last executing test programs: 2.629273592s ago: executing program 4 (id=5021): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00010002000000400000001c141400"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7, 0x700, 0xffffff7f, 0x3ff, {{0x8, 0x4, 0x2, 0x6, 0x20, 0x66, 0x0, 0x74, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0xb, "625901a2917dd14b30"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x5, 0x0, 0x8, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x80, 0x80, 0xd}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x700, 0x15c, 0x400, {{0x2f, 0x4, 0x0, 0x28, 0xbc, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x23, 0x3, 0x1, [{@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xbb72}, {@private=0xa010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x3, [{@multicast2, 0xfff}, {@broadcast, 0x8000}, {@local, 0xfff}, {@local, 0x3}]}, @ssrr={0x89, 0x17, 0x4c, [@loopback, @local, @multicast2, @empty, @remote]}, @end, @noop, @ra={0x94, 0x4, 0x1}, @noop, @noop, @ssrr={0x89, 0x27, 0xf1, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast2, @multicast1, @rand_addr=0x64010100, @loopback, @broadcast, @empty]}]}}}}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb4f3}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xb7}]}}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x2, 0x2, @remote, @local, 0x700, 0x700, 0x3, 0x2e4472dd}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x8000, 0x1, 0x0, 0xffff, {{0x19, 0x4, 0x1, 0x6, 0x64, 0x65, 0x0, 0x2a, 0x29, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x6, 0xd, "bf3542084466b7f90b9a0e"}, {0x0, 0x3, "b3"}, {0x2, 0x2}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x85, 0x1, 0x5, [{@multicast2, 0x6}, {@loopback, 0x8}, {@multicast1, 0xfffffffe}, {@empty, 0x200}, {@local, 0xc}, {@private=0xa010100, 0x4a75}]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x3f}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'gre0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x700, 0x80, 0x2, 0x8, {{0x22, 0x4, 0x3, 0x30, 0x88, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x17, 0xa2, [@local, @private=0xa010101, @broadcast, @broadcast, @empty]}, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0xa, [{@multicast2, 0x4}]}, @generic={0x88, 0x3, '!'}, @cipso={0x86, 0x4c, 0x2, [{0x1, 0x4, "d7d7"}, {0x0, 0x3, "02"}, {0x6, 0xf, "c4f8f962d2e39c4ff5031b05b0"}, {0x7, 0x11, "85fac12894c6aa0d88cb041c1e8c4c"}, {0x7, 0xe, "409b156304ecc59b864fe163"}, {0x7, 0x2}, {0x2, 0xa, "514341d782e84326"}, {0x1, 0x5, "e87b43"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf25020000006400018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030003000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f627269646765001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="340001801400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f746f5f626174616476004400018008000100", @ANYRES32=r11, @ANYBLOB="480001b0", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e30000000000000000000140002007465616d5f736c6176655f300000000018000180140002006d6163736563300000000000000000003c0001801400020070696d36726567310000000000000000080003000200000008000100", @ANYRES32=r14, @ANYBLOB="14000200697036677265746170300000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000300000008000300000000001400018008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x178}}, 0x20000000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r1, r0, 0xa, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'}) 2.565472718s ago: executing program 2 (id=5022): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080008400000285908000640000000000500050000004000050001"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000500000000001c0000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08"], 0x122}}, 0x10) 2.539221457s ago: executing program 1 (id=5024): socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r3, @ANYBLOB="080012000a8edaca94d4c348b3010000"], 0x28}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2f, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000008000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000a606945a7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"/280], &(0x7f0000000180)='syzkaller\x00', 0x74d2, 0x4c, &(0x7f0000000540)=""/76, 0x2833f5d8f334c7c3, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000600)=[{0x4, 0x5, 0x1, 0x8}, {0x4, 0x3, 0xa, 0x8}], 0x10, 0x3, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) ppoll(&(0x7f0000000700)=[{r0, 0x4}, {r4, 0x4202}, {0xffffffffffffffff, 0x4310}, {r4, 0xd700}, {r5, 0x2080}], 0x5, &(0x7f0000000780)={r6, r7+10000000}, &(0x7f00000007c0)={[0x8]}, 0x8) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000001640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, r13, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r15, 0x1, 0x13, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) 2.397450101s ago: executing program 2 (id=5025): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108004000b0004000680080002"], 0x30}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) (async) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x1, 0x1, 0x2, [0xc4d2, 0x7]}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x40, 0x80, 0x6, 0x4, {{0x1e, 0x4, 0x1, 0x12, 0x78, 0x65, 0x0, 0x3, 0x4, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x7b, 0x1, 0x1, [{@multicast1, 0x6}]}, @ssrr={0x89, 0x17, 0x97, [@local, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xc8, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x0, [{@broadcast, 0x59e9}, {@remote, 0x100}, {@rand_addr=0x64010102, 0xa}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}]}, @lsrr={0x83, 0xb, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @ra={0x94, 0x4}]}}}}}) 2.390341165s ago: executing program 3 (id=5026): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="010029bd7000fddbdfa501000000080002000200000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x400d4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r6, 0x0, 0x20040044) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, 0x0, 0x4) pipe(0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x24000cc1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000fe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d617371000000001400028008000240000000080800014000000009140000001100010000"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.288376265s ago: executing program 2 (id=5027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0xb}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 2.242129263s ago: executing program 3 (id=5028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0xf5) 2.169394808s ago: executing program 2 (id=5029): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000001701000003000000030000000000000018000000000000000600"/48], 0x30}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r7 = socket$inet_icmp(0x2, 0x2, 0x1) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xc, 0x6, 0x7}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(r2) 1.715778209s ago: executing program 4 (id=5035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x20) 1.658872175s ago: executing program 4 (id=5036): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x19, 0x0, &(0x7f00000000c0)="ffff1fc42f5a0092733b805cdb3e60464ae80ec756434150a4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000300)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000000)="c3a81354e8daba059f19d6a3121fc3fefcaadeabdda075f35a2306b6451e4bfbc21ea94c055fc370313eff5806da65d465ccb8655f688a13a7f661b102fc516b54faac78205b78ee5f0d6e28d200f968e4", 0x2, r3}, 0x38) 1.635448973s ago: executing program 0 (id=5037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108000200000000000000001f00", @ANYRES32=0x0, @ANYBLOB="fe000000000000000c00298000000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x20048090) 1.541442863s ago: executing program 4 (id=5038): socket(0x11, 0x3, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pipe(&(0x7f0000000240)) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.538626192s ago: executing program 1 (id=5039): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="010029bd7000fddbdfa501000000080002000200000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x400d4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r6, 0x0, 0x20040044) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, 0x0, 0x4) pipe(0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0xba01, 0x0, 0x24000cc1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000fe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d617371000000001400028008000240000000080800014000000009140000001100010000"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.521735842s ago: executing program 4 (id=5040): unshare(0x62020400) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x2, 0x400, {{0x21, 0x4, 0x3, 0x8, 0x84, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0xc, 0x0, 0x7, [0xffffffff, 0x1]}, @cipso={0x86, 0x62, 0x3, [{0x6, 0x8, "64929213c173"}, {0x1, 0xc, "0f19fa186e413ad995d3"}, {0x2, 0x10, "020f3b65acdd729900cbf55d5177"}, {0x7, 0x11, "35f6a068b3b2c01b2c41541c0805a1"}, {0x1, 0xa, "58dcb35b15947730"}, {0x6, 0x10, "e695890dd5fe972dc8cc1c39945e"}, {0x0, 0xd, "bf1e6c4ec6c99ee4a2b770"}]}, @noop]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) socket$netlink(0x10, 0x3, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x4a, &(0x7f0000000080), 0x68) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000012140100000000000000000008004b0013000000080003000000000008000180"], 0x28}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x7, 0x6, 0x8, 0x42000, r1, 0x4, '\x00', r2, r7, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 1.47289577s ago: executing program 0 (id=5041): unshare(0x62040200) (async) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x8) (async) listen(r0, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) (async) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket(0x9, 0x2, 0x10000) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xf, 0xfff2}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e9e2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000013c0)=ANY=[@ANYRES16=r3, @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100e5ff0700020000000000050005000000000008000300010000004800018005000200200000000600050002000000080006", @ANYBLOB="dc79fd448ddae99a78a2542bc7c57b967aa57b4ad54493c5676cc97e42864eed747d61a18b8641d9758f22888c41a5828100f8685b367e446c61235a4e88007e2fc6476125cc00e53a40fa6dc00c9d49649d8639c75cfa9925f832c5173ea3a074bed5e4cd841f5468f418dbe12f16dd4fcf9dd43c203d42ab956b09487053d3faee8e1374b1b8d9fdd7ca351367dae9158730270ad3b2d0eb", @ANYRES8=r1, @ANYRES64=r6, @ANYRESDEC=r9, @ANYRESHEX=r6], 0x84}}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(r10, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r11, &(0x7f00000003c0)=""/4096, 0x1000, 0x2df) 1.193390046s ago: executing program 3 (id=5042): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x4040000) 1.129610153s ago: executing program 2 (id=5043): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x220, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x200}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r1}]}, @nested={0x1f2, 0x44, 0x0, 0x1, [@generic="6e2b682ba1a5e387ce2d13ed1acf3323d679bd5363b89de71dec721c482b7e6f0755c362a096e0", @generic="fd5baaa2fbb1bea5f52fe97f3ba17bdf991fe3b8de1c81b8aadbc4fa24fe5463fc287e3def3867c2941e34b1cd51d51d2604235048a2da8d09d3f340577c9edad533f8a07c9c8b826895b954210fdc145d866bc2d4fc033930a0731e56d943bd8f30e0f5bd10d80ce3faa97df4bdaa6651e2193a9e57360f28cd9f4cea5f3040b41cf620ec75fbbec59281a2da261fbedaaf95ac5d6f7ea5e717de6ae356f7b03ea0329a9679c08bd0e1efcfd3ab15976390d7e7d5c78d4d034ba6cf61dab9fa09926d21766ad3cd1d7fee603db19a49c7f4fed891a28eb89d23a4f9763f8f3d5b92e01a658177386f761ca7d97320f471166812", @generic="b11e108d9f1b640303aa9678b502a9528344af340a384ea5724678edd885c833300854a215ee16f0409f9ebf4bceb6fb28942ce1cee26b81c84812374d814d75a09e347481d6ed7461dd81c73ffc8c95bb8e7de5346a579a697ef91ab766fb3c4efc277162c2c2de1465dced475d2560a922e19efd8f57711bf26d4ab8a93ec77b4da1de14b6ba90945c4f686cfbf2652f3a4b534a7b7a6fb0cb562ffe81bdb80d9468c515d160e6817aad86b7df2b7b2a32150989b4b25c9b4fa3bc78bbb57f350be46ffae906767356c67f3ae4e44622d21f"]}]}, 0x220}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000140)={'gretap0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x713, 0x800000, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r8, 0xee00}, {@in=@loopback, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x8540}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "25cac521"}}]}, 0x140}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 1.112329838s ago: executing program 4 (id=5044): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x44b505, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e81003b0086dd6d0000000009110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20000990787a"], 0x43) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000000000)=r6, 0xffffff98) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) 1.02532387s ago: executing program 3 (id=5045): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02491365a2e5a14f3b8c000000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0xf0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r9, 0x60b, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x8c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x68, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x67}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0xc841) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xb, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r12}, 0x38) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r12, &(0x7f0000000100), &(0x7f0000000580)=""/4096}, 0x20) 892.771352ms ago: executing program 1 (id=5046): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000ffffff80000a0000000000050005"], 0x70}, 0x1, 0x7}, 0x40000c0) 825.018505ms ago: executing program 0 (id=5047): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}, 0x1, 0x0, 0x40030000000000}, 0x0) 700.191402ms ago: executing program 1 (id=5048): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x20400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x8}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, r4, 0xdb7c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{0xfffffffffffffffd}], 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r5, @ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x40000, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb700, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x700}, 0x48) 614.346795ms ago: executing program 0 (id=5049): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000200)="7979f3b3d11c693aa1f87b90d84ce8104bc8f765929448fc164396f1dd2e2dae29d9e9de560deee475175c4d77159c") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) vmsplice(r3, &(0x7f0000001500)=[{&(0x7f0000000180)="db", 0x1}], 0x1, 0x0) listen(r1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = accept4(r1, 0x0, 0x0, 0x0) listen(r6, 0x7f) 484.39799ms ago: executing program 2 (id=5050): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x24000045) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x1}) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000580)={0x6, 'veth0_to_team\x00', {}, 0x5}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)}, 0x100) connect$packet(r7, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r7, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'veth0_vlan\x00', {0x4}, 0xfff7}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x280c82, 0x0) write$tun(r8, &(0x7f00000006c0)={@val={0x0, 0x88f7}, @val={0x2, 0x0, 0x4, 0x10, 0xa1, 0xff}, @x25={0x1, 0x0, 0xdb, "d4c955a52598a4a2d7b5c94a3a135de1a09efb35a632f43b20aef4cb57d22a8ec62dbb1af0d1afb1d2fcc8428fd2ac2076431670844961a92df7551649d89bc09c09ad7f4b7d163969ac1cf0"}}, 0x5d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf251800000008000300", @ANYRES32=r11, @ANYBLOB="0800308004000180cc1c9b2fd81825db9b1b362e8f07ca7d4cf738a3904219f980421c5ab9db277de7f56a8d112cbf6b9771375b620feab527d0d68170d43850cd8d9ccd36fe9c9bd35f599e7404121d7f250ba854a69a71a9305635670c97730075f2eaebce4f0785f5fdbcb678bb63f3fe5587e339ac7cb1728dfdbeaae8bbaf99a5614c7ac97ec407b8648a4e22ab5b58a976e2d7910c368ffcc16149496662f0e17e001099d0ccd7b13aead0aa488548919a4ba89f62e9af0906cef895b252"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) 397.481151ms ago: executing program 0 (id=5051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000000}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x53) 321.723079ms ago: executing program 3 (id=5052): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, 0x0, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xa, 0x148, 0x128, 0x60, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010101, 0x0, 0xffffff00, 'geneve1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x3, 0x18}, 0x0, 0xe8, 0x128, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x2, 0x9, 0x7}}}, @common=@socket0={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4b, 0x1, "3af541db8c08e08f54ba7bb205447564a7958ab9468a473c6181401de681"}}}, {{@ip={@empty, @private=0xa010102, 0xffffffff, 0x0, 'geneve0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2b8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r5 = accept4(r3, &(0x7f0000000400)=@can, &(0x7f00000000c0)=0x80, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000008000000140001800800050000001100040001"], 0x28}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r7, 0x6, 0x1070bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000080)={'geneve0\x00'}) 267.149638ms ago: executing program 1 (id=5053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000ffffffea0001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 113.175851ms ago: executing program 1 (id=5054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @bcast}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@empty, @multicast, @void, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0x15, 0x2, 0x0, 0x0, "09c2c140c757cee79d614c48efb8db37ff0630da395256b14d9ca8b71615886ba803e98ff67ddf461d00b2b1cfaad7b07707b9ff909ffb0d43bcb7a4e4b29bad"}}}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 59.718802ms ago: executing program 3 (id=5055): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000100)={@loopback, @remote, 0x1, 