last executing test programs: 40.237041512s ago: executing program 4 (id=1956): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000140)) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020400) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000010c0)=r4, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008c000000100000000160c737840000658b96e20000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) unshare(0x68040200) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r11, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 17.569559337s ago: executing program 4 (id=2086): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, &(0x7f0000000040)) 17.329654931s ago: executing program 4 (id=2184): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 16.988415511s ago: executing program 4 (id=2188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 16.728528017s ago: executing program 4 (id=2191): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0xf00}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.506831212s ago: executing program 4 (id=2193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x20}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="866105a80000000000000008c0556ddd", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x14, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x97, 0x0, 0x69f3, 0x10, @local, @remote, 0x80, 0x7, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/100, 0x64, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14}}, 0xb4}}, 0x0) 15.600526234s ago: executing program 1 (id=2203): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32], 0x38}, 0x1, 0xf00}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.164582007s ago: executing program 1 (id=2206): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000680"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xffff) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080002400000000e0500030000000000080001400000000c0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800002f32000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r7], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x6}, 0x0) 14.720564222s ago: executing program 1 (id=2211): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 14.524537682s ago: executing program 1 (id=2213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 14.248245428s ago: executing program 1 (id=2216): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32], 0x38}, 0x1, 0xf00}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.006654628s ago: executing program 1 (id=2219): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000140)) write$cgroup_pid(r1, &(0x7f0000000500), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) unshare(0x22020400) r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000010c0)=r5, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000047da577fdb71963afa45fa8aba2aef000000961182792b510e9d7121b19d6cbc37c50a46d2896ce3861a1349a3b0142292f01a277f00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) unshare(0x68040200) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 11.679752149s ago: executing program 0 (id=2234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bind$packet(r3, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b0f, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000000001010400000009000000000a000000440001802c170180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000600034000010000"], 0x58}}, 0x0) 11.492708216s ago: executing program 0 (id=2236): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r2, r2, 0x0, 0x8000002b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r0, r2, 0x0, 0x9, &(0x7f0000000040)='security\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400)=r0, 0x3b) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000069000000fbe27737b82574269d23fc8133fe084b2de811ac377bbb1ecb920ea21c0e698adf8c05bfe8dc9d515a3057b134071c7f12b54a127b85475dc83c1e4fea996578264e5257ce869ec849cd210722e744d5647edc5d4775e73b5a5471727f143eafffde579659fb4b1756"], &(0x7f0000000000)=0x8d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000600000000000000000a20000000f3090101000000000000000002000000090e010073077a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000036940000a200000000000000002b000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000001000000010000000000000000000000020000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000004000000000000000014000e00e00000020000000000000000000000000000e493a9ac9ad59c9718f7aaac519bae9b614a3b6204a7588bb5b0c2f984b5e8d8087985ae565c31631a44e637831d649d066eb81da78e66"], 0x104}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) 6.39128583s ago: executing program 0 (id=2240): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0xff13, 0x2, 0xffff8000, 0xfffffffb, 0x5d}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x75}}]}}}]}, 0x64}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 5.709416556s ago: executing program 0 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x4c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(xcbc(aes))\x00'}, 0x25) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r2, 0x2, 0x3}) 5.275210325s ago: executing program 0 (id=2249): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@delpolicy={0x68, 0x14, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@loopback}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0xffec}}, @mark={0xc}]}, 0x68}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x2}]}, 0x18}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001080)=""/204, 0xcc}, {0x0}], 0x2}, 0xa8}], 0x1, 0x2, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14040}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x89c6, 0x20}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x80000000, 0x5) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x70, r3, 0x124, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x18, 0x2e}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x53}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x62}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x40004) syz_emit_ethernet(0x150, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb00005598518f88470000000000000f00000000000002020000000f0000000000611702450102060000000000000000000000000000000001ff0100000000000000000000000000013b04000000000000040100010400000000c2040000002bc910fe8000000000000000000000000000aa00010000000000000c04069808030000000000000000000000000000000001fe80000000000000000000000000000cfe8000000000000000000000000000aa00000000000000000000000000000000fc000000000000000000000000000001fc0000000000000000000000000000014e220007", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="60020003907800091e0304009f2075411ee4b67b39ff09978a2551896788a242e6d127d3472b553b574a82655cb496672526f2f167e79bc766e64c00af4b0c3eeb807f2ae3f02537ff6719b40a8b70301d03635f9227596cb5792d8570bcaddc0efadc7954"], 0x0) 4.885739775s ago: executing program 2 (id=2252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x20}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="866105a80000000000000008c0556ddd", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x14, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x97, 0x0, 0x69f3, 0x10, @local, @remote, 0x80, 0x7, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/100, 0x64, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14}}, 0xb4}}, 0x0) 4.280780926s ago: executing program 0 (id=2254): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x122, 0x0, 0x0, 0x0, 0x2d, &(0x7f0000000000)='bridge_slave_1\x00', 0x6, 0x1000, 0x1c7}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000140)="588c9d274c3d855bc53350adca1b678e3625b5fb8009698beb5ffda79fcc3ec2838868d386207bd2fd71f7b38cd50d58eccdd721756cd21d51dab868e659059a69b4b3f524b3219fe690ae2027d15b127027468d7889255b", &(0x7f00000001c0)=""/3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)=0xe, 0x4) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x100010, r0, 0x3ee22000) ioctl(r0, 0x7, &(0x7f00000002c0)="43d2d6e8b732693b161be81f1c2c05682eff2d0c9e1c7b694d47c0c5547417ab4d995002c7ce8cf4c25511f5b3c9a16487017778a0f553175e2295c81d14da8f5ef3c58423962e00dd0b90c4") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000340)="47646b98c5f465b198607277d7fa3034e08d73e969fce2acb12b863f5b899245dc835562f9f07660eec10dbdff8a81e602c43338599973e4fb6181d089acb51f7fca31cf75ea19c77d37c23f4a26c409fe32b174f7f098c82125", &(0x7f00000003c0)=@tcp6=r2, 