3fee2ff5e30e9fe893dae4b1daefccdef746bee1be403384f742e10733cb0b2b930c78e29e5eba2bc8a6a33edbceef4b678efd76ebf61da13bdf99c79d057e1cd1c7a0829e5b72e02f17019c35b313832e0f06651fddbc85dbfcdacb6d73b4ec98283555e6e7c0bcd7104c6bbb1a197b057b9b3536a5c2c0e0a021adc6de27c7374fca38aca892d354c2d3dc19c1c1b66f70911ab18f877addecc", 0x1000}], 0x1, &(0x7f0000001c40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xee}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001cc0)="05fec9f0aa2afa005691854a58f921e0520e4fcf1b7c0400068cb0b9d1d27f787386b935a7c681c7609c46d4fe820c24c76ba6239945b1b46a7d6fef0a1d823dacf78ebe3e9d614ab6359cb5f1fece460538b16639e57d66cfe4c50c09d1e02f74bff73ff4077b8f481e219584fd0c82730ad61d320ff75da136c9ae858c443209b53c0dc093d14ee0413808a8a198d792c9436b37aeb642c84f3136981dcb1b298b6ac5d626d8a85cdebf35c4d986de", 0xb0}, {&(0x7f0000001d80)="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", 0xff}, {&(0x7f0000001e80)="ba2a10f7d10cd0a8018a3998f2d08eaf90bb551a8eccf772994f0abd08c1fb39657e7838e349773863f36cea8c16e15925d17bc4288988ea140dc715701085389d14c56ee4e7678f0c8ea763cfbd3e5dfcee7f454075fbd61a1222e2f9cd5e1092edd83b64c480cc0fcb0beb728c73c35396de001ac819cd809573966de670d4fc5845b4d53f5295dd1be7b64814c399f75414f9fb4b7a516c11d52fdce522dfc5db02192aa350d146a8e6569079ca34d59e6da16090819ca16be3ecdc33ab6779a7e93ffdd99333ea3409c4dec159e62dc69a64b22e933ed863406a7bf86d37", 0xe0}, {&(0x7f0000001f80)="dd687a605608108f374d7cd2a612723967a1fdff2d28977e373cf7e42847cf", 0x1f}, {&(0x7f0000001fc0)="13084e33768f5702ddeb5f5b4a722e196690cdb484fe436e0f029ea6ed5d8ce33d5283b7cc59c0fa16818e0ab45fba70ebf119d03b85352df74e900f679acbf65e21a5b52f36527f35e6ac104570a32e1aab4116eb50b06355670f105af3e20ac4535ceb22a2f305c3737cafb613281722571b562b3ba7c4a2cc8d1015ccf76f4181f55c632493b65486a8d10d7d5e6fae", 0x91}], 0x5}}], 0x4, 0x1) (async) r4 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r4, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002240)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000022c0), r3) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x84800a08}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x118, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x880}, 0x40000000) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f00000024c0)=0x649, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002540)={&(0x7f0000002500)='nmi_noise\x00', r2, 0x0, 0x8}, 0x18) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) socket$isdn_base(0x22, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000002740)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002680)={0xdce, 0xfffffffffffffff9, 0x9, 0x9, 0x1c, 0x1, 0x9, 0x1}, &(0x7f00000026c0)={0x0, 0x800, 0x7fffffffffffffff, 0x8000, 0x3, 0x18, 0x2, 0x7}, &(0x7f0000002700)={0x2, 0x7fff, 0x70, 0x9, 0x7, 0x9, 0x1}, &(0x7f0000002780)={r8, r9+60000000}, &(0x7f0000002800)={&(0x7f00000027c0)={[0x2250]}, 0x8}) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000002840)={0x1, 0x4}) (async) socket$inet6(0xa, 0x5, 0x5) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000028c0), r5) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x549}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0x40080c4) (async) clock_gettime(0x7, &(0x7f00000029c0)) (async) sendmsg$nl_xfrm(r2, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)=@getspdinfo={0x14, 0x25, 0x8, 0x70bd2c, 0x25dfdbff, 0xfffffffe, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40858) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002d00)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x20, 0x1, &(0x7f0000002b00)=@raw=[@jmp={0x5, 0x1, 0x2, 0x5fd55ace35074afa, 0x8, 0xfffffffffffffff0}], &(0x7f0000002b40)='syzkaller\x00', 0xb4d, 0xe2, &(0x7f0000002b80)=""/226, 0x41100, 0x89, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002cc0)={0x5, 0xa, 0x10000, 0xf}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f0000002d40)=[r2, r2, r2, r3], 0x0, 0x10, 0x4, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000002e40)=0x1, 0x4) syz_extract_tcp_res$synack(&(0x7f0000002e80)={0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000002ec0)={@val={0x0, 0x886c}, @val={0x1, 0x80, 0x0, 0x100, 0xa88e, 0xfff}, @ipv6=@tcp={0x0, 0x6, "c0a732", 0x2f9, 0x6, 0xff, @loopback, @mcast2, {[@srh={0x84, 0x6, 0x4, 0x3, 0xff, 0x20, 0xfff8, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote]}, @hopopts={0x16, 0x24, '\x00', [@ra={0x5, 0x2, 0xb}, @generic={0x7, 0xc7, "c4560e7d3ecfeb31f0ef90ec0ae109828cad446218849cfb14d8e7b71b212af53b8be15b4ee431728ba0eff1f4e43ddc4432343a56908894bfb8b9d90d0da1b508b83c4f67d18c4aa3a78fa71aa45787e90603add8f198f153ff8a65bf64f3feaf7c5aeb570900330c3cc6ee13a40371dbc0d816a816389f5958c082a915afc544ed0ebdb955eb3027278497cc2f8bbc3ef1a5a193d7d4fa8c83ca020638bec89335d35aa36e3010d22283e33a35f78971285279e6eb44c750dcd4e346954061e4d33746fff538"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x2, [0x100000000, 0xf58b, 0x8, 0xfffffffffffffffe, 0xf78]}}, @generic={0xc, 0x19, "50ffb14f605ee08d4306b56a841b7c8f65c3060c83787c4711"}, @jumbo={0xc2, 0x4, 0x300}]}, @fragment={0x3a, 0x0, 0x2, 0x1, 0x0, 0x5, 0x66}, @routing={0xff, 0x2, 0x0, 0x7c, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0xc, 0x6, '\x00', [@hao={0xc9, 0x10, @private2}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1]}], {{0x4e23, 0x4e22, r12, 0x41424344, 0x0, 0x0, 0x13, 0x2, 0xffff, 0x0, 0x1000, {[@fastopen={0x22, 0xd, "d8bf6fa558d6e8223971a8"}, @mptcp=@generic={0x8, 0x10, "06ddd1021931c9e52e624a9c7f9e"}, @sack={0x5, 0xa, [0x8380, 0xfffffff7]}, @fastopen={0x22, 0x11, "56b3c78e90be1e88c0e4359b894b1b"}]}}, {"b618372c1122807fd12258ce742960cd71818669f6d8a8e4132e47989f0585d7a06e7fc2a367a7981913533922de47feb2bea70b01e4a0a48702502158c1be7a43c35b05420dfb5061c766daa29c03ec260cb835cd5d8794fc782b2021b98fcecaf597dc7c78fde3e05f612313b9f349087cf40b50ed4949b408cdc57130c7ec80e4432513d823cdd9dc82eac2aa03d5f93a949893c80396541551af92aa3fc4f8d1d87c1e1f2c7747f08140b0b027bcb0446bcd2dd663b79944c71185006dbb83f27fc93e0f08aa84ff4306728861a4612b1749caa2d70c5e8a36e16a0d62ce7006d573d538153e346d2063d9"}}}}}, 0x32f) 3.584393947s ago: executing program 1 (id=2159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000200fdffffff8100000008000300", @ANYRES32=r3], 0x4c}}, 0x0) 3.583964481s ago: executing program 2 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0xc0045878, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aa3b69567af5224ae2000000080049000024000000000073907864010100ac1414368907afe0000001860600000000000000"], 0x0) 2.780621002s ago: executing program 2 (id=2162): r0 = socket(0x10, 0x3, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x3, 0x2}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r6], 0x21c}}, 0x0) r9 = getgid() r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0xb, 0x0, 0x0) r11 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000700)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)="dc46e167181fdccac1cefd1897c444520803b3e18fd4ca3fb4be3f2b8416b4c5d9be0ccff571d492d39f83b71374dd0ec360374f2f12be1cc8d48281feda23973ae7be90e268578b99991f27c479ef7e7d1a5f4540b6", 0x56}, {&(0x7f0000000100)="7730c1fd5922d033b969ef96e2af421dbef52341313a3f32fdf6", 0x1a}, {&(0x7f00000003c0)="12b4a736ed53d4a267e039cc584fc747247c563e088815b13f915e4808f7c514a0199b0ddca130018089e41d24", 0x2d}, {&(0x7f0000000400)="b85bd0ef49b16b1d67aa0cb59f0a8f9b5316f478d4ef925da82b59b298935e9b72c3f0c646205644ff21340fc7d078e5eb560c830bb9de18ebebf7806340686fd1618ffb43745518c71d47b368c244884c0dd649590582c5efc8a02b1e3d203897bd866b7b8c40c1782f857b259e14c0476a12060563bfe667ba2dc9ea0b438de8d0cbe52ecb69c9e0457bfb2bdcd6a338d8c68b13", 0x95}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="1400000100"/21, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="000000001c5d0033120000000000010000a9e83f1b", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2], 0xd8, 0x800}}], 0x1, 0x20000840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) 2.481771214s ago: executing program 4 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x25, &(0x7f0000000fc0)="c0f924ae269dee0f527d3115ef01345cf65abc228835d2830a53beb6a6036cb6ab03df11d9", 0x9, 0x52, 0xb57, 0x8002, 0x9, 0x0, 0xd, 'syz0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 2.317232673s ago: executing program 2 (id=2167): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.127256033s ago: executing program 2 (id=2169): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000406ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800390008000000200002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 2.103500622s ago: executing program 3 (id=2170): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x40) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.31710617s ago: executing program 0 (id=2172): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x80ffffffffffffff}}}, 0xb8}}, 0x4000) 1.316532484s ago: executing program 2 (id=2173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000fcdbd0250200000000100000000000000500160084000000"], 0x24}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="000000000600000000000000000000002cfa89321bb568bc3400109cb2cdaa7cb42b66ed9de4a2db9b12d0d2b90a09083a5c1db6fd2cc1576127789c5148a5bfc015761e5ceea1243abec04ad129c91d07fc46402c92e5de60a64b384825e3fcedeeec1ad4fe85a06dc70c888538cd1e3aa971db3b820ed61e903c40f882428a4ce89b75c0e289c104ba14543c2ea6922f8aff99e46783d4147360d7109e74977f1ec67b19a393bd384cf626eeee4c3c09d1b8a5f896edce43ef772978394a3e004d944f3dcba73a0da2cd6d138502ad0cb3d4eb2a6d47034bd89255178f07e65b59de69162359ef4f1929e7bedcbfd9", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="04000040010000000300006005020000c208000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x1) recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000121, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x9a, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x0, 0xe, 0x8c, 0x66, 0x0, 0x2, 0x21, 0x0, @private=0xa010102, @remote, {[@lsrr={0x83, 0x13, 0x3e, [@broadcast, @loopback, @multicast1, @private=0xa010100]}, @ssrr={0x89, 0x1b, 0x22, [@empty, @multicast1, @local, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x13}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0xa, 0x4, "630ff5", 0xa, "9d92b2"}, "2bece653453622775489d25b9c60a8c8aeaede9abbe4de87334d9d0279b905750a0ddbc0ebf92213d72a93be9f843666209133590f544a74"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/69, 0x45}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/65, 0x41}, {&(0x7f0000000180)}], 0x8, &(0x7f0000000840)=""/184, 0xb8}, 0x40000000) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) write(r9, &(0x7f0000000040)="05000000010000", 0x7) socket(0x27, 0x6, 0x6) 1.286192977s ago: executing program 3 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) 1.27794998s ago: executing program 4 (id=2175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffd000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.110081963s ago: executing program 0 (id=2176): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) socketpair(0x0, 0x5, 0x21fe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x18}}) 1.038079977s ago: executing program 4 (id=2177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600030018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000053e3bb3250a9630b00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 858.588035ms ago: executing program 0 (id=2178): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="33050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00030000000000006e0000000000000018000000ffffffff00000000010000009500000000000000180100002020692500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 826.219578ms ago: executing program 4 (id=2179): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 821.475054ms ago: executing program 3 (id=2180): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f000075a000/0x2000)=nil, 0x2000, 0x0, 0x2011, r5, 0xc6e54000) writev(r2, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000780)="18943582cfc95a4c17de1524e11fa76ef3de37aa294129b5724faee81b4a4dfaf38ea0d1898a56e4606b0eb66c172bfe4a74249a4a1892e26e83ebddb30dc3da36d840eb2a8fa3242601623cacd868eb44e8404ef6d4be9abde6577533f15a8ae4862751092f90d2ef49fc3a1167bcca03427709f911fa58a13c192495baae341afe37c81c375382b33d27d2", 0x8c}, {&(0x7f0000000840)="05dedd1cf5a912d99e4887503ea2ae090f87bed8a5c47601276eceb374be0aadf4d797eaf590f3f15a75c5ffd55de9b4f353088573e5abea5dbde6f70426e0fa6cf00132cff410003b4cff2666b634fd0bc7b700caf45d51f9bb8637e97ef44ae89243a6d1629548cf9ea6d741a361d44e8a989f818bcd86f5cfd3c0c78f984de09e17b72b962ac5573b0dc52ec80f3864b0595f9008dcc1d17ea1b1bd5ecabee7e79dfa99ce85c9fb56214e7b8a82ddd4af7875a6d3115e6a91eec12c69f35edab787", 0xc3}, {&(0x7f0000002680)="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", 0xde8}], 0x4) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00e21d6ae87071a52ddd276a53cd42a28ade6bb2860bd423b8ab519f", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5421400020077673100"/86], 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000040), 0x4) 674.158901ms ago: executing program 0 (id=2181): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x600, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 644.686199ms ago: executing program 4 (id=2182): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 7) 248.126525ms ago: executing program 0 (id=2183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee956581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a7e1e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de59971cba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd08000000000000001add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb669aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e1256257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005800800796f00000002080001"], 0x2d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x4048010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xe0, 0x0, 0x1, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x18, r6, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r1, 0x25d, 0x10, 0x3d7}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r1, 0x9ab, 0xfffffff800000000, 0x6}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000500)={r1, 0x7, 0xfffffffffffeffff, 0xcfb0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8001, 0xbb, &(0x7f0000000200)=""/187, 0x41100, 0xd, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0xba, 0x805cb0c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r8, r9, r10, r11, r12], &(0x7f0000000580)=[{0x2, 0x1, 0xc, 0x7}, {0x2, 0x3, 0x4, 0x9}, {0x2, 0x3, 0x1, 0x2}], 0x10, 0x2008, @void, @value}, 0x94) 169.85933ms ago: executing program 4 (id=2184): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@multicast1, @broadcast, 0x1, "47dfc3356560ab99ce6f216970922125aee37b78feec5b56b994ac06befd57b7", 0x8, 0x0, 0x9e78, 0x5}, 0x3c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x2, 0x12e, [0x0, 0x2000000003c0, 0x2000000003f0, 0x200000000566], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000007ec337cd0000000000000000000000000000000000000000000000000000000000000000000000000000000000010000004c20f4a952"]}, 0xe1) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="fffffffffe7f0180c20000030800460000240066000000119078000000000000000044048d0000014e20000c907801000000"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x2f, 0x12, 0x7, {0xe, @tcp_ip6_spec={@empty, @mcast1, 0x4e23, 0x4e22, 0xc8}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7, 0xc, [0x4, 0x7]}, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x3, 0xfb}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x0, 0x9, [0x0, 0xd38]}, 0x8000000000000000, 0xfad2}}}) 138.510901ms ago: executing program 2 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'veth0_to_team\x00', &(0x7f0000000a40)=@ethtool_cmd={0xa, 0x9, 0x3, 0xe32e, 0x0, 0x7f, 0x80, 0x8, 0x7, 0x3, 0x3, 0x3, 0x7, 0x1, 0x6, 0x1, [0x3, 0xff]}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000062004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) accept4(r1, &(0x7f0000000500)=@nfc, &(0x7f0000000400)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1402, 0x1, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) ioctl(0xffffffffffffffff, 0x8b32, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000140)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x2e, {0x2, 0x4e22, @empty}}) pipe(&(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x25, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = accept(r2, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="eacaf4d7888d7467c1905860738ffdb71c752dadbfaa2834dfb4b8287a46bddb2c5d14396662237d157af0de7755085661b5d6b0d0db91eab3cd0a8fcff098245b03a216d60e70694677f239db90", 0x4e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4}, 0x20) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x34}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 0s ago: executing program 0 (id=2186): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0xefabdd77e820eeaa, 0x7800, 0x5, 0x1, {{0x1c, 0x4, 0x3, 0x4, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x6c, 0x0, 0xf, [0x0, 0xfffffffb, 0x1]}, @timestamp_prespec={0x44, 0x44, 0x3e, 0x3, 0xf, [{@empty, 0x81}, {@multicast2, 0x7}, {@loopback, 0x9}, {@broadcast, 0xaf23}, {@multicast1, 0x81}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x80}, {@empty, 0x2}, {@multicast1, 0x100}]}, @noop]}}}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000100)) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000f1b7e30013b9000000080006dd781c01e9"], 0x18, 0x48060}], 0x1, 0x200000d0) unshare(0x80) kernel console output (not intermixed with test programs): 9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 189.822293][ T9409] RSP: 0018:ffffc90002f575b8 EFLAGS: 00050202 [ 189.822314][ T9409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000680 [ 189.822329][ T9409] RDX: 0000000000000001 RSI: ffffffff8e4fce8a RDI: ffffffff8ca1b120 [ 189.822344][ T9409] RBP: ffffc90002f57730 R08: 0000000000000001 R09: 0000000000000000 [ 189.822358][ T9409] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002f57600 [ 189.822371][ T9409] R13: 1ffff920005eaec0 R14: dffffc0000000000 R15: 1ffff920005eaebc [ 189.822409][ T9409] sk_ioctl+0x36b/0x680 [ 189.822444][ T9409] ? __pfx_sk_ioctl+0x10/0x10 [ 189.822494][ T9409] ? is_bpf_text_address+0x26/0x2a0 [ 189.822523][ T9409] ? 