0x2, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x18) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)="7d959b65da8bf1487bc7762249088a", 0xf}], 0x1) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) close(r4) sendmsg$inet(r0, &(0x7f0000002680)={&(0x7f0000000200)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000002580)=[{&(0x7f0000000240)="a2aa06795bce6e06b1f90bdf5712ee24bd448fd0f6e1c97818bcf91176e9b757837c7fb67c47e1ae1bf0a82eb931e16058cc5751afef07bfe047dccbda6dd5d3b89785e06cc8541d45540868bcf4fd509afbef0b358917cf22e3f6aca41c179814873f34fe3257f81873ce82ec7f2013787f91383b19b3623b62b0bfd7dbfa8819f68a161e40e8998e96abf1bd34f3c870f0598e0e1d7c", 0x97}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="c599504528a556091bd0094bd43442d9e544e942fc9f62ee5329dffb34ec6fddd402d065bcb226d09bfecba6a766bfb30a0f5b27145e267addfeb7a9f7672e6c222096911418533caa05d226f26577c8e7ce3670ff86fd088d707b2e2bea0dff360f86b096d8c796a726483fbc540c55ccd59324eaa07df21a83fd493f471cadc8fe766bc9ba93d75cb772e6cac48133cad1894383a019b6b24703512eb42943ed07e5eb0ec9cc0bc3ab506587a45d6d4c855cb3fd9c54777572b634e63f00f1661e58b71d3ffcc2b50ce990d27e9899c1b4c9", 0xd3}, {&(0x7f0000001400)="4e9d3fb7d31377f95c5bb4fa66d131724a172e2bc85b04332862353941d375b8a831f140c34df42ad24cb25ee6804ae2dfcb6eb2233c85ba88c44f261960fa9f9b04a3867a4606dd13475d77b65445b1", 0x50}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="5562ca429fa0aaa7a00bc0b06ab5912eae08f110a4925c054d304a3bcd4a00f2baaddef44ccf9206c4b7fdda11a7b5463ea03ada9b1198b39a59a8bdaa900b12", 0x40}, {&(0x7f00000024c0)="e07d535f399fffd9cbbca0fb6c6abb1172169378e576f719c9a17ffa21d85bef9cd6a9d34d33e1dc56458f9e15bbd66d3d051fa6895f61afddb9fb2ac0ec24d3913d5a82871f084b84c3d3d73a1d7e6264ec86a44121bda370a75246710219b8ca0bf12c0932cd7098fca2618ff650d4c34f0ef0f37c72f8018d62ebe1c65e2be6e396f4c90534c1a0a686ab435a6e582ab9ad", 0x93}], 0x7, &(0x7f0000002600)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xa4, 0x1, 0xa, [{@broadcast, 0x101}, {@multicast2, 0x200}, {@empty, 0x92}, {@multicast1, 0x9}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb20b}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x1ff}]}, @timestamp_prespec={0x44, 0xc, 0xe, 0x3, 0x0, [{@private=0xa010100, 0x7}]}, @ssrr={0x89, 0x1b, 0x5e, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote, @loopback, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xd6, 0x0, 0x8, [0x8000]}]}}}], 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=@bloom_filter={0x1e, 0x4, 0x4, 0x10001, 0x0, r4, 0x200, '\x00', r2, r4, 0x1, 0x3, 0x0, 0xe, @void, @value, @void, @value}, 0x50) connect$inet(r4, &(0x7f0000002740)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet6(r4, &(0x7f0000002780)="7270dbebb85210da737672d0c61f9db41a658c0e833c8924bca26bb04a804c4a86993fc4f6758092927d0ee0f88fd4e24826294028263b3babeb1c93c238a2ef6a16637aa648b07e647ba4b0dba69a9d164385cdcb44ac9ad060f6c836e24878a9fee58dd0fa9ba1a2ecfefd6b19d56135ad6d78bb4d31025a41f208191e35225143ba423bee80500e2c6ce37690074eaa063f2978bab48bc357de0c5daeb395b5270e028182e724f1c9343e47351c1f87e4cb731e9af95dc17aab85f17f34ccd2b1b938b3742c99af522a6cadcd2aff751ee6e7d803f8e5d5424eaa5a66fd4b74d696ba0a", 0xe5, 0xc000, &(0x7f0000002880)={0xa, 0x4e21, 0x2, @loopback, 0x4}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000028c0)={r3, r4}) r5 = accept$phonet_pipe(r4, &(0x7f0000002900), &(0x7f0000002940)=0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000002980)) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000029c0)) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000002a00)) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000002a40), 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000002a80)=""/21, &(0x7f0000002ac0)=0x15) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000002b00)={r1, 0x1, 0x6, @random="6c40a4c33969"}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b80)=@o_path={&(0x7f0000002b40)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$int_in(r0, 0x5421, &(0x7f0000002bc0)=0xcbc4) r7 = openat$cgroup(r4, &(0x7f0000002c00)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000002c40), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002c80)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={0xffffffffffffffff, 0x0, 0x50, 0x6d, &(0x7f0000002cc0)="ccdcf02ef4f7b0df272aec55f777996043cf9a37641bb222c0d4f4b8e75a88b9478cbc92d600c61e83e3700d91dce566ed3e1c2c59bfbdb5418948dfa37d478500bd2aed17a52e5b791a427508c97b86", &(0x7f0000002d40)=""/109, 0x6, 0x0, 0x70, 0x48, &(0x7f0000002dc0)="20ce9ab3444e3e30f89828e605b3d47400c409321efe691c407fb4c4fa3ef440e88ceae1bad9ddd7821957eae588dec4ec30e44d3aa4cb21f072518f10bbfcdd5c788f0a55037454c0d1c946b315fac79fafbb0e53e107fa87445b3b5db884e4d36957bbfdb21ca5c7841c8a240f84ef", &(0x7f0000002e40)="806efa2c1dbd3e3def5b23ad2846e163950becec53b418458e4330bfc09aac50d78eabc9ef1c3b2c29dd395ac204e6fb528ee5a3c6d053fc346c3dbbf608de9f04bdf1f26ec8ef2b", 0xe58465109c12bf83, 0x0, 0x1}, 0x50) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r8, &(0x7f0000002f40), 0x0, 0x4008900) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000002f80)=""/110, &(0x7f0000003000)=0x6e) 0s ago: executing program 0 (id=5056): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="010029bd7000fddbdfa501000000080002000200000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x400d4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r6, 0x0, 0x20040044) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, 0x0, 0x4) pipe(0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0xba01, 0x0, 0x24000cc1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000fe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d617371000000001400028008000240000000080800014000000009140000001100010000"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): .0.0.2:0 - no destination available [ 356.804605][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3575'. [ 356.867284][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 356.891560][T16026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3578'. [ 356.951454][T16028] netlink: 'syz.4.3580': attribute type 8 has an invalid length. [ 356.961588][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3580'. [ 357.161069][T16032] netlink: 'syz.0.3582': attribute type 10 has an invalid length. [ 357.188113][T16032] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 357.208493][T16035] FAULT_INJECTION: forcing a failure. [ 357.208493][T16035] name failslab, interval 1, probability 0, space 0, times 0 [ 357.228699][T16035] CPU: 1 UID: 0 PID: 16035 Comm: syz.3.3583 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 357.228732][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.228742][T16035] Call Trace: [ 357.228748][T16035] [ 357.228756][T16035] dump_stack_lvl+0x241/0x360 [ 357.228791][T16035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.228809][T16035] ? __pfx__printk+0x10/0x10 [ 357.228827][T16035] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 357.228849][T16035] ? __pfx___might_resched+0x10/0x10 [ 357.228874][T16035] should_fail_ex+0x40a/0x550 [ 357.228899][T16035] should_failslab+0xac/0x100 [ 357.228922][T16035] kmem_cache_alloc_node_noprof+0x77/0x380 [ 357.228942][T16035] ? __alloc_skb+0x1c3/0x440 [ 357.228961][T16035] __alloc_skb+0x1c3/0x440 [ 357.228981][T16035] ? __pfx___alloc_skb+0x10/0x10 [ 357.228999][T16035] ? netlink_autobind+0xd6/0x2f0 [ 357.229018][T16035] ? netlink_autobind+0x2b0/0x2f0 [ 357.229043][T16035] netlink_sendmsg+0x634/0xcb0 [ 357.229073][T16035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.229098][T16035] ? aa_sock_msg_perm+0x91/0x160 [ 357.229124][T16035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.229143][T16035] __sock_sendmsg+0x221/0x270 [ 357.229167][T16035] ____sys_sendmsg+0x53a/0x860 [ 357.229190][T16035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.229205][T16035] ? __fget_files+0x2a/0x410 [ 357.229228][T16035] ? __fget_files+0x2a/0x410 [ 357.229255][T16035] __sys_sendmmsg+0x36a/0x720 [ 357.229283][T16035] ? __pfx___sys_sendmmsg+0x10/0x10 [ 357.229309][T16035] ? __pfx_lock_release+0x10/0x10 [ 357.229329][T16035] ? kstrtouint_from_user+0x128/0x190 [ 357.229366][T16035] ? ksys_write+0x22a/0x2b0 [ 357.229383][T16035] ? __pfx_lock_release+0x10/0x10 [ 357.229410][T16035] ? sb_end_write+0xe9/0x1c0 [ 357.229430][T16035] ? vfs_write+0x7fa/0xd10 [ 357.229447][T16035] ? __mutex_unlock_slowpath+0x227/0x800 [ 357.229490][T16035] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.229515][T16035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.229538][T16035] ? do_syscall_64+0x100/0x230 [ 357.229559][T16035] __x64_sys_sendmmsg+0xa0/0xb0 [ 357.229578][T16035] do_syscall_64+0xf3/0x230 [ 357.229596][T16035] ? clear_bhb_loop+0x35/0x90 [ 357.229619][T16035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.229638][T16035] RIP: 0033:0x7f370978d169 [ 357.229651][T16035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.229665][T16035] RSP: 002b:00007f370a5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.229683][T16035] RAX: ffffffffffffffda RBX: 00007f37099a5fa0 RCX: 00007f370978d169 [ 357.229695][T16035] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000007 [ 357.229707][T16035] RBP: 00007f370a5e5090 R08: 0000000000000000 R09: 0000000000000000 [ 357.229716][T16035] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 357.229726][T16035] R13: 0000000000000000 R14: 00007f37099a5fa0 R15: 00007ffc9f56fe58 [ 357.229752][T16035] [ 357.664442][T16037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.770553][T16044] netlink: 'syz.2.3588': attribute type 1 has an invalid length. [ 357.785771][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.226362][T16078] syzkaller0: entered allmulticast mode [ 358.362454][T16084] netlink: 'syz.0.3601': attribute type 8 has an invalid length. [ 358.482967][T16088] netlink: 'syz.0.3602': attribute type 8 has an invalid length. [ 358.823430][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.927765][T16091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.007150][T16095] bond0: (slave bridge0): Releasing backup interface [ 359.039789][T16095] vlan1: entered allmulticast mode [ 359.292507][T16117] netlink: 'syz.4.3610': attribute type 1 has an invalid length. [ 359.362605][T16117] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 359.443278][T16122] netlink: 'syz.3.3612': attribute type 10 has an invalid length. [ 359.741847][T16142] netlink: 'syz.0.3618': attribute type 41 has an invalid length. [ 359.844036][T16142] veth3: left promiscuous mode [ 359.863428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.906157][T16142] bond1: left promiscuous mode [ 360.111889][T16154] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.286068][T16176] netlink: 'syz.3.3631': attribute type 8 has an invalid length. [ 360.903478][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.227845][T16210] __nla_validate_parse: 21 callbacks suppressed [ 361.227864][T16210] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3648'. [ 361.282326][T16213] netlink: 'syz.3.3650': attribute type 10 has an invalid length. [ 361.322153][T16210] netlink: 'syz.2.3648': attribute type 1 has an invalid length. [ 361.778674][T16224] lo speed is unknown, defaulting to 1000 [ 361.826076][T16232] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3655'. [ 361.837325][T16192] lo speed is unknown, defaulting to 1000 [ 361.943467][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.102959][T16239] netlink: 'syz.3.3657': attribute type 1 has an invalid length. [ 362.176749][T16243] netlink: 'syz.4.3658': attribute type 8 has an invalid length. [ 362.185992][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3658'. [ 362.196481][T16243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3658'. [ 362.241779][T16224] lo speed is unknown, defaulting to 1000 [ 362.339732][T16244] netlink: 'syz.3.3659': attribute type 10 has an invalid length. [ 362.449835][T16224] lo speed is unknown, defaulting to 1000 [ 362.449849][T16192] lo speed is unknown, defaulting to 1000 [ 362.661336][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3664'. [ 362.756603][T16192] lo speed is unknown, defaulting to 1000 [ 362.768501][T16258] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3665'. [ 362.938749][T16262] netlink: 'syz.3.3666': attribute type 41 has an invalid length. [ 362.983424][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.163821][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3668'. [ 363.799556][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3674'. [ 363.862123][T16278] netlink: 'syz.0.3672': attribute type 10 has an invalid length. [ 364.023494][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.081024][T16296] netlink: 'syz.1.3679': attribute type 8 has an invalid length. [ 364.090069][T16303] Cannot find set identified by id 0 to match [ 364.114501][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 364.137579][T16302] lo speed is unknown, defaulting to 1000 [ 364.155192][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3679'. [ 364.490996][T16310] lo speed is unknown, defaulting to 1000 [ 364.568082][T16317] netlink: zone id is out of range [ 364.573943][T16317] netlink: zone id is out of range [ 364.580129][T16317] netlink: zone id is out of range [ 364.602385][T16317] netlink: zone id is out of range [ 364.708180][T16322] netlink: 'syz.3.3689': attribute type 8 has an invalid length. [ 364.856261][T16302] lo speed is unknown, defaulting to 1000 [ 365.022490][T16331] netlink: 'syz.1.3692': attribute type 10 has an invalid length. [ 365.063500][ C0] net_ratelimit: 3 callbacks suppressed [ 365.063519][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.342940][T16302] lo speed is unknown, defaulting to 1000 [ 365.343018][T16310] lo speed is unknown, defaulting to 1000 [ 365.454142][T16310] lo speed is unknown, defaulting to 1000 [ 366.103761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.219489][T16362] lo speed is unknown, defaulting to 1000 [ 366.340620][T16362] lo speed is unknown, defaulting to 1000 [ 366.446333][T16362] lo speed is unknown, defaulting to 1000 [ 366.583713][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 366.709552][T16371] validate_nla: 1 callbacks suppressed [ 366.709572][T16371] netlink: 'syz.4.3706': attribute type 10 has an invalid length. [ 366.757557][T16371] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 367.143469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.152197][T16387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 367.213830][T16393] netlink: 'syz.3.3711': attribute type 1 has an invalid length. [ 367.281304][T16400] __nla_validate_parse: 3 callbacks suppressed [ 367.281323][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3718'. [ 367.322664][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3718'. [ 367.426368][T16402] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3710'. [ 367.483611][T16407] netlink: 'syz.0.3719': attribute type 41 has an invalid length. [ 367.666064][T16406] lo speed is unknown, defaulting to 1000 [ 367.766502][T16406] lo speed is unknown, defaulting to 1000 [ 367.861262][T16406] lo speed is unknown, defaulting to 1000 [ 367.966789][T16416] netlink: 'syz.2.3724': attribute type 10 has an invalid length. [ 368.081902][T16421] netlink: 'syz.3.3726': attribute type 10 has an invalid length. [ 368.098320][T16421] team0: Device ipvlan1 failed to register rx_handler [ 368.193520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.667391][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 368.677711][T16457] netlink: 'syz.4.3736': attribute type 41 has an invalid length. [ 368.830632][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'. [ 368.874406][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'. [ 368.922379][T16472] netlink: 'syz.4.3741': attribute type 10 has an invalid length. [ 369.055359][T16481] netlink: 'syz.4.3746': attribute type 8 has an invalid length. [ 369.075015][T16476] netlink: 'syz.2.3742': attribute type 8 has an invalid length. [ 369.086276][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'. [ 369.109959][T16480] lo speed is unknown, defaulting to 1000 [ 369.118179][T16476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3742'. [ 369.147232][T16486] sctp: [Deprecated]: syz.4.3747 (pid 16486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.147232][T16486] Use struct sctp_sack_info instead [ 369.150319][T16485] netlink: 'syz.3.3743': attribute type 8 has an invalid length. [ 369.171536][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3744'. [ 369.205254][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3743'. [ 369.223474][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.326727][T16498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3751'. [ 369.738501][T16480] lo speed is unknown, defaulting to 1000 [ 370.273511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.424950][T16523] FAULT_INJECTION: forcing a failure. [ 370.424950][T16523] name failslab, interval 1, probability 0, space 0, times 0 [ 370.480075][T16480] lo speed is unknown, defaulting to 1000 [ 370.540440][T16523] CPU: 1 UID: 0 PID: 16523 Comm: syz.2.3761 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 370.540472][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.540487][T16523] Call Trace: [ 370.540493][T16523] [ 370.540500][T16523] dump_stack_lvl+0x241/0x360 [ 370.540526][T16523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.540544][T16523] ? __pfx__printk+0x10/0x10 [ 370.540574][T16523] should_fail_ex+0x40a/0x550 [ 370.540600][T16523] should_failslab+0xac/0x100 [ 370.540622][T16523] ? skb_clone+0x20c/0x390 [ 370.540637][T16523] kmem_cache_alloc_noprof+0x70/0x380 [ 370.540664][T16523] skb_clone+0x20c/0x390 [ 370.540685][T16523] __netlink_deliver_tap+0x3c4/0x7f0 [ 370.540716][T16523] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.540735][T16523] netlink_deliver_tap+0x19d/0x1b0 [ 370.540756][T16523] netlink_unicast+0x7c4/0x990 [ 370.540784][T16523] ? __pfx_netlink_unicast+0x10/0x10 [ 370.540800][T16523] ? __virt_addr_valid+0x45f/0x530 [ 370.540817][T16523] ? __phys_addr_symbol+0x2f/0x70 [ 370.540831][T16523] ? __check_object_size+0x47a/0x730 [ 370.540856][T16523] netlink_sendmsg+0x8de/0xcb0 [ 370.540889][T16523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.540913][T16523] ? aa_sock_msg_perm+0x91/0x160 [ 370.540941][T16523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.540959][T16523] __sock_sendmsg+0x221/0x270 [ 370.540983][T16523] ____sys_sendmsg+0x53a/0x860 [ 370.541008][T16523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.541023][T16523] ? __fget_files+0x2a/0x410 [ 370.541047][T16523] ? __fget_files+0x2a/0x410 [ 370.541075][T16523] __sys_sendmmsg+0x36a/0x720 [ 370.541103][T16523] ? __pfx___sys_sendmmsg+0x10/0x10 [ 370.541133][T16523] ? __pfx_lock_release+0x10/0x10 [ 370.541153][T16523] ? kstrtouint_from_user+0x128/0x190 [ 370.541193][T16523] ? ksys_write+0x22a/0x2b0 [ 370.541210][T16523] ? __pfx_lock_release+0x10/0x10 [ 370.541237][T16523] ? sb_end_write+0xe9/0x1c0 [ 370.541259][T16523] ? vfs_write+0x7fa/0xd10 [ 370.541278][T16523] ? __mutex_unlock_slowpath+0x227/0x800 [ 370.541324][T16523] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.541349][T16523] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.541372][T16523] ? do_syscall_64+0x100/0x230 [ 370.541394][T16523] __x64_sys_sendmmsg+0xa0/0xb0 [ 370.541414][T16523] do_syscall_64+0xf3/0x230 [ 370.541432][T16523] ? clear_bhb_loop+0x35/0x90 [ 370.541465][T16523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.541488][T16523] RIP: 0033:0x7fbe5bd8d169 [ 370.541503][T16523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.541517][T16523] RSP: 002b:00007fbe5cbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 370.541535][T16523] RAX: ffffffffffffffda RBX: 00007fbe5bfa5fa0 RCX: 00007fbe5bd8d169 [ 370.541547][T16523] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000007 [ 370.541558][T16523] RBP: 00007fbe5cbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 370.541568][T16523] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 370.541578][T16523] R13: 0000000000000000 R14: 00007fbe5bfa5fa0 R15: 00007fffce12e0a8 [ 370.541605][T16523] [ 371.177487][T16541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.186918][T16541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.198803][T16541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.207762][T16541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.216876][T16541] geneve2: entered promiscuous mode [ 371.222284][T16541] geneve2: entered allmulticast mode [ 371.313475][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.738602][T16558] validate_nla: 4 callbacks suppressed [ 371.738623][T16558] netlink: 'syz.3.3773': attribute type 10 has an invalid length. [ 371.831542][T16567] smc: net device bond0 applied user defined pnetid SYZ2 [ 372.118883][T16580] lo speed is unknown, defaulting to 1000 [ 372.241907][T16593] netlink: 'syz.3.3784': attribute type 8 has an invalid length. [ 372.285019][T16580] lo speed is unknown, defaulting to 1000 [ 372.302333][T16598] netlink: 'syz.4.3787': attribute type 8 has an invalid length. [ 372.310305][T16598] __nla_validate_parse: 10 callbacks suppressed [ 372.310321][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3787'. [ 372.329382][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3787'. [ 372.343817][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.470723][T16580] lo speed is unknown, defaulting to 1000 [ 372.734015][T16604] netlink: 'syz.0.3790': attribute type 10 has an invalid length. [ 372.998713][T16615] bridge0: port 2(gretap0) entered blocking state [ 373.027594][T16615] bridge0: port 2(gretap0) entered disabled state [ 373.055850][T16615] gretap0: entered allmulticast mode [ 373.078005][T16615] gretap0: entered promiscuous mode [ 373.104809][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3793'. [ 373.135063][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3793'. [ 373.159962][T16611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3793'. [ 373.189440][T16611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3793'. [ 373.211461][T16621] FAULT_INJECTION: forcing a failure. [ 373.211461][T16621] name failslab, interval 1, probability 0, space 0, times 0 [ 373.224718][T16621] CPU: 0 UID: 0 PID: 16621 Comm: syz.3.3797 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 373.224740][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.224750][T16621] Call Trace: [ 373.224757][T16621] [ 373.224764][T16621] dump_stack_lvl+0x241/0x360 [ 373.224789][T16621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.224807][T16621] ? __pfx__printk+0x10/0x10 [ 373.224827][T16621] ? __pfx_lock_acquire+0x10/0x10 [ 373.224856][T16621] should_fail_ex+0x40a/0x550 [ 373.224884][T16621] should_failslab+0xac/0x100 [ 373.224906][T16621] __kmalloc_cache_noprof+0x70/0x390 [ 373.224925][T16621] ? reuseport_alloc+0x11d/0x430 [ 373.224952][T16621] reuseport_alloc+0x11d/0x430 [ 373.224976][T16621] __inet_hash+0x6d4/0xbe0 [ 373.225012][T16621] inet_csk_listen_start+0x23a/0x320 [ 373.225031][T16621] __inet_listen_sk+0x2a0/0x800 [ 373.225049][T16621] ? __local_bh_enable_ip+0x168/0x200 [ 373.225067][T16621] ? lockdep_hardirqs_on+0x99/0x150 [ 373.225088][T16621] ? __pfx___inet_listen_sk+0x10/0x10 [ 373.225102][T16621] ? __local_bh_enable_ip+0x168/0x200 [ 373.225121][T16621] ? inet_listen+0x46/0x110 [ 373.225136][T16621] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 373.225183][T16621] inet_listen+0xa3/0x110 [ 373.225202][T16621] __x64_sys_listen+0x1ac/0x230 [ 373.225229][T16621] do_syscall_64+0xf3/0x230 [ 373.225248][T16621] ? clear_bhb_loop+0x35/0x90 [ 373.225272][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.225292][T16621] RIP: 0033:0x7f370978d169 [ 373.225308][T16621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.225321][T16621] RSP: 002b:00007f370a5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 373.225339][T16621] RAX: ffffffffffffffda RBX: 00007f37099a5fa0 RCX: 00007f370978d169 [ 373.225352][T16621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 373.225362][T16621] RBP: 00007f370a5e5090 R08: 0000000000000000 R09: 0000000000000000 [ 373.225372][T16621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.225382][T16621] R13: 0000000000000000 R14: 00007f37099a5fa0 R15: 00007ffc9f56fe58 [ 373.225411][T16621] [ 373.450045][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.450669][T16617] gretap0: left allmulticast mode [ 373.462529][T16617] gretap0: left promiscuous mode [ 373.468635][T16617] bridge0: port 2(gretap0) entered disabled state [ 373.525149][T16623] netlink: 'syz.0.3798': attribute type 1 has an invalid length. [ 373.800968][T16623] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 373.932021][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3803'. [ 373.962985][T16644] netlink: 'syz.3.3802': attribute type 1 has an invalid length. [ 373.976312][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3803'. [ 374.369818][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'. [ 374.379525][T16659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3808'. [ 374.503543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.528819][T16661] netlink: 'syz.2.3811': attribute type 41 has an invalid length. [ 374.946018][T16661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.988928][T16661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.079117][T16661] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.089645][T16661] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.098916][T16661] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.115231][T16661] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.323949][T16675] syzkaller0: entered promiscuous mode [ 375.329803][T16675] syzkaller0: entered allmulticast mode [ 375.543558][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.724110][T16695] netlink: 'syz.1.3823': attribute type 10 has an invalid length. [ 375.989037][T16717] netlink: 'syz.1.3831': attribute type 8 has an invalid length. [ 376.475473][T16733] netlink: 'syz.2.3838': attribute type 10 has an invalid length. [ 376.583523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.764748][T16755] lo speed is unknown, defaulting to 1000 [ 376.877802][T16755] lo speed is unknown, defaulting to 1000 [ 376.980428][T16755] lo speed is unknown, defaulting to 1000 [ 377.157615][T16774] netlink: 'syz.0.3860': attribute type 8 has an invalid length. [ 377.396275][T16775] netlink: 'syz.3.3851': attribute type 41 has an invalid length. [ 377.623543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.407657][T16802] __nla_validate_parse: 10 callbacks suppressed [ 378.407677][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3863'. [ 378.497009][T16814] netlink: 'syz.4.3867': attribute type 41 has an invalid length. [ 378.524514][T16812] netlink: 'syz.1.3865': attribute type 10 has an invalid length. [ 378.544799][T16814] syzkaller0: left promiscuous mode [ 378.550080][T16814] syzkaller0: left allmulticast mode [ 378.576707][T16814] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.587425][T16814] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.596547][T16814] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.605840][T16814] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.616447][T16814] geneve2: left promiscuous mode [ 378.621503][T16814] geneve2: left allmulticast mode [ 378.663442][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.855007][T16831] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3873'. [ 378.907073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.146533][T16849] macsec1: entered promiscuous mode [ 379.159081][T16849] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 379.169544][T16846] netlink: 'syz.3.3878': attribute type 10 has an invalid length. [ 379.174684][T16849] macsec1: entered allmulticast mode [ 379.188494][T16849] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 379.270250][T16852] FAULT_INJECTION: forcing a failure. [ 379.270250][T16852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.283817][T16852] CPU: 0 UID: 0 PID: 16852 Comm: syz.3.3882 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 379.283842][T16852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.283853][T16852] Call Trace: [ 379.283859][T16852] [ 379.283867][T16852] dump_stack_lvl+0x241/0x360 [ 379.283893][T16852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.283908][T16852] ? __pfx__printk+0x10/0x10 [ 379.283929][T16852] ? snprintf+0xda/0x120 [ 379.283953][T16852] should_fail_ex+0x40a/0x550 [ 379.283977][T16852] _copy_to_user+0x31/0xb0 [ 379.283998][T16852] simple_read_from_buffer+0xca/0x150 [ 379.284020][T16852] proc_fail_nth_read+0x1e9/0x250 [ 379.284042][T16852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.284062][T16852] ? rw_verify_area+0x243/0x630 [ 379.284078][T16852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.284098][T16852] vfs_read+0x1f8/0xb40 [ 379.284114][T16852] ? fdget_pos+0x254/0x320 [ 379.284134][T16852] ? __pfx___mutex_lock+0x10/0x10 [ 379.284153][T16852] ? __pfx_vfs_read+0x10/0x10 [ 379.284172][T16852] ? __fget_files+0x2a/0x410 [ 379.284194][T16852] ? __fget_files+0x395/0x410 [ 379.284210][T16852] ? __fget_files+0x2a/0x410 [ 379.284239][T16852] ksys_read+0x18f/0x2b0 [ 379.284257][T16852] ? __pfx_ksys_read+0x10/0x10 [ 379.284275][T16852] ? do_syscall_64+0x100/0x230 [ 379.284295][T16852] ? do_syscall_64+0xb6/0x230 [ 379.284315][T16852] do_syscall_64+0xf3/0x230 [ 379.284333][T16852] ? clear_bhb_loop+0x35/0x90 [ 379.284356][T16852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.284374][T16852] RIP: 0033:0x7f370978bb7c [ 379.284388][T16852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.284400][T16852] RSP: 002b:00007f370a5e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.284415][T16852] RAX: ffffffffffffffda RBX: 00007f37099a5fa0 RCX: 00007f370978bb7c [ 379.284421][T16852] RDX: 000000000000000f RSI: 00007f370a5e50a0 RDI: 0000000000000009 [ 379.284427][T16852] RBP: 00007f370a5e5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.284433][T16852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.284438][T16852] R13: 0000000000000000 R14: 00007f37099a5fa0 R15: 00007ffc9f56fe58 [ 379.284463][T16852] [ 379.604225][T16857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3884'. [ 379.629847][T16858] lo speed is unknown, defaulting to 1000 [ 379.669594][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3883'. [ 379.703429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.801361][T16858] lo speed is unknown, defaulting to 1000 [ 379.897335][T16867] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3886'. [ 379.945019][T16869] netlink: 'syz.0.3888': attribute type 1 has an invalid length. [ 379.976467][T16858] lo speed is unknown, defaulting to 1000 [ 380.073594][T16867] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3886'. [ 380.460448][T16892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3898'. [ 380.569972][T16899] netlink: 'syz.4.3900': attribute type 8 has an invalid length. [ 380.577089][T16898] netlink: 'syz.2.3899': attribute type 41 has an invalid length. [ 380.578681][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 380.600338][T16899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3900'. [ 380.632691][T16898] mac80211_hwsim hwsim29 wlan0: left allmulticast mode [ 380.665960][T16898] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 380.698558][T16898] macsec1: left promiscuous mode [ 380.721707][T16898] macsec1: left allmulticast mode [ 380.743446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.097735][T16883] lo speed is unknown, defaulting to 1000 [ 381.211096][T16883] lo speed is unknown, defaulting to 1000 [ 381.300768][T16883] lo speed is unknown, defaulting to 1000 [ 381.783438][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.818714][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3911'. [ 381.962357][T16929] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 382.075171][T16934] netlink: 'syz.4.3913': attribute type 10 has an invalid length. [ 382.240425][T16946] netlink: 'syz.4.3916': attribute type 8 has an invalid length. [ 382.514443][T16932] lo speed is unknown, defaulting to 1000 [ 382.823486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.849618][T16932] lo speed is unknown, defaulting to 1000 [ 383.169920][T16932] lo speed is unknown, defaulting to 1000 [ 383.279716][T16960] lo speed is unknown, defaulting to 1000 [ 383.428153][T16970] lo speed is unknown, defaulting to 1000 [ 383.504097][T16971] __nla_validate_parse: 9 callbacks suppressed [ 383.504118][T16971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3922'. [ 383.555124][T16960] lo speed is unknown, defaulting to 1000 [ 383.779710][T16960] lo speed is unknown, defaulting to 1000 [ 383.863429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.293229][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3927'. [ 384.302362][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3927'. [ 384.522602][T16970] lo speed is unknown, defaulting to 1000 [ 384.903422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.125173][T16970] lo speed is unknown, defaulting to 1000 [ 385.160520][T16991] syz.3.3929: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 385.216194][T16991] CPU: 0 UID: 0 PID: 16991 Comm: syz.3.3929 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 385.216221][T16991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.216231][T16991] Call Trace: [ 385.216236][T16991] [ 385.216244][T16991] dump_stack_lvl+0x241/0x360 [ 385.216269][T16991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.216286][T16991] ? __pfx__printk+0x10/0x10 [ 385.216305][T16991] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 385.216324][T16991] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 385.216347][T16991] warn_alloc+0x278/0x410 [ 385.216388][T16991] ? __pfx_warn_alloc+0x10/0x10 [ 385.216410][T16991] ? translate_table+0x19f/0x22b0 [ 385.216429][T16991] ? __get_vm_area_node+0x1c8/0x2d0 [ 385.216449][T16991] ? __get_vm_area_node+0x25c/0x2d0 [ 385.216474][T16991] __vmalloc_node_range_noprof+0x62f/0x1380 [ 385.216514][T16991] ? rcu_is_watching+0x15/0xb0 [ 385.216532][T16991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 385.216556][T16991] ? rcu_is_watching+0x15/0xb0 [ 385.216573][T16991] ? trace_kmalloc+0x1f/0xd0 [ 385.216591][T16991] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 385.216609][T16991] ? __kvmalloc_node_noprof+0x72/0x190 [ 385.216634][T16991] __kvmalloc_node_noprof+0x142/0x190 [ 385.216656][T16991] ? translate_table+0x19f/0x22b0 [ 385.216676][T16991] translate_table+0x19f/0x22b0 [ 385.216720][T16991] ? __pfx_translate_table+0x10/0x10 [ 385.216744][T16991] ? __virt_addr_valid+0x183/0x530 [ 385.216761][T16991] ? __might_fault+0xaa/0x120 [ 385.216776][T16991] ? __might_fault+0xc6/0x120 [ 385.216795][T16991] ? copy_from_sockptr_offset+0x6b/0xb0 [ 385.216819][T16991] do_arpt_set_ctl+0x101c/0x1650 [ 385.216848][T16991] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 385.216873][T16991] ? nf_setsockopt+0x240/0x2c0 [ 385.216892][T16991] ? do_ip_setsockopt+0x2824/0x3ae0 [ 385.216909][T16991] ? __pfx_lock_release+0x10/0x10 [ 385.216932][T16991] ? rcu_is_watching+0x15/0xb0 [ 385.216959][T16991] ? __mutex_unlock_slowpath+0x227/0x800 [ 385.216982][T16991] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.217001][T16991] ? __pfx___mutex_lock+0x10/0x10 [ 385.217027][T16991] nf_setsockopt+0x295/0x2c0 [ 385.217049][T16991] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.217072][T16991] smc_setsockopt+0x275/0xd10 [ 385.217091][T16991] ? __pfx_smc_setsockopt+0x10/0x10 [ 385.217106][T16991] ? aa_sock_opt_perm+0x79/0x120 [ 385.217132][T16991] ? __pfx_smc_setsockopt+0x10/0x10 [ 385.217146][T16991] do_sock_setsockopt+0x3af/0x720 [ 385.217167][T16991] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 385.217186][T16991] ? __fget_files+0x395/0x410 [ 385.217204][T16991] ? __fget_files+0x2a/0x410 [ 385.217229][T16991] __x64_sys_setsockopt+0x1ee/0x280 [ 385.217250][T16991] do_syscall_64+0xf3/0x230 [ 385.217269][T16991] ? clear_bhb_loop+0x35/0x90 [ 385.217291][T16991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.217309][T16991] RIP: 0033:0x7f370978d169 [ 385.217324][T16991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.217337][T16991] RSP: 002b:00007f370a5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.217356][T16991] RAX: ffffffffffffffda RBX: 00007f37099a6080 RCX: 00007f370978d169 [ 385.217368][T16991] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 385.217378][T16991] RBP: 00007f370980e2a0 R08: 00000000000003f8 R09: 0000000000000000 [ 385.217388][T16991] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000000 [ 385.217398][T16991] R13: 0000000000000000 R14: 00007f37099a6080 R15: 00007ffc9f56fe58 [ 385.217424][T16991] [ 385.217431][T16991] Mem-Info: [ 385.304143][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3931'. [ 