0x2}, 0x20) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000440), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) unshare(0x100) r3 = accept4(r0, &(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000540)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r1, 0x5, 0x1, 0x800, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@fallback=r0, 0xffffffffffffffff, 0x0, 0x2030, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r5}, 0x20) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x41000) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000008c0), 0x4) unshare(0x68000000) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000900), 0x80000) write(r1, &(0x7f0000000940)="60dedc90ba08dca848cb4ae3b9f0a2d810fde0f790200ccfff272f3ff5ee0d1991", 0x21) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz1\x00', 0x200002, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0x4e20, 0x1ea0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b80)='GPL\x00', 0x8001, 0x8c, &(0x7f0000000bc0)=""/140, 0x41100, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x3, 0x6, 0x100, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000cc0)=[r4, r1, r4, r1, r4], &(0x7f0000000d00)=[{0x2, 0x1, 0x8, 0xa}], 0x10, 0x3, @void, @value}, 0x94) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000001200)={0x0, 0x8, 0x7ff}) 4.280010041s ago: executing program 2 (id=2255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r3, &(0x7f00000005c0)=[{}, {{&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080), 0x30}}], 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030c00000000000000000000000200090008000000e9000e9100000000030006000000000002000000000000000000000000000000000000030005000000000002000000ac1414aa0000000000000000"], 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.980562823s ago: executing program 3 (id=2258): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000009280)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x3}}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000004"], 0x24}}, 0x0) 1.87451407s ago: executing program 2 (id=2259): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x40, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x40}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="f4", 0x1}], 0x1, 0x0, 0x0, 0x200400d4}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, 0x0, 0x2}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000200), 0x18) sendmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000894) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, 0x0) 1.66995877s ago: executing program 3 (id=2260): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000440)=""/161, &(0x7f0000000040)=0xa1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40489}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x0) 1.5005062s ago: executing program 3 (id=2261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800c0001006269747769736500280002800800064000000001080001400000000404000580080002400000000a08000340000000b90900010073797a30"], 0xd8}}, 0x0) 1.371534495s ago: executing program 2 (id=2262): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8919, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000019000500000001000000000080"], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x41c8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000040)={{r5}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x2042, 0x8}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000001440)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010100000008000300"/18, @ANYRES32=r11, @ANYBLOB="08000c00f8ffffff0600340001e90000"], 0x2c}}, 0x0) 1.237812483s ago: executing program 3 (id=2263): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @empty, 0x1000}, 0x1c) (async) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r5, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 975.919665ms ago: executing program 2 (id=2264): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001080)=""/204, 0xcc}, {0x0}], 0x2}, 0xa8}], 0x1, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000f50f00010000000000000000000000000a2c000000080a05000000000000000000020000000900010073797a30000000000900020073797a3000000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x48}}, 0xa15ae47253ad5f83) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f5, 0x1, 0x70bd26, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000085}, 0x4) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="0f0002040000000000ff0f0000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000001d0b6382972f4b8f"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x810) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000008e2470f00000000000000020000f7b73c2d819eb9ace1320000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYBLOB="010000"], 0x48}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r7, 0xee5a8000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 820.392928ms ago: executing program 3 (id=2265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x20}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="866105a80000000000000008c0556ddd", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x14, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x97, 0x0, 0x69f3, 0x10, @local, @remote, 0x80, 0x7, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000580)=""/100, 0x64, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x4010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}], {0x14}}, 0xb4}}, 0x0) 472.688863ms ago: executing program 3 (id=2266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4c"}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000050000a6dbeab0941ab1ce0005000400d4592baf05fdf0a6c511f3fa28574a2d49484d13f604ede6dde1bddde7d03b32a33b32bd25cd0bd82f9aba5b799e1aa4f8a8cb20d9608dad64d037f3c9853c8aedaa52cbf1463797db5129b8fdc8b932a46a8d2a5e2503a42409ab87fde344228a2c7455c697ffb16417b5c1d82fd23a55ccb84467cd793310e04c71f2c2c5017e66486fb9a46b442f0c2adaceacbdb361e610afef292e5d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) ioctl$TUNGETDEVNETNS(r6, 0x8982, 0x20000000) accept$unix(r6, &(0x7f0000000300)=@abs, &(0x7f00000003c0)=0x6e) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000001010000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r10, @ANYBLOB="c6372c84f687bbeae1e9297f7a94bc5b82569e95059c12548e5c0cabf81f97cec08ff73a4189a6094fa79278597e4f40955393cb3d9c4535bb9bd747f82ff5a7b96df27ad46fec46893f1566b0bcc0f434a2375ab1f783082e972f683a1385c835fe9df5e72594e405a7f7ec3fabd8a3613c52246c7b83a01d98c44cc56b9e551a3853ed043b4e707e312128280259a28c2336e9f835ce88cf7490363ede4d93d90062a173d562e692a3009a88d662b045fcaaff76d1109e8cb7a518faed137993047d012d3062cb07369f62e68c2fba07e5"], 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x0) 0s ago: executing program 2 (id=2267): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r0, r1, 0x0, 0x8000002b) r2 = socket(0x6, 0x4, 0x7) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x161c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1608, 0x3, 0x0, 0x1, [{0x1604, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x194, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xcc, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x70, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffff}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x9b}]}}}]}, @NFTA_SET_ELEM_KEY={0x1418, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "6d017ce9f7c2f63580e09d1bc7c8343dcd4aa7c08970de9022f394426ee22b8960ab5a0aee19ef3b64882183ba0e1e3c80a22fabba088b48ef06a8525467e80843b7148eca324c53e9c30ce5bf9f49679184cc1ef59600711593b200be0d7c1fd9b9b964ae8943026985b66a272d6bb409d77eca22ddb3ddd0a8c7fcc447387af7d9c616a6d802b69d8bff95b294612cdd6564f7ad68746695d5cc3251f673700d899b4ea1abb66a91f21157bf7c46efb56a5988af34403d4f01d4174496804610339f3173696834bc4491440b6ec4bab476df6b6bc0f6"}, @NFTA_DATA_VALUE={0x9d, 0x1, "1ebb1e37ef1a7e7a7c41473bd89634d7d0a38cb0da96e1d0eb72eb38172d26816376b2db7fe417276bdd52d3793e33c99f6773140a912a077d71ddfbb382ca1d37911bca00426258bfbfa4d98e20a43700633b81b61a93dbde5fd2c318d0e28473fe0718e79c8f1291e1e5c627b4cb4d97778f345ae2a8cb83e2979584afed1b2ae90a063d106f098ecf3fbe767844c49d17657fbe81ed7a29"}, @NFTA_DATA_VALUE={0x73, 