0xffffffffa0003c00 [ 189.822542][ T9409] ? pn_socket_ioctl+0xa4/0x350 [ 189.822570][ T9409] sock_do_ioctl+0x15a/0x490 [ 189.822597][ T9409] ? kernel_text_address+0xa7/0xe0 [ 189.822624][ T9409] ? __pfx_sock_do_ioctl+0x10/0x10 [ 189.822649][ T9409] ? arch_stack_walk+0xff/0x150 [ 189.822693][ T9409] ? stack_trace_save+0x11a/0x1d0 [ 189.822729][ T9409] sock_ioctl+0x644/0x900 [ 189.822758][ T9409] ? __pfx_sock_ioctl+0x10/0x10 [ 189.822794][ T9409] ? kasan_save_track+0x51/0x80 [ 189.822816][ T9409] ? kasan_save_track+0x3f/0x80 [ 189.822838][ T9409] ? kasan_save_free_info+0x40/0x50 [ 189.822856][ T9409] ? __kasan_slab_free+0x59/0x70 [ 189.822885][ T9409] ? kfree+0x198/0x430 [ 189.822911][ T9409] ? security_file_ioctl+0xc6/0x2a0 [ 189.822936][ T9409] ? __se_sys_ioctl+0x46/0x160 [ 189.822959][ T9409] ? do_syscall_64+0xf3/0x230 [ 189.822983][ T9409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.823010][ T9409] ? __pfx_sock_ioctl+0x10/0x10 [ 189.823038][ T9409] do_vfs_ioctl+0xebd/0x2750 [ 189.823072][ T9409] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.823128][ T9409] ? kasan_quarantine_put+0xdc/0x230 [ 189.823150][ T9409] ? lockdep_hardirqs_on+0x9d/0x150 [ 189.823186][ T9409] ? tomoyo_path_number_perm+0x215/0x790 [ 189.823220][ T9409] ? tomoyo_path_number_perm+0x684/0x790 [ 189.823252][ T9409] ? tomoyo_path_number_perm+0x215/0x790 [ 189.823282][ T9409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.823318][ T9409] ? ksys_write+0x24e/0x2d0 [ 189.823352][ T9409] ? __lock_acquire+0xad5/0xd80 [ 189.823397][ T9409] ? __fget_files+0x2a/0x420 [ 189.823416][ T9409] ? __fget_files+0x2a/0x420 [ 189.823439][ T9409] ? __fget_files+0x2a/0x420 [ 189.823470][ T9409] __se_sys_ioctl+0x80/0x160 [ 189.823499][ T9409] do_syscall_64+0xf3/0x230 [ 189.823525][ T9409] ? clear_bhb_loop+0x45/0xa0 [ 189.823552][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.823574][ T9409] RIP: 0033:0x7f5f9938d169 [ 189.823592][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.823609][ T9409] RSP: 002b:00007f5f9a2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.823632][ T9409] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938d169 [ 189.823648][ T9409] RDX: 0000200000000680 RSI: 000000000000541b RDI: 0000000000000003 [ 189.823662][ T9409] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.823675][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.823687][ T9409] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 189.823722][ T9409] [ 189.914721][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.396406][ T9420] bridge0: port 3(vlan0) entered blocking state [ 190.402854][ T9420] bridge0: port 3(vlan0) entered disabled state [ 190.426640][ T9420] vlan0: entered allmulticast mode [ 190.434126][ T9420] vlan0: entered promiscuous mode [ 190.444328][ T9420] bridge0: port 3(vlan0) entered blocking state [ 190.450810][ T9420] bridge0: port 3(vlan0) entered forwarding state [ 190.673683][ T9436] macvlan1: entered promiscuous mode [ 190.684016][ T9436] ipvlan0: entered promiscuous mode [ 190.715365][ T9436] ipvlan0: left promiscuous mode [ 190.724595][ T9436] macvlan1: left promiscuous mode [ 190.927270][ T9456] dccp_v6_rcv: dropped packet with invalid checksum [ 190.944814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.144443][ T9464] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1172'. [ 191.244999][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 191.572298][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 191.615031][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 191.828411][ T9492] netlink: 'syz.2.1179': attribute type 4 has an invalid length. [ 191.852314][ T9488] xt_SECMARK: invalid mode: 0 [ 191.984813][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.804998][ T9533] set match dimension is over the limit! [ 192.828763][ T9533] pim6reg: entered allmulticast mode [ 192.868612][ T9535] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 192.893300][ T9535] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 193.024696][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.686239][ T9564] tipc: Enabling of bearer rejected, already enabled [ 193.728995][ T9566] netlink: 'syz.0.1202': attribute type 5 has an invalid length. [ 194.064700][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.199348][ T9578] netlink: 'syz.2.1205': attribute type 4 has an invalid length. [ 194.321236][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.601354][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 194.649484][ T9592] ipvlan2: entered promiscuous mode [ 194.666232][ T9592] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.698500][ T9592] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.839477][ T9602] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 194.852107][ T9602] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 195.059236][ T9611] netlink: 'syz.2.1220': attribute type 4 has an invalid length. [ 195.104713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.383135][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'. [ 195.540810][ T9629] netlink: 'syz.0.1225': attribute type 26 has an invalid length. [ 195.900801][ T9613] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 196.018573][ T9657] gretap1: entered promiscuous mode [ 196.144848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.183331][ T9661] vlan0: left allmulticast mode [ 196.189017][ T9661] vlan0: left promiscuous mode [ 196.200872][ T9661] bridge0: port 3(vlan0) entered disabled state [ 196.276234][ T9661] vlan4: left allmulticast mode [ 196.286723][ T9661] bond0: left allmulticast mode [ 196.301050][ T9661] bond_slave_0: left allmulticast mode [ 196.321569][ T9661] bond_slave_1: left allmulticast mode [ 196.334820][ T9661] team0: left allmulticast mode [ 196.348209][ T9661] CÃ: left allmulticast mode [ 196.358330][ T9661] team_slave_1: left allmulticast mode [ 196.374832][ T9661] geneve0: left allmulticast mode [ 196.380244][ T9661] vlan4: left promiscuous mode [ 196.404933][ T9661] bond0: left promiscuous mode [ 196.409853][ T9661] bond_slave_0: left promiscuous mode [ 196.420247][ T9661] bond_slave_1: left promiscuous mode [ 196.437959][ T9661] team0: left promiscuous mode [ 196.453040][ T9661] CÃ: left promiscuous mode [ 196.458353][ T9661] team_slave_1: left promiscuous mode [ 196.474366][ T9661] geneve0: left promiscuous mode [ 196.482144][ T9661] bridge0: port 2(vlan4) entered disabled state [ 196.504383][ T9661] bridge_slave_0: left allmulticast mode [ 196.511839][ T9661] bridge_slave_0: left promiscuous mode [ 196.520574][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.582436][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 196.864125][ T9688] FAULT_INJECTION: forcing a failure. [ 196.864125][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.888072][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 196.946081][ T9688] CPU: 1 UID: 0 PID: 9688 Comm: syz.4.1249 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 196.946114][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.946128][ T9688] Call Trace: [ 196.946136][ T9688] [ 196.946145][ T9688] dump_stack_lvl+0x241/0x360 [ 196.946186][ T9688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.946216][ T9688] ? __pfx__printk+0x10/0x10 [ 196.946256][ T9688] should_fail_ex+0x424/0x570 [ 196.946284][ T9688] _copy_from_user+0x2d/0xb0 [ 196.946315][ T9688] get_user_ifreq+0xc3/0x200 [ 196.946344][ T9688] sock_do_ioctl+0x1a7/0x490 [ 196.946387][ T9688] ? __pfx_sock_do_ioctl+0x10/0x10 [ 196.946419][ T9688] ? __lock_acquire+0xad5/0xd80 [ 196.946455][ T9688] sock_ioctl+0x644/0x900 [ 196.946484][ T9688] ? __pfx_sock_ioctl+0x10/0x10 [ 196.946507][ T9688] ? __fget_files+0x2a/0x420 [ 196.946525][ T9688] ? __fget_files+0x2a/0x420 [ 196.946548][ T9688] ? __fget_files+0x2a/0x420 [ 196.946571][ T9688] ? __pfx_sock_ioctl+0x10/0x10 [ 196.946598][ T9688] __se_sys_ioctl+0xf1/0x160 [ 196.946626][ T9688] do_syscall_64+0xf3/0x230 [ 196.946653][ T9688] ? clear_bhb_loop+0x45/0xa0 [ 196.946678][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.946698][ T9688] RIP: 0033:0x7f880158d169 [ 196.946716][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.946734][ T9688] RSP: 002b:00007f880241c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.946757][ T9688] RAX: ffffffffffffffda RBX: 00007f88017a5fa0 RCX: 00007f880158d169 [ 196.946773][ T9688] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 196.946787][ T9688] RBP: 00007f880241c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.946799][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.946811][ T9688] R13: 0000000000000000 R14: 00007f88017a5fa0 R15: 00007ffe4bb2daf8 [ 196.946844][ T9688] [ 196.948911][ T9690] set match dimension is over the limit! [ 197.119531][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 197.184848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.328191][ T9709] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 197.472739][ T9712] bond2: left promiscuous mode [ 197.556168][ T9712] batadv1: left promiscuous mode [ 197.570890][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'. [ 197.583948][ T9712] batadv1: left allmulticast mode [ 197.608149][ T9712] batadv2: left promiscuous mode [ 197.618759][ T9712] batadv2: left allmulticast mode [ 197.660064][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'. [ 198.008100][ T9740] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 198.036561][ T9740] bond0: (slave wlan1): Opening slave failed [ 198.139081][ T9749] netlink: 'syz.0.1269': attribute type 4 has an invalid length. [ 198.160438][ T9750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1270'. [ 198.192736][ T9753] netlink: 'syz.2.1271': attribute type 2 has an invalid length. [ 198.224858][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.106775][ T9791] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 199.246231][ T9790] netlink: 'syz.0.1283': attribute type 26 has an invalid length. [ 199.274728][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.278094][ T9804] netlink: 'syz.4.1285': attribute type 4 has an invalid length. [ 199.392199][ T9811] IPVS: Error connecting to the multicast addr [ 199.554372][ T9817] set match dimension is over the limit! [ 199.562370][ T9815] openvswitch: netlink: Key 6 has unexpected len 17 expected 2 [ 199.783984][ T9821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.807398][ T9821] team0: Port device bond3 added [ 199.820640][ T9828] FAULT_INJECTION: forcing a failure. [ 199.820640][ T9828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.852125][ T9828] CPU: 1 UID: 0 PID: 9828 Comm: syz.2.1291 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 199.852170][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.852184][ T9828] Call Trace: [ 199.852192][ T9828] [ 199.852201][ T9828] dump_stack_lvl+0x241/0x360 [ 199.852241][ T9828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.852271][ T9828] ? __pfx__printk+0x10/0x10 [ 199.852316][ T9828] should_fail_ex+0x424/0x570 [ 199.852344][ T9828] _copy_from_user+0x2d/0xb0 [ 199.852376][ T9828] dev_ethtool+0xe3/0x1ff0 [ 199.852402][ T9828] ? __lock_acquire+0xad5/0xd80 [ 199.852429][ T9828] ? __pfx_dev_ethtool+0x10/0x10 [ 199.852461][ T9828] ? dev_load+0x21/0x1f0 [ 199.852491][ T9828] ? dev_load+0x21/0x1f0 [ 199.852520][ T9828] dev_ioctl+0x43c/0x1380 [ 199.852552][ T9828] sock_do_ioctl+0x233/0x490 [ 199.852586][ T9828] ? __pfx_sock_do_ioctl+0x10/0x10 [ 199.852617][ T9828] ? __lock_acquire+0xad5/0xd80 [ 199.852648][ T9828] sock_ioctl+0x644/0x900 [ 199.852676][ T9828] ? __pfx_sock_ioctl+0x10/0x10 [ 199.852697][ T9828] ? __fget_files+0x2a/0x420 [ 199.852716][ T9828] ? __fget_files+0x2a/0x420 [ 199.852738][ T9828] ? __fget_files+0x2a/0x420 [ 199.852760][ T9828] ? __pfx_sock_ioctl+0x10/0x10 [ 199.852786][ T9828] __se_sys_ioctl+0xf1/0x160 [ 199.852813][ T9828] do_syscall_64+0xf3/0x230 [ 199.852838][ T9828] ? clear_bhb_loop+0x45/0xa0 [ 199.852863][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.852882][ T9828] RIP: 0033:0x7fb7c018d169 [ 199.852900][ T9828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.852918][ T9828] RSP: 002b:00007fb7c10b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.852940][ T9828] RAX: ffffffffffffffda RBX: 00007fb7c03a5fa0 RCX: 00007fb7c018d169 [ 199.852956][ T9828] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 199.852969][ T9828] RBP: 00007fb7c10b1090 R08: 0000000000000000 R09: 0000000000000000 [ 199.852983][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.852994][ T9828] R13: 0000000000000000 R14: 00007fb7c03a5fa0 R15: 00007ffea4540ce8 [ 199.853027][ T9828] [ 200.314901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.383593][ T9847] netlink: 'syz.3.1297': attribute type 4 has an invalid length. [ 200.497361][ T9856] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1301'. [ 200.530218][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 200.641914][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 200.649664][ T9868] set match dimension is over the limit! [ 200.688799][ T9868] pim6reg: entered allmulticast mode [ 200.701457][ T9870] FAULT_INJECTION: forcing a failure. [ 200.701457][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 200.715633][ T9870] CPU: 1 UID: 0 PID: 9870 Comm: syz.1.1304 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 200.715666][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.715679][ T9870] Call Trace: [ 200.715688][ T9870] [ 200.715697][ T9870] dump_stack_lvl+0x241/0x360 [ 200.715735][ T9870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.715765][ T9870] ? __pfx__printk+0x10/0x10 [ 200.715799][ T9870] ? __pfx___might_resched+0x10/0x10 [ 200.715831][ T9870] should_fail_ex+0x424/0x570 [ 200.715858][ T9870] should_failslab+0xac/0x100 [ 200.715889][ T9870] __kmalloc_cache_noprof+0x73/0x370 [ 200.715917][ T9870] ? rtnl_newlink+0x144/0x1fe0 [ 200.715951][ T9870] rtnl_newlink+0x144/0x1fe0 [ 200.715978][ T9870] ? stack_depot_save_flags+0x44/0x940 [ 200.716010][ T9870] ? kasan_save_track+0x51/0x80 [ 200.716031][ T9870] ? kasan_save_track+0x3f/0x80 [ 200.716051][ T9870] ? kasan_save_free_info+0x40/0x50 [ 200.716069][ T9870] ? __kasan_slab_free+0x59/0x70 [ 200.716094][ T9870] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.716120][ T9870] ? __netlink_deliver_tap+0x561/0x7f0 [ 200.716147][ T9870] ? netlink_deliver_tap+0x19d/0x1b0 [ 200.716173][ T9870] ? netlink_unicast+0x7c6/0x9a0 [ 200.716195][ T9870] ? netlink_sendmsg+0x8c3/0xcd0 [ 200.716220][ T9870] ? __sock_sendmsg+0x221/0x270 [ 200.716241][ T9870] ? ____sys_sendmsg+0x523/0x860 [ 200.716268][ T9870] ? __sys_sendmsg+0x271/0x360 [ 200.716286][ T9870] ? do_syscall_64+0xf3/0x230 [ 200.716310][ T9870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.716371][ T9870] ? kasan_quarantine_put+0xdc/0x230 [ 200.716392][ T9870] ? lockdep_hardirqs_on+0x9d/0x150 [ 200.716420][ T9870] ? nlmon_xmit+0xaf/0x100 [ 200.716460][ T9870] ? __local_bh_enable_ip+0x168/0x200 [ 200.716479][ T9870] ? lockdep_hardirqs_on+0x9d/0x150 [ 200.716512][ T9870] ? aa_get_newest_label+0x101/0x6f0 [ 200.716548][ T9870] ? __lock_acquire+0xad5/0xd80 [ 200.716593][ T9870] ? __pfx_rtnl_newlink+0x10/0x10 [ 200.716625][ T9870] rtnetlink_rcv_msg+0x80f/0xd70 [ 200.716652][ T9870] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 200.716686][ T9870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.716724][ T9870] ? ref_tracker_free+0x63e/0x7e0 [ 200.716756][ T9870] netlink_rcv_skb+0x208/0x480 [ 200.716786][ T9870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.716817][ T9870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.716866][ T9870] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.716897][ T9870] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.716929][ T9870] netlink_unicast+0x7f8/0x9a0 [ 200.716966][ T9870] ? __pfx_netlink_unicast+0x10/0x10 [ 200.716994][ T9870] ? skb_put+0x114/0x1f0 [ 200.717020][ T9870] netlink_sendmsg+0x8c3/0xcd0 [ 200.717063][ T9870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.717098][ T9870] ? aa_sock_msg_perm+0x91/0x160 [ 200.717133][ T9870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.717160][ T9870] __sock_sendmsg+0x221/0x270 [ 200.717192][ T9870] ____sys_sendmsg+0x523/0x860 [ 200.717224][ T9870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.717244][ T9870] ? __fget_files+0x2a/0x420 [ 200.717273][ T9870] ? __fget_files+0x2a/0x420 [ 200.717303][ T9870] __sys_sendmsg+0x271/0x360 [ 200.717332][ T9870] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.717415][ T9870] ? do_syscall_64+0xb6/0x230 [ 200.717443][ T9870] do_syscall_64+0xf3/0x230 [ 200.717468][ T9870] ? clear_bhb_loop+0x45/0xa0 [ 200.717493][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.717513][ T9870] RIP: 0033:0x7f5f9938d169 [ 200.717531][ T9870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.717550][ T9870] RSP: 002b:00007f5f9a2d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.717572][ T9870] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938d169 [ 200.717588][ T9870] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 200.717602][ T9870] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.717615][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.717627][ T9870] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 200.717659][ T9870] [ 201.185298][ T5845] Bluetooth: hci1: command 0x0401 tx timeout [ 201.345174][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.573178][ T9881] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1308'. [ 201.735441][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1305'. [ 202.394035][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 202.394729][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.561352][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 202.584118][ T9925] tipc: Enabling of bearer rejected, failed to enable media [ 202.614437][ T9930] FAULT_INJECTION: forcing a failure. [ 202.614437][ T9930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.651364][ T9930] CPU: 1 UID: 0 PID: 9930 Comm: syz.3.1321 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 202.651394][ T9930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.651406][ T9930] Call Trace: [ 202.651414][ T9930] [ 202.651421][ T9930] dump_stack_lvl+0x241/0x360 [ 202.651456][ T9930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.651483][ T9930] ? __pfx__printk+0x10/0x10 [ 202.651521][ T9930] should_fail_ex+0x424/0x570 [ 202.651546][ T9930] _copy_from_user+0x2d/0xb0 [ 202.651575][ T9930] dev_ethtool+0xe3/0x1ff0 [ 202.651598][ T9930] ? __lock_acquire+0xad5/0xd80 [ 202.651623][ T9930] ? __pfx_dev_ethtool+0x10/0x10 [ 202.651652][ T9930] ? dev_load+0x21/0x1f0 [ 202.651679][ T9930] ? dev_load+0x21/0x1f0 [ 202.651704][ T9930] dev_ioctl+0x43c/0x1380 [ 202.651733][ T9930] sock_do_ioctl+0x233/0x490 [ 202.651763][ T9930] ? __pfx_sock_do_ioctl+0x10/0x10 [ 202.651791][ T9930] ? __lock_acquire+0xad5/0xd80 [ 202.651823][ T9930] sock_ioctl+0x644/0x900 [ 202.651848][ T9930] ? __pfx_sock_ioctl+0x10/0x10 [ 202.651869][ T9930] ? __fget_files+0x2a/0x420 [ 202.651886][ T9930] ? __fget_files+0x2a/0x420 [ 202.651906][ T9930] ? __fget_files+0x2a/0x420 [ 202.651928][ T9930] ? __pfx_sock_ioctl+0x10/0x10 [ 202.651952][ T9930] __se_sys_ioctl+0xf1/0x160 [ 202.651977][ T9930] do_syscall_64+0xf3/0x230 [ 202.652000][ T9930] ? clear_bhb_loop+0x45/0xa0 [ 202.652023][ T9930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.652041][ T9930] RIP: 0033:0x7f1f3b38d169 [ 202.652064][ T9930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.652080][ T9930] RSP: 002b:00007f1f3c2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.652101][ T9930] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38d169 [ 202.652115][ T9930] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 202.652127][ T9930] RBP: 00007f1f3c2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 202.652139][ T9930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.652150][ T9930] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 202.652180][ T9930] [ 203.066108][ T9931] netlink: 'syz.0.1320': attribute type 26 has an invalid length. [ 203.434943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.519479][ T9951] FAULT_INJECTION: forcing a failure. [ 203.519479][ T9951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.561160][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: syz.3.1327 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 203.561193][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.561207][ T9951] Call Trace: [ 203.561215][ T9951] [ 203.561225][ T9951] dump_stack_lvl+0x241/0x360 [ 203.561264][ T9951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.561294][ T9951] ? __pfx__printk+0x10/0x10 [ 203.561338][ T9951] should_fail_ex+0x424/0x570 [ 203.561366][ T9951] _copy_from_user+0x2d/0xb0 [ 203.561397][ T9951] ____sys_sendmsg+0x324/0x860 [ 203.561429][ T9951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.561450][ T9951] ? __fget_files+0x2a/0x420 [ 203.561474][ T9951] ? __fget_files+0x2a/0x420 [ 203.561503][ T9951] __sys_sendmmsg+0x3a0/0x7b0 [ 203.561538][ T9951] ? __pfx___sys_sendmmsg+0x10/0x10 [ 203.561599][ T9951] ? rcu_read_lock_any_held+0xbb/0x160 [ 203.561626][ T9951] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 203.561658][ T9951] ? vfs_write+0xb29/0xd10 [ 203.561691][ T9951] ? ksys_write+0x24e/0x2d0 [ 203.561717][ T9951] ? __mutex_unlock_slowpath+0x229/0x800 [ 203.561773][ T9951] ? ksys_write+0x275/0x2d0 [ 203.561816][ T9951] __x64_sys_sendmmsg+0xa0/0xb0 [ 203.561840][ T9951] do_syscall_64+0xf3/0x230 [ 203.561865][ T9951] ? clear_bhb_loop+0x45/0xa0 [ 203.561889][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.561909][ T9951] RIP: 0033:0x7f1f3b38d169 [ 203.561927][ T9951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.561946][ T9951] RSP: 002b:00007f1f3c2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.561969][ T9951] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38d169 [ 203.561983][ T9951] RDX: 0000000000000001 RSI: 0000200000004e00 RDI: 0000000000000003 [ 203.561997][ T9951] RBP: 00007f1f3c2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 203.562009][ T9951] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 203.562022][ T9951] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 203.562054][ T9951] [ 204.236095][ T9971] netlink: 'syz.2.1331': attribute type 26 has an invalid length. [ 204.464879][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.115748][ T9993] x_tables: duplicate underflow at hook 1 [ 205.118553][ T9995] set match dimension is over the limit! [ 205.504721][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.694189][T10015] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1346'. [ 205.735790][T10015] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 205.852060][T10025] netlink: 692 bytes leftover after parsing attributes in process `syz.4.1351'. [ 205.888190][T10023] bond1: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 205.960308][T10012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1346'. [ 205.980777][T10015] veth3: entered promiscuous mode [ 206.274572][T10044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1355'. [ 206.310269][T10042] set match dimension is over the limit! [ 206.544726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.849043][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 207.369876][T10098] ipip0: entered promiscuous mode [ 207.448879][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1372'. [ 207.494772][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1372'. [ 207.594699][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.757760][T10117] FAULT_INJECTION: forcing a failure. [ 207.757760][T10117] name failslab, interval 1, probability 0, space 0, times 0 [ 207.781519][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.1.1380 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 207.781553][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.781567][T10117] Call Trace: [ 207.781575][T10117] [ 207.781584][T10117] dump_stack_lvl+0x241/0x360 [ 207.781625][T10117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.781656][T10117] ? __pfx__printk+0x10/0x10 [ 207.781691][T10117] ? __pfx___might_resched+0x10/0x10 [ 207.781723][T10117] should_fail_ex+0x424/0x570 [ 207.781750][T10117] should_failslab+0xac/0x100 [ 207.781782][T10117] __kmalloc_noprof+0xdf/0x4d0 [ 207.781810][T10117] ? tomoyo_encode+0x26f/0x540 [ 207.781845][T10117] tomoyo_encode+0x26f/0x540 [ 207.781877][T10117] ? __pfx_sockfs_dname+0x10/0x10 [ 207.781906][T10117] tomoyo_realpath_from_path+0x59e/0x5e0 [ 207.781950][T10117] tomoyo_path_number_perm+0x245/0x790 [ 207.781979][T10117] ? tomoyo_path_number_perm+0x215/0x790 [ 207.782008][T10117] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.782043][T10117] ? ksys_write+0x24e/0x2d0 [ 207.782076][T10117] ? __lock_acquire+0xad5/0xd80 [ 207.782120][T10117] ? __fget_files+0x2a/0x420 [ 207.782139][T10117] ? __fget_files+0x2a/0x420 [ 207.782162][T10117] ? __fget_files+0x2a/0x420 [ 207.782187][T10117] security_file_ioctl+0xc6/0x2a0 [ 207.782215][T10117] __se_sys_ioctl+0x46/0x160 [ 207.782244][T10117] do_syscall_64+0xf3/0x230 [ 207.782270][T10117] ? clear_bhb_loop+0x45/0xa0 [ 207.782295][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.782316][T10117] RIP: 0033:0x7f5f9938d169 [ 207.782346][T10117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.782364][T10117] RSP: 002b:00007f5f9a2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.782387][T10117] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938d169 [ 207.782402][T10117] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 207.782416][T10117] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 207.782429][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.782441][T10117] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 207.782475][T10117] [ 207.782497][T10117] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.204415][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'. [ 208.313487][T10130] netlink: 'syz.2.1383': attribute type 4 has an invalid length. [ 208.502086][T10146] Cannot find del_set index 286 as target [ 208.624710][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.183697][T10170] FAULT_INJECTION: forcing a failure. [ 209.183697][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.280864][T10170] CPU: 0 UID: 0 PID: 10170 Comm: syz.0.1393 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 209.280898][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.280912][T10170] Call Trace: [ 209.280920][T10170] [ 209.280929][T10170] dump_stack_lvl+0x241/0x360 [ 209.280968][T10170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.280998][T10170] ? __pfx__printk+0x10/0x10 [ 209.281038][T10170] should_fail_ex+0x424/0x570 [ 209.281066][T10170] _copy_to_user+0x31/0xb0 [ 209.281098][T10170] simple_read_from_buffer+0xc4/0x170 [ 209.281134][T10170] proc_fail_nth_read+0x1ef/0x260 [ 209.281160][T10170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.281186][T10170] ? rw_verify_area+0x246/0x630 [ 209.281217][T10170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.281241][T10170] vfs_read+0x21f/0xb90 [ 209.281270][T10170] ? __pfx___mutex_lock+0x10/0x10 [ 209.281297][T10170] ? __pfx_vfs_read+0x10/0x10 [ 209.281324][T10170] ? __fget_files+0x2a/0x420 [ 209.281345][T10170] ? __fget_files+0x39d/0x420 [ 209.281362][T10170] ? __fget_files+0x2a/0x420 [ 209.281392][T10170] ksys_read+0x19d/0x2d0 [ 209.281419][T10170] ? __pfx_ksys_read+0x10/0x10 [ 209.281449][T10170] ? do_syscall_64+0xb6/0x230 [ 209.281478][T10170] do_syscall_64+0xf3/0x230 [ 209.281504][T10170] ? clear_bhb_loop+0x45/0xa0 [ 209.281529][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.281551][T10170] RIP: 0033:0x7fcbfad8bb7c [ 209.281569][T10170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.281587][T10170] RSP: 002b:00007fcbfbcc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.281610][T10170] RAX: ffffffffffffffda RBX: 00007fcbfafa5fa0 RCX: 00007fcbfad8bb7c [ 209.281627][T10170] RDX: 000000000000000f RSI: 00007fcbfbcc60a0 RDI: 0000000000000003 [ 209.281640][T10170] RBP: 00007fcbfbcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 209.281654][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.281666][T10170] R13: 0000000000000000 R14: 00007fcbfafa5fa0 R15: 00007ffdf4cb0358 [ 209.281700][T10170] [ 209.574392][T10177] netlink: 'syz.1.1390': attribute type 7 has an invalid length. [ 209.666608][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.940924][T10182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.039610][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1398'. [ 210.081807][T10182] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1398'. [ 210.125813][T10193] netlink: 'syz.3.1403': attribute type 5 has an invalid length. [ 210.175083][T10194] syz_tun: entered allmulticast mode [ 210.210547][T10193] ip6erspan0: entered promiscuous mode [ 210.281192][T10182] dvmrp8: entered allmulticast mode [ 210.308020][T10181] syz_tun: left allmulticast mode [ 210.313540][T10181] dvmrp8: left allmulticast mode [ 210.455425][T10208] can: request_module (can-proto-5) failed. [ 210.704749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.805060][T10222] FAULT_INJECTION: forcing a failure. [ 210.805060][T10222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.845540][T10222] CPU: 1 UID: 0 PID: 10222 Comm: syz.2.1413 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 210.845574][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.845588][T10222] Call Trace: [ 210.845596][T10222] [ 210.845605][T10222] dump_stack_lvl+0x241/0x360 [ 210.845644][T10222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.845675][T10222] ? __pfx__printk+0x10/0x10 [ 210.845718][T10222] should_fail_ex+0x424/0x570 [ 210.845746][T10222] _copy_to_user+0x31/0xb0 [ 210.845780][T10222] ethtool_get_one_feature+0x248/0x300 [ 210.845808][T10222] ? __pfx_ethtool_get_one_feature+0x10/0x10 [ 210.845834][T10222] ? full_name_hash+0x93/0xe0 [ 210.845864][T10222] dev_ethtool+0x1732/0x1ff0 [ 210.845898][T10222] ? __pfx_dev_ethtool+0x10/0x10 [ 210.845937][T10222] ? dev_load+0x21/0x1f0 [ 210.845967][T10222] dev_ioctl+0x43c/0x1380 [ 210.845998][T10222] sock_do_ioctl+0x233/0x490 [ 210.846040][T10222] ? __pfx_sock_do_ioctl+0x10/0x10 [ 210.846072][T10222] ? __lock_acquire+0xad5/0xd80 [ 210.846109][T10222] sock_ioctl+0x644/0x900 [ 210.846137][T10222] ? __pfx_sock_ioctl+0x10/0x10 [ 210.846159][T10222] ? __fget_files+0x2a/0x420 [ 210.846178][T10222] ? __fget_files+0x2a/0x420 [ 210.846200][T10222] ? __fget_files+0x2a/0x420 [ 210.846225][T10222] ? __pfx_sock_ioctl+0x10/0x10 [ 210.846252][T10222] __se_sys_ioctl+0xf1/0x160 [ 210.846285][T10222] do_syscall_64+0xf3/0x230 [ 210.846312][T10222] ? clear_bhb_loop+0x45/0xa0 [ 210.846337][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.846357][T10222] RIP: 0033:0x7fb7c018d169 [ 210.846375][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.846393][T10222] RSP: 002b:00007fb7c10b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.846415][T10222] RAX: ffffffffffffffda RBX: 00007fb7c03a5fa0 RCX: 00007fb7c018d169 [ 210.846431][T10222] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 210.846444][T10222] RBP: 00007fb7c10b1090 R08: 0000000000000000 R09: 0000000000000000 [ 210.846457][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.846469][T10222] R13: 0000000000000000 R14: 00007fb7c03a5fa0 R15: 00007ffea4540ce8 [ 210.846503][T10222] [ 211.231767][T10229] __nla_validate_parse: 1 callbacks suppressed [ 211.231790][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 211.258861][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 211.314948][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 211.361269][T10237] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 211.422553][T10238] sctp: [Deprecated]: syz.1.1415 (pid 10238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.422553][T10238] Use struct sctp_sack_info instead [ 211.744696][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.753707][ T57] Bluetooth: hci0: command 0x0406 tx timeout [ 211.762323][ T5153] Bluetooth: hci1: command 0x0401 tx timeout [ 211.768452][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 211.768922][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 212.278789][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 212.290313][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 212.412985][T10271] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 212.609916][T10278] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1435'. [ 212.641113][T10278] ªªªªªª: renamed from lo [ 212.784749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.036087][T10298] nft_compat: unsupported protocol 0 [ 213.061502][T10301] nft_compat: unsupported protocol 0 [ 213.120461][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 213.568385][T10313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1443'. [ 213.584572][T10312] bridge0: port 5(vlan4) entered blocking state [ 213.600616][T10312] bridge0: port 5(vlan4) entered disabled state [ 213.609015][T10312] vlan4: entered allmulticast mode [ 213.626167][T10312] team0: entered allmulticast mode [ 213.637498][T10312] team_slave_0: entered allmulticast mode [ 213.660017][T10312] team_slave_1: entered allmulticast mode [ 213.687511][T10312] vlan4: entered promiscuous mode [ 213.696428][T10312] team0: entered promiscuous mode [ 213.701698][T10312] team_slave_0: entered promiscuous mode [ 213.727833][T10312] team_slave_1: entered promiscuous mode [ 213.741709][T10312] bridge0: port 5(vlan4) entered blocking state [ 213.749061][T10312] bridge0: port 5(vlan4) entered forwarding state [ 213.775396][T10319] netlink: 