385.512520][T16991] active_anon:11765 inactive_anon:0 isolated_anon:0 [ 385.512520][T16991] active_file:1819 inactive_file:38437 isolated_file:0 [ 385.512520][T16991] unevictable:768 dirty:255 writeback:0 [ 385.512520][T16991] slab_reclaimable:11259 slab_unreclaimable:123178 [ 385.512520][T16991] mapped:28848 shmem:9165 pagetables:803 [ 385.512520][T16991] sec_pagetables:0 bounce:0 [ 385.512520][T16991] kernel_misc_reclaimable:0 [ 385.512520][T16991] free:1301722 free_pcp:1061 free_cma:0 [ 385.633175][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3931'. [ 385.643042][T16991] Node 0 active_anon:44560kB inactive_anon:0kB active_file:7276kB inactive_file:153676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115392kB dirty:1020kB writeback:0kB shmem:32624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12020kB pagetables:3312kB sec_pagetables:0kB all_unreclaimable? no [ 385.758888][T16991] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 385.857017][T16991] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.902263][T16991] lowmem_reserve[]: 0 2489 2490 0 0 [ 385.911437][T17004] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3934'. [ 385.920779][T17004] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 385.928703][T16991] Node 0 DMA32 free:1296332kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:37220kB inactive_anon:0kB active_file:7276kB inactive_file:153352kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:4100kB local_pcp:644kB free_cma:0kB [ 385.943471][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.022896][T16991] lowmem_reserve[]: 0 0 0 0 0 [ 386.031364][T16991] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.101966][T16991] lowmem_reserve[]: 0 0 0 0 0 [ 386.120853][T16991] Node 1 Normal free:3906612kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 386.173910][T17006] netlink: 'syz.2.3932': attribute type 10 has an invalid length. [ 386.193043][T16991] lowmem_reserve[]: 0 0 0 0 0 [ 386.203613][T16991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.231350][T16991] Node 0 DMA32: 1*4kB (M) 45*8kB (ME) 35*16kB (UE) 56*32kB (UME) 105*64kB (UME) 65*128kB (UME) 13*256kB (UME) 35*512kB (UM) 48*1024kB (UME) 16*2048kB (UME) 285*4096kB (UM) = 1288284kB [ 386.293258][T16991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 386.326482][T16991] Node 1 Normal: 199*4kB (UE) 61*8kB (UME) 49*16kB (UME) 189*32kB (UME) 70*64kB (UME) 32*128kB (UME) 19*256kB (UME) 12*512kB (UME) 4*1024kB (UME) 0*2048kB 946*4096kB (M) = 3906612kB [ 386.348048][T16991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.358573][T16991] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.368516][T16991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.378467][T16991] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.389104][T16991] 46941 total pagecache pages [ 386.394531][T16991] 0 pages in swap cache [ 386.399081][T16991] Free swap = 124996kB [ 386.403838][T16991] Total swap = 124996kB [ 386.408286][T16991] 2097051 pages RAM [ 386.412311][T16991] 0 pages HighMem/MovableOnly [ 386.417505][T16991] 427897 pages reserved [ 386.421888][T16991] 0 pages cma reserved [ 386.633927][T17016] lo speed is unknown, defaulting to 1000 [ 386.786907][T17019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3937'. [ 386.888840][T17016] lo speed is unknown, defaulting to 1000 [ 386.914303][T17019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3937'. [ 386.983612][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.018882][T17019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3937'. [ 387.055852][T17019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3937'. [ 387.085500][T17026] netlink: 'syz.1.3940': attribute type 8 has an invalid length. [ 387.189486][T17031] FAULT_INJECTION: forcing a failure. [ 387.189486][T17031] name failslab, interval 1, probability 0, space 0, times 0 [ 387.257046][T17031] CPU: 0 UID: 0 PID: 17031 Comm: syz.3.3942 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 387.257072][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.257082][T17031] Call Trace: [ 387.257089][T17031] [ 387.257095][T17031] dump_stack_lvl+0x241/0x360 [ 387.257121][T17031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.257139][T17031] ? __pfx__printk+0x10/0x10 [ 387.257157][T17031] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 387.257179][T17031] ? __pfx___might_resched+0x10/0x10 [ 387.257204][T17031] should_fail_ex+0x40a/0x550 [ 387.257229][T17031] should_failslab+0xac/0x100 [ 387.257250][T17031] ? __get_vm_area_node+0x132/0x2d0 [ 387.257270][T17031] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 387.257296][T17031] __get_vm_area_node+0x132/0x2d0 [ 387.257350][T17031] __vmalloc_node_range_noprof+0x344/0x1380 [ 387.257367][T17031] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 387.257390][T17031] ? mark_lock+0x9a/0x360 [ 387.257426][T17031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.257450][T17031] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 387.257469][T17031] __vmalloc_noprof+0x79/0x90 [ 387.257484][T17031] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 387.257505][T17031] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 387.257524][T17031] ? bpf_prog_alloc+0x28/0x1b0 [ 387.257546][T17031] bpf_prog_alloc+0x3a/0x1b0 [ 387.257569][T17031] bpf_prog_load+0x7f4/0x20e0 [ 387.257604][T17031] ? __pfx_bpf_prog_load+0x10/0x10 [ 387.257625][T17031] ? __pfx___might_resched+0x10/0x10 [ 387.257658][T17031] ? __might_fault+0xaa/0x120 [ 387.257681][T17031] __sys_bpf+0x4ea/0x820 [ 387.257703][T17031] ? __pfx___sys_bpf+0x10/0x10 [ 387.257736][T17031] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 387.257758][T17031] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 387.257779][T17031] ? do_syscall_64+0x100/0x230 [ 387.257801][T17031] __x64_sys_bpf+0x7c/0x90 [ 387.257821][T17031] do_syscall_64+0xf3/0x230 [ 387.257838][T17031] ? clear_bhb_loop+0x35/0x90 [ 387.257860][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.257880][T17031] RIP: 0033:0x7f370978d169 [ 387.257895][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.257908][T17031] RSP: 002b:00007f370a5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.257927][T17031] RAX: ffffffffffffffda RBX: 00007f37099a5fa0 RCX: 00007f370978d169 [ 387.257939][T17031] RDX: 0000000000000090 RSI: 0000400000000400 RDI: 0000000000000005 [ 387.257961][T17031] RBP: 00007f370a5e5090 R08: 0000000000000000 R09: 0000000000000000 [ 387.257971][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.257985][T17031] R13: 0000000000000001 R14: 00007f37099a5fa0 R15: 00007ffc9f56fe58 [ 387.258010][T17031] [ 387.645856][T17016] lo speed is unknown, defaulting to 1000 [ 387.799626][T17037] netlink: 'syz.0.3939': attribute type 8 has an invalid length. [ 388.023468][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.787317][T17069] __nla_validate_parse: 4 callbacks suppressed [ 388.787335][T17069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3954'. [ 388.870174][T17074] netlink: 'syz.1.3956': attribute type 41 has an invalid length. [ 388.985569][T17074] bond0: left allmulticast mode [ 388.990595][T17074] bond0: left promiscuous mode [ 389.063662][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.151641][T17086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3959'. [ 389.160876][T17086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3959'. [ 389.172070][T17086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3959'. [ 389.182182][T17086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3959'. [ 389.481324][T17074] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.491299][T17074] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.500590][T17074] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.510166][T17074] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.672350][T17078] lo speed is unknown, defaulting to 1000 [ 389.708359][T17084] lo speed is unknown, defaulting to 1000 [ 389.803449][T17078] lo speed is unknown, defaulting to 1000 [ 389.844766][T17093] netlink: 'syz.2.3960': attribute type 1 has an invalid length. [ 389.954144][T17101] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3961'. [ 389.958631][T17078] lo speed is unknown, defaulting to 1000 [ 390.103451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.246611][T17112] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 390.263497][T17112] netlink: 'syz.1.3963': attribute type 2 has an invalid length. [ 390.319165][T17084] lo speed is unknown, defaulting to 1000 [ 390.523765][T17084] lo speed is unknown, defaulting to 1000 [ 390.534859][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'. [ 391.005931][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3969'. [ 391.143466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.258237][T17137] bridge0: port 3(gretap0) entered blocking state [ 391.274838][T17137] bridge0: port 3(gretap0) entered disabled state [ 391.302119][T17137] gretap0: entered allmulticast mode [ 391.312252][T17141] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 391.363615][T17137] gretap0: entered promiscuous mode [ 391.381016][T17142] gretap0: left allmulticast mode [ 391.403999][T17142] gretap0: left promiscuous mode [ 391.450625][T17142] bridge0: port 3(gretap0) entered disabled state [ 391.639797][T17153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3976'. [ 391.660533][T17153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3976'. [ 391.699234][T17159] netlink: 'syz.1.3978': attribute type 8 has an invalid length. [ 391.943511][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 392.158662][T17182] lo speed is unknown, defaulting to 1000 [ 392.183570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.287877][T17182] lo speed is unknown, defaulting to 1000 [ 392.407893][T17182] lo speed is unknown, defaulting to 1000 [ 392.450211][ T5892] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 392.461789][ T5892] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 392.641223][T17192] bridge0: port 1(gretap0) entered blocking state [ 392.648054][T17192] bridge0: port 1(gretap0) entered disabled state [ 392.654947][T17192] gretap0: entered allmulticast mode [ 392.661366][T17192] gretap0: entered promiscuous mode [ 392.672513][T17192] gretap0: left allmulticast mode [ 392.680716][T17192] gretap0: left promiscuous mode [ 392.686028][T17192] bridge0: port 1(gretap0) entered disabled state [ 392.874380][T17204] FAULT_INJECTION: forcing a failure. [ 392.874380][T17204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.913931][T17205] netlink: 'syz.4.4002': attribute type 8 has an invalid length. [ 392.925294][T17204] CPU: 1 UID: 0 PID: 17204 Comm: syz.2.3993 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 392.925320][T17204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.925331][T17204] Call Trace: [ 392.925337][T17204] [ 392.925345][T17204] dump_stack_lvl+0x241/0x360 [ 392.925371][T17204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.925389][T17204] ? __pfx__printk+0x10/0x10 [ 392.925412][T17204] ? snprintf+0xda/0x120 [ 392.925437][T17204] should_fail_ex+0x40a/0x550 [ 392.925465][T17204] _copy_to_user+0x31/0xb0 [ 392.925488][T17204] simple_read_from_buffer+0xca/0x150 [ 392.925513][T17204] proc_fail_nth_read+0x1e9/0x250 [ 392.925537][T17204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.925562][T17204] ? rw_verify_area+0x243/0x630 [ 392.925578][T17204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.925600][T17204] vfs_read+0x1f8/0xb40 [ 392.925618][T17204] ? fdget_pos+0x254/0x320 [ 392.925646][T17204] ? __pfx___mutex_lock+0x10/0x10 [ 392.925667][T17204] ? __pfx_vfs_read+0x10/0x10 [ 392.925687][T17204] ? __fget_files+0x2a/0x410 [ 392.925709][T17204] ? __fget_files+0x395/0x410 [ 392.925728][T17204] ? __fget_files+0x2a/0x410 [ 392.925758][T17204] ksys_read+0x18f/0x2b0 [ 392.925777][T17204] ? __pfx_ksys_read+0x10/0x10 [ 392.925795][T17204] ? do_syscall_64+0x100/0x230 [ 392.925816][T17204] ? do_syscall_64+0xb6/0x230 [ 392.925837][T17204] do_syscall_64+0xf3/0x230 [ 392.925856][T17204] ? clear_bhb_loop+0x35/0x90 [ 392.925880][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.925900][T17204] RIP: 0033:0x7fbe5bd8bb7c [ 392.925915][T17204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 392.925930][T17204] RSP: 002b:00007fbe5cbd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.925947][T17204] RAX: ffffffffffffffda RBX: 00007fbe5bfa5fa0 RCX: 00007fbe5bd8bb7c [ 392.925959][T17204] RDX: 000000000000000f RSI: 00007fbe5cbd30a0 RDI: 0000000000000008 [ 392.925969][T17204] RBP: 00007fbe5cbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 392.925979][T17204] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 392.925989][T17204] R13: 0000000000000000 R14: 00007fbe5bfa5fa0 R15: 00007fffce12e0a8 [ 392.926017][T17204] [ 393.223451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.338782][T17207] netlink: 'syz.3.3992': attribute type 1 has an invalid length. [ 393.448355][T17220] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 393.450815][T17214] netlink: 'syz.0.3995': attribute type 10 has an invalid length. [ 393.952594][T17245] __nla_validate_parse: 11 callbacks suppressed [ 393.952613][T17245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4006'. [ 393.976373][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4007'. [ 393.993687][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4007'. [ 394.081486][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4009'. [ 394.197019][T17256] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 394.226615][T17259] Bluetooth: MGMT ver 1.23 [ 394.264855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.430953][T17269] netlink: 'syz.3.4016': attribute type 8 has an invalid length. [ 394.443478][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4016'. [ 394.453708][T17269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4016'. [ 394.570155][T17273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4019'. [ 395.094687][T17293] Cannot find del_set index 2 as target [ 395.098251][T17294] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 395.180533][T17299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4027'. [ 395.303452][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.400109][T17315] netlink: 'syz.0.4033': attribute type 41 has an invalid length. [ 395.482998][T17319] netlink: 'syz.0.4035': attribute type 41 has an invalid length. [ 395.563468][T17322] netlink: 'syz.0.4036': attribute type 8 has an invalid length. [ 396.007331][T17340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4041'. [ 396.066048][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4044'. [ 396.274792][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 396.343417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.115457][T17398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.383467][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.989520][T17439] validate_nla: 6 callbacks suppressed [ 397.989538][T17439] netlink: 'syz.0.4078': attribute type 10 has an invalid length. [ 398.272011][T17447] netlink: 'syz.3.4082': attribute type 10 has an invalid length. [ 398.342357][T17451] netlink: 'syz.0.4084': attribute type 1 has an invalid length. [ 398.423419][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.625591][T17467] netlink: 'syz.4.4091': attribute type 10 has an invalid length. [ 398.768008][T17472] netlink: 'syz.0.4093': attribute type 1 has an invalid length. [ 398.907519][T17477] netlink: 'syz.4.4096': attribute type 10 has an invalid length. [ 399.043382][T17486] tipc: Started in network mode [ 399.048456][T17486] tipc: Node identity 1, cluster identity 8 [ 399.057072][T17486] tipc: Node number set to 1 [ 399.125310][T17489] __nla_validate_parse: 15 callbacks suppressed [ 399.125330][T17489] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4100'. [ 399.218419][T17493] Cannot find set identified by id 0 to match [ 399.223491][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 399.303237][T17495] netlink: 'syz.4.4102': attribute type 10 has an invalid length. [ 399.458608][T17504] bond0: (slave bridge0): Releasing backup interface [ 399.463460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.501897][T17504] bridge_slave_0: left allmulticast mode [ 399.510206][T17507] netlink: 'syz.4.4108': attribute type 8 has an invalid length. [ 399.511715][T17504] bridge_slave_0: left promiscuous mode [ 399.532122][T17510] netlink: 'syz.1.4103': attribute type 8 has an invalid length. [ 399.554289][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.564251][T17504] bridge_slave_1: left allmulticast mode [ 399.569948][T17504] bridge_slave_1: left promiscuous mode [ 399.573544][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 399.576064][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.600029][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4103'. [ 399.624204][T17504] bond0: (slave bond_slave_0): Releasing backup interface [ 399.663492][T17504] bond0: (slave bond_slave_1): Releasing backup interface [ 399.734401][T17504] team0: Port device team_slave_0 removed [ 399.747428][T17504] team0: Port device team_slave_1 removed [ 399.765480][T17504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.780184][T17504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.853812][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4104'. [ 399.867551][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4111'. [ 399.879448][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4111'. [ 399.898684][T17517] vlan3: entered allmulticast mode [ 400.262667][T17538] netlink: 'syz.0.4117': attribute type 10 has an invalid length. [ 400.384013][T17544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4119'. [ 400.503479][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.533166][T17550] xt_bpf: check failed: parse error [ 400.539944][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4122'. [ 401.001897][T17569] bridge7: entered promiscuous mode [ 401.037486][T17569] bridge7: entered allmulticast mode [ 401.080600][T17569] team0: Device bridge7 is up. Set it down before adding it as a team port [ 401.235069][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'. [ 401.254370][T17576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4132'. [ 401.473640][ T5839] Bluetooth: hci4: command 0x0419 tx timeout [ 