0x1, "9e3ee98bbd5a982a5179ad70aa2c2cb87b892ea99ee070297e169614ca61a7199e5366291d1193901d7d949847467689039d9c7b5d7b2399aa81dd215098d6ca6d7059bef379ecac51773b8290831c001984a93bf5c8092be2c665a82787eec49d9a38f5b2533a008841ef265172d2"}, @NFTA_DATA_VALUE={0x27, 0x1, "61fd7a55393477cf4d537a2ccf3189811d2d5268ed81e1814b22a7f70b13fc28b5bc26"}, @NFTA_DATA_VALUE={0xe1, 0x1, "ec04aa5ead2fc070704e088f271bbb8b8c2b86351a242bb9408bff80580eaad6907a67d96215bdd252c3e75a5ca9c1abdae24166191461b8482ddc08e18bf17d446e9ea96fe591b044d96bc2b8627833a077b64f68b755adfe9adfe81ef13252b9e726ef277810dac8700769649c7bf7eb0a7dbd7a6a2ded055333ddc29c77537e801f64927261b36f3a5bcb6980d8d64766b8e7baf8ade93089261defa92bf94635977fbd753417e0d222ee8347a70702fdf7d925639571440e8a05550c2b5880e14751fea114bcdeaf04e47c0234261da158fec7165a174be868fda7"}, @NFTA_DATA_VALUE={0x98, 0x1, "05beaf9e250ca4c569e1a512f773bfe7f3dba5dc87a82ad1e25662663d7852232fc7e62f904aa6437f6925f8726f1961a59fdcdb0efe1027eb836a264a415352144538ba0741c794e6410b684a0b6512f053b423af594594c1efd15c46b719f59445cf7098b95ab40430b10d0d051d84f022db4b57dda0b416fafdbeae476a33b8971056599f8cf88053f7f1e78a2ba92e2b6ea4"}, @NFTA_DATA_VALUE={0x50, 0x1, "d9707d7bc59351ca7c18e514c389c32c1fcc1897f3c6cc435b3bbd3d63ff0587c46291a2f2c035be593a17f65cae1fa43e0ad2aee43d33b6045afb5ae15aaff676a13be164e2bd2e9b968837"}, @NFTA_DATA_VERDICT={0x4}]}]}]}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xb4, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'lo\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1810}, 0x1, 0x0, 0x0, 0x48001}, 0x4800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r7, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x2}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="20002cbd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b007f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00980000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x24004090}, 0x800) kernel console output (not intermixed with test programs): 00000 R09: 0000000000000000 [ 435.742801][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.750785][T10600] R13: 0000000000000000 R14: 00007f1b9fd35f80 R15: 00007fff13569828 [ 435.758780][T10600] [ 436.264402][T10616] syzkaller1: entered promiscuous mode [ 436.282459][T10616] syzkaller1: entered allmulticast mode [ 436.343225][T10616] pimreg: entered allmulticast mode [ 436.489226][T10628] netlink: 'syz.1.1564': attribute type 2 has an invalid length. [ 436.505847][T10628] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 436.616136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 436.644617][T10631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 436.713496][T10631] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 437.333959][T10656] FAULT_INJECTION: forcing a failure. [ 437.333959][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 437.416321][T10656] CPU: 1 UID: 0 PID: 10656 Comm: syz.2.1572 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 437.426809][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 437.436899][T10656] Call Trace: [ 437.440216][T10656] [ 437.443176][T10656] dump_stack_lvl+0x241/0x360 [ 437.447907][T10656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.453160][T10656] ? __pfx__printk+0x10/0x10 [ 437.457815][T10656] ? ref_tracker_alloc+0x332/0x490 [ 437.463005][T10656] should_fail_ex+0x3b0/0x4e0 [ 437.467722][T10656] ? skb_clone+0x20c/0x390 [ 437.472164][T10656] should_failslab+0xac/0x100 [ 437.476878][T10656] ? skb_clone+0x20c/0x390 [ 437.481306][T10656] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 437.486696][T10656] skb_clone+0x20c/0x390 [ 437.490968][T10656] __netlink_deliver_tap+0x3cc/0x7c0 [ 437.496290][T10656] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.501507][T10656] netlink_deliver_tap+0x19d/0x1b0 [ 437.506648][T10656] netlink_unicast+0x7c4/0x990 [ 437.511435][T10656] ? __pfx_netlink_unicast+0x10/0x10 [ 437.516733][T10656] ? __virt_addr_valid+0x183/0x530 [ 437.521854][T10656] ? __check_object_size+0x49c/0x900 [ 437.527162][T10656] ? bpf_lsm_netlink_send+0x9/0x10 [ 437.532283][T10656] netlink_sendmsg+0x8e4/0xcb0 [ 437.537097][T10656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.542410][T10656] ? aa_sock_msg_perm+0x91/0x160 [ 437.547364][T10656] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.552688][T10656] ? security_socket_sendmsg+0x87/0xb0 [ 437.558165][T10656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.563463][T10656] __sock_sendmsg+0x221/0x270 [ 437.568178][T10656] sock_write_iter+0x2dd/0x400 [ 437.572960][T10656] ? __pfx_sock_write_iter+0x10/0x10 [ 437.578268][T10656] ? bpf_lsm_file_permission+0x9/0x10 [ 437.583654][T10656] ? security_file_permission+0x7f/0xa0 [ 437.589230][T10656] vfs_write+0xa72/0xc90 [ 437.593485][T10656] ? __pfx_sock_write_iter+0x10/0x10 [ 437.598786][T10656] ? __pfx_vfs_write+0x10/0x10 [ 437.603578][T10656] ksys_write+0x1a0/0x2c0 [ 437.607921][T10656] ? __pfx_ksys_write+0x10/0x10 [ 437.612778][T10656] ? do_syscall_64+0x100/0x230 [ 437.617564][T10656] ? do_syscall_64+0xb6/0x230 [ 437.622348][T10656] do_syscall_64+0xf3/0x230 [ 437.626875][T10656] ? clear_bhb_loop+0x35/0x90 [ 437.631565][T10656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.637466][T10656] RIP: 0033:0x7f1b9fb7def9 [ 437.641893][T10656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.661513][T10656] RSP: 002b:00007f1ba09f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.669945][T10656] RAX: ffffffffffffffda RBX: 00007f1b9fd35f80 RCX: 00007f1b9fb7def9 [ 437.677928][T10656] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000004 [ 437.685931][T10656] RBP: 00007f1ba09f0090 R08: 0000000000000000 R09: 0000000000000000 [ 437.693923][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.701900][T10656] R13: 0000000000000000 R14: 00007f1b9fd35f80 R15: 00007fff13569828 [ 437.709905][T10656] [ 437.714240][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.385907][T10676] ebtables: ebtables: counters copy to user failed while replacing table [ 438.451380][T10694] netlink: 'syz.1.1578': attribute type 3 has an invalid length. [ 438.484252][T10694] __nla_validate_parse: 4 callbacks suppressed [ 438.484273][T10694] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1578'. [ 438.484352][T10695] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 438.516159][T10695] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1580'. [ 438.632121][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1582'. [ 438.776212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.791094][T10683] delete_channel: no stack [ 439.104038][T10720] FAULT_INJECTION: forcing a failure. [ 439.104038][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 439.116769][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz.3.1587 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 439.127222][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 439.137354][T10720] Call Trace: [ 439.140670][T10720] [ 439.143630][T10720] dump_stack_lvl+0x241/0x360 [ 439.148369][T10720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.153625][T10720] ? __pfx__printk+0x10/0x10 [ 439.158286][T10720] should_fail_ex+0x3b0/0x4e0 [ 439.163024][T10720] ? skb_clone+0x20c/0x390 [ 439.165765][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'. [ 439.167458][T10720] should_failslab+0xac/0x100 [ 439.167520][T10720] ? skb_clone+0x20c/0x390 [ 439.167545][T10720] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 439.189627][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 439.190986][T10720] skb_clone+0x20c/0x390 [ 439.204232][T10720] ? dev_queue_xmit_nit+0x220/0xc10 [ 439.209485][T10720] dev_queue_xmit_nit+0x419/0xc10 [ 439.214570][T10720] ? dev_queue_xmit_nit+0x2b/0xc10 [ 439.219739][T10720] ? validate_xmit_skb+0x9f9/0x1120 [ 439.224984][T10720] dev_hard_start_xmit+0x15f/0x7e0 [ 439.230134][T10720] ? __pfx_validate_xmit_skb+0x10/0x10 [ 439.235132][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'. [ 439.235657][T10720] __dev_queue_xmit+0x1b58/0x3e80 [ 439.235690][T10720] ? kasan_save_track+0x51/0x80 [ 439.254569][T10720] ? ksys_write+0x1a0/0x2c0 [ 439.259122][T10720] ? __dev_queue_xmit+0x2da/0x3e80 [ 439.264286][T10720] ? __pfx___dev_queue_xmit+0x10/0x10 [ 439.269726][T10720] ? __copy_skb_header+0x437/0x5b0 [ 439.274900][T10720] ? __asan_memcpy+0x40/0x70 [ 439.279534][T10720] ? __copy_skb_header+0x437/0x5b0 [ 439.284697][T10720] ? __skb_clone+0x454/0x6c0 [ 439.289336][T10720] ? skb_clone+0x240/0x390 [ 439.293798][T10720] __netlink_deliver_tap+0x54d/0x7c0 [ 439.299152][T10720] ? netlink_deliver_tap+0x2e/0x1b0 [ 439.304401][T10720] netlink_deliver_tap+0x19d/0x1b0 [ 439.309570][T10720] netlink_unicast+0x7c4/0x990 [ 439.314389][T10720] ? __pfx_netlink_unicast+0x10/0x10 [ 439.319726][T10720] ? __virt_addr_valid+0x183/0x530 [ 439.324882][T10720] ? __check_object_size+0x49c/0x900 [ 439.330214][T10720] ? bpf_lsm_netlink_send+0x9/0x10 [ 439.335373][T10720] netlink_sendmsg+0x8e4/0xcb0 [ 439.340219][T10720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.345563][T10720] ? aa_sock_msg_perm+0x91/0x160 [ 439.350563][T10720] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 439.355888][T10720] ? security_socket_sendmsg+0x87/0xb0 [ 439.361403][T10720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.366755][T10720] __sock_sendmsg+0x221/0x270 [ 439.371487][T10720] sock_write_iter+0x2dd/0x400 [ 439.376296][T10720] ? __pfx_sock_write_iter+0x10/0x10 [ 439.381663][T10720] ? bpf_lsm_file_permission+0x9/0x10 [ 439.387098][T10720] ? security_file_permission+0x7f/0xa0 [ 439.395317][T10720] vfs_write+0xa72/0xc90 [ 439.399617][T10720] ? __pfx_sock_write_iter+0x10/0x10 [ 439.404952][T10720] ? __pfx_vfs_write+0x10/0x10 [ 439.409789][T10720] ksys_write+0x1a0/0x2c0 [ 439.414170][T10720] ? __pfx_ksys_write+0x10/0x10 [ 439.419063][T10720] ? do_syscall_64+0x100/0x230 [ 439.423881][T10720] ? do_syscall_64+0xb6/0x230 [ 439.428621][T10720] do_syscall_64+0xf3/0x230 [ 439.433172][T10720] ? clear_bhb_loop+0x35/0x90 [ 439.437912][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.443845][T10720] RIP: 0033:0x7f4d6e17def9 [ 439.448298][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.467953][T10720] RSP: 002b:00007f4d6eea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.476417][T10720] RAX: ffffffffffffffda RBX: 00007f4d6e335f80 RCX: 00007f4d6e17def9 [ 439.484432][T10720] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000004 [ 439.492442][T10720] RBP: 00007f4d6eea5090 R08: 0000000000000000 R09: 0000000000000000 [ 439.500457][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.508470][T10720] R13: 0000000000000000 R14: 00007f4d6e335f80 R15: 00007ffc2a2da808 [ 439.516500][T10720] [ 439.711296][T10724] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 439.733296][T10724] netlink: 'syz.1.1589': attribute type 4 has an invalid length. [ 439.746590][T10724] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.1589'. [ 439.816205][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.151952][T10736] hsr0: entered promiscuous mode [ 440.176664][T10736] hsr0: left promiscuous mode [ 440.309103][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.629912][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1598'. [ 440.856203][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.329333][T10778] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1606'. [ 441.595368][T10782] Cannot find map_set index 0 as target [ 441.896218][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.023209][T10799] can: request_module (can-proto-3) failed. [ 442.158526][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1614'. [ 442.191216][T10806] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 442.447035][T10815] FAULT_INJECTION: forcing a failure. [ 442.447035][T10815] name failslab, interval 1, probability 0, space 0, times 0 [ 442.491319][T10815] CPU: 0 UID: 0 PID: 10815 Comm: syz.3.1616 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 442.501828][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 442.511916][T10815] Call Trace: [ 442.515235][T10815] [ 442.518194][T10815] dump_stack_lvl+0x241/0x360 [ 442.522926][T10815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.528271][T10815] ? __pfx__printk+0x10/0x10 [ 442.532915][T10815] ? ref_tracker_alloc+0x332/0x490 [ 442.538069][T10815] should_fail_ex+0x3b0/0x4e0 [ 442.542793][T10815] ? skb_clone+0x20c/0x390 [ 442.547250][T10815] should_failslab+0xac/0x100 [ 442.551985][T10815] ? skb_clone+0x20c/0x390 [ 442.556446][T10815] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 442.561885][T10815] skb_clone+0x20c/0x390 [ 442.566172][T10815] __netlink_deliver_tap+0x3cc/0x7c0 [ 442.571524][T10815] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.576769][T10815] netlink_deliver_tap+0x19d/0x1b0 [ 442.581945][T10815] __netlink_sendskb+0x60/0xd0 [ 442.586756][T10815] netlink_dump+0x97d/0xd80 [ 442.591326][T10815] ? __pfx_netlink_dump+0x10/0x10 [ 442.596444][T10815] ? __pfx_lock_acquire+0x10/0x10 [ 442.601567][T10815] __netlink_dump_start+0x5a2/0x790 [ 442.606857][T10815] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 442.612441][T10815] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 442.617426][T10815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.622927][T10815] ? __pfx_rtnl_dumpit+0x10/0x10 [ 442.627906][T10815] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 442.633499][T10815] ? ref_tracker_free+0x643/0x7e0 [ 442.638608][T10815] netlink_rcv_skb+0x1e3/0x430 [ 442.643430][T10815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 442.648946][T10815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.654309][T10815] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.659563][T10815] netlink_unicast+0x7f6/0x990 [ 442.664391][T10815] ? __pfx_netlink_unicast+0x10/0x10 [ 442.669720][T10815] ? __virt_addr_valid+0x183/0x530 [ 442.674874][T10815] ? __check_object_size+0x49c/0x900 [ 442.680209][T10815] ? bpf_lsm_netlink_send+0x9/0x10 [ 442.685366][T10815] netlink_sendmsg+0x8e4/0xcb0 [ 442.690195][T10815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.695620][T10815] ? aa_sock_msg_perm+0x91/0x160 [ 442.700604][T10815] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 442.705938][T10815] ? security_socket_sendmsg+0x87/0xb0 [ 442.711448][T10815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.716781][T10815] __sock_sendmsg+0x221/0x270 [ 442.721513][T10815] sock_write_iter+0x2dd/0x400 [ 442.726336][T10815] ? __pfx_sock_write_iter+0x10/0x10 [ 442.731681][T10815] ? bpf_lsm_file_permission+0x9/0x10 [ 442.737104][T10815] ? security_file_permission+0x7f/0xa0 [ 442.742727][T10815] vfs_write+0xa72/0xc90 [ 442.747024][T10815] ? __pfx_sock_write_iter+0x10/0x10 [ 442.752360][T10815] ? __pfx_vfs_write+0x10/0x10 [ 442.757194][T10815] ksys_write+0x1a0/0x2c0 [ 442.761571][T10815] ? __pfx_ksys_write+0x10/0x10 [ 442.766484][T10815] ? do_syscall_64+0x100/0x230 [ 442.771314][T10815] ? do_syscall_64+0xb6/0x230 [ 442.776042][T10815] do_syscall_64+0xf3/0x230 [ 442.780594][T10815] ? clear_bhb_loop+0x35/0x90 [ 442.785325][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.791260][T10815] RIP: 0033:0x7f4d6e17def9 [ 442.795710][T10815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.815362][T10815] RSP: 002b:00007f4d6eea5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.823846][T10815] RAX: ffffffffffffffda RBX: 00007f4d6e335f80 RCX: 00007f4d6e17def9 [ 442.831857][T10815] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000004 [ 442.839862][T10815] RBP: 00007f4d6eea5090 R08: 0000000000000000 R09: 0000000000000000 [ 442.847866][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.855858][T10815] R13: 0000000000000000 R14: 00007f4d6e335f80 R15: 00007ffc2a2da808 [ 442.863883][T10815] [ 442.936221][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.348006][T10837] tipc: Bearer : already 2 bearers with priority 10 [ 443.392907][T10837] tipc: Bearer : trying with adjusted priority [ 443.419458][T10837] tipc: Enabling of bearer rejected, failed to enable media [ 443.509838][T10839] ÊüðÿG: entered promiscuous mode [ 443.786428][T10846] __nla_validate_parse: 4 callbacks suppressed [ 443.786451][T10846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1625'. [ 443.939696][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'. [ 443.949097][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 443.961339][T10851] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 443.969833][T10851] netlink: 'syz.2.1626': attribute type 4 has an invalid length. [ 443.976421][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.986229][T10851] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1626'. [ 444.125179][T10851] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 444.176773][T10851] netlink: 'syz.2.1626': attribute