'syz.4.1444': attribute type 29 has an invalid length. [ 213.824888][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.919143][T10328] syzkaller1: entered promiscuous mode [ 213.945915][T10328] syzkaller1: entered allmulticast mode [ 213.975699][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 214.035411][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 214.065028][T10319] netlink: 'syz.4.1444': attribute type 11 has an invalid length. [ 214.082524][T10319] netlink: 'syz.4.1444': attribute type 13 has an invalid length. [ 214.138099][T10344] netlink: 'syz.0.1451': attribute type 58 has an invalid length. [ 214.383574][T10352] tipc: Enabling of bearer rejected, failed to enable media [ 214.434556][T10354] set match dimension is over the limit! [ 214.864903][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.211496][T10399] Cannot find del_set index 286 as target [ 215.356528][T10405] syzkaller0: entered allmulticast mode [ 215.416565][T10409] FAULT_INJECTION: forcing a failure. [ 215.416565][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 215.459368][T10409] CPU: 1 UID: 0 PID: 10409 Comm: syz.2.1474 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 215.459402][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.459416][T10409] Call Trace: [ 215.459425][T10409] [ 215.459434][T10409] dump_stack_lvl+0x241/0x360 [ 215.459473][T10409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.459504][T10409] ? __pfx__printk+0x10/0x10 [ 215.459538][T10409] ? __pfx___might_resched+0x10/0x10 [ 215.459571][T10409] should_fail_ex+0x424/0x570 [ 215.459605][T10409] should_failslab+0xac/0x100 [ 215.459677][T10409] kmem_cache_alloc_noprof+0x78/0x390 [ 215.459707][T10409] ? __anon_vma_prepare+0x117/0x4a0 [ 215.459732][T10409] __anon_vma_prepare+0x117/0x4a0 [ 215.459752][T10409] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 215.459786][T10409] handle_pte_fault+0x518f/0x61c0 [ 215.459818][T10409] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 215.459862][T10409] ? __pfx_handle_pte_fault+0x10/0x10 [ 215.459884][T10409] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 215.459921][T10409] ? __lock_acquire+0xad5/0xd80 [ 215.459950][T10409] ? do_raw_spin_lock+0x151/0x370 [ 215.459989][T10409] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.460028][T10409] ? _raw_spin_unlock+0x28/0x50 [ 215.460047][T10409] ? __pmd_alloc+0x37f/0x440 [ 215.460080][T10409] ? __pfx___pmd_alloc+0x10/0x10 [ 215.460122][T10409] handle_mm_fault+0x1129/0x1bf0 [ 215.460151][T10409] ? mt_find+0x28a/0x8f0 [ 215.460206][T10409] ? __pfx_handle_mm_fault+0x10/0x10 [ 215.460263][T10409] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 215.460296][T10409] exc_page_fault+0x2bb/0x920 [ 215.460329][T10409] asm_exc_page_fault+0x26/0x30 [ 215.460349][T10409] RIP: 0010:__put_user_4+0xd/0x20 [ 215.460373][T10409] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 215.460396][T10409] RSP: 0018:ffffc9001bc6f5b8 EFLAGS: 00050202 [ 215.460416][T10409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000680 [ 215.460431][T10409] RDX: 0000000000000001 RSI: ffffffff8e4fce8a RDI: ffffffff8ca1b120 [ 215.460445][T10409] RBP: ffffc9001bc6f730 R08: 0000000000000001 R09: 0000000000000000 [ 215.460458][T10409] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9001bc6f600 [ 215.460472][T10409] R13: 1ffff9200378dec0 R14: dffffc0000000000 R15: 1ffff9200378debc [ 215.460508][T10409] sk_ioctl+0x36b/0x680 [ 215.460541][T10409] ? __pfx_sk_ioctl+0x10/0x10 [ 215.460590][T10409] ? is_bpf_text_address+0x26/0x2a0 [ 215.460623][T10409] ? 0xffffffffa0003c00 [ 215.460641][T10409] ? pn_socket_ioctl+0xa4/0x350 [ 215.460669][T10409] sock_do_ioctl+0x15a/0x490 [ 215.460695][T10409] ? kernel_text_address+0xa7/0xe0 [ 215.460721][T10409] ? __pfx_sock_do_ioctl+0x10/0x10 [ 215.460746][T10409] ? arch_stack_walk+0xff/0x150 [ 215.460788][T10409] ? stack_trace_save+0x11a/0x1d0 [ 215.460822][T10409] sock_ioctl+0x644/0x900 [ 215.460851][T10409] ? __pfx_sock_ioctl+0x10/0x10 [ 215.460885][T10409] ? kasan_save_track+0x51/0x80 [ 215.460907][T10409] ? kasan_save_track+0x3f/0x80 [ 215.460928][T10409] ? kasan_save_free_info+0x40/0x50 [ 215.460946][T10409] ? __kasan_slab_free+0x59/0x70 [ 215.460969][T10409] ? kfree+0x198/0x430 [ 215.460993][T10409] ? security_file_ioctl+0xc6/0x2a0 [ 215.461017][T10409] ? __se_sys_ioctl+0x46/0x160 [ 215.461038][T10409] ? do_syscall_64+0xf3/0x230 [ 215.461061][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.461081][T10409] ? __pfx_sock_ioctl+0x10/0x10 [ 215.461108][T10409] do_vfs_ioctl+0xebd/0x2750 [ 215.461140][T10409] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 215.461195][T10409] ? kasan_quarantine_put+0xdc/0x230 [ 215.461217][T10409] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.461251][T10409] ? tomoyo_path_number_perm+0x215/0x790 [ 215.461283][T10409] ? tomoyo_path_number_perm+0x684/0x790 [ 215.461314][T10409] ? tomoyo_path_number_perm+0x215/0x790 [ 215.461344][T10409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.461379][T10409] ? ksys_write+0x24e/0x2d0 [ 215.461412][T10409] ? __lock_acquire+0xad5/0xd80 [ 215.461454][T10409] ? __fget_files+0x2a/0x420 [ 215.461473][T10409] ? __fget_files+0x2a/0x420 [ 215.461495][T10409] ? __fget_files+0x2a/0x420 [ 215.461525][T10409] __se_sys_ioctl+0x80/0x160 [ 215.461553][T10409] do_syscall_64+0xf3/0x230 [ 215.461579][T10409] ? clear_bhb_loop+0x45/0xa0 [ 215.461614][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.461634][T10409] RIP: 0033:0x7fb7c018d169 [ 215.461651][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.461668][T10409] RSP: 002b:00007fb7c10b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.461688][T10409] RAX: ffffffffffffffda RBX: 00007fb7c03a5fa0 RCX: 00007fb7c018d169 [ 215.461704][T10409] RDX: 0000200000000680 RSI: 000000000000541b RDI: 0000000000000003 [ 215.461718][T10409] RBP: 00007fb7c10b1090 R08: 0000000000000000 R09: 0000000000000000 [ 215.461731][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.461744][T10409] R13: 0000000000000000 R14: 00007fb7c03a5fa0 R15: 00007ffea4540ce8 [ 215.461777][T10409] [ 215.961566][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.040058][T10413] netlink: 'syz.1.1475': attribute type 26 has an invalid length. [ 216.092880][T10419] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 216.643686][T10436] netlink: 'syz.1.1485': attribute type 11 has an invalid length. [ 216.672294][T10436] __nla_validate_parse: 3 callbacks suppressed [ 216.672314][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1485'. [ 216.857951][T10438] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 217.024908][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.297066][T10466] netlink: 856 bytes leftover after parsing attributes in process `syz.1.1496'. [ 217.446947][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 217.544283][T10473] netlink: 'syz.3.1497': attribute type 9 has an invalid length. [ 217.835423][T10487] set match dimension is over the limit! [ 217.947025][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 217.992703][T10492] trusted_key: syz.4.1506 sent an empty control message without MSG_MORE. [ 218.064968][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.085303][T10490] wireguard0: entered promiscuous mode [ 218.090936][T10490] wireguard0: entered allmulticast mode [ 218.152842][T10501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1508'. [ 218.239586][T10504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1509'. [ 218.419727][T10508] bond1: (slave ip6gretap3): Releasing backup interface [ 218.718829][T10520] netlink: 'syz.0.1515': attribute type 26 has an invalid length. [ 218.835921][T10522] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 218.976166][T10522] team0: Port device dummy0 added [ 219.016849][T10522] bond0: (slave team0): Releasing backup interface [ 219.077595][T10522] team0: Port device dummy0 removed [ 219.097764][T10522] bond0: (slave bond_slave_0): Releasing backup interface [ 219.114904][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.141421][T10522] bond0: (slave bond_slave_1): Releasing backup interface [ 219.189299][T10522] team0: Port device Cà removed [ 219.204140][T10522] team0: Port device team_slave_1 removed [ 219.212498][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.220111][T10522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.246905][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.254383][T10522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.284307][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 219.321553][T10522] team0: Port device geneve0 removed [ 219.355580][T10522] team0: Port device bond3 removed [ 219.405388][T10538] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 219.562453][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 219.759510][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 219.768754][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 219.783841][T10563] netlink: 'syz.1.1528': attribute type 26 has an invalid length. [ 219.805322][T10562] vlan5: entered promiscuous mode [ 219.810539][T10562] gretap0: entered promiscuous mode [ 219.895454][T10568] FAULT_INJECTION: forcing a failure. [ 219.895454][T10568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.968400][T10570] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 219.977346][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.3.1530 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 219.977378][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.977391][T10568] Call Trace: [ 219.977399][T10568] [ 219.977408][T10568] dump_stack_lvl+0x241/0x360 [ 219.977448][T10568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.977486][T10568] ? __pfx__printk+0x10/0x10 [ 219.977527][T10568] should_fail_ex+0x424/0x570 [ 219.977555][T10568] prepare_alloc_pages+0x220/0x610 [ 219.977589][T10568] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 219.977617][T10568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.977664][T10568] alloc_pages_mpol+0x339/0x690 [ 219.977700][T10568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.977740][T10568] vma_alloc_folio_noprof+0x12d/0x260 [ 219.977773][T10568] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 219.977808][T10568] ? __anon_vma_prepare+0x3e5/0x4a0 [ 219.977831][T10568] folio_prealloc+0x2e/0x170 [ 219.977853][T10568] handle_pte_fault+0x2e45/0x61c0 [ 219.977897][T10568] ? __pfx_handle_pte_fault+0x10/0x10 [ 219.977919][T10568] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 219.977957][T10568] ? __lock_acquire+0xad5/0xd80 [ 219.977985][T10568] ? do_raw_spin_lock+0x151/0x370 [ 219.978031][T10568] ? do_raw_spin_unlock+0x13c/0x8b0 [ 219.978068][T10568] ? _raw_spin_unlock+0x28/0x50 [ 219.978088][T10568] ? __pmd_alloc+0x37f/0x440 [ 219.978120][T10568] ? __pfx___pmd_alloc+0x10/0x10 [ 219.978161][T10568] handle_mm_fault+0x1129/0x1bf0 [ 219.978189][T10568] ? mt_find+0x28a/0x8f0 [ 219.978244][T10568] ? __pfx_handle_mm_fault+0x10/0x10 [ 219.978300][T10568] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 219.978332][T10568] exc_page_fault+0x2bb/0x920 [ 219.978364][T10568] asm_exc_page_fault+0x26/0x30 [ 219.978384][T10568] RIP: 0010:__put_user_4+0xd/0x20 [ 219.978408][T10568] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 219.978426][T10568] RSP: 0018:ffffc9001c3ff5b8 EFLAGS: 00050202 [ 219.978446][T10568] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000680 [ 219.978466][T10568] RDX: 0000000000000001 RSI: ffffffff8e4fce8a RDI: ffffffff8ca1b120 [ 219.978481][T10568] RBP: ffffc9001c3ff730 R08: 0000000000000001 R09: 0000000000000000 [ 219.978494][T10568] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9001c3ff600 [ 219.978507][T10568] R13: 1ffff9200387fec0 R14: dffffc0000000000 R15: 1ffff9200387febc [ 219.978543][T10568] sk_ioctl+0x36b/0x680 [ 219.978577][T10568] ? __pfx_sk_ioctl+0x10/0x10 [ 219.978624][T10568] ? is_bpf_text_address+0x26/0x2a0 [ 219.978652][T10568] ? 0xffffffffa0003c00 [ 219.978670][T10568] ? pn_socket_ioctl+0xa4/0x350 [ 219.978697][T10568] sock_do_ioctl+0x15a/0x490 [ 219.978722][T10568] ? kernel_text_address+0xa7/0xe0 [ 219.978747][T10568] ? __pfx_sock_do_ioctl+0x10/0x10 [ 219.978771][T10568] ? arch_stack_walk+0xff/0x150 [ 219.978813][T10568] ? stack_trace_save+0x11a/0x1d0 [ 219.978848][T10568] sock_ioctl+0x644/0x900 [ 219.978877][T10568] ? __pfx_sock_ioctl+0x10/0x10 [ 219.978911][T10568] ? kasan_save_track+0x51/0x80 [ 219.978932][T10568] ? kasan_save_track+0x3f/0x80 [ 219.978953][T10568] ? kasan_save_free_info+0x40/0x50 [ 219.978971][T10568] ? __kasan_slab_free+0x59/0x70 [ 219.978994][T10568] ? kfree+0x198/0x430 [ 219.979018][T10568] ? security_file_ioctl+0xc6/0x2a0 [ 219.979041][T10568] ? __se_sys_ioctl+0x46/0x160 [ 219.979063][T10568] ? do_syscall_64+0xf3/0x230 [ 219.979086][T10568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.979105][T10568] ? __pfx_sock_ioctl+0x10/0x10 [ 219.979137][T10568] do_vfs_ioctl+0xebd/0x2750 [ 219.979168][T10568] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 219.979223][T10568] ? kasan_quarantine_put+0xdc/0x230 [ 219.979244][T10568] ? lockdep_hardirqs_on+0x9d/0x150 [ 219.979282][T10568] ? tomoyo_path_number_perm+0x215/0x790 [ 219.979314][T10568] ? tomoyo_path_number_perm+0x684/0x790 [ 219.979345][T10568] ? tomoyo_path_number_perm+0x215/0x790 [ 219.979375][T10568] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.979410][T10568] ? ksys_write+0x24e/0x2d0 [ 219.979442][T10568] ? __lock_acquire+0xad5/0xd80 [ 219.979490][T10568] ? __fget_files+0x2a/0x420 [ 219.979508][T10568] ? __fget_files+0x2a/0x420 [ 219.979531][T10568] ? __fget_files+0x2a/0x420 [ 219.979561][T10568] __se_sys_ioctl+0x80/0x160 [ 219.979588][T10568] do_syscall_64+0xf3/0x230 [ 219.979613][T10568] ? clear_bhb_loop+0x45/0xa0 [ 219.979638][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.979658][T10568] RIP: 0033:0x7f1f3b38d169 [ 219.979674][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.979692][T10568] RSP: 002b:00007f1f3c2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.979713][T10568] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38d169 [ 219.979728][T10568] RDX: 0000200000000680 RSI: 000000000000541b RDI: 0000000000000003 [ 219.979741][T10568] RBP: 00007f1f3c2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 219.979754][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.979766][T10568] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 219.979799][T10568] [ 220.493005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.511734][T10570] dummy0: entered promiscuous mode [ 220.519098][T10570] dummy0: entered allmulticast mode [ 220.526706][T10570] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.797945][T10579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 220.878753][T10581] netlink: 'syz.4.1536': attribute type 7 has an invalid length. [ 221.371000][T10600] netlink: 'syz.0.1543': attribute type 26 has an invalid length. [ 221.504693][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.810479][T10619] __nla_validate_parse: 3 callbacks suppressed [ 221.810501][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 221.870168][T10619] xt_TCPMSS: Only works on TCP SYN packets [ 222.102820][ T30] audit: type=1800 audit(1743809876.209:2): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1556" name="memory.events" dev="tmpfs" ino=1641 res=0 errno=0 [ 222.303898][T10648] netlink: 'syz.0.1557': attribute type 26 has an invalid length. [ 222.506315][T10660] FAULT_INJECTION: forcing a failure. [ 222.506315][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 222.544741][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.548063][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.0.1561 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 222.548098][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.548113][T10660] Call Trace: [ 222.548122][T10660] [ 222.548131][T10660] dump_stack_lvl+0x241/0x360 [ 222.548172][T10660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.548205][T10660] ? __pfx__printk+0x10/0x10 [ 222.548258][T10660] ? __pfx___might_resched+0x10/0x10 [ 222.548292][T10660] should_fail_ex+0x424/0x570 [ 222.548323][T10660] should_failslab+0xac/0x100 [ 222.548356][T10660] __kmalloc_noprof+0xdf/0x4d0 [ 222.548386][T10660] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 222.548420][T10660] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.548459][T10660] tomoyo_realpath_from_path+0xcf/0x5e0 [ 222.548509][T10660] tomoyo_path_number_perm+0x245/0x790 [ 222.548544][T10660] ? tomoyo_path_number_perm+0x215/0x790 [ 222.548576][T10660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.548613][T10660] ? ksys_write+0x24e/0x2d0 [ 222.548649][T10660] ? __lock_acquire+0xad5/0xd80 [ 222.548696][T10660] ? __fget_files+0x2a/0x420 [ 222.548716][T10660] ? __fget_files+0x2a/0x420 [ 222.548740][T10660] ? __fget_files+0x2a/0x420 [ 222.548767][T10660] security_file_ioctl+0xc6/0x2a0 [ 222.548796][T10660] __se_sys_ioctl+0x46/0x160 [ 222.548827][T10660] do_syscall_64+0xf3/0x230 [ 222.548855][T10660] ? clear_bhb_loop+0x45/0xa0 [ 222.548882][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.548904][T10660] RIP: 0033:0x7fcbfad8d169 [ 222.548924][T10660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.548943][T10660] RSP: 002b:00007fcbfbcc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.548968][T10660] RAX: ffffffffffffffda RBX: 00007fcbfafa5fa0 RCX: 00007fcbfad8d169 [ 222.548985][T10660] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 222.548999][T10660] RBP: 00007fcbfbcc6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.549013][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.549026][T10660] R13: 0000000000000000 R14: 00007fcbfafa5fa0 R15: 00007ffdf4cb0358 [ 222.549064][T10660] [ 222.549100][T10660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.690156][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 222.754867][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 222.812075][T10666] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 222.950882][T10673] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1566'. [ 222.979498][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 223.584753][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.618174][T10687] set match dimension is over the limit! [ 223.898717][T10690] netlink: 'syz.0.1571': attribute type 26 has an invalid length. [ 224.113868][T10706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1577'. [ 224.124521][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1575'. [ 224.309584][T10716] syzkaller1: entered promiscuous mode [ 224.324823][T10716] syzkaller1: entered allmulticast mode [ 224.350270][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1581'. [ 224.507507][T10724] set match dimension is over the limit! [ 224.624716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.636334][T10732] FAULT_INJECTION: forcing a failure. [ 224.636334][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 224.709158][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.1.1586 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 224.709192][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.709205][T10732] Call Trace: [ 224.709213][T10732] [ 224.709222][T10732] dump_stack_lvl+0x241/0x360 [ 224.709261][T10732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.709292][T10732] ? __pfx__printk+0x10/0x10 [ 224.709327][T10732] ? __pfx___might_resched+0x10/0x10 [ 224.709357][T10732] should_fail_ex+0x424/0x570 [ 224.709385][T10732] should_failslab+0xac/0x100 [ 224.709416][T10732] __kmalloc_noprof+0xdf/0x4d0 [ 224.709445][T10732] ? bpf_test_init+0xc2/0x170 [ 224.709477][T10732] bpf_test_init+0xc2/0x170 [ 224.709507][T10732] bpf_prog_test_run_xdp+0x492/0x1200 [ 224.709554][T10732] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.709582][T10732] ? __fget_files+0x2a/0x420 [ 224.709605][T10732] ? __fget_files+0x2a/0x420 [ 224.709628][T10732] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.709658][T10732] bpf_prog_test_run+0x2e4/0x360 [ 224.709685][T10732] __sys_bpf+0x4ee/0x8b0 [ 224.709709][T10732] ? __pfx___sys_bpf+0x10/0x10 [ 224.709745][T10732] ? ksys_write+0x275/0x2d0 [ 224.709789][T10732] __x64_sys_bpf+0x7c/0x90 [ 224.709821][T10732] do_syscall_64+0xf3/0x230 [ 224.709847][T10732] ? clear_bhb_loop+0x45/0xa0 [ 224.709870][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.709890][T10732] RIP: 0033:0x7f5f9938d169 [ 224.709909][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.709927][T10732] RSP: 002b:00007f5f9a2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.709948][T10732] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938d169 [ 224.709963][T10732] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 224.709976][T10732] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 224.709988][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.710001][T10732] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 224.710032][T10732] [ 225.129914][T10747] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.356027][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'. [ 225.365303][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'. [ 225.664820][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.705002][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.780041][T10802] netlink: 'syz.3.1608': attribute type 26 has an invalid length. [ 226.993617][T10821] set match dimension is over the limit! [ 227.020985][T10822] __nla_validate_parse: 6 callbacks suppressed [ 227.021005][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 227.744717][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.234982][T10883] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 228.336233][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1635'. [ 228.469611][T10893] netlink: 'syz.3.1639': attribute type 10 has an invalid length. [ 228.508183][T10893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 228.518560][T10894] netlink: 'syz.2.1641': attribute type 26 has an invalid length. [ 228.723758][T10900] netlink: 'syz.2.1643': attribute type 4 has an invalid length. [ 228.736577][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1643'. [ 228.784741][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.845903][T10904] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1646'. [ 228.890815][T10904] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 229.136950][T10882] x_tables: unsorted entry at hook 1 [ 229.319375][T10923] set match dimension is over the limit! [ 229.348370][T10925] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1654'. [ 229.501921][T10930] FAULT_INJECTION: forcing a failure. [ 229.501921][T10930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.540818][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 229.563368][T10930] CPU: 0 UID: 0 PID: 10930 Comm: syz.4.1656 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 229.563403][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.563416][T10930] Call Trace: [ 229.563425][T10930] [ 229.563434][T10930] dump_stack_lvl+0x241/0x360 [ 229.563473][T10930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.563504][T10930] ? __pfx__printk+0x10/0x10 [ 229.563552][T10930] should_fail_ex+0x424/0x570 [ 229.563580][T10930] _copy_from_user+0x2d/0xb0 [ 229.563611][T10930] bpf_test_init+0xf5/0x170 [ 229.563645][T10930] bpf_prog_test_run_xdp+0x492/0x1200 [ 229.563695][T10930] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 229.563726][T10930] ? __fget_files+0x2a/0x420 [ 229.563749][T10930] ? __fget_files+0x2a/0x420 [ 229.563773][T10930] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 229.563804][T10930] bpf_prog_test_run+0x2e4/0x360 [ 229.563833][T10930] __sys_bpf+0x4ee/0x8b0 [ 229.563858][T10930] ? __pfx___sys_bpf+0x10/0x10 [ 229.563894][T10930] ? ksys_write+0x275/0x2d0 [ 229.563932][T10930] __x64_sys_bpf+0x7c/0x90 [ 229.563965][T10930] do_syscall_64+0xf3/0x230 [ 229.563991][T10930] ? clear_bhb_loop+0x45/0xa0 [ 229.564017][T10930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.564037][T10930] RIP: 0033:0x7f880158d169 [ 229.564055][T10930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.564074][T10930] RSP: 002b:00007f880241c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.564098][T10930] RAX: ffffffffffffffda RBX: 00007f88017a5fa0 RCX: 00007f880158d169 [ 229.564114][T10930] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 229.564127][T10930] RBP: 00007f880241c090 R08: 0000000000000000 R09: 0000000000000000 [ 229.564140][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.564153][T10930] R13: 0000000000000000 R14: 00007f88017a5fa0 R15: 00007ffe4bb2daf8 [ 229.564186][T10930] [ 229.824829][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.136185][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'. [ 230.179432][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1663'. [ 230.343338][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 230.344552][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1670'. [ 230.399593][T10966] netlink: 'syz.1.1670': attribute type 10 has an invalid length. [ 230.407055][T10967] x_tables: duplicate underflow at hook 2 [ 230.502929][T10966] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.864858][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.877447][T10981] netlink: 'syz.0.1674': attribute type 26 has an invalid length. [ 231.642702][T11012] netlink: 'syz.3.1689': attribute type 4 has an invalid length. [ 231.862173][T11017] netlink: 'syz.4.1691': attribute type 26 has an invalid length. [ 231.904891][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.938315][T11023] syzkaller1: entered promiscuous mode [ 231.943874][T11023] syzkaller1: entered allmulticast mode [ 232.296401][T11033] set match dimension is over the limit! [ 232.335179][T11036] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 232.605561][T11046] __nla_validate_parse: 6 callbacks suppressed [ 232.605584][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 232.621952][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 232.654892][T11046] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1701'. [ 232.677648][T11046] nbd: socks must be embedded in a SOCK_ITEM attr [ 232.944841][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.253753][T11076] FAULT_INJECTION: forcing a failure. [ 233.253753][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 233.285067][T11073] netlink: 856 bytes leftover after parsing attributes in process `syz.0.1712'. [ 233.303677][T11076] CPU: 0 UID: 0 PID: 11076 Comm: syz.2.1714 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 233.303709][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.303722][T11076] Call Trace: [ 233.303729][T11076] [ 233.303738][T11076] dump_stack_lvl+0x241/0x360 [ 233.303778][T11076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.303809][T11076] ? __pfx__printk+0x10/0x10 [ 233.303844][T11076] ? __pfx___might_resched+0x10/0x10 [ 233.303875][T11076] should_fail_ex+0x424/0x570 [ 233.303904][T11076] should_failslab+0xac/0x100 [ 233.303935][T11076] __kmalloc_noprof+0xdf/0x4d0 [ 233.303964][T11076] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 233.303994][T11076] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 233.304032][T11076] tomoyo_realpath_from_path+0xcf/0x5e0 [ 233.304078][T11076] tomoyo_path_number_perm+0x245/0x790 [ 233.304110][T11076] ? tomoyo_path_number_perm+0x215/0x790 [ 233.304140][T11076] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.304182][T11076] ? ksys_write+0x24e/0x2d0 [ 233.304215][T11076] ? __lock_acquire+0xad5/0xd80 [ 233.304258][T11076] ? __fget_files+0x2a/0x420 [ 233.304278][T11076] ? __fget_files+0x2a/0x420 [ 233.304305][T11076] ? __fget_files+0x2a/0x420 [ 233.304330][T11076] security_file_ioctl+0xc6/0x2a0 [ 233.304358][T11076] __se_sys_ioctl+0x46/0x160 [ 233.304387][T11076] do_syscall_64+0xf3/0x230 [ 233.304413][T11076] ? clear_bhb_loop+0x45/0xa0 [ 233.304439][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.304459][T11076] RIP: 0033:0x7fb7c018d169 [ 233.304477][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.304496][T11076] RSP: 002b:00007fb7c10b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.304518][T11076] RAX: ffffffffffffffda RBX: 00007fb7c03a5fa0 RCX: 00007fb7c018d169 [ 233.304534][T11076] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 233.304548][T11076] RBP: 00007fb7c10b1090 R08: 0000000000000000 R09: 0000000000000000 [ 233.304561][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.304574][T11076] R13: 0000000000000000 R14: 00007fb7c03a5fa0 R15: 00007ffea4540ce8 [ 233.304606][T11076] [ 233.542192][T11076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.913821][T11092] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.984698][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.319113][T11112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 234.335950][T11106] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 234.444238][T11114] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 234.712674][T11128] openvswitch: netlink: Actions may not be safe on all matching packets [ 234.716167][T11130] tipc: Enabling of bearer rejected, failed to enable media [ 234.930562][T11098] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 235.024712][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.173695][T11151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1741'. [ 235.226091][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 235.271605][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1742'. [ 235.451149][T11164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.507844][T11166] xt_hashlimit: max too large, truncated to 1048576 [ 235.615133][T11171] netlink: 'syz.2.1747': attribute type 5 has an invalid length. [ 236.047401][T11164] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.057634][T11164] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.066763][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.082404][T11164] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.094133][T11164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.145310][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 236.151797][T11186] Bluetooth: hci4: Opcode 0x0401 failed: -110 [ 236.159151][T11164] vlan3: left promiscuous mode [ 236.164155][T11164] gretap0: left promiscuous mode [ 236.841567][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1761'. [ 237.076596][T11218] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 237.114864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.128646][T11218] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.138678][T11220] sctp: [Deprecated]: syz.0.1764 (pid 11220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.138678][T11220] Use struct sctp_sack_info instead [ 237.304063][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1767'. [ 237.614812][T11247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.644122][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 237.871506][T11257] FAULT_INJECTION: forcing a failure. [ 237.871506][T11257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.914797][T11257] CPU: 0 UID: 0 PID: 11257 Comm: syz.1.1779 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 237.914831][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.914845][T11257] Call Trace: [ 237.914853][T11257] [ 237.914862][T11257] dump_stack_lvl+0x241/0x360 [ 237.914901][T11257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.914931][T11257] ? __pfx__printk+0x10/0x10 [ 237.914972][T11257] should_fail_ex+0x424/0x570 [ 237.914999][T11257] _copy_from_user+0x2d/0xb0 [ 237.915031][T11257] get_user_ifreq+0xc3/0x200 [ 237.915059][T11257] sock_do_ioctl+0x1a7/0x490 [ 237.915093][T11257] ? __pfx_sock_do_ioctl+0x10/0x10 [ 237.915125][T11257] ? __lock_acquire+0xad5/0xd80 [ 237.915161][T11257] sock_ioctl+0x644/0x900 [ 237.915189][T11257] ? __pfx_sock_ioctl+0x10/0x10 [ 237.915211][T11257] ? __fget_files+0x2a/0x420 [ 237.915231][T11257] ? __fget_files+0x2a/0x420 [ 237.915253][T11257] ? __fget_files+0x2a/0x420 [ 237.915277][T11257] ? __pfx_sock_ioctl+0x10/0x10 [ 237.915303][T11257] __se_sys_ioctl+0xf1/0x160 [ 237.915332][T11257] do_syscall_64+0xf3/0x230 [ 237.915358][T11257] ? clear_bhb_loop+0x45/0xa0 [ 237.915383][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.915403][T11257] RIP: 0033:0x7f5f9938d169 [ 237.915432][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.915449][T11257] RSP: 002b:00007f5f9a2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.915490][T11257] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938d169 [ 237.915505][T11257] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 237.915519][T11257] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 237.915532][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.915544][T11257] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 237.915577][T11257] [ 238.144820][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.238222][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 238.537627][T11270] FAULT_INJECTION: forcing a failure. [ 238.537627][T11270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.613417][T11270] CPU: 1 UID: 0 PID: 11270 Comm: syz.1.1784 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 238.613466][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.613480][T11270] Call Trace: [ 238.613488][T11270] [ 238.613498][T11270] dump_stack_lvl+0x241/0x360 [ 238.613536][T11270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.613568][T11270] ? __pfx__printk+0x10/0x10 [ 238.613612][T11270] should_fail_ex+0x424/0x570 [ 238.613640][T11270] _copy_from_user+0x2d/0xb0 [ 238.613672][T11270] bpf_prog_test_run_xdp+0xe0e/0x1200 [ 238.613724][T11270] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 238.613756][T11270] ? __fget_files+0x2a/0x420 [ 238.613780][T11270] ? __fget_files+0x2a/0x420 [ 238.613804][T11270] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 238.613836][T11270] bpf_prog_test_run+0x2e4/0x360 [ 238.613866][T11270] __sys_bpf+0x4ee/0x8b0 [ 238.613890][T11270] ? __pfx___sys_bpf+0x10/0x10 [ 238.613927][T11270] ? ksys_write+0x275/0x2d0 [ 238.613967][T11270] __x64_sys_bpf+0x7c/0x90 [ 238.614000][T11270] do_syscall_64+0xf3/0x230 [ 238.614027][T11270] ? clear_bhb_loop+0x45/0xa0 [ 238.614053][T11270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.614074][T11270] RIP: 0033:0x7f5f9938d169 [ 238.614092][T11270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.614111][T11270] RSP: 002b:00007f5f9a2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.614134][T11270] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938d169 [ 238.614150][T11270] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 