401.480466][T17589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.543567][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.955328][T17609] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 402.168703][T17622] lo speed is unknown, defaulting to 1000 [ 402.296882][T17625] xt_bpf: check failed: parse error [ 402.310778][T17622] lo speed is unknown, defaulting to 1000 [ 402.417880][T17622] lo speed is unknown, defaulting to 1000 [ 402.583524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.917642][T17655] syz_tun: entered promiscuous mode [ 402.978798][T17655] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 403.623527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.731099][T17670] lo speed is unknown, defaulting to 1000 [ 403.892312][T17670] lo speed is unknown, defaulting to 1000 [ 404.052138][T17690] xt_bpf: check failed: parse error [ 404.141334][T17692] validate_nla: 7 callbacks suppressed [ 404.141353][T17692] netlink: 'syz.4.4180': attribute type 41 has an invalid length. [ 404.209087][T17694] tap0: tun_chr_ioctl cmd 1074025677 [ 404.233659][T17694] tap0: linktype set to 778 [ 404.252128][T17694] __nla_validate_parse: 19 callbacks suppressed [ 404.252146][T17694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4179'. [ 404.284410][T17701] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4182'. [ 404.344782][T17694] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4179'. [ 404.381681][T17694] tipc: Invalid UDP bearer configuration [ 404.381734][T17694] tipc: Enabling of bearer rejected, failed to enable media [ 404.419983][T17670] lo speed is unknown, defaulting to 1000 [ 404.477568][T17707] netlink: 'syz.4.4184': attribute type 8 has an invalid length. [ 404.485631][T17707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4184'. [ 404.498040][T17707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4184'. [ 404.663581][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.125910][T17708] lo speed is unknown, defaulting to 1000 [ 405.327318][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4188'. [ 405.451858][T17727] netlink: 'syz.3.4189': attribute type 6 has an invalid length. [ 405.460254][T17727] netlink: 'syz.3.4189': attribute type 7 has an invalid length. [ 405.468480][T17727] netlink: 'syz.3.4189': attribute type 8 has an invalid length. [ 405.622386][T17708] lo speed is unknown, defaulting to 1000 [ 405.645472][T17733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4191'. [ 405.703524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.732001][T17737] netlink: 'syz.0.4193': attribute type 8 has an invalid length. [ 405.863148][T17739] netlink: 'syz.0.4195': attribute type 10 has an invalid length. [ 405.901353][T17708] lo speed is unknown, defaulting to 1000 [ 405.938052][T17724] rdma_rxe: rxe_newlink: failed to add syz_tun [ 406.092998][T17750] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4198'. [ 406.329392][T17761] tipc: Enabling of bearer rejected, failed to enable media [ 406.344329][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4202'. [ 406.743536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.044695][T17769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4204'. [ 407.221260][T17775] set match dimension is over the limit! [ 407.253733][T17776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.602696][T17795] netlink: 'syz.0.4211': attribute type 1 has an invalid length. [ 407.764010][T17796] netlink: 'syz.3.4213': attribute type 10 has an invalid length. [ 407.783528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.802166][T17759] lo speed is unknown, defaulting to 1000 [ 408.048711][T17817] vlan3: entered promiscuous mode [ 408.066330][T17817] hsr0: entered promiscuous mode [ 408.120676][T17759] lo speed is unknown, defaulting to 1000 [ 408.427665][T17759] lo speed is unknown, defaulting to 1000 [ 408.496784][T17837] netlink: 'syz.3.4227': attribute type 8 has an invalid length. [ 408.668869][T17842] --map-set only usable from mangle table [ 408.823591][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.192703][T17854] syzkaller1: entered promiscuous mode [ 409.221731][T17854] syzkaller1: entered allmulticast mode [ 409.265336][T17854] syzkaller1: left promiscuous mode [ 409.270609][T17854] syzkaller1: left allmulticast mode [ 409.424172][T17861] sctp: [Deprecated]: syz.3.4237 (pid 17861) Use of int in max_burst socket option. [ 409.424172][T17861] Use struct sctp_assoc_value instead [ 409.444734][T17859] Cannot find set identified by id 0 to match [ 409.778667][T17877] netlink: 'syz.4.4243': attribute type 41 has an invalid length. [ 409.863511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.063785][T17890] netlink: 'syz.4.4248': attribute type 10 has an invalid length. [ 410.112736][T17891] __nla_validate_parse: 9 callbacks suppressed [ 410.112755][T17891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4247'. [ 410.327702][T17904] syzkaller1: entered promiscuous mode [ 410.339651][T17904] syzkaller1: entered allmulticast mode [ 410.350844][T17904] syzkaller1: left promiscuous mode [ 410.356756][T17904] syzkaller1: left allmulticast mode [ 410.732151][T17919] FAULT_INJECTION: forcing a failure. [ 410.732151][T17919] name failslab, interval 1, probability 0, space 0, times 0 [ 410.763504][T17919] CPU: 1 UID: 0 PID: 17919 Comm: syz.2.4259 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 410.763534][T17919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.763544][T17919] Call Trace: [ 410.763551][T17919] [ 410.763559][T17919] dump_stack_lvl+0x241/0x360 [ 410.763586][T17919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.763604][T17919] ? __pfx__printk+0x10/0x10 [ 410.763624][T17919] ? fs_reclaim_acquire+0x93/0x130 [ 410.763642][T17919] ? __pfx___might_resched+0x10/0x10 [ 410.763667][T17919] should_fail_ex+0x40a/0x550 [ 410.763695][T17919] should_failslab+0xac/0x100 [ 410.763721][T17919] __kmalloc_noprof+0xdd/0x4c0 [ 410.763742][T17919] ? tomoyo_encode2+0x27e/0x550 [ 410.763756][T17919] ? get_pid_task+0x23/0x1f0 [ 410.763783][T17919] tomoyo_encode2+0x27e/0x550 [ 410.763813][T17919] tomoyo_check_unix_address+0x34c/0x8c0 [ 410.763838][T17919] ? tomoyo_check_unix_address+0x15d/0x8c0 [ 410.763854][T17919] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 410.763882][T17919] ? __pfx_unix_getname+0x10/0x10 [ 410.763912][T17919] tomoyo_socket_listen_permission+0x29f/0x3d0 [ 410.763933][T17919] ? __pfx_tomoyo_socket_listen_permission+0x10/0x10 [ 410.763963][T17919] ? __pfx_lock_release+0x10/0x10 [ 410.763983][T17919] ? __fget_files+0x2a/0x410 [ 410.764020][T17919] ? __fget_files+0x395/0x410 [ 410.764040][T17919] ? __fget_files+0x2a/0x410 [ 410.764066][T17919] security_socket_listen+0x90/0x280 [ 410.764087][T17919] __x64_sys_listen+0x13e/0x230 [ 410.764112][T17919] do_syscall_64+0xf3/0x230 [ 410.764132][T17919] ? clear_bhb_loop+0x35/0x90 [ 410.764156][T17919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.764176][T17919] RIP: 0033:0x7fbe5bd8d169 [ 410.764191][T17919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.764206][T17919] RSP: 002b:00007fbe5cbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 410.764225][T17919] RAX: ffffffffffffffda RBX: 00007fbe5bfa5fa0 RCX: 00007fbe5bd8d169 [ 410.764237][T17919] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000005 [ 410.764247][T17919] RBP: 00007fbe5cbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 410.764258][T17919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.764267][T17919] R13: 0000000000000000 R14: 00007fbe5bfa5fa0 R15: 00007fffce12e0a8 [ 410.764294][T17919] [ 410.903521][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.929976][T17921] netlink: 'syz.0.4260': attribute type 10 has an invalid length. [ 411.065115][T17923] sctp: [Deprecated]: syz.4.4261 (pid 17923) Use of int in max_burst socket option. [ 411.065115][T17923] Use struct sctp_assoc_value instead [ 411.108456][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4261'. [ 411.117673][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4261'. [ 411.215477][T17929] syzkaller1: entered promiscuous mode [ 411.221005][T17929] syzkaller1: entered allmulticast mode [ 411.232550][T17929] syzkaller1: left promiscuous mode [ 411.238210][T17929] syzkaller1: left allmulticast mode [ 411.262902][T17926] lo speed is unknown, defaulting to 1000 [ 411.353920][T17934] netlink: 'syz.0.4275': attribute type 10 has an invalid length. [ 411.591390][T17926] lo speed is unknown, defaulting to 1000 [ 411.712393][T17926] lo speed is unknown, defaulting to 1000 [ 411.943550][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.477577][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4270'. [ 412.495090][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4270'. [ 412.668266][T17963] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 412.733814][T17967] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 412.741677][T17967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4273'. [ 412.912915][T17962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4271'. [ 412.964207][T17974] sctp: [Deprecated]: syz.0.4278 (pid 17974) Use of int in max_burst socket option. [ 412.964207][T17974] Use struct sctp_assoc_value instead [ 412.983530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.249417][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4283'. [ 413.702639][T18004] bond2 (unregistering): Released all slaves [ 413.857902][T18014] FAULT_INJECTION: forcing a failure. [ 413.857902][T18014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.879892][T18014] CPU: 0 UID: 0 PID: 18014 Comm: syz.4.4292 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 413.879919][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.879929][T18014] Call Trace: [ 413.879935][T18014] [ 413.879942][T18014] dump_stack_lvl+0x241/0x360 [ 413.879964][T18014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.879982][T18014] ? __pfx__printk+0x10/0x10 [ 413.880000][T18014] ? snprintf+0xda/0x120 [ 413.880020][T18014] should_fail_ex+0x40a/0x550 [ 413.880040][T18014] _copy_to_user+0x31/0xb0 [ 413.880058][T18014] simple_read_from_buffer+0xca/0x150 [ 413.880078][T18014] proc_fail_nth_read+0x1e9/0x250 [ 413.880096][T18014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.880115][T18014] ? rw_verify_area+0x243/0x630 [ 413.880128][T18014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.880144][T18014] vfs_read+0x1f8/0xb40 [ 413.880158][T18014] ? fdget_pos+0x254/0x320 [ 413.880175][T18014] ? __pfx___mutex_lock+0x10/0x10 [ 413.880189][T18014] ? __pfx_vfs_read+0x10/0x10 [ 413.880205][T18014] ? __fget_files+0x2a/0x410 [ 413.880222][T18014] ? __fget_files+0x395/0x410 [ 413.880237][T18014] ? __fget_files+0x2a/0x410 [ 413.880261][T18014] ksys_read+0x18f/0x2b0 [ 413.880277][T18014] ? __pfx_ksys_read+0x10/0x10 [ 413.880292][T18014] ? do_syscall_64+0x100/0x230 [ 413.880310][T18014] ? do_syscall_64+0xb6/0x230 [ 413.880327][T18014] do_syscall_64+0xf3/0x230 [ 413.880342][T18014] ? clear_bhb_loop+0x35/0x90 [ 413.880364][T18014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.880383][T18014] RIP: 0033:0x7f534fd8bb7c [ 413.880398][T18014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.880410][T18014] RSP: 002b:00007f5350b93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.880425][T18014] RAX: ffffffffffffffda RBX: 00007f534ffa5fa0 RCX: 00007f534fd8bb7c [ 413.880436][T18014] RDX: 000000000000000f RSI: 00007f5350b930a0 RDI: 0000000000000004 [ 413.880443][T18014] RBP: 00007f5350b93090 R08: 0000000000000000 R09: 0000000000000000 [ 413.880450][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.880457][T18014] R13: 0000000000000000 R14: 00007f534ffa5fa0 R15: 00007ffd3306c378 [ 413.880486][T18014] [ 414.104486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.185937][T18018] Cannot find del_set index 2 as target [ 414.329011][T18027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4294'. [ 414.468123][T18020] lo speed is unknown, defaulting to 1000 [ 414.562408][T18020] lo speed is unknown, defaulting to 1000 [ 414.617662][T18036] netlink: 'syz.3.4299': attribute type 41 has an invalid length. [ 414.654664][T18020] lo speed is unknown, defaulting to 1000 [ 414.667928][T18036] hsr0: left promiscuous mode [ 414.700052][T18036] vlan3: left promiscuous mode [ 414.930078][T18048] netlink: 'syz.1.4303': attribute type 41 has an invalid length. [ 415.007287][T18048] syz_tun: left promiscuous mode [ 415.055631][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 415.143565][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.325949][T18073] FAULT_INJECTION: forcing a failure. [ 415.325949][T18073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.383527][T18076] __nla_validate_parse: 1 callbacks suppressed [ 415.383545][T18076] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4313'. [ 415.413754][T18073] CPU: 1 UID: 0 PID: 18073 Comm: syz.1.4311 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 415.413781][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.413789][T18073] Call Trace: [ 415.413795][T18073] [ 415.413803][T18073] dump_stack_lvl+0x241/0x360 [ 415.413829][T18073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.413847][T18073] ? __pfx__printk+0x10/0x10 [ 415.413870][T18073] ? snprintf+0xda/0x120 [ 415.413895][T18073] should_fail_ex+0x40a/0x550 [ 415.413923][T18073] _copy_to_user+0x31/0xb0 [ 415.413946][T18073] simple_read_from_buffer+0xca/0x150 [ 415.413970][T18073] proc_fail_nth_read+0x1e9/0x250 [ 415.413994][T18073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.414018][T18073] ? rw_verify_area+0x243/0x630 [ 415.414034][T18073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.414055][T18073] vfs_read+0x1f8/0xb40 [ 415.414074][T18073] ? fdget_pos+0x254/0x320 [ 415.414096][T18073] ? __pfx___mutex_lock+0x10/0x10 [ 415.414115][T18073] ? __pfx_vfs_read+0x10/0x10 [ 415.414135][T18073] ? __fget_files+0x2a/0x410 [ 415.414158][T18073] ? __fget_files+0x395/0x410 [ 415.414177][T18073] ? __fget_files+0x2a/0x410 [ 415.414207][T18073] ksys_read+0x18f/0x2b0 [ 415.414226][T18073] ? __pfx_ksys_read+0x10/0x10 [ 415.414243][T18073] ? do_syscall_64+0x100/0x230 [ 415.414265][T18073] ? do_syscall_64+0xb6/0x230 [ 415.414286][T18073] do_syscall_64+0xf3/0x230 [ 415.414312][T18073] ? clear_bhb_loop+0x35/0x90 [ 415.414336][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.414355][T18073] RIP: 0033:0x7f0c1738bb7c [ 415.414371][T18073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.414385][T18073] RSP: 002b:00007f0c18151030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.414404][T18073] RAX: ffffffffffffffda RBX: 00007f0c175a5fa0 RCX: 00007f0c1738bb7c [ 415.414416][T18073] RDX: 000000000000000f RSI: 00007f0c181510a0 RDI: 0000000000000006 [ 415.414427][T18073] RBP: 00007f0c18151090 R08: 0000000000000000 R09: 0000000000000000 [ 415.414437][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.414447][T18073] R13: 0000000000000000 R14: 00007f0c175a5fa0 R15: 00007ffd0bbefd58 [ 415.414474][T18073] [ 416.112213][T18099] netlink: 'syz.1.4317': attribute type 8 has an invalid length. [ 416.141585][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'. [ 416.168651][T18101] netlink: 'syz.4.4320': attribute type 10 has an invalid length. [ 416.182446][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4317'. [ 416.191740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.223630][T18103] netlink: 'syz.0.4321': attribute type 41 has an invalid length. [ 416.269130][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4324'. [ 416.287320][T18110] macvlan0: entered promiscuous mode [ 416.292771][T18110] bond0: entered promiscuous mode [ 416.298347][T18110] bridge0: entered promiscuous mode [ 416.306451][T18110] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 416.443662][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4322'. [ 416.511453][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 416.685057][T18132] lo speed is unknown, defaulting to 1000 [ 416.801040][T18132] lo speed is unknown, defaulting to 1000 [ 416.827464][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 416.922390][T18132] lo speed is unknown, defaulting to 1000 [ 416.962850][T18135] netlink: 'syz.4.4331': attribute type 4 has an invalid length. [ 417.053174][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'. [ 417.151216][T18145] netlink: 'syz.4.4334': attribute type 10 has an invalid length. [ 417.223561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.238937][T18149] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4333'. [ 417.508225][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 417.525108][T18169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4341'. [ 417.627275][T18163] pim6reg: entered allmulticast mode [ 417.853110][T18186] netlink: 'syz.1.4348': attribute type 10 has an invalid length. [ 417.982606][T18196] netlink: 'syz.4.4350': attribute type 41 has an invalid length. [ 418.006946][T18196] bond0: left promiscuous mode [ 418.012172][T18196] bridge0: left promiscuous mode [ 418.063627][T18196] macvlan0: left promiscuous mode [ 418.263536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.353994][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 418.727431][T18237] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 418.801466][T18244] netlink: 'syz.3.4362': attribute type 8 has an invalid length. [ 418.989678][T18252] lo speed is unknown, defaulting to 1000 [ 419.054026][T18253] lo speed is unknown, defaulting to 1000 [ 419.134173][T18252] lo speed is unknown, defaulting to 1000 [ 419.238369][T18252] lo speed is unknown, defaulting to 1000 [ 419.303552][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.579946][T18273] Bluetooth: MGMT ver 1.23 [ 419.635741][T18253] lo speed is unknown, defaulting to 1000 [ 419.701939][T18277] syzkaller0: entered promiscuous mode [ 419.707975][T18277] syzkaller0: entered allmulticast mode [ 419.839373][T18283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.995043][T18253] lo speed is unknown, defaulting to 1000 [ 420.343553][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.461667][T18301] __nla_validate_parse: 4 callbacks suppressed [ 420.461685][T18301] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4385'. [ 420.500640][T18301] netlink: 'syz.0.4385': attribute type 1 has an invalid length. [ 420.908988][T18318] Cannot find del_set index 4 as target [ 420.914945][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4390'. [ 421.056753][T18325] netlink: 'syz.4.4391': attribute type 8 has an invalid length. [ 