type 4 has an invalid length. [ 444.197144][T10851] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1626'. [ 444.397504][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1628'. [ 444.584511][T10866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1632'. [ 444.602588][T10866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1632'. [ 444.614748][T10864] netlink: 'syz.3.1631': attribute type 29 has an invalid length. [ 444.799856][T10872] FAULT_INJECTION: forcing a failure. [ 444.799856][T10872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.843408][T10872] CPU: 0 UID: 0 PID: 10872 Comm: syz.0.1634 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 444.853900][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 444.864043][T10872] Call Trace: [ 444.867363][T10872] [ 444.870328][T10872] dump_stack_lvl+0x241/0x360 [ 444.875084][T10872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.880329][T10872] ? __pfx__printk+0x10/0x10 [ 444.884977][T10872] ? snprintf+0xda/0x120 [ 444.889259][T10872] should_fail_ex+0x3b0/0x4e0 [ 444.893978][T10872] _copy_to_user+0x2f/0xb0 [ 444.898441][T10872] simple_read_from_buffer+0xca/0x150 [ 444.903855][T10872] proc_fail_nth_read+0x1ec/0x260 [ 444.908993][T10872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.914579][T10872] ? rw_verify_area+0x520/0x6b0 [ 444.919462][T10872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.925058][T10872] vfs_read+0x204/0xbc0 [ 444.929256][T10872] ? __pfx_lock_release+0x10/0x10 [ 444.934329][T10872] ? __pfx_sock_write_iter+0x10/0x10 [ 444.939670][T10872] ? __pfx_vfs_read+0x10/0x10 [ 444.944400][T10872] ? __fget_files+0x29/0x470 [ 444.949034][T10872] ? __fget_files+0x3f6/0x470 [ 444.953757][T10872] ksys_read+0x1a0/0x2c0 [ 444.958028][T10872] ? __pfx_ksys_read+0x10/0x10 [ 444.962828][T10872] ? do_syscall_64+0x100/0x230 [ 444.967641][T10872] ? do_syscall_64+0xb6/0x230 [ 444.972369][T10872] do_syscall_64+0xf3/0x230 [ 444.976914][T10872] ? clear_bhb_loop+0x35/0x90 [ 444.981633][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.987561][T10872] RIP: 0033:0x7f836357c93c [ 444.992008][T10872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 445.011656][T10872] RSP: 002b:00007f836440d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.016206][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.020089][T10872] RAX: ffffffffffffffda RBX: 00007f8363735f80 RCX: 00007f836357c93c [ 445.020148][T10872] RDX: 000000000000000f RSI: 00007f836440d0a0 RDI: 0000000000000005 [ 445.043003][T10872] RBP: 00007f836440d090 R08: 0000000000000000 R09: 0000000000000000 [ 445.051016][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.059025][T10872] R13: 0000000000000000 R14: 00007f8363735f80 R15: 00007ffe5b9d1818 [ 445.067059][T10872] [ 445.725057][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 445.792410][T10911] veth0_macvtap: left promiscuous mode [ 445.928376][T10913] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1646'. [ 446.056959][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.836301][T10958] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 446.888993][T10958] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 446.910265][T10966] ieee802154 phy1 wpan1: encryption failed: -90 [ 447.020277][T10969] vlan0: entered promiscuous mode [ 447.096339][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.105614][T10969] team0: Port device vlan0 added [ 447.489146][T10983] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.820312][T10993] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 447.871585][T10993] 0ªX¹¦Dö»: entered allmulticast mode [ 448.074326][T11004] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 448.136359][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.981454][T11033] __nla_validate_parse: 7 callbacks suppressed [ 448.981479][T11033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1684'. [ 449.176313][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.258143][T11040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1686'. [ 449.646150][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1689'. [ 450.216232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.783197][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 450.824537][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 451.086102][T11102] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1705'. [ 451.135549][T11105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1706'. [ 451.177473][T11105] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 451.256247][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.818253][T11117] tap0: tun_chr_ioctl cmd 1074025673 [ 452.296245][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 453.335993][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.376092][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.920664][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 455.416034][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.456047][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.495988][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.536012][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.575992][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 460.615986][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.655992][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.696393][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.735988][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.775997][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.815981][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.856251][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 467.896224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.935995][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.947123][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.013847][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.023311][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.046165][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.086698][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 469.098425][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.116893][ T4621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 469.128167][ T4621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 469.136312][ T4621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 469.145427][ T4621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 469.155674][ T4621] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 469.164466][ T4621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 469.211266][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 469.228017][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 469.238636][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 469.266539][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 469.274463][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 469.282174][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 469.366848][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 469.376932][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 469.384945][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 469.417364][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 469.434074][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 469.443892][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.444037][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.460484][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.471848][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.526114][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.546231][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 469.557098][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.869377][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.976104][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.012893][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.159358][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.300660][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.503204][T11143] chnl_net:caif_netlink_parms(): no params data found [ 470.683171][T11141] chnl_net:caif_netlink_parms(): no params data found [ 470.810619][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.818376][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.825582][T11143] bridge_slave_0: entered allmulticast mode [ 470.836987][T11143] bridge_slave_0: entered promiscuous mode [ 470.850848][ T1116] bridge_slave_1: left allmulticast mode [ 470.856964][ T1116] bridge_slave_1: left promiscuous mode [ 470.862759][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.874518][ T1116] bridge_slave_0: left allmulticast mode [ 470.880789][ T1116] bridge_slave_0: left promiscuous mode [ 470.886776][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.023069][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.266011][ T5246] Bluetooth: hci7: command tx timeout [ 471.414875][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.423686][ T5246] Bluetooth: hci10: command tx timeout [ 471.424465][ T5246] Bluetooth: hci2: command tx timeout [ 471.452796][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.464828][ T1116] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 471.483792][ T1116] bond0 (unregistering): Released all slaves [ 471.496909][ T5246] Bluetooth: hci6: command tx timeout [ 471.555584][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.580168][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.606503][T11143] bridge_slave_1: entered allmulticast mode [ 471.626148][T11143] bridge_slave_1: entered promiscuous mode [ 471.657681][ T5246] Bluetooth: hci4: command tx timeout [ 471.696516][ T1116] tipc: Disabling bearer [ 471.702830][ T1116] tipc: Left network mode [ 471.725439][ T1116] IPVS: stopping backup sync thread 10153 ... [ 471.778262][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.856663][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.951958][T11141] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.960744][T11141] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.968243][T11141] bridge_slave_0: entered allmulticast mode [ 471.975794][T11141] bridge_slave_0: entered promiscuous mode [ 471.993082][T11141] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.000902][T11141] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.008274][T11141] bridge_slave_1: entered allmulticast mode [ 472.015483][T11141] bridge_slave_1: entered promiscuous mode [ 472.055982][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.132164][T11143] team0: Port device team_slave_0 added [ 472.157290][T11143] team0: Port device team_slave_1 added [ 472.237940][T11141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.270192][T11141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.371510][T11149] chnl_net:caif_netlink_parms(): no params data found [ 472.465012][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.495999][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.551206][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.638950][ T1116] hsr_slave_0: left promiscuous mode [ 472.644993][ T1116] hsr_slave_1: left promiscuous mode [ 472.658612][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.666285][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.686590][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.694016][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.730559][ T1116] veth1_macvtap: left promiscuous mode [ 472.736526][ T1116] veth0_macvtap: left promiscuous mode [ 472.742197][ T1116] veth1_vlan: left promiscuous mode [ 472.748264][ T1116] veth0_vlan: left allmulticast mode [ 472.753689][ T1116] veth0_vlan: left promiscuous mode [ 473.053837][ T1116] team0 (unregistering): Port device vlan0 removed [ 473.096623][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.340895][ T5246] Bluetooth: hci7: command tx timeout [ 473.473254][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 473.497761][ T5246] Bluetooth: hci2: command tx timeout [ 473.506323][ T5246] Bluetooth: hci10: command tx timeout [ 473.552695][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 473.581496][ T5246] Bluetooth: hci6: command tx timeout [ 473.736738][ T5246] Bluetooth: hci4: command tx timeout [ 474.136026][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.162583][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.169785][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.197815][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.277100][T11141] team0: Port device team_slave_0 added [ 474.383048][T11143] hsr_slave_0: entered promiscuous mode [ 474.401641][T11143] hsr_slave_1: entered promiscuous mode [ 474.419651][T11143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.434819][T11143] Cannot create hsr debugfs directory [ 474.500245][T11141] team0: Port device team_slave_1 added [ 474.734491][T11141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.745975][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.782615][T11141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.870236][T11141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.878070][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.904205][T11141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.937544][T11147] chnl_net:caif_netlink_parms(): no params data found [ 475.046641][T11149] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.053841][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.076287][T11149] bridge_slave_0: entered allmulticast mode [ 475.083711][T11149] bridge_slave_0: entered promiscuous mode [ 475.155822][T11141] hsr_slave_0: entered promiscuous mode [ 475.169289][T11141] hsr_slave_1: entered promiscuous mode [ 475.175780][T11141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.176089][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.184752][T11141] Cannot create hsr debugfs directory [ 475.197651][T11149] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.204858][T11149] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.215302][T11149] bridge_slave_1: entered allmulticast mode [ 475.223240][T11149] bridge_slave_1: entered promiscuous mode [ 475.371142][T11149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.418397][ T5246] Bluetooth: hci7: command tx timeout [ 475.460218][T11149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.487333][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.494688][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.516276][T11147] bridge_slave_0: entered allmulticast mode [ 475.523747][T11147] bridge_slave_0: entered promiscuous mode [ 475.576391][ T4621] Bluetooth: hci2: command tx timeout [ 475.581941][ T5246] Bluetooth: hci10: command tx timeout [ 475.584759][T11149] team0: Port device team_slave_0 added [ 475.598536][T11149] team0: Port device team_slave_1 added [ 475.604771][T11145] chnl_net:caif_netlink_parms(): no params data found [ 475.649807][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.665531][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.666273][ T5246] Bluetooth: hci6: command tx timeout [ 475.686277][T11147] bridge_slave_1: entered allmulticast mode [ 475.693371][T11147] bridge_slave_1: entered promiscuous mode [ 475.816064][ T5246] Bluetooth: hci4: command tx timeout [ 475.816443][T11149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.839641][T11149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.875998][T11149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.892372][T11149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.899620][T11149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.925729][T11149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.965222][T11147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.029528][T11147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.079121][T11143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.216043][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 476.287895][T11143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.368385][ T1116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.394408][T11147] team0: Port device team_slave_0 added [ 476.440675][T11147] team0: Port device team_slave_1 added [ 476.457026][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.466651][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.473980][T11145] bridge_slave_0: entered allmulticast mode [ 476.482016][T11145] bridge_slave_0: entered promiscuous mode [ 476.494201][T11149] hsr_slave_0: entered promiscuous mode [ 476.506951][T11149] hsr_slave_1: entered promiscuous mode [ 476.523180][T11149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.530893][T11149] Cannot create hsr debugfs