238.614163][T11270] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 238.614177][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.614190][T11270] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 238.614223][T11270] [ 239.184711][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.214510][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 239.363967][T11296] dccp_invalid_packet: P.Data Offset(0) too small [ 239.486504][T11298] tun0: tun_chr_ioctl cmd 1074025677 [ 239.498621][T11298] tun0: linktype set to 804 [ 239.578886][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1796'. [ 239.605757][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 239.672312][T11313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1799'. [ 239.833405][T11321] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1801'. [ 239.843163][T11320] tipc: Failed to remove unknown binding: 66,1,1/1:851292821/851292823 [ 239.864447][T11320] tipc: Failed to remove unknown binding: 66,1,1/1:851292821/851292823 [ 240.224782][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.444290][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 240.477705][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 240.479495][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 240.709141][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 241.219791][T11371] FAULT_INJECTION: forcing a failure. [ 241.219791][T11371] name failslab, interval 1, probability 0, space 0, times 0 [ 241.274822][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.312442][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.2.1818 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 241.312476][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.312499][T11371] Call Trace: [ 241.312508][T11371] [ 241.312517][T11371] dump_stack_lvl+0x241/0x360 [ 241.312556][T11371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.312586][T11371] ? __pfx__printk+0x10/0x10 [ 241.312620][T11371] ? __pfx___might_resched+0x10/0x10 [ 241.312651][T11371] should_fail_ex+0x424/0x570 [ 241.312678][T11371] should_failslab+0xac/0x100 [ 241.312708][T11371] __kvmalloc_node_noprof+0x170/0x5a0 [ 241.312739][T11371] ? xt_alloc_table_info+0x3d/0xa0 [ 241.312779][T11371] xt_alloc_table_info+0x3d/0xa0 [ 241.312811][T11371] do_ip6t_set_ctl+0xba7/0x1270 [ 241.312847][T11371] ? __pfx___mutex_trylock_common+0x10/0x10 [ 241.312876][T11371] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 241.312923][T11371] ? __mutex_unlock_slowpath+0x229/0x800 [ 241.312960][T11371] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.312985][T11371] ? aa_sk_perm+0x96f/0xac0 [ 241.313017][T11371] ? ksys_write+0x24e/0x2d0 [ 241.313040][T11371] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.313071][T11371] nf_setsockopt+0x295/0x2c0 [ 241.313108][T11371] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 241.313137][T11371] do_sock_setsockopt+0x3b1/0x710 [ 241.313165][T11371] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 241.313190][T11371] ? __fget_files+0x2a/0x420 [ 241.313214][T11371] ? __fget_files+0x39d/0x420 [ 241.313231][T11371] ? __fget_files+0x2a/0x420 [ 241.313259][T11371] __x64_sys_setsockopt+0x1ee/0x280 [ 241.313289][T11371] do_syscall_64+0xf3/0x230 [ 241.313315][T11371] ? clear_bhb_loop+0x45/0xa0 [ 241.313339][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.313360][T11371] RIP: 0033:0x7fb7c018d169 [ 241.313378][T11371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.313396][T11371] RSP: 002b:00007fb7c10b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.313418][T11371] RAX: ffffffffffffffda RBX: 00007fb7c03a5fa0 RCX: 00007fb7c018d169 [ 241.313434][T11371] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 241.313447][T11371] RBP: 00007fb7c10b1090 R08: 0000000000000368 R09: 0000000000000000 [ 241.313465][T11371] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 241.313477][T11371] R13: 0000000000000000 R14: 00007fb7c03a5fa0 R15: 00007ffea4540ce8 [ 241.313509][T11371] [ 242.304746][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.988105][T11430] __nla_validate_parse: 4 callbacks suppressed [ 242.988127][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 243.101960][T11427] netlink: 'syz.4.1838': attribute type 26 has an invalid length. [ 243.180361][T11433] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.287479][T11433] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.344761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.433305][T11433] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.458330][T11445] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1849'. [ 243.511820][T11447] Cannot find del_set index 286 as target [ 243.562641][T11433] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.742250][T11433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.789297][T11433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.858429][T11433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.911882][T11433] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.996989][T11434] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.112460][T11434] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.136891][T11474] syzkaller1: entered promiscuous mode [ 244.142551][T11474] syzkaller1: entered allmulticast mode [ 244.199496][T11434] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.201156][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 244.218720][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1857'. [ 244.247497][T11476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 244.264939][T11476] gretap1: entered promiscuous mode [ 244.273568][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1857'. [ 244.342381][T11476] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 244.365765][T11434] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.384991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.392451][T11476] macvlan0: entered allmulticast mode [ 244.404175][T11476] veth1_vlan: entered allmulticast mode [ 244.410262][T11484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1860'. [ 244.429903][T11484] GUP no longer grows the stack in syz.3.1860 (11484): 200000006000-20000000a000 (200000005000) [ 244.436527][T11476] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 244.452960][T11484] CPU: 1 UID: 0 PID: 11484 Comm: syz.3.1860 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 244.452993][T11484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.453006][T11484] Call Trace: [ 244.453015][T11484] [ 244.453024][T11484] dump_stack_lvl+0x241/0x360 [ 244.453063][T11484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.453093][T11484] ? __pfx__printk+0x10/0x10 [ 244.453118][T11484] ? find_vma+0xfa/0x170 [ 244.453175][T11484] __get_user_pages+0x3b46/0x4180 [ 244.453250][T11484] ? __pfx___get_user_pages+0x10/0x10 [ 244.453279][T11484] ? __lock_acquire+0xad5/0xd80 [ 244.453298][T11484] ? __gup_longterm_locked+0xd86/0x1850 [ 244.453331][T11484] ? __pfx_down_read_killable+0x10/0x10 [ 244.453361][T11484] ? __lock_acquire+0xad5/0xd80 [ 244.453401][T11484] __gup_longterm_locked+0xec1/0x1850 [ 244.453447][T11484] ? try_get_folio+0xfd/0x6a0 [ 244.453469][T11484] ? try_grab_folio_fast+0x1d6/0x500 [ 244.453487][T11484] ? __pfx___gup_longterm_locked+0x10/0x10 [ 244.453524][T11484] ? gup_fast_fallback+0x203f/0x2980 [ 244.453556][T11484] gup_fast_fallback+0x2227/0x2980 [ 244.453631][T11484] ? __pfx_gup_fast_fallback+0x10/0x10 [ 244.453671][T11484] ? kvm_sched_clock_read+0x11/0x20 [ 244.453710][T11484] ? __lock_acquire+0xad5/0xd80 [ 244.453735][T11484] ? is_valid_gup_args+0x124/0x200 [ 244.453767][T11484] get_user_pages_fast+0xd2/0x160 [ 244.453799][T11484] ? __pfx_get_user_pages_fast+0x10/0x10 [ 244.453829][T11484] ? rcu_is_watching+0x15/0xb0 [ 244.453854][T11484] ? trace_contention_end+0x3c/0x120 [ 244.453885][T11484] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 244.453924][T11484] ? __se_sys_vmsplice+0x4bc/0x1430 [ 244.453958][T11484] iov_iter_get_pages2+0xd1/0x130 [ 244.453989][T11484] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 244.454047][T11484] __se_sys_vmsplice+0x6c6/0x1430 [ 244.454102][T11484] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 244.454142][T11484] ? __pfx_futex_wake+0x10/0x10 [ 244.454163][T11484] ? tun_chr_write_iter+0x17b/0x1f0 [ 244.454265][T11484] ? do_syscall_64+0xb6/0x230 [ 244.454295][T11484] do_syscall_64+0xf3/0x230 [ 244.454320][T11484] ? clear_bhb_loop+0x45/0xa0 [ 244.454344][T11484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.454364][T11484] RIP: 0033:0x7f1f3b38d169 [ 244.454382][T11484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.454399][T11484] RSP: 002b:00007f1f3c2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 244.454422][T11484] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38d169 [ 244.454437][T11484] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 244.454450][T11484] RBP: 00007f1f3b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.454464][T11484] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 244.454476][T11484] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 244.454510][T11484] [ 244.828257][T11485] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 244.982143][T11491] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1863'. [ 245.424709][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.759707][T11518] FAULT_INJECTION: forcing a failure. [ 245.759707][T11518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.806541][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.4.1872 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 245.806573][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.806585][T11518] Call Trace: [ 245.806593][T11518] [ 245.806601][T11518] dump_stack_lvl+0x241/0x360 [ 245.806639][T11518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.806668][T11518] ? __pfx__printk+0x10/0x10 [ 245.806709][T11518] should_fail_ex+0x424/0x570 [ 245.806736][T11518] _copy_to_user+0x31/0xb0 [ 245.806767][T11518] dev_ethtool+0x1cc4/0x1ff0 [ 245.806800][T11518] ? __pfx_dev_ethtool+0x10/0x10 [ 245.806836][T11518] ? dev_load+0x21/0x1f0 [ 245.806865][T11518] dev_ioctl+0x43c/0x1380 [ 245.806896][T11518] sock_do_ioctl+0x233/0x490 [ 245.806929][T11518] ? __pfx_sock_do_ioctl+0x10/0x10 [ 245.806959][T11518] ? __lock_acquire+0xad5/0xd80 [ 245.806993][T11518] sock_ioctl+0x644/0x900 [ 245.807027][T11518] ? __pfx_sock_ioctl+0x10/0x10 [ 245.807049][T11518] ? __fget_files+0x2a/0x420 [ 245.807067][T11518] ? __fget_files+0x2a/0x420 [ 245.807089][T11518] ? __fget_files+0x2a/0x420 [ 245.807112][T11518] ? __pfx_sock_ioctl+0x10/0x10 [ 245.807139][T11518] __se_sys_ioctl+0xf1/0x160 [ 245.807165][T11518] do_syscall_64+0xf3/0x230 [ 245.807195][T11518] ? clear_bhb_loop+0x45/0xa0 [ 245.807220][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.807240][T11518] RIP: 0033:0x7f880158d169 [ 245.807258][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.807276][T11518] RSP: 002b:00007f880241c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.807299][T11518] RAX: ffffffffffffffda RBX: 00007f88017a5fa0 RCX: 00007f880158d169 [ 245.807313][T11518] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 245.807327][T11518] RBP: 00007f880241c090 R08: 0000000000000000 R09: 0000000000000000 [ 245.807340][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.807352][T11518] R13: 0000000000000000 R14: 00007f88017a5fa0 R15: 00007ffe4bb2daf8 [ 245.807383][T11518] [ 246.169912][T11525] FAULT_INJECTION: forcing a failure. [ 246.169912][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.196821][T11525] CPU: 1 UID: 0 PID: 11525 Comm: syz.4.1877 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 246.196854][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.196866][T11525] Call Trace: [ 246.196874][T11525] [ 246.196882][T11525] dump_stack_lvl+0x241/0x360 [ 246.196921][T11525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.196949][T11525] ? __pfx__printk+0x10/0x10 [ 246.196992][T11525] should_fail_ex+0x424/0x570 [ 246.197027][T11525] _copy_from_user+0x2d/0xb0 [ 246.197057][T11525] dev_ethtool+0xe3/0x1ff0 [ 246.197083][T11525] ? __lock_acquire+0xad5/0xd80 [ 246.197109][T11525] ? __pfx_dev_ethtool+0x10/0x10 [ 246.197140][T11525] ? dev_load+0x21/0x1f0 [ 246.197168][T11525] ? dev_load+0x21/0x1f0 [ 246.197196][T11525] dev_ioctl+0x43c/0x1380 [ 246.197227][T11525] sock_do_ioctl+0x233/0x490 [ 246.197260][T11525] ? __pfx_sock_do_ioctl+0x10/0x10 [ 246.197290][T11525] ? __lock_acquire+0xad5/0xd80 [ 246.197324][T11525] sock_ioctl+0x644/0x900 [ 246.197351][T11525] ? __pfx_sock_ioctl+0x10/0x10 [ 246.197373][T11525] ? __fget_files+0x2a/0x420 [ 246.197391][T11525] ? __fget_files+0x2a/0x420 [ 246.197413][T11525] ? __fget_files+0x2a/0x420 [ 246.197436][T11525] ? __pfx_sock_ioctl+0x10/0x10 [ 246.197462][T11525] __se_sys_ioctl+0xf1/0x160 [ 246.197488][T11525] do_syscall_64+0xf3/0x230 [ 246.197514][T11525] ? clear_bhb_loop+0x45/0xa0 [ 246.197538][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.197557][T11525] RIP: 0033:0x7f880158d169 [ 246.197575][T11525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.197593][T11525] RSP: 002b:00007f880241c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.197615][T11525] RAX: ffffffffffffffda RBX: 00007f88017a5fa0 RCX: 00007f880158d169 [ 246.197630][T11525] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 246.197643][T11525] RBP: 00007f880241c090 R08: 0000000000000000 R09: 0000000000000000 [ 246.197656][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.197668][T11525] R13: 0000000000000000 R14: 00007f88017a5fa0 R15: 00007ffe4bb2daf8 [ 246.197700][T11525] [ 246.464696][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.673146][T11541] netlink: 856 bytes leftover after parsing attributes in process `syz.2.1881'. [ 246.770049][T11539] netlink: 'syz.1.1880': attribute type 26 has an invalid length. [ 246.869534][T11547] tipc: Enabling of bearer rejected, failed to enable media [ 247.033147][T11559] openvswitch: netlink: Message has 3 unknown bytes. [ 247.057689][T11559] openvswitch: netlink: Actions may not be safe on all matching packets [ 247.488285][T11587] netlink: 'syz.3.1895': attribute type 26 has an invalid length. [ 247.514811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.634861][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 247.837773][T11606] netlink: 'syz.2.1904': attribute type 4 has an invalid length. [ 247.849867][T11606] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1904'. [ 247.861321][T11609] set match dimension is over the limit! [ 248.067565][T11573] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 248.103512][T11620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 248.277240][T11631] netlink: 'syz.4.1910': attribute type 10 has an invalid length. [ 248.301319][T11631] __nla_validate_parse: 1 callbacks suppressed [ 248.301408][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1910'. [ 248.319353][T11434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.343816][T11434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.352784][T11634] syzkaller1: entered promiscuous mode [ 248.360818][T11634] syzkaller1: entered allmulticast mode [ 248.386345][T11434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.411770][T11434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.494272][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 248.544907][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.631520][T11646] set match dimension is over the limit! [ 248.687187][T11647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'. [ 248.741286][T11649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1918'. [ 248.842971][T11651] FAULT_INJECTION: forcing a failure. [ 248.842971][T11651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.862025][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.3.1919 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 248.862057][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.862070][T11651] Call Trace: [ 248.862079][T11651] [ 248.862087][T11651] dump_stack_lvl+0x241/0x360 [ 248.862125][T11651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.862154][T11651] ? __pfx__printk+0x10/0x10 [ 248.862194][T11651] should_fail_ex+0x424/0x570 [ 248.862221][T11651] _copy_to_user+0x31/0xb0 [ 248.862253][T11651] simple_read_from_buffer+0xc4/0x170 [ 248.862287][T11651] proc_fail_nth_read+0x1ef/0x260 [ 248.862313][T11651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.862338][T11651] ? rw_verify_area+0x246/0x630 [ 248.862360][T11651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.862384][T11651] vfs_read+0x21f/0xb90 [ 248.862411][T11651] ? __pfx___mutex_lock+0x10/0x10 [ 248.862435][T11651] ? __pfx_vfs_read+0x10/0x10 [ 248.862460][T11651] ? __fget_files+0x2a/0x420 [ 248.862487][T11651] ? __fget_files+0x39d/0x420 [ 248.862502][T11651] ? __fget_files+0x2a/0x420 [ 248.862529][T11651] ksys_read+0x19d/0x2d0 [ 248.862554][T11651] ? __pfx_ksys_read+0x10/0x10 [ 248.862583][T11651] ? do_syscall_64+0xb6/0x230 [ 248.862629][T11651] do_syscall_64+0xf3/0x230 [ 248.862654][T11651] ? clear_bhb_loop+0x45/0xa0 [ 248.862679][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.862698][T11651] RIP: 0033:0x7f1f3b38bb7c [ 248.862716][T11651] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.862735][T11651] RSP: 