421.064753][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4391'. [ 421.075227][T18325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4391'. [ 421.273282][T18337] netlink: 'syz.0.4392': attribute type 8 has an invalid length. [ 421.304976][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4392'. [ 421.330613][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4392'. [ 421.383520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.607757][T18348] netlink: 'syz.1.4393': attribute type 10 has an invalid length. [ 421.819061][T18366] netlink: 'syz.3.4396': attribute type 41 has an invalid length. [ 421.879548][T18369] Cannot find del_set index 2 as target [ 422.010656][T18382] netlink: 'syz.4.4401': attribute type 41 has an invalid length. [ 422.014485][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4397'. [ 422.020294][T18382] syzkaller0: left promiscuous mode [ 422.032867][T18382] syzkaller0: left allmulticast mode [ 422.065449][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4399'. [ 422.093098][T18384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4399'. [ 422.149006][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 422.309574][T18394] netlink: 'syz.4.4407': attribute type 10 has an invalid length. [ 422.386641][T18399] netlink: 'syz.4.4409': attribute type 8 has an invalid length. [ 422.423581][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.451871][T18395] syzkaller0: entered promiscuous mode [ 422.462282][T18395] syzkaller0: entered allmulticast mode [ 422.868085][T18424] netlink: 'syz.4.4419': attribute type 10 has an invalid length. [ 422.935680][T18426] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 422.988529][T18432] ip6tnl1: entered promiscuous mode [ 423.053492][T18432] ip6tnl1: entered allmulticast mode [ 423.206354][T18446] netlink: 'syz.3.4425': attribute type 2 has an invalid length. [ 423.464651][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.579625][T18468] xt_nfacct: accounting object `syz1' does not exists [ 424.509539][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.442857][T18438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.543572][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.617320][T18481] __nla_validate_parse: 9 callbacks suppressed [ 425.617339][T18481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4435'. [ 425.674389][T18488] netlink: 'syz.1.4434': attribute type 1 has an invalid length. [ 425.912560][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4443'. [ 425.959294][T18510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4440'. [ 426.081562][T18519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4444'. [ 426.583540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.686056][T18530] Cannot find del_set index 4 as target [ 426.753932][T18526] netlink: 'syz.3.4456': attribute type 10 has an invalid length. [ 427.133794][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4448'. [ 427.386755][T18556] lo speed is unknown, defaulting to 1000 [ 427.394134][T18554] lo speed is unknown, defaulting to 1000 [ 427.588374][T18556] lo speed is unknown, defaulting to 1000 [ 427.623546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.741462][T18549] lo speed is unknown, defaulting to 1000 [ 427.933941][T18565] netlink: 'syz.2.4455': attribute type 10 has an invalid length. [ 428.048858][T18554] lo speed is unknown, defaulting to 1000 [ 428.076447][T18556] lo speed is unknown, defaulting to 1000 [ 428.438315][T18579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4461'. [ 428.528053][T18549] lo speed is unknown, defaulting to 1000 [ 428.544131][T18554] lo speed is unknown, defaulting to 1000 [ 428.663618][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.836932][T18549] lo speed is unknown, defaulting to 1000 [ 429.522640][T18601] lo speed is unknown, defaulting to 1000 [ 429.703544][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.715337][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4469'. [ 430.160767][T18601] lo speed is unknown, defaulting to 1000 [ 430.176068][T18613] netlink: 'syz.0.4471': attribute type 10 has an invalid length. [ 430.204427][T18613] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 430.429193][T18603] netlink: 'syz.1.4466': attribute type 4 has an invalid length. [ 430.743640][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.959203][T18629] netlink: 'syz.2.4476': attribute type 8 has an invalid length. [ 431.107894][T18601] lo speed is unknown, defaulting to 1000 [ 431.180125][T18631] Cannot find set identified by id 0 to match [ 431.366121][T18641] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4482'. [ 431.440947][T18645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4483'. [ 431.660644][T18656] netlink: 'syz.4.4489': attribute type 41 has an invalid length. [ 431.783460][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.809649][T18665] netlink: 'syz.4.4492': attribute type 3 has an invalid length. [ 431.817868][T18665] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4492'. [ 432.297878][T18683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4498'. [ 432.324956][T18683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4498'. [ 432.550621][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4502'. [ 432.565752][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4501'. [ 432.777922][T18702] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 432.823445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.854821][T18706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.093676][T18715] netlink: 'syz.1.4507': attribute type 39 has an invalid length. [ 433.863542][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.030441][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'. [ 434.038207][T18728] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 434.039974][T18729] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 434.326828][T18742] rdma_rxe: rxe_newlink: failed to add bridge0 [ 434.829196][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 434.845078][T18755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4524'. [ 434.858586][T18736] lo speed is unknown, defaulting to 1000 [ 434.903441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.166805][T18736] lo speed is unknown, defaulting to 1000 [ 435.307663][T18736] lo speed is unknown, defaulting to 1000 [ 435.581527][T18753] lo speed is unknown, defaulting to 1000 [ 435.869308][T18777] netlink: 'syz.4.4532': attribute type 8 has an invalid length. [ 435.943428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.979376][T18753] lo speed is unknown, defaulting to 1000 [ 436.234272][T18786] netlink: 'syz.2.4536': attribute type 41 has an invalid length. [ 436.249450][T18753] lo speed is unknown, defaulting to 1000 [ 436.983446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.565376][T18802] netlink: 'syz.1.4540': attribute type 10 has an invalid length. [ 437.641527][T18806] __nla_validate_parse: 2 callbacks suppressed [ 437.641549][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 437.721993][T18817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.901734][T18824] syz_tun: entered allmulticast mode [ 437.941802][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'. [ 437.978374][T18823] syz_tun: left allmulticast mode [ 438.023435][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.244673][T18853] netlink: 'syz.3.4558': attribute type 39 has an invalid length. [ 438.391272][T18855] netlink: 'syz.0.4559': attribute type 41 has an invalid length. [ 438.589938][T18863] netlink: 'syz.0.4563': attribute type 10 has an invalid length. [ 438.674535][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4565'. [ 438.805862][T18873] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4567'. [ 438.985337][T18884] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4574'. [ 438.998454][T18883] Cannot find set identified by id 0 to match [ 439.063484][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.103119][T18894] netlink: 'syz.4.4577': attribute type 8 has an invalid length. [ 439.450034][T18910] lo speed is unknown, defaulting to 1000 [ 439.516411][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'. [ 439.586665][T18923] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.4585'. [ 439.612901][T18910] lo speed is unknown, defaulting to 1000 [ 439.760066][T18910] lo speed is unknown, defaulting to 1000 [ 439.958369][T18937] netlink: 'syz.0.4588': attribute type 39 has an invalid length. [ 440.103436][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.687643][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4594'. [ 440.709792][T18952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4594'. [ 440.970477][T18973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4601'. [ 440.980131][T18969] wireguard0: entered promiscuous mode [ 440.986204][T18969] wireguard0: entered allmulticast mode [ 441.143444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.183901][T18982] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 441.230231][T18984] syzkaller0: entered promiscuous mode [ 441.236214][T18984] syzkaller0: entered allmulticast mode [ 441.609404][T19010] xt_nfacct: accounting object `syz1' does not exists [ 441.861911][T19022] syzkaller0: entered promiscuous mode [ 441.868476][T19022] syzkaller0: entered allmulticast mode [ 441.892158][T19024] netlink: 'syz.2.4619': attribute type 10 has an invalid length. [ 442.127744][T19028] netlink: 'syz.1.4631': attribute type 10 has an invalid length. [ 442.183505][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.433499][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 443.232326][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.555559][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 444.263495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.937366][T19038] sch_tbf: burst 955 is lower than device lo mtu (65550) ! [ 445.065248][T19043] Cannot find del_set index 2 as target [ 445.135972][T19044] netlink: 'syz.2.4626': attribute type 4 has an invalid length. [ 445.183230][T19044] netlink: 'syz.2.4626': attribute type 4 has an invalid length. [ 445.303441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.370579][T19061] IPVS: stopping backup sync thread 15366 ... [ 445.376755][T19064] netlink: 'syz.4.4637': attribute type 10 has an invalid length. [ 445.412691][T19066] bridge: RTM_NEWNEIGH with invalid ether address [ 445.435745][T19067] __nla_validate_parse: 5 callbacks suppressed [ 445.435764][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4632'. [ 445.495329][T19069] sch_tbf: burst 955 is lower than device lo mtu (65550) ! [ 445.559946][T19073] FAULT_INJECTION: forcing a failure. [ 445.559946][T19073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.578833][T19073] CPU: 1 UID: 0 PID: 19073 Comm: syz.2.4638 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 445.578859][T19073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.578868][T19073] Call Trace: [ 445.578875][T19073] [ 445.578881][T19073] dump_stack_lvl+0x241/0x360 [ 445.578907][T19073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.578924][T19073] ? __pfx__printk+0x10/0x10 [ 445.578941][T19073] ? __pfx_lock_release+0x10/0x10 [ 445.578969][T19073] should_fail_ex+0x40a/0x550 [ 445.578996][T19073] _copy_from_iter+0x1df/0x1c40 [ 445.579014][T19073] ? __virt_addr_valid+0x183/0x530 [ 445.579030][T19073] ? __pfx_lock_release+0x10/0x10 [ 445.579056][T19073] ? __alloc_skb+0x28f/0x440 [ 445.579071][T19073] ? __pfx__copy_from_iter+0x10/0x10 [ 445.579089][T19073] ? __virt_addr_valid+0x183/0x530 [ 445.579102][T19073] ? __virt_addr_valid+0x183/0x530 [ 445.579115][T19073] ? __virt_addr_valid+0x45f/0x530 [ 445.579129][T19073] ? __phys_addr_symbol+0x2f/0x70 [ 445.579144][T19073] ? __check_object_size+0x47a/0x730 [ 445.579166][T19073] netlink_sendmsg+0x742/0xcb0 [ 445.579196][T19073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.579218][T19073] ? aa_sock_msg_perm+0x91/0x160 [ 445.579244][T19073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.579262][T19073] __sock_sendmsg+0x221/0x270 [ 445.579285][T19073] ____sys_sendmsg+0x53a/0x860 [ 445.579308][T19073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.579323][T19073] ? __fget_files+0x2a/0x410 [ 445.579347][T19073] ? __fget_files+0x2a/0x410 [ 445.579373][T19073] __sys_sendmsg+0x269/0x350 [ 445.579394][T19073] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.579421][T19073] ? do_sys_openat2+0x17a/0x1d0 [ 445.579461][T19073] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.579483][T19073] ? do_syscall_64+0x100/0x230 [ 445.579504][T19073] ? do_syscall_64+0xb6/0x230 [ 445.579524][T19073] do_syscall_64+0xf3/0x230 [ 445.579542][T19073] ? clear_bhb_loop+0x35/0x90 [ 445.579566][T19073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.579585][T19073] RIP: 0033:0x7fbe5bd8d169 [ 445.579600][T19073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.579614][T19073] RSP: 002b:00007fbe5cbd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.579633][T19073] RAX: ffffffffffffffda RBX: 00007fbe5bfa5fa0 RCX: 00007fbe5bd8d169 [ 445.579645][T19073] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004 [ 445.579656][T19073] RBP: 00007fbe5cbd3090 R08: 0000000000000000 R09: 0000000000000000 [ 445.579666][T19073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.579676][T19073] R13: 0000000000000000 R14: 00007fbe5bfa5fa0 R15: 00007fffce12e0a8 [ 445.579699][T19073] [ 445.891992][T19078] syzkaller0: entered promiscuous mode [ 445.897668][T19078] syzkaller0: entered allmulticast mode [ 446.023894][T19085] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4644'. [ 446.343410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.051330][T19108] netlink: 'syz.4.4650': attribute type 10 has an invalid length. [ 447.383471][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.427736][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.783803][T19111] bridge: RTM_NEWNEIGH with invalid ether address [ 448.969898][T19122] netlink: 'syz.1.4655': attribute type 29 has an invalid length. [ 449.090720][T19127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4657'. [ 449.225070][T19125] netlink: 'syz.1.4655': attribute type 29 has an invalid length. [ 449.343848][T19138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4661'. [ 449.365120][T19138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4661'. [ 449.374960][T19139] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 449.463433][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.510513][T19141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4663'. [ 449.647695][T19139] netlink: 'syz.3.4662': attribute type 29 has an invalid length. [ 449.800403][T19156] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4667'. [ 449.949534][T19150] syzkaller0: entered promiscuous mode [ 449.957337][T19150] syzkaller0: entered allmulticast mode [ 449.992231][T19142] IPv6: sit1: Disabled Multicast RS [ 450.024721][T19142] sit1: entered allmulticast mode [ 450.032884][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4668'. [ 450.221679][T19171] SET target dimension over the limit! [ 450.377427][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4674'. [ 450.490515][T19169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.505910][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.533675][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4677'. [ 450.653148][T19188] netlink: 'syz.2.4679': attribute type 10 has an invalid length. [ 450.713991][T19190] netlink: 'syz.2.4679': attribute type 10 has an invalid length. [ 450.721868][T19190] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4679'. [ 451.543530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.764690][T19209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4685'. [ 451.830451][T19211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4685'. [ 452.583465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.154055][T19188] batman_adv: batadv0: Adding interface: team0 [ 453.160267][T19188] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.185788][T19188] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 453.196833][T19190] team0: entered promiscuous mode [ 453.202707][T19190] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.210723][T19190] batman_adv: batadv0: Interface activated: team0 [ 453.217976][T19190] batman_adv: batadv0: Interface deactivated: team0 [ 453.224792][T19190] batman_adv: batadv0: Removing interface: team0 [ 453.282003][T19190] bridge0: port 1(team0) entered blocking state [ 453.298192][T19190] bridge0: port 1(team0) entered disabled state [ 453.311138][T19218] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4687'. [ 453.321928][T19190] team0: entered allmulticast mode [ 453.362537][T19218] bond0: (slave syz_tun): Releasing backup interface [ 453.479894][T19216] lo speed is unknown, defaulting to 1000 [ 453.577335][T19216] lo speed is unknown, defaulting to 1000 [ 453.623436][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.677434][T19216] lo speed is unknown, defaulting to 1000 [ 453.918809][T19234] sctp: [Deprecated]: syz.0.4691 (pid 19234) Use of int in maxseg socket option. [ 453.918809][T19234] Use struct sctp_assoc_value instead [ 454.032009][T19245] ip6gretap1: entered allmulticast mode [ 454.181834][T19252] netlink: 'syz.1.4699': attribute type 10 has an invalid length. [ 454.191948][T19255] netlink: 'syz.1.4699': attribute type 10 has an invalid length. [ 454.378415][T19253] syzkaller0: entered promiscuous mode [ 454.406577][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4701'. [ 454.415844][T19253] syzkaller0: entered allmulticast mode [ 454.460557][T19255] team0: Port device bridge0 added [ 454.663443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.808460][T19272] FAULT_INJECTION: forcing a failure. [ 454.808460][T19272] name failslab, interval 1, probability 0, space 0, times 0 [ 454.853994][T19272] CPU: 1 UID: 0 PID: 19272 Comm: syz.0.4703 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 454.854022][T19272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 454.854032][T19272] Call Trace: [ 454.854039][T19272] [ 454.854047][T19272] dump_stack_lvl+0x241/0x360 [ 454.854073][T19272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.854091][T19272] ? __pfx__printk+0x10/0x10 [ 454.854110][T19272] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 454.854133][T19272] ? __pfx___might_resched+0x10/0x10 [ 454.854159][T19272] should_fail_ex+0x40a/0x550 [ 454.854186][T19272] should_failslab+0xac/0x100 [ 454.854209][T19272] kmem_cache_alloc_node_noprof+0x77/0x380 [ 454.854229][T19272] ? __alloc_skb+0x1c3/0x440 [ 454.854243][T19272] ? genl_rcv_msg+0x894/0xec0 [ 454.854265][T19272] __alloc_skb+0x1c3/0x440 [ 454.854278][T19272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.854306][T19272] ? __pfx___alloc_skb+0x10/0x10 [ 454.854333][T19272] netlink_dump+0x239/0xe10 [ 454.854366][T19272] ? __pfx_netlink_dump+0x10/0x10 [ 454.854400][T19272] ? __asan_memset+0x23/0x50 [ 454.854417][T19272] ? genl_start+0x4ae/0x6d0 [ 454.854443][T19272] __netlink_dump_start+0x5a2/0x790 [ 454.854474][T19272] genl_rcv_msg+0x894/0xec0 [ 454.854498][T19272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.854520][T19272] ? __pfx_genl_start+0x10/0x10 [ 454.854535][T19272] ? __pfx_genl_dumpit+0x10/0x10 [ 454.854549][T19272] ? __pfx_genl_done+0x10/0x10 [ 454.854583][T19272] ? __pfx_lock_acquire+0x10/0x10 [ 454.854606][T19272] ? __pfx_hwsim_dump_radio_nl+0x10/0x10 [ 454.854631][T19272] ? __pfx___might_resched+0x10/0x10 [ 454.854661][T19272] netlink_rcv_skb+0x206/0x480 [ 454.854684][T19272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.854703][T19272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.854753][T19272] genl_rcv+0x28/0x40 [ 454.854776][T19272] netlink_unicast+0x7f6/0x990 [ 454.854805][T19272] ? __pfx_netlink_unicast+0x10/0x10 [ 454.854823][T19272] ? __virt_addr_valid+0x45f/0x530 [ 454.854841][T19272] ? __phys_addr_symbol+0x2f/0x70 [ 454.854857][T19272] ? __check_object_size+0x47a/0x730 [ 454.854884][T19272] netlink_sendmsg+0x8de/0xcb0 [ 454.854917][T19272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.854943][T19272] ? aa_sock_msg_perm+0x91/0x160 [ 454.854973][T19272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.854991][T19272] __sock_sendmsg+0x221/0x270 [ 454.855012][T19272] ____sys_sendmsg+0x53a/0x860 [ 454.855033][T19272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.855045][T19272] ? __fget_files+0x2a/0x410 [ 454.855070][T19272] ? __fget_files+0x2a/0x410 [ 454.855093][T19272] __sys_sendmsg+0x269/0x350 [ 454.855111][T19272] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.855134][T19272] ? do_sys_openat2+0x17a/0x1d0 [ 454.855171][T19272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.855191][T19272] ? do_syscall_64+0x100/0x230 [ 454.855209][T19272] ? do_syscall_64+0xb6/0x230 [ 454.855225][T19272] do_syscall_64+0xf3/0x230 [ 454.855240][T19272] ? clear_bhb_loop+0x35/0x90 [ 454.855259][T19272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.855275][T19272] RIP: 0033:0x7f44ecd8d169 [ 454.855288][T19272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.855300][T19272] RSP: 002b:00007f44edc29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.855315][T19272] RAX: ffffffffffffffda RBX: 00007f44ecfa5fa0 RCX: 00007f44ecd8d169 [ 454.855325][T19272] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004 [ 454.855333][T19272] RBP: 00007f44edc29090 R08: 0000000000000000 R09: 0000000000000000 [ 454.855341][T19272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.855349][T19272] R13: 0000000000000000 R14: 00007f44ecfa5fa0 R15: 00007ffe01a40048 [ 454.855370][T19272] [ 455.320538][T19277] netlink: 'syz.2.4704': attribute type 5 has an invalid length. [ 455.337897][T19280] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4706'. [ 455.441662][T19283] FAULT_INJECTION: forcing a failure. [ 455.441662][T19283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.496794][T19283] CPU: 0 UID: 0 PID: 19283 Comm: syz.1.4705 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 455.496821][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.496831][T19283] Call Trace: [ 455.496837][T19283] [ 455.496845][T19283] dump_stack_lvl+0x241/0x360 [ 455.496870][T19283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.496887][T19283] ? __pfx__printk+0x10/0x10 [ 455.496905][T19283] ? __pfx_lock_release+0x10/0x10 [ 455.496934][T19283] should_fail_ex+0x40a/0x550 [ 455.496961][T19283] _copy_from_user+0x2d/0xb0 [ 455.496981][T19283] core_sys_select+0x670/0xa40 [ 455.497011][T19283] ? __pfx_core_sys_select+0x10/0x10 [ 455.497032][T19283] ? ksys_write+0x22a/0x2b0 [ 455.497072][T19283] ? __pfx_set_user_sigmask+0x10/0x10 [ 455.497092][T19283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 455.497109][T19283] ? __fget_files+0x2a/0x410 [ 455.497135][T19283] __se_sys_pselect6+0x321/0x3e0 [ 455.497161][T19283] ? __pfx___se_sys_pselect6+0x10/0x10 [ 455.497180][T19283] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.497203][T19283] ? do_syscall_64+0x100/0x230 [ 455.497223][T19283] ? __x64_sys_pselect6+0x21/0xf0 [ 455.497244][T19283] do_syscall_64+0xf3/0x230 [ 455.497261][T19283] ? clear_bhb_loop+0x35/0x90 [ 455.497284][T19283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.497301][T19283] RIP: 0033:0x7f0c1738d169 [ 455.497316][T19283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.497329][T19283] RSP: 002b:00007f0c18130038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 455.497345][T19283] RAX: ffffffffffffffda RBX: 00007f0c175a6080 RCX: 00007f0c1738d169 [ 455.497356][T19283] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000040 [ 455.497366][T19283] RBP: 00007f0c18130090 R08: 0000000000000000 R09: 0000000000000000 [ 455.497375][T19283] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 455.497383][T19283] R13: 0000000000000001 R14: 00007f0c175a6080 R15: 00007ffd0bbefd58 [ 455.497406][T19283] [ 455.703486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.722903][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4708'. [ 455.793709][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4704'. [ 456.401433][T19300] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 456.574313][T19304] netlink: 'syz.1.4713': attribute type 41 has an invalid length. [ 456.743559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.783545][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.857567][T19275] netlink: 'syz.2.4704': attribute type 4 has an invalid length. [ 457.866047][T19278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.011697][T19287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4708'. [ 458.036826][T19292] team0: left allmulticast mode [ 458.042099][T19292] bridge0: port 1(team0) entered disabled state [ 458.131358][T19292] bond0: (slave bridge0): Releasing backup interface [ 458.203647][T19315] netlink: 'syz.3.4718': attribute type 10 has an invalid length. [ 458.426523][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4721'. [ 458.453669][T19327] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 458.498371][T19330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4722'. [ 458.509735][T19330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4722'. [ 458.659873][T19313] bond0: (slave netdevsim0): Releasing backup interface [ 458.823516][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.873201][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4731'. [ 459.125749][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 459.366052][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4741'. [ 459.375776][T19379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4741'. [ 459.864818][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.143872][T19401] netlink: 'syz.4.4752': attribute type 1 has an invalid length. [ 460.503541][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 460.832350][T19426] netlink: 'syz.3.4759': attribute type 41 has an invalid length. [ 460.855597][T19426] ip6tnl1: left promiscuous mode [ 460.871710][T19426] ip6tnl1: left allmulticast mode [ 460.903439][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.281010][T19453] Cannot find set identified by id 0 to match [ 461.509748][T19466] __nla_validate_parse: 5 callbacks suppressed [ 461.509769][T19466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4771'. [ 461.701110][T19480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4776'. [ 461.837140][T19490] netlink: 'syz.0.4777': attribute type 8 has an invalid length. [ 461.856688][T19480] netlink: 'syz.2.4776': attribute type 39 has an invalid length. [ 461.868240][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4780'. [ 461.879224][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4780'. [ 461.928657][T19494] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4779'. [ 461.943470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.249673][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4783'. [ 462.606435][T19532] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4790'. [ 462.608437][T19533] netlink: 'syz.3.4792': attribute type 10 has an invalid length. [ 462.626737][T19532] netlink: 'syz.1.4790': attribute type 1 has an invalid length. [ 462.743731][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 462.817673][T19546] netlink: 'syz.0.4797': attribute type 41 has an invalid length. [ 462.857216][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'. [ 462.964863][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4799'. [ 462.983437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.258606][T19567] netlink: 'syz.3.4805': attribute type 10 has an invalid length. [ 463.981980][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4814'. [ 464.023485][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.055716][T19597] FAULT_INJECTION: forcing a failure. [ 464.055716][T19597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.069367][T19597] CPU: 0 UID: 0 PID: 19597 Comm: syz.4.4815 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 464.069391][T19597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.069402][T19597] Call Trace: [ 464.069409][T19597] [ 464.069417][T19597] dump_stack_lvl+0x241/0x360 [ 464.069444][T19597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.069463][T19597] ? __pfx__printk+0x10/0x10 [ 464.069493][T19597] ? snprintf+0xda/0x120 [ 464.069520][T19597] should_fail_ex+0x40a/0x550 [ 464.069549][T19597] _copy_to_user+0x31/0xb0 [ 464.069572][T19597] simple_read_from_buffer+0xca/0x150 [ 464.069597][T19597] proc_fail_nth_read+0x1e9/0x250 [ 464.069621][T19597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.069646][T19597] ? rw_verify_area+0x243/0x630 [ 464.069662][T19597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.069685][T19597] vfs_read+0x1f8/0xb40 [ 464.069704][T19597] ? fdget_pos+0x254/0x320 [ 464.069731][T19597] ? __pfx___mutex_lock+0x10/0x10 [ 464.069751][T19597] ? __pfx_vfs_read+0x10/0x10 [ 464.069765][T19597] ? do_sys_openat2+0x17a/0x1d0 [ 464.069790][T19597] ? __fget_files+0x2a/0x410 [ 464.069817][T19597] ? __fget_files+0x395/0x410 [ 464.069836][T19597] ? __fget_files+0x2a/0x410 [ 464.069867][T19597] ksys_read+0x18f/0x2b0 [ 464.069887][T19597] ? __pfx_ksys_read+0x10/0x10 [ 464.069905][T19597] ? do_syscall_64+0x100/0x230 [ 464.069928][T19597] ? do_syscall_64+0xb6/0x230 [ 464.069950][T19597] do_syscall_64+0xf3/0x230 [ 464.069969][T19597] ? clear_bhb_loop+0x35/0x90 [ 464.069993][T19597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.070013][T19597] RIP: 0033:0x7f534fd8bb7c [ 464.070029][T19597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 464.070044][T19597] RSP: 002b:00007f5350b93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.070062][T19597] RAX: ffffffffffffffda RBX: 00007f534ffa5fa0 RCX: 00007f534fd8bb7c [ 464.070075][T19597] RDX: 000000000000000f RSI: 00007f5350b930a0 RDI: 0000000000000003 [ 464.070087][T19597] RBP: 00007f5350b93090 R08: 0000000000000000 R09: 0000000000000000 [ 464.070098][T19597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.070109][T19597] R13: 0000000000000000 R14: 00007f534ffa5fa0 R15: 00007ffd3306c378 [ 464.070137][T19597] [ 464.403683][T19594] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 464.539249][T19617] delete_channel: no stack [ 464.794405][T19624] netlink: 'syz.2.4819': attribute type 10 has an invalid length. [ 464.971481][T19627] syzkaller1: entered allmulticast mode [ 465.063432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.089471][T19640] tls_set_device_offload_rx: netdev not found [ 465.206486][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.233883][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.243038][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.255094][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.264677][ T5855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 465.275470][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.277976][T19644] netlink: 'syz.2.4828': attribute type 29 has an invalid length. [ 465.311259][T19644] netlink: 'syz.2.4828': attribute type 29 has an invalid length. [ 465.397134][T19644] netlink: 'syz.2.4828': attribute type 10 has an invalid length. [ 465.417055][T19644] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 465.428859][T19644] team0: Port device netdevsim0 added [ 465.443824][T19647] lo speed is unknown, defaulting to 1000 [ 465.531265][T19647] lo speed is unknown, defaulting to 1000 [ 465.661653][T19647] lo speed is unknown, defaulting to 1000 [ 465.800055][T19647] chnl_net:caif_netlink_parms(): no params data found [ 465.888963][T19647] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.901505][T19647] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.914287][T19647] bridge_slave_0: entered allmulticast mode [ 465.921125][T19647] bridge_slave_0: entered promiscuous mode [ 465.956288][T19647] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.983632][T19647] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.990940][T19647] bridge_slave_1: entered allmulticast mode [ 466.025600][T19647] bridge_slave_1: entered promiscuous mode [ 466.103446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.147562][T19647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.189175][T19679] lo speed is unknown, defaulting to 1000 [ 466.192263][T19647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.281697][T19684] netlink: 'syz.0.4837': attribute type 10 has an invalid length. [ 466.331566][T19647] team0: Port device team_slave_0 added [ 466.343219][ T1221] IPVS: starting estimator thread 0... [ 466.389961][T19647] team0: Port device team_slave_1 added [ 466.424028][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 466.431748][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 466.443810][T19692] IPVS: using max 21 ests per chain, 50400 per kthread [ 466.555439][T19647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.562440][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.600399][T19647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.655447][T19679] lo speed is unknown, defaulting to 1000 [ 466.658639][T19647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.672941][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.733201][T19647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.877418][T19647] hsr_slave_0: entered promiscuous mode [ 466.924533][T19647] hsr_slave_1: entered promiscuous mode [ 466.930765][T19647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.960397][T19647] Cannot create hsr debugfs directory [ 467.035566][T19679] lo speed is unknown, defaulting to 1000 [ 467.143430][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.177742][T19720] __nla_validate_parse: 9 callbacks suppressed [ 467.177755][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4846'. [ 467.252511][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4846'. [ 467.304231][ T5848] Bluetooth: hci4: command tx timeout [ 467.445540][T19726] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4847'. [ 467.677948][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 467.893125][T19647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.924884][T19647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.948452][T19647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.966193][T19647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 468.168078][T19647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.183470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.189888][T19739] netlink: 'syz.1.4850': attribute type 8 has an invalid length. [ 468.221533][T19647] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.252895][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.260082][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.305756][T19741] netlink: 'syz.2.4851': attribute type 10 has an invalid length. [ 468.317016][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.324211][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.430475][T19743] batadv_slave_0: entered promiscuous mode [ 468.504120][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 468.509391][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4853'. [ 468.545098][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4853'. [ 468.583428][T19755] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4854'. [ 468.724174][T19647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.802193][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4858'. [ 468.815440][T19766] netlink: 'syz.3.4859': attribute type 1 has an invalid length. [ 468.823203][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4859'. [ 468.852491][T19771] netlink: 'syz.1.4861': attribute type 41 has an invalid length. [ 468.880464][T19771] batadv_slave_0: left promiscuous mode [ 468.891949][T19773] xt_TCPMSS: Only works on TCP SYN packets [ 468.984586][T19764] lo speed is unknown, defaulting to 1000 [ 469.069464][T19779] netlink: 'syz.1.4862': attribute type 1 has an invalid length. [ 469.166141][T19764] lo speed is unknown, defaulting to 1000 [ 469.223458][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.249984][T19647] veth0_vlan: entered promiscuous mode [ 469.276514][T19764] lo speed is unknown, defaulting to 1000 [ 469.287221][T19782] netlink: 'syz.3.4863': attribute type 10 has an invalid length. [ 469.332067][T19647] veth1_vlan: entered promiscuous mode [ 469.384434][ T5848] Bluetooth: hci4: command tx timeout [ 469.410318][T19647] veth0_macvtap: entered promiscuous mode [ 469.428647][T19647] veth1_macvtap: entered promiscuous mode [ 469.450947][T19647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.462924][T19647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.489231][T19647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.503751][T19647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.518339][T19647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.532931][T19647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.019687][ T6624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.039604][ T6624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.140462][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4869'. [ 470.250270][ T6624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.263515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.299481][ T6624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.606505][T19821] netlink: 'syz.1.4873': attribute type 10 has an invalid length. [ 470.740954][T19821] team0: Port device bridge0 removed [ 471.303489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.463906][ T5848] Bluetooth: hci4: command tx timeout [ 471.630918][T19873] netlink: 'syz.1.4888': attribute type 8 has an invalid length. [ 472.204954][T19909] __nla_validate_parse: 8 callbacks suppressed [ 472.204975][T19909] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4900'. [ 472.221228][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4900'. [ 472.343506][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.463642][T19922] netlink: 'syz.0.4905': attribute type 8 has an invalid length. [ 472.578315][T19924] bridge0: port 2(team0) entered blocking state [ 472.590108][T19924] bridge0: port 2(team0) entered disabled state [ 472.608420][T19924] team0: entered allmulticast mode [ 472.622454][T19924] team0: entered promiscuous mode [ 472.638721][T19930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4908'. [ 472.818901][T19938] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4914'. [ 472.828481][T19938] netlink: 'syz.4.4914': attribute type 1 has an invalid length. [ 472.876156][T19942] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4912'. [ 472.969260][T19947] netlink: 'syz.4.4916': attribute type 8 has an invalid length. [ 472.977387][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4916'. [ 472.988653][T19947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4916'. [ 473.337466][T19931] lo speed is unknown, defaulting to 1000 [ 473.383443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.431973][T19965] pimreg: entered allmulticast mode [ 473.525909][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4925'. [ 473.543597][ T5848] Bluetooth: hci4: command tx timeout [ 473.670757][T19931] lo speed is unknown, defaulting to 1000 [ 473.790478][T19980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4929'. [ 473.918668][T19989] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20001 [ 474.018352][T19992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.068706][T19931] lo speed is unknown, defaulting to 1000 [ 474.295526][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4937'. [ 474.423431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.619755][T20017] syzkaller0: entered promiscuous mode [ 474.625436][T20017] syzkaller0: entered allmulticast mode [ 475.463505][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.503477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.300747][T20025] 0ªX¹¦Dö»: renamed from gretap0 [ 477.308078][T20025] 0ªX¹¦Dö»: entered allmulticast mode [ 477.543485][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.682779][T20059] __nla_validate_parse: 2 callbacks suppressed [ 477.682799][T20059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4946'. [ 477.700841][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4946'. [ 477.710334][T20059] netlink: 'syz.4.4946': attribute type 13 has an invalid length. [ 477.720515][T20059] netlink: 'syz.4.4946': attribute type 12 has an invalid length. [ 477.994290][T20073] netlink: 'syz.1.4957': attribute type 1 has an invalid length. [ 478.050644][T20079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.300801][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4964'. [ 478.352571][T20093] lo speed is unknown, defaulting to 1000 [ 478.373103][T20100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 478.455330][T20106] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4967'. [ 478.570550][T20112] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 478.583443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.198189][T20093] lo speed is unknown, defaulting to 1000 [ 479.357834][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4976'. [ 479.374907][T20140] netlink: 'syz.4.4979': attribute type 41 has an invalid length. [ 479.427129][T20140] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.434658][T20140] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.554800][T20140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.571552][T20140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.623439][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.679543][T20140] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.693592][T20140] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.702511][T20140] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.716059][T20140] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.776968][T20093] lo speed is unknown, defaulting to 1000 [ 479.808616][T20147] sctp: [Deprecated]: syz.3.4981 (pid 20147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.808616][T20147] Use struct sctp_sack_info instead [ 480.290262][T20166] netlink: 'syz.1.4987': attribute type 8 has an invalid length. [ 480.567877][T20176] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4991'. [ 480.597243][T20176] netlink: 'syz.1.4991': attribute type 1 has an invalid length. [ 480.663446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.885816][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4993'. [ 480.944265][T20187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4993'. [ 480.971516][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4993'. [ 480.994258][T20186] syzkaller0: entered promiscuous mode [ 481.002327][T20186] syzkaller0: entered allmulticast mode [ 481.703454][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.748705][T20210] netlink: 'syz.3.5002': attribute type 10 has an invalid length. [ 482.747708][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.780445][T20217] openvswitch: netlink: Flow actions attr not present in new flow. [ 483.783449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.890413][T20223] __nla_validate_parse: 6 callbacks suppressed [ 483.890440][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5009'. [ 483.961417][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5012'. [ 484.128162][T20239] netlink: 'syz.4.5015': attribute type 10 has an invalid length. [ 484.145956][T20239] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 484.279875][T20249] Cannot find del_set index 2 as target [ 484.300933][T20251] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5017'. [ 484.512371][T20260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5019'. [ 484.592947][T20264] netlink: 'syz.2.5022': attribute type 1 has an invalid length. [ 484.615952][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5024'. [ 484.728296][T20270] openvswitch: netlink: IP tunnel dst address not specified [ 484.778766][T20272] netlink: 'syz.3.5026': attribute type 10 has an invalid length. [ 484.823490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.949402][T20283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5030'. [ 485.504787][T20308] netlink: 'syz.0.5037': attribute type 41 has an invalid length. [ 485.602924][T20312] lo speed is unknown, defaulting to 1000 [ 485.716844][T20312] lo speed is unknown, defaulting to 1000 [ 485.839113][T20312] lo speed is unknown, defaulting to 1000 [ 485.863439][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.921150][T20317] netlink: 'syz.1.5039': attribute type 10 has an invalid length. [ 486.160948][T20334] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.234201][T20334] ip6tnl1: entered promiscuous mode [ 486.281490][T20334] ip6tnl1: entered allmulticast mode [ 486.297051][T20334] team0: Device ip6tnl1 is of different type [ 486.804457][T20361] netlink: 'syz.0.5051': attribute type 10 has an invalid length. [ 486.892652][T20363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5052'. [ 486.903428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.070917][T20374] ax25_connect(): syz.1.5054 uses autobind, please contact jreuter@yaina.de [ 487.144614][T20374] ------------[ cut here ]------------ [ 487.150576][T20374] refcount_t: decrement hit 0; leaking memory. [ 487.164209][T20381] IPVS: length: 21 != 8 [ 487.213165][T20374] WARNING: CPU: 0 PID: 20374 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 487.223205][T20374] Modules linked in: [ 487.227990][T20374] CPU: 0 UID: 0 PID: 20374 Comm: syz.1.5054 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 487.239431][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.250128][T20374] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 487.256813][T20374] Code: b2 00 00 00 e8 c7 64 cc fc 5b 5d c3 cc cc cc cc e8 bb 64 cc fc c6 05 0a bd 31 0b 01 90 48 c7 c7 80 b3 80 8c e8 27 21 8c fc 90 <0f> 0b 90 90 eb d9 e8 9b 64 cc fc c6 05 e7 bc 31 0b 01 90 48 c7 c7 [ 487.277107][T20374] RSP: 0018:ffffc90003e5f488 EFLAGS: 00010246 [ 487.283224][T20374] RAX: 1cd1608fce1a6b00 RBX: ffff88807ccc064c RCX: 0000000000080000 [ 487.291526][T20374] RDX: ffffc9000fd09000 RSI: 00000000000098ef RDI: 00000000000098f0 [ 487.300181][T20374] RBP: 0000000000000004 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 487.308418][T20374] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffff88807ccc0608 [ 487.316931][T20374] R13: 0000000000000000 R14: ffff88807ccc064c R15: dffffc0000000000 [ 487.325094][T20374] FS: 00007f0c181516c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 487.334964][T20374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.341579][T20374] CR2: 00007ffd4ab2c518 CR3: 000000004812a000 CR4: 00000000003526f0 [ 487.349994][T20374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.358576][T20374] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 487.367169][T20374] Call Trace: [ 487.370492][T20374] [ 487.374007][T20374] ? __warn+0x165/0x4d0 [ 487.378210][T20374] ? refcount_warn_saturate+0xfa/0x1d0 [ 487.384356][T20374] ? report_bug+0x2b3/0x500 [ 487.388901][T20374] ? refcount_warn_saturate+0xfa/0x1d0 [ 487.394945][T20374] ? handle_bug+0x60/0x90 [ 487.399331][T20374] ? exc_invalid_op+0x1a/0x50 [ 487.404698][T20374] ? asm_exc_invalid_op+0x1a/0x20 [ 487.409772][T20374] ? __warn_printk+0x292/0x360 [ 487.415161][T20374] ? refcount_warn_saturate+0xfa/0x1d0 [ 487.420662][T20374] ? refcount_warn_saturate+0xf9/0x1d0 [ 487.426680][T20374] ref_tracker_free+0x6af/0x7e0 [ 487.431573][T20374] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.437778][T20374] ? ax25_disconnect+0x1b3/0x3d0 [ 487.442765][T20374] ? _raw_spin_unlock+0x28/0x50 [ 487.448238][T20374] ? ax25_disconnect+0x34a/0x3d0 [ 487.453226][T20374] ax25_device_event+0x334/0x600 [ 487.458485][T20374] notifier_call_chain+0x1a5/0x3f0 [ 487.464216][T20374] dev_close_many+0x33c/0x4c0 [ 487.468932][T20374] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 487.475393][T20374] ? __pfx_dev_close_many+0x10/0x10 [ 487.480634][T20374] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.487236][T20374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 487.494123][T20374] netif_close+0x1c0/0x2c0 [ 487.498586][T20374] ? __pfx_netif_close+0x10/0x10 [ 487.504143][T20374] ? tun_device_event+0x7c/0x1090 [ 487.509211][T20374] dev_close+0x137/0x280 [ 487.514038][T20374] bpq_device_event+0x372/0x8d0 [ 487.518920][T20374] ? lockdep_rtnl_is_held+0x26/0x40 [ 487.524740][T20374] notifier_call_chain+0x1a5/0x3f0 [ 487.529910][T20374] __dev_notify_flags+0x207/0x400 [ 487.535556][T20374] ? dev_set_rx_mode+0x233/0x2e0 [ 487.540536][T20374] ? __pfx___dev_notify_flags+0x10/0x10 [ 487.546612][T20374] ? __dev_change_flags+0x515/0x6f0 [ 487.551834][T20374] ? __pfx___dev_change_flags+0x10/0x10 [ 487.557834][T20374] ? rcu_is_watching+0x15/0xb0 [ 487.562624][T20374] netif_change_flags+0xf0/0x1a0 [ 487.567655][T20374] dev_change_flags+0x146/0x270 [ 487.572553][T20374] dev_ifsioc+0x791/0x1130 [ 487.577080][T20374] ? __pfx___mutex_lock+0x10/0x10 [ 487.582138][T20374] ? __pfx_dev_ifsioc+0x10/0x10 [ 487.587567][T20374] ? dev_load+0x21/0x1f0 [ 487.591834][T20374] dev_ioctl+0x719/0x1340 [ 487.596460][T20374] sock_do_ioctl+0x240/0x460 [ 487.601056][T20374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 487.606795][T20374] sock_ioctl+0x626/0x8e0 [ 487.611159][T20374] ? __pfx_sock_ioctl+0x10/0x10 [ 487.616421][T20374] ? __fget_files+0x2a/0x410 [ 487.621025][T20374] ? __fget_files+0x2a/0x410 [ 487.625938][T20374] ? __pfx_sock_ioctl+0x10/0x10 [ 487.630841][T20374] __se_sys_ioctl+0xf5/0x170 [ 487.636032][T20374] do_syscall_64+0xf3/0x230 [ 487.640572][T20374] ? clear_bhb_loop+0x35/0x90 [ 487.645850][T20374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.651784][T20374] RIP: 0033:0x7f0c1738d169 [ 487.656822][T20374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.677061][T20374] RSP: 002b:00007f0c18151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.686096][T20374] RAX: ffffffffffffffda RBX: 00007f0c175a5fa0 RCX: 00007f0c1738d169 [ 487.694665][T20374] RDX: 0000400000000700 RSI: 0000000000008914 RDI: 0000000000000007 [ 487.702682][T20374] RBP: 00007f0c1740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 487.711464][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.720075][T20374] R13: 0000000000000000 R14: 00007f0c175a5fa0 R15: 00007ffd0bbefd58 [ 487.728672][T20374] [ 487.731743][T20374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.739042][T20374] CPU: 0 UID: 0 PID: 20374 Comm: syz.1.5054 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 487.749812][T20374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.759874][T20374] Call Trace: [ 487.763169][T20374] [ 487.766095][T20374] dump_stack_lvl+0x241/0x360 [ 487.770794][T20374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.775995][T20374] ? __pfx__printk+0x10/0x10 [ 487.780598][T20374] ? _printk+0xd5/0x120 [ 487.784759][T20374] ? __init_begin+0x41000/0x41000 [ 487.789817][T20374] ? vscnprintf+0x5d/0x90 [ 487.794178][T20374] panic+0x349/0x880 [ 487.798097][T20374] ? __warn+0x174/0x4d0 [ 487.802273][T20374] ? __pfx_panic+0x10/0x10 [ 487.806754][T20374] __warn+0x344/0x4d0 [ 487.810757][T20374] ? refcount_warn_saturate+0xfa/0x1d0 [ 487.816243][T20374] report_bug+0x2b3/0x500 [ 487.820599][T20374] ? refcount_warn_saturate+0xfa/0x1d0 [ 487.826089][T20374] handle_bug+0x60/0x90 [ 487.830273][T20374] exc_invalid_op+0x1a/0x50 [ 487.834803][T20374] asm_exc_invalid_op+0x1a/0x20 [ 487.839661][T20374] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 487.845728][T20374] Code: b2 00 00 00 e8 c7 64 cc fc 5b 5d c3 cc cc cc cc e8 bb 64 cc fc c6 05 0a bd 31 0b 01 90 48 c7 c7 80 b3 80 8c e8 27 21 8c fc 90 <0f> 0b 90 90 eb d9 e8 9b 64 cc fc c6 05 e7 bc 31 0b 01 90 48 c7 c7 [ 487.865328][T20374] RSP: 0018:ffffc90003e5f488 EFLAGS: 00010246 [ 487.871391][T20374] RAX: 1cd1608fce1a6b00 RBX: ffff88807ccc064c RCX: 0000000000080000 [ 487.879352][T20374] RDX: ffffc9000fd09000 RSI: 00000000000098ef RDI: 00000000000098f0 [ 487.887319][T20374] RBP: 0000000000000004 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 487.895283][T20374] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffff88807ccc0608 [ 487.903246][T20374] R13: 0000000000000000 R14: ffff88807ccc064c R15: dffffc0000000000 [ 487.911214][T20374] ? __warn_printk+0x292/0x360 [ 487.915982][T20374] ? refcount_warn_saturate+0xf9/0x1d0 [ 487.921432][T20374] ref_tracker_free+0x6af/0x7e0 [ 487.926278][T20374] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.931652][T20374] ? ax25_disconnect+0x1b3/0x3d0 [ 487.936586][T20374] ? _raw_spin_unlock+0x28/0x50 [ 487.941428][T20374] ? ax25_disconnect+0x34a/0x3d0 [ 487.946359][T20374] ax25_device_event+0x334/0x600 [ 487.951291][T20374] notifier_call_chain+0x1a5/0x3f0 [ 487.956404][T20374] dev_close_many+0x33c/0x4c0 [ 487.961075][T20374] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 487.966965][T20374] ? __pfx_dev_close_many+0x10/0x10 [ 487.972153][T20374] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.978132][T20374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 487.984458][T20374] netif_close+0x1c0/0x2c0 [ 487.988871][T20374] ? __pfx_netif_close+0x10/0x10 [ 487.993806][T20374] ? tun_device_event+0x7c/0x1090 [ 487.998850][T20374] dev_close+0x137/0x280 [ 488.003091][T20374] bpq_device_event+0x372/0x8d0 [ 488.007942][T20374] ? lockdep_rtnl_is_held+0x26/0x40 [ 488.013149][T20374] notifier_call_chain+0x1a5/0x3f0 [ 488.018272][T20374] __dev_notify_flags+0x207/0x400 [ 488.023285][T20374] ? dev_set_rx_mode+0x233/0x2e0 [ 488.028224][T20374] ? __pfx___dev_notify_flags+0x10/0x10 [ 488.033769][T20374] ? __dev_change_flags+0x515/0x6f0 [ 488.038973][T20374] ? __pfx___dev_change_flags+0x10/0x10 [ 488.044515][T20374] ? rcu_is_watching+0x15/0xb0 [ 488.049291][T20374] netif_change_flags+0xf0/0x1a0 [ 488.054224][T20374] dev_change_flags+0x146/0x270 [ 488.059073][T20374] dev_ifsioc+0x791/0x1130 [ 488.063485][T20374] ? __pfx___mutex_lock+0x10/0x10 [ 488.068507][T20374] ? __pfx_dev_ifsioc+0x10/0x10 [ 488.073355][T20374] ? dev_load+0x21/0x1f0 [ 488.077593][T20374] dev_ioctl+0x719/0x1340 [ 488.081965][T20374] sock_do_ioctl+0x240/0x460 [ 488.086583][T20374] ? __pfx_sock_do_ioctl+0x10/0x10 [ 488.091714][T20374] sock_ioctl+0x626/0x8e0 [ 488.096039][T20374] ? __pfx_sock_ioctl+0x10/0x10 [ 488.100884][T20374] ? __fget_files+0x2a/0x410 [ 488.105475][T20374] ? __fget_files+0x2a/0x410 [ 488.110060][T20374] ? __pfx_sock_ioctl+0x10/0x10 [ 488.114905][T20374] __se_sys_ioctl+0xf5/0x170 [ 488.119494][T20374] do_syscall_64+0xf3/0x230 [ 488.123991][T20374] ? clear_bhb_loop+0x35/0x90 [ 488.128666][T20374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.134556][T20374] RIP: 0033:0x7f0c1738d169 [ 488.138965][T20374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.158586][T20374] RSP: 002b:00007f0c18151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.166995][T20374] RAX: ffffffffffffffda RBX: 00007f0c175a5fa0 RCX: 00007f0c1738d169 [ 488.174957][T20374] RDX: 0000400000000700 RSI: 0000000000008914 RDI: 0000000000000007 [ 488.182920][T20374] RBP: 00007f0c1740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 488.190882][T20374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.198847][T20374] R13: 0000000000000000 R14: 00007f0c175a5fa0 R15: 00007ffd0bbefd58 [ 488.206821][T20374] [ 488.210079][T20374] Kernel Offset: disabled [ 488.214474][T20374] Rebooting in 86400 seconds..