directory [ 476.561690][T11143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.609197][ T1116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.683165][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.691513][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.699800][T11145] bridge_slave_1: entered allmulticast mode [ 476.708147][T11145] bridge_slave_1: entered promiscuous mode [ 476.741563][T11143] bond0: (slave ): Releasing backup interface [ 476.753645][T11143] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.802911][ T1116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.817169][T11147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.824210][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.855151][T11147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.906935][T11147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.914039][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.946997][T11147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.024804][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 477.041178][ T1116] team0: Port device netdevsim0 removed [ 477.049613][ T1116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.068442][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.103613][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.256001][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.282120][T11145] team0: Port device team_slave_0 added [ 477.317557][T11147] hsr_slave_0: entered promiscuous mode [ 477.324411][T11147] hsr_slave_1: entered promiscuous mode [ 477.331208][T11147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.340132][T11147] Cannot create hsr debugfs directory [ 477.359290][T11145] team0: Port device team_slave_1 added [ 477.397712][T11143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 477.484171][T11141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.496924][ T5246] Bluetooth: hci7: command tx timeout [ 477.583492][T11143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 477.654840][T11141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.666882][ T4621] Bluetooth: hci2: command tx timeout [ 477.672375][ T5246] Bluetooth: hci10: command tx timeout [ 477.720387][T11143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 477.736449][ T5246] Bluetooth: hci6: command tx timeout [ 477.755393][T11143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.767389][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.774397][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.803631][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.826876][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.833870][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.860369][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.896839][ T5246] Bluetooth: hci4: command tx timeout [ 477.954623][T11141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.070458][T11141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.170108][ T1116] bridge_slave_1: left allmulticast mode [ 478.175823][ T1116] bridge_slave_1: left promiscuous mode [ 478.182820][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.193123][ T1116] bridge_slave_0: left allmulticast mode [ 478.199521][ T1116] bridge_slave_0: left promiscuous mode [ 478.206821][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.296004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 479.189605][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.202534][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.214584][ T1116] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 479.224297][ T1116] bond0 (unregistering): Released all slaves [ 479.336085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 479.422170][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.438676][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.451709][ T1116] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 479.462022][ T1116] bond0 (unregistering): (slave team0): Releasing backup interface [ 479.474368][ T1116] bond0 (unregistering): Released all slaves [ 479.491260][ T1116] bond1 (unregistering): Released all slaves [ 479.592685][T11145] hsr_slave_0: entered promiscuous mode [ 479.631076][T11145] hsr_slave_1: entered promiscuous mode [ 479.642750][T11145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.665522][T11145] Cannot create hsr debugfs directory [ 479.708132][T11149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.725839][ T1116] ÊüðÿG: left promiscuous mode [ 479.893888][T11149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.918650][ T1116] tipc: Disabling bearer [ 479.924185][ T1116] tipc: Disabling bearer [ 479.936858][ T1116] tipc: Left network mode [ 479.958313][ T1116] tipc: Left network mode [ 480.018485][T11149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.158860][T11149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.291160][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.377916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.443982][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.556589][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.563826][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.588204][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.595772][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.988930][ T1116] hsr_slave_0: left promiscuous mode [ 480.995036][ T1116] hsr_slave_1: left promiscuous mode [ 481.007416][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.016371][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.024492][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.032036][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.045208][ T1116] hsr_slave_0: left promiscuous mode [ 481.051931][ T1116] hsr_slave_1: left promiscuous mode [ 481.058259][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.065730][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.074760][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.083265][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.111395][ T1116] veth1_macvtap: left promiscuous mode [ 481.117164][ T1116] veth1_vlan: left promiscuous mode [ 481.122504][ T1116] veth0_vlan: left promiscuous mode [ 481.129428][ T1116] veth1_macvtap: left promiscuous mode [ 481.134993][ T1116] veth0_macvtap: left promiscuous mode [ 481.140735][ T1116] veth1_vlan: left promiscuous mode [ 481.146280][ T1116] veth0_vlan: left promiscuous mode [ 481.297005][ T1116] infiniband syz0: set down [ 481.416099][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.001430][ T1116] team_slave_1 (unregistering): left promiscuous mode [ 482.013107][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 482.075594][ T1116] team_slave_0 (unregistering): left promiscuous mode [ 482.087942][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 482.459558][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.938969][ T62] smc: removing ib device syz0 [ 483.345402][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 483.402203][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 483.495978][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.118059][ T5284] infiniband syz0: ib_query_port failed (-19) [ 484.329455][T11141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.378022][T11141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.433662][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.469452][T11141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.526588][T11141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.535961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.807894][T11143] veth0_vlan: entered promiscuous mode [ 484.825718][T11143] veth1_vlan: entered promiscuous mode [ 485.382175][T11143] veth0_macvtap: entered promiscuous mode [ 485.405072][T11145] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.487159][T11145] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.507846][T11145] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.576261][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.664562][T11145] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.737696][T11141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.768118][T11143] veth1_macvtap: entered promiscuous mode [ 485.945232][T11149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.979862][T11141] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.030327][T11149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 