002b:00007f1f3c2ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.862756][T11651] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38bb7c [ 248.862771][T11651] RDX: 000000000000000f RSI: 00007f1f3c2ba0a0 RDI: 0000000000000007 [ 248.862784][T11651] RBP: 00007f1f3c2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 248.862797][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.862808][T11651] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 248.862841][T11651] [ 249.171770][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 249.344747][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 249.351144][T11669] Bluetooth: hci4: Opcode 0x0401 failed: -110 [ 249.545277][T11680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1929'. [ 249.584863][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.611763][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 249.660002][T11685] set match dimension is over the limit! [ 249.745851][T11679] syzkaller0: entered promiscuous mode [ 249.751492][T11679] syzkaller0: entered allmulticast mode [ 249.809710][T11689] pim6reg: entered allmulticast mode [ 249.922223][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 250.097939][T11701] set match dimension is over the limit! [ 250.128609][T11703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1938'. [ 250.626844][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.424783][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 251.583189][T11700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1936'. [ 251.664700][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.750071][T11720] FAULT_INJECTION: forcing a failure. [ 251.750071][T11720] name failslab, interval 1, probability 0, space 0, times 0 [ 251.784263][T11720] CPU: 1 UID: 0 PID: 11720 Comm: syz.4.1943 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 251.784298][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.784309][T11720] Call Trace: [ 251.784316][T11720] [ 251.784324][T11720] dump_stack_lvl+0x241/0x360 [ 251.784357][T11720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.784381][T11720] ? __pfx__printk+0x10/0x10 [ 251.784408][T11720] ? __pfx___might_resched+0x10/0x10 [ 251.784432][T11720] should_fail_ex+0x424/0x570 [ 251.784456][T11720] should_failslab+0xac/0x100 [ 251.784481][T11720] __kvmalloc_node_noprof+0x170/0x5a0 [ 251.784507][T11720] ? translate_table+0x17b/0x24b0 [ 251.784535][T11720] translate_table+0x17b/0x24b0 [ 251.784556][T11720] ? do_syscall_64+0xf3/0x230 [ 251.784574][T11720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.784617][T11720] ? __lock_acquire+0xad5/0xd80 [ 251.784642][T11720] ? __pfx_translate_table+0x10/0x10 [ 251.784693][T11720] ? copy_from_sockptr_offset+0x60/0xb0 [ 251.784719][T11720] do_ip6t_set_ctl+0xe53/0x1270 [ 251.784747][T11720] ? __pfx___mutex_trylock_common+0x10/0x10 [ 251.784770][T11720] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 251.784806][T11720] ? __mutex_unlock_slowpath+0x229/0x800 [ 251.784835][T11720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.784854][T11720] ? aa_sk_perm+0x96f/0xac0 [ 251.784880][T11720] ? ksys_write+0x24e/0x2d0 [ 251.784899][T11720] ? __pfx_aa_sk_perm+0x10/0x10 [ 251.784923][T11720] nf_setsockopt+0x295/0x2c0 [ 251.784952][T11720] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 251.784976][T11720] do_sock_setsockopt+0x3b1/0x710 [ 251.784999][T11720] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 251.785013][T11720] ? __fget_files+0x2a/0x420 [ 251.785032][T11720] ? __fget_files+0x39d/0x420 [ 251.785046][T11720] ? __fget_files+0x2a/0x420 [ 251.785068][T11720] __x64_sys_setsockopt+0x1ee/0x280 [ 251.785091][T11720] do_syscall_64+0xf3/0x230 [ 251.785111][T11720] ? clear_bhb_loop+0x45/0xa0 [ 251.785134][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.785154][T11720] RIP: 0033:0x7f880158d169 [ 251.785170][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.785184][T11720] RSP: 002b:00007f880241c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 251.785209][T11720] RAX: ffffffffffffffda RBX: 00007f88017a5fa0 RCX: 00007f880158d169 [ 251.785221][T11720] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 251.785231][T11720] RBP: 00007f880241c090 R08: 0000000000000368 R09: 0000000000000000 [ 251.785242][T11720] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 251.785253][T11720] R13: 0000000000000000 R14: 00007f88017a5fa0 R15: 00007ffe4bb2daf8 [ 251.785278][T11720] [ 252.220817][T11733] set match dimension is over the limit! [ 252.243859][T11735] FAULT_INJECTION: forcing a failure. [ 252.243859][T11735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.300082][T11735] CPU: 1 UID: 0 PID: 11735 Comm: syz.3.1948 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 252.300116][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.300129][T11735] Call Trace: [ 252.300138][T11735] [ 252.300147][T11735] dump_stack_lvl+0x241/0x360 [ 252.300194][T11735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.300225][T11735] ? __pfx__printk+0x10/0x10 [ 252.300269][T11735] should_fail_ex+0x424/0x570 [ 252.300297][T11735] _copy_from_user+0x2d/0xb0 [ 252.300329][T11735] ethtool_get_strings+0x9f/0x9b0 [ 252.300361][T11735] ? __pfx_ethtool_get_strings+0x10/0x10 [ 252.300384][T11735] ? full_name_hash+0x93/0xe0 [ 252.300414][T11735] dev_ethtool+0x1446/0x1ff0 [ 252.300448][T11735] ? __pfx_dev_ethtool+0x10/0x10 [ 252.300488][T11735] ? dev_load+0x21/0x1f0 [ 252.300516][T11735] dev_ioctl+0x43c/0x1380 [ 252.300545][T11735] sock_do_ioctl+0x233/0x490 [ 252.300577][T11735] ? __pfx_sock_do_ioctl+0x10/0x10 [ 252.300607][T11735] ? __lock_acquire+0xad5/0xd80 [ 252.300645][T11735] sock_ioctl+0x644/0x900 [ 252.300674][T11735] ? __pfx_sock_ioctl+0x10/0x10 [ 252.300695][T11735] ? __fget_files+0x2a/0x420 [ 252.300713][T11735] ? __fget_files+0x2a/0x420 [ 252.300735][T11735] ? __fget_files+0x2a/0x420 [ 252.300757][T11735] ? __pfx_sock_ioctl+0x10/0x10 [ 252.300784][T11735] __se_sys_ioctl+0xf1/0x160 [ 252.300810][T11735] do_syscall_64+0xf3/0x230 [ 252.300835][T11735] ? clear_bhb_loop+0x45/0xa0 [ 252.300859][T11735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.300880][T11735] RIP: 0033:0x7f1f3b38d169 [ 252.300899][T11735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.300917][T11735] RSP: 002b:00007f1f3c2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.300940][T11735] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38d169 [ 252.300955][T11735] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 252.300969][T11735] RBP: 00007f1f3c2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 252.300982][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.300994][T11735] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 252.301028][T11735] [ 252.568520][T11741] FAULT_INJECTION: forcing a failure. [ 252.568520][T11741] name failslab, interval 1, probability 0, space 0, times 0 [ 252.649908][T11741] CPU: 0 UID: 0 PID: 11741 Comm: syz.2.1952 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 252.649941][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.649954][T11741] Call Trace: [ 252.649962][T11741] [ 252.649971][T11741] dump_stack_lvl+0x241/0x360 [ 252.650009][T11741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.650039][T11741] ? __pfx__printk+0x10/0x10 [ 252.650074][T11741] ? __pfx___might_resched+0x10/0x10 [ 252.650125][T11741] should_fail_ex+0x424/0x570 [ 252.650154][T11741] should_failslab+0xac/0x100 [ 252.650186][T11741] __kmalloc_noprof+0xdf/0x4d0 [ 252.650215][T11741] ? bpf_test_init+0xc2/0x170 [ 252.650248][T11741] bpf_test_init+0xc2/0x170 [ 252.650280][T11741] bpf_prog_test_run_skb+0x2bf/0x1850 [ 252.650333][T11741] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 252.650359][T11741] ? __fget_files+0x2a/0x420 [ 252.650384][T11741] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 252.650421][T11741] bpf_prog_test_run+0x2e4/0x360 [ 252.650450][T11741] __sys_bpf+0x4ee/0x8b0 [ 252.650475][T11741] ? __pfx___sys_bpf+0x10/0x10 [ 252.650511][T11741] ? ksys_write+0x275/0x2d0 [ 252.650550][T11741] __x64_sys_bpf+0x7c/0x90 [ 252.650584][T11741] do_syscall_64+0xf3/0x230 [ 252.650610][T11741] ? clear_bhb_loop+0x45/0xa0 [ 252.650635][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.650656][T11741] RIP: 0033:0x7fb7c018d169 [ 252.650675][T11741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.650693][T11741] RSP: 002b:00007fb7c10b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.650716][T11741] RAX: ffffffffffffffda RBX: 00007fb7c03a5fa0 RCX: 00007fb7c018d169 [ 252.650732][T11741] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 252.650745][T11741] RBP: 00007fb7c10b1090 R08: 0000000000000000 R09: 0000000000000000 [ 252.650759][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.650771][T11741] R13: 0000000000000000 R14: 00007fb7c03a5fa0 R15: 00007ffea4540ce8 [ 252.650804][T11741] [ 252.714803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.999270][T11760] syz_tun: entered promiscuous mode [ 253.011328][T11760] erspan0: entered promiscuous mode [ 253.018468][T11760] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 253.034138][T11760] Cannot create hsr debugfs directory [ 253.039932][T11760] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 253.057868][T11760] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 253.073202][T11749] netlink: 'syz.4.1954': attribute type 26 has an invalid length. [ 253.337831][T11781] set match dimension is over the limit! [ 253.388657][T11782] __nla_validate_parse: 7 callbacks suppressed [ 253.388678][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 253.517297][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 253.608909][T11794] xt_CT: No such helper "pptp" [ 253.692363][T11801] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1973'. [ 253.744851][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.770444][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 253.850127][T11807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.274543][T11816] FAULT_INJECTION: forcing a failure. [ 254.274543][T11816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.314836][T11816] CPU: 0 UID: 0 PID: 11816 Comm: syz.1.1977 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 254.314868][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.314881][T11816] Call Trace: [ 254.314889][T11816] [ 254.314898][T11816] dump_stack_lvl+0x241/0x360 [ 254.314936][T11816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.314965][T11816] ? __pfx__printk+0x10/0x10 [ 254.315006][T11816] should_fail_ex+0x424/0x570 [ 254.315034][T11816] _copy_to_user+0x31/0xb0 [ 254.315065][T11816] simple_read_from_buffer+0xc4/0x170 [ 254.315100][T11816] proc_fail_nth_read+0x1ef/0x260 [ 254.315127][T11816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.315152][T11816] ? rw_verify_area+0x246/0x630 [ 254.315174][T11816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.315197][T11816] vfs_read+0x21f/0xb90 [ 254.315225][T11816] ? __pfx___mutex_lock+0x10/0x10 [ 254.315258][T11816] ? __pfx_vfs_read+0x10/0x10 [ 254.315285][T11816] ? __fget_files+0x2a/0x420 [ 254.315306][T11816] ? __fget_files+0x39d/0x420 [ 254.315341][T11816] ? __fget_files+0x2a/0x420 [ 254.315369][T11816] ksys_read+0x19d/0x2d0 [ 254.315397][T11816] ? __pfx_ksys_read+0x10/0x10 [ 254.315428][T11816] ? do_syscall_64+0xb6/0x230 [ 254.315457][T11816] do_syscall_64+0xf3/0x230 [ 254.315482][T11816] ? clear_bhb_loop+0x45/0xa0 [ 254.315507][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.315527][T11816] RIP: 0033:0x7f5f9938bb7c [ 254.315546][T11816] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.315564][T11816] RSP: 002b:00007f5f9a2d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.315587][T11816] RAX: ffffffffffffffda RBX: 00007f5f995a5fa0 RCX: 00007f5f9938bb7c [ 254.315602][T11816] RDX: 000000000000000f RSI: 00007f5f9a2d40a0 RDI: 0000000000000004 [ 254.315616][T11816] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 254.315629][T11816] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 254.315642][T11816] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 254.315676][T11816] [ 254.713174][T11813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1976'. [ 254.760075][T11827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1982'. [ 254.784814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.987814][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 255.058150][T11841] set match dimension is over the limit! [ 255.249804][T11843] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.293463][T11847] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1988'. [ 255.524383][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 255.637441][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 255.759200][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.824808][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.978235][T11874] set match dimension is over the limit! [ 255.994188][T11866] netlink: 'syz.3.1997': attribute type 26 has an invalid length. [ 256.255289][T11882] syzkaller1: entered promiscuous mode [ 256.274769][T11882] syzkaller1: entered allmulticast mode [ 256.462532][T11896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.865118][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.081867][T11922] set match dimension is over the limit! [ 257.271608][T11935] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 257.301855][T11938] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.302486][T11935] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.471136][T11946] FAULT_INJECTION: forcing a failure. [ 257.471136][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.491205][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.1.2023 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 257.491236][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.491250][T11946] Call Trace: [ 257.491258][T11946] [ 257.491285][T11946] dump_stack_lvl+0x241/0x360 [ 257.491324][T11946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.491355][T11946] ? __pfx__printk+0x10/0x10 [ 257.491400][T11946] should_fail_ex+0x424/0x570 [ 257.491428][T11946] _copy_from_user+0x2d/0xb0 [ 257.491460][T11946] kstrtouint_from_user+0xce/0x1a0 [ 257.491490][T11946] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 257.491519][T11946] ? __lock_acquire+0xad5/0xd80 [ 257.491554][T11946] proc_fail_nth_write+0xac/0x2d0 [ 257.491577][T11946] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 257.491608][T11946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.491638][T11946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.491670][T11946] vfs_write+0x2bc/0xd10 [ 257.491701][T11946] ? fdget_pos+0x247/0x310 [ 257.491725][T11946] ? __pfx_vfs_write+0x10/0x10 [ 257.491753][T11946] ? __fget_files+0x2a/0x420 [ 257.491774][T11946] ? __fget_files+0x39d/0x420 [ 257.491791][T11946] ? __fget_files+0x2a/0x420 [ 257.491821][T11946] ksys_write+0x19d/0x2d0 [ 257.491848][T11946] ? __pfx_ksys_write+0x10/0x10 [ 257.491879][T11946] ? do_syscall_64+0xb6/0x230 [ 257.491910][T11946] do_syscall_64+0xf3/0x230 [ 257.491935][T11946] ? clear_bhb_loop+0x45/0xa0 [ 257.491960][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.491981][T11946] RIP: 0033:0x7f5f9938bc1f [ 257.491999][T11946] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 257.492017][T11946] RSP: 002b:00007f5f9a2d4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 257.492040][T11946] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f9938bc1f [ 257.492056][T11946] RDX: 0000000000000001 RSI: 00007f5f9a2d40a0 RDI: 0000000000000004 [ 257.492069][T11946] RBP: 00007f5f9a2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 257.492082][T11946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 257.492094][T11946] R13: 0000000000000000 R14: 00007f5f995a5fa0 R15: 00007fff6914fda8 [ 257.492127][T11946] [ 257.824151][T11952] tipc: Enabling of bearer rejected, failed to enable media [ 257.914678][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.068511][T11963] netlink: 'syz.2.2029': attribute type 26 has an invalid length. [ 258.629660][T11999] FAULT_INJECTION: forcing a failure. [ 258.629660][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 258.651394][T11999] CPU: 1 UID: 0 PID: 11999 Comm: syz.3.2045 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 258.651425][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.651437][T11999] Call Trace: [ 258.651446][T11999] [ 258.651453][T11999] dump_stack_lvl+0x241/0x360 [ 258.651491][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.651520][T11999] ? __pfx__printk+0x10/0x10 [ 258.651552][T11999] ? __pfx___might_resched+0x10/0x10 [ 258.651590][T11999] should_fail_ex+0x424/0x570 [ 258.651617][T11999] should_failslab+0xac/0x100 [ 258.651648][T11999] __kmalloc_noprof+0xdf/0x4d0 [ 258.651675][T11999] ? sk_prot_alloc+0xe0/0x210 [ 258.651700][T11999] sk_prot_alloc+0xe0/0x210 [ 258.651718][T11999] ? sk_alloc+0x27/0x370 [ 258.651738][T11999] sk_alloc+0x3e/0x370 [ 258.651763][T11999] bpf_prog_test_run_skb+0x3b7/0x1850 [ 258.651814][T11999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 258.651839][T11999] ? __fget_files+0x2a/0x420 [ 258.651863][T11999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 258.651892][T11999] bpf_prog_test_run+0x2e4/0x360 [ 258.651919][T11999] __sys_bpf+0x4ee/0x8b0 [ 258.651942][T11999] ? __pfx___sys_bpf+0x10/0x10 [ 258.651976][T11999] ? ksys_write+0x275/0x2d0 [ 258.652014][T11999] __x64_sys_bpf+0x7c/0x90 [ 258.652045][T11999] do_syscall_64+0xf3/0x230 [ 258.652071][T11999] ? clear_bhb_loop+0x45/0xa0 [ 258.652094][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.652113][T11999] RIP: 0033:0x7f1f3b38d169 [ 258.652131][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.652150][T11999] RSP: 002b:00007f1f3c2ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.652172][T11999] RAX: ffffffffffffffda RBX: 00007f1f3b5a5fa0 RCX: 00007f1f3b38d169 [ 258.652187][T11999] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 258.652200][T11999] RBP: 00007f1f3c2ba090 R08: 0000000000000000 R09: 0000000000000000 [ 258.652213][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.652225][T11999] R13: 0000000000000000 R14: 00007f1f3b5a5fa0 R15: 00007ffca466b8d8 [ 258.652268][T11999] [ 258.916546][T12004] __nla_validate_parse: 10 callbacks suppressed [ 258.916566][T12004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2047'. [ 258.944962][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.082314][T12011] netlink: 566 bytes leftover after parsing attributes in process `syz.0.2051'. [ 259.333106][T12014] gretap2: entered promiscuous mode [ 259.481996][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'. [ 259.658323][T12041] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2062'. [ 259.768763][T12047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.843347][T12049] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 259.861109][T12049] Cannot find add_set index 3 as target [ 259.971399][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 259.984694][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.350295][T12034] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 260.427227][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2076'. [ 260.912615][T12093] netlink: 'syz.3.2082': attribute type 26 has an invalid length. [ 261.024797][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.260824][T12116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 261.293893][T12116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 261.362537][T12120] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 261.585617][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 261.646209][ T5845] Bluetooth: hci4: link tx timeout [ 261.651662][ T5845] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.663141][ T5845] Bluetooth: hci4: link tx timeout [ 261.671276][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.765791][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 261.970012][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 262.064676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.224479][T12163] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.331799][T12170] netlink: 'syz.3.2114': attribute type 10 has an invalid length. [ 262.348557][T12172] set match dimension is over the limit! [ 263.104823][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.371853][T12222] xt_TCPMSS: Only works on TCP SYN packets [ 263.739664][T12246] netlink: 'syz.1.2130': attribute type 16 has an invalid length. [ 263.748945][T12246] netlink: 'syz.1.2130': attribute type 17 has an invalid length. [ 263.756951][ T5845] Bluetooth: hci4: command 0x0401 tx timeout [ 263.767548][T12189] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 263.885165][T12245] tipc: Enabling of bearer rejected, failed to enable media [ 263.959696][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.971332][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.047570][T12246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.154952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.496669][T12267] __nla_validate_parse: 4 callbacks suppressed [ 264.496691][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2140'. [ 264.636499][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 264.658576][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 264.723807][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 264.790173][T12287] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2148'. [ 265.184899][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.340553][T12276] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 266.234979][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.343051][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 266.723048][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2165'. [ 267.006434][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'. [ 267.118927][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.134899][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.143468][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.153569][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.162996][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.276001][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.384216][ T1102] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 267.394068][ T1102] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 267.411937][ T1102] bond0 (unregistering): Released all slaves [ 267.427696][ T1102] bond1 (unregistering): Released all slaves [ 267.441890][ T1102] bond2 (unregistering): Released all slaves [ 267.548836][ T1102] bond3 (unregistering): Released all slaves [ 267.562821][T12341] batadv_slave_0: entered promiscuous mode [ 267.569043][T12341] batadv_slave_0: left promiscuous mode [ 267.580962][T12345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.591942][T12345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.602832][T12345] batadv_slave_0: entered promiscuous mode [ 267.616192][T12345] batadv_slave_0: left promiscuous mode [ 267.704919][ T1102] tipc: Disabling bearer [ 267.732134][ T1102] tipc: Disabling bearer [ 267.755283][ T1102] tipc: Left network mode [ 267.862409][ T1102] IPVS: stopping backup sync thread 6973 ... [ 268.301620][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 268.328008][T12386] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 268.396808][T12386] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 268.474286][T12392] FAULT_INJECTION: forcing a failure. [ 268.474286][T12392] name failslab, interval 1, probability 0, space 0, times 0 [ 268.487138][T12392] CPU: 0 UID: 0 PID: 12392 Comm: syz.4.2182 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 268.487163][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.487174][T12392] Call Trace: [ 268.487180][T12392] [ 268.487187][T12392] dump_stack_lvl+0x241/0x360 [ 268.487217][T12392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.487241][T12392] ? __pfx__printk+0x10/0x10 [ 268.487269][T12392] ? __lock_acquire+0xad5/0xd80 [ 268.487289][T12392] should_fail_ex+0x424/0x570 [ 268.487311][T12392] should_failslab+0xac/0x100 [ 268.487335][T12392] kmem_cache_alloc_noprof+0x78/0x390 [ 268.487357][T12392] ? skb_clone+0x20c/0x390 [ 268.487379][T12392] skb_clone+0x20c/0x390 [ 268.487400][T12392] bpf_clone_redirect+0xab/0x3d0 [ 268.487429][T12392] bpf_prog_208b094576c80b22+0x5f/0x64 [ 268.487458][T12392] ? unwind_get_return_address+0x4d/0x90 [ 268.487491][T12392] ? ktime_get+0x3e/0x200 [ 268.487514][T12392] ? seqcount_lockdep_reader_access+0x159/0x230 [ 268.487538][T12392] ? lockdep_hardirqs_on+0x9d/0x150 [ 268.487561][T12392] ? seqcount_lockdep_reader_access+0x1d9/0x230 [ 268.487585][T12392] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 268.487614][T12392] ? bpf_test_run+0x36f/0xa90 [ 268.487635][T12392] ? __pfx___cant_migrate+0x10/0x10 [ 268.487659][T12392] ? read_tsc+0x9/0x20 [ 268.487683][T12392] bpf_test_run+0x4ea/0xa90 [ 268.487711][T12392] ? bpf_test_run+0x36f/0xa90 [ 268.487745][T12392] ? __pfx_bpf_test_run+0x10/0x10 [ 268.487794][T12392] ? __pfx_eth_type_trans+0x10/0x10 [ 268.487819][T12392] ? convert___skb_to_skb+0x41/0x630 [ 268.487847][T12392] bpf_prog_test_run_skb+0xcc3/0x1850 [ 268.487897][T12392] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 268.487932][T12392] ? __fget_files+0x2a/0x420 [ 268.487956][T12392] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 268.487985][T12392] bpf_prog_test_run+0x2e4/0x360 [ 268.488010][T12392] __sys_bpf+0x4ee/0x8b0 [ 268.488032][T12392] ? __pfx___sys_bpf+0x10/0x10 [ 268.488067][T12392] ? ksys_write+0x275/0x2d0 [ 268.488102][T12392] __x64_sys_bpf+0x7c/0x90 [ 268.488134][T12392] do_syscall_64+0xf3/0x230 [ 268.488159][T12392] ? clear_bhb_loop+0x45/0xa0 [ 268.488185][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.488204][T12392] RIP: 0033:0x7f880158d169 [ 268.488221][T12392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.488239][T12392] RSP: 002b:00007f880241c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.488260][T12392] RAX: ffffffffffffffda RBX: 00007f88017a5fa0 RCX: 00007f880158d169 [ 268.488274][T12392] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 268.488287][T12392] RBP: 00007f880241c090 R08: 0000000000000000 R09: 0000000000000000 [ 268.488300][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.488312][T12392] R13: 0000000000000000 R14: 00007f88017a5fa0 R15: 00007ffe4bb2daf8 [ 268.488344][T12392] [ 268.822555][T12394] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2183'. [ 269.068872][ T1102] hsr_slave_0: left promiscuous mode [ 269.081257][ T1102] hsr_slave_1: left promiscuous mode [ 269.103555][ T1102] [ 269.105916][ T1102] ====================================================== [ 269.112949][ T1102] WARNING: possible circular locking dependency detected [ 269.119987][ T1102] 6.14.0-syzkaller-13305-g61f96e684edd #0 Not tainted [ 269.126766][ T1102] ------------------------------------------------------ [ 269.133843][ T1102] kworker/u8:7/1102 is trying to acquire lock: [ 269.140028][ T1102] ffff888063250e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 269.150171][ T1102] [ 269.150171][ T1102] but task is already holding lock: [ 269.157533][ T1102] ffff8880632f8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 269.169139][ T1102] [ 269.169139][ T1102] which lock already depends on the new lock. [ 269.169139][ T1102] [ 269.179544][ T1102] [ 269.179544][ T1102] the existing dependency chain (in reverse order) is: [ 269.188571][ T1102] [ 269.188571][ T1102] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 269.197045][ T1102] lock_acquire+0x116/0x2f0 [ 269.202072][ T1102] __mutex_lock+0x1a5/0x10c0 [ 269.207226][ T1102] dev_set_mtu+0x11c/0x270 [ 269.212173][ T1102] team_add_slave+0x83b/0x28b0 [ 269.217466][ T1102] do_set_master+0x579/0x730 [ 269.222582][ T1102] do_setlink+0x111d/0x43a0 [ 269.227617][ T1102] rtnl_newlink+0x17e2/0x1fe0 [ 269.232814][ T1102] rtnetlink_rcv_msg+0x80f/0xd70 [ 269.238273][ T1102] netlink_rcv_skb+0x208/0x480 [ 269.243564][ T1102] netlink_unicast+0x7f8/0x9a0 [ 269.248853][ T1102] netlink_sendmsg+0x8c3/0xcd0 [ 269.254144][ T1102] __sock_sendmsg+0x221/0x270 [ 269.259358][ T1102] ____sys_sendmsg+0x523/0x860 [ 269.264696][ T1102] __sys_sendmsg+0x271/0x360 [ 269.269845][ T1102] do_syscall_64+0xf3/0x230 [ 269.274883][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.281298][ T1102] [ 269.281298][ T1102] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 269.289477][ T1102] validate_chain+0xa69/0x24e0 [ 269.294771][ T1102] __lock_acquire+0xad5/0xd80 [ 269.299976][ T1102] lock_acquire+0x116/0x2f0 [ 269.305001][ T1102] __mutex_lock+0x1a5/0x10c0 [ 269.310116][ T1102] team_vlan_rx_kill_vid+0x36/0xe0 [ 269.315761][ T1102] vlan_vid_del+0x483/0x770 [ 269.320804][ T1102] vlan_device_event+0x23c/0x1e00 [ 269.326365][ T1102] notifier_call_chain+0x1a5/0x3f0 [ 269.331996][ T1102] dev_close_many+0x33e/0x4c0 [ 269.337194][ T1102] unregister_netdevice_many_notify+0x628/0x2510 [ 269.344042][ T1102] default_device_exit_batch+0x7ff/0x880 [ 269.350204][ T1102] cleanup_net+0x8af/0xd60 [ 269.355155][ T1102] process_scheduled_works+0xac3/0x18e0 [ 269.361223][ T1102] worker_thread+0x870/0xd50 [ 269.366339][ T1102] kthread+0x7b7/0x940 [ 269.370938][ T1102] ret_from_fork+0x4b/0x80 [ 269.375907][ T1102] ret_from_fork_asm+0x1a/0x30 [ 269.381188][ T1102] [ 269.381188][ T1102] other info that might help us debug this: [ 269.381188][ T1102] [ 269.391414][ T1102] Possible unsafe locking scenario: [ 269.391414][ T1102] [ 269.398853][ T1102] CPU0 CPU1 [ 269.404209][ T1102] ---- ---- [ 269.409569][ T1102] lock(&dev_instance_lock_key#3); [ 269.414789][ T1102] lock(team->team_lock_key#3); [ 269.422258][ T1102] lock(&dev_instance_lock_key#3); [ 269.429984][ T1102] lock(team->team_lock_key#3); [ 269.434934][ T1102] [ 269.434934][ T1102] *** DEADLOCK *** [ 269.434934][ T1102] [ 269.443071][ T1102] 5 locks held by kworker/u8:7/1102: [ 269.448348][ T1102] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 269.459233][ T1102] #1: ffffc90003e9fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 269.469769][ T1102] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 269.479189][ T1102] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 269.489211][ T1102] #4: ffff8880632f8d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 269.501236][ T1102] [ 269.501236][ T1102] stack backtrace: [ 269.507123][ T1102] CPU: 1 UID: 0 PID: 1102 Comm: kworker/u8:7 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 269.507144][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.507156][ T1102] Workqueue: netns cleanup_net [ 269.507180][ T1102] Call Trace: [ 269.507186][ T1102] [ 269.507193][ T1102] dump_stack_lvl+0x241/0x360 [ 269.507218][ T1102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.507240][ T1102] ? __pfx__printk+0x10/0x10 [ 269.507262][ T1102] ? print_lock+0x171/0x1a0 [ 269.507283][ T1102] print_circular_bug+0x2e1/0x300 [ 269.507305][ T1102] check_noncircular+0x142/0x160 [ 269.507329][ T1102] validate_chain+0xa69/0x24e0 [ 269.507369][ T1102] __lock_acquire+0xad5/0xd80 [ 269.507388][ T1102] lock_acquire+0x116/0x2f0 [ 269.507402][ T1102] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 269.507418][ T1102] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 269.507437][ T1102] __mutex_lock+0x1a5/0x10c0 [ 269.507453][ T1102] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 269.507469][ T1102] ? debug_object_assert_init+0x30e/0x4d0 [ 269.507486][ T1102] ? team_vlan_rx_kill_vid+0x36/0xe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.507518][ T1102] ? __pfx___mutex_lock+0x10/0x10 [ 269.507541][ T1102] ? addrconf_ifdown+0xbd8/0x1b10 [ 269.507563][ T1102] team_vlan_rx_kill_vid+0x36/0xe0 [ 269.507580][ T1102] vlan_vid_del+0x483/0x770 [ 269.507607][ T1102] vlan_device_event+0x23c/0x1e00 [ 269.507633][ T1102] ? br_device_event+0x28f/0xae0 [ 269.507653][ T1102] ? __pfx_phonet_device_notify+0x10/0x10 [ 269.507669][ T1102] ? __pfx_vlan_device_event+0x10/0x10 [ 269.507693][ T1102] ? __pfx_br_device_event+0x10/0x10 [ 269.507712][ T1102] ? raw_notifier+0x9d/0x740 [ 269.507733][ T1102] ? isotp_notifier+0xa4/0x6b0 [ 269.507747][ T1102] ? cgw_notifier+0xd8/0x3b0 [ 269.507775][ T1102] ? packet_notifier+0x76/0xa30 [ 269.507795][ T1102] notifier_call_chain+0x1a5/0x3f0 [ 269.507834][ T1102] dev_close_many+0x33e/0x4c0 [ 269.507857][ T1102] ? __pfx_dev_close_many+0x10/0x10 [ 269.507882][ T1102] unregister_netdevice_many_notify+0x628/0x2510 [ 269.507905][ T1102] ? lockdep_hardirqs_on+0x9d/0x150 [ 269.507924][ T1102] ? __local_bh_enable_ip+0x168/0x200 [ 269.507940][ T1102] ? batadv_tt_local_remove+0x119/0x230 [ 269.507955][ T1102] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 269.507970][ T1102] ? batadv_tt_local_remove+0x119/0x230 [ 269.507985][ T1102] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 269.508010][ T1102] ? unregister_netdevice_queue+0x2c4/0x400 [ 269.508031][ T1102] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 269.508054][ T1102] default_device_exit_batch+0x7ff/0x880 [ 269.508082][ T1102] ? __pfx_default_device_exit_batch+0x10/0x10 [ 269.508106][ T1102] ? cfg802154_switch_netns+0x21b/0x3d0 [ 269.508133][ T1102] ? cfg802154_pernet_exit+0xc3/0xe0 [ 269.508146][ T1102] ? __pfx_default_device_exit_batch+0x10/0x10 [ 269.508170][ T1102] cleanup_net+0x8af/0xd60 [ 269.508195][ T1102] ? __pfx_cleanup_net+0x10/0x10 [ 269.508223][ T1102] ? process_scheduled_works+0x9cb/0x18e0 [ 269.508240][ T1102] process_scheduled_works+0xac3/0x18e0 [ 269.508269][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.508290][ T1102] ? assign_work+0x367/0x3d0 [ 269.508309][ T1102] worker_thread+0x870/0xd50 [ 269.508333][ T1102] ? __kthread_parkme+0x1a8/0x200 [ 269.508353][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 269.508371][ T1102] kthread+0x7b7/0x940 [ 269.508394][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 269.508412][ T1102] ? __pfx_kthread+0x10/0x10 [ 269.508432][ T1102] ? __pfx_kthread+0x10/0x10 [ 269.508453][ T1102] ? __pfx_kthread+0x10/0x10 [ 269.508474][ T1102] ? __pfx_kthread+0x10/0x10 [ 269.508494][ T1102] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.508521][ T1102] ? lockdep_hardirqs_on+0x9d/0x150 [ 269.508539][ T1102] ? __pfx_kthread+0x10/0x10 [ 269.508560][ T1102] ret_from_fork+0x4b/0x80 [ 269.508576][ T1102] ? __pfx_kthread+0x10/0x10 [ 269.508598][ T1102] ret_from_fork_asm+0x1a/0x30 [ 269.508618][ T1102] [ 269.521810][ T5854] Bluetooth: hci4: command tx timeout [ 270.005815][ T1102] pim6reg (unregistering): left allmulticast mode [ 270.075704][ T1102] pimreg (unregistering): left allmulticast mode [ 270.593831][ T5843] syz_tun (unregistering): left promiscuous mode [ 270.804184][T12400] syz_tun (unregistering): left promiscuous mode