486.084625][T11149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 486.110558][T11149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.197673][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.204871][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.286399][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.315919][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.325777][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.336595][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.346493][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.357638][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.372072][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.388059][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.399453][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.410157][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.420058][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.430828][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.442745][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.464103][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.471324][ T964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.500691][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.519452][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.554856][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.565544][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.575416][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.586273][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.596167][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.607808][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.616093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 486.618867][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.648153][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.671483][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.682692][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.704879][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.741345][T11143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.750484][T11143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.760775][T11143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.770149][T11143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.051647][T11147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 487.067847][T11147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 487.118326][T11147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 487.176241][T11147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.382584][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.420745][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.434099][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.488094][T11149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.504852][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.562152][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.566140][ T1116] IPVS: stop unused estimator thread 0... [ 487.569446][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.608519][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.616528][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.643207][T11149] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.656299][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.689825][T11141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.759768][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.767029][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.795677][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.802926][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.833603][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.840834][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.942507][T11147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.116468][T11147] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.177899][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.185120][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.214652][T11141] veth0_vlan: entered promiscuous mode [ 488.259783][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.267031][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.334477][T11141] veth1_vlan: entered promiscuous mode [ 488.578483][T11149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.612846][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.640929][T11141] veth0_macvtap: entered promiscuous mode [ 488.681630][T11141] veth1_macvtap: entered promiscuous mode [ 488.696100][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.799832][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.833453][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.858269][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.874484][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.884466][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.895467][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.906571][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.932134][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.943053][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.957581][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.967608][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.978359][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.988277][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.006130][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.043739][T11141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.131488][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.187734][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.225014][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.258420][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.289416][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.379511][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.398070][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.428271][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.451499][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.480579][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.514848][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.556091][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.588178][T11141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.618692][T11141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.658484][T11141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.719077][T11141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.735040][T11141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.743980][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.758857][T11141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.775066][T11141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.811817][T11145] veth0_vlan: entered promiscuous mode [ 489.914770][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.013584][T11145] veth1_vlan: entered promiscuous mode [ 490.165213][ T2517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.169752][T11149] veth0_vlan: entered promiscuous mode [ 490.177238][ T2517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.313319][T11147] veth0_vlan: entered promiscuous mode [ 490.321993][T11219] FAULT_INJECTION: forcing a failure. [ 490.321993][T11219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.339166][T11149] veth1_vlan: entered promiscuous mode [ 490.353024][T11219] CPU: 0 UID: 0 PID: 11219 Comm: syz.1.1724 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 490.363599][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 490.373666][T11219] Call Trace: [ 490.376954][T11219] [ 490.379895][T11219] dump_stack_lvl+0x241/0x360 [ 490.384597][T11219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.389814][T11219] ? __pfx__printk+0x10/0x10 [ 490.394429][T11219] ? __pfx_lock_release+0x10/0x10 [ 490.399492][T11219] should_fail_ex+0x3b0/0x4e0 [ 490.404195][T11219] _copy_from_user+0x2f/0xe0 [ 490.408912][T11219] copy_msghdr_from_user+0xae/0x680 [ 490.414141][T11219] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 490.419993][T11219] __sys_sendmsg+0x23d/0x3a0 [ 490.424787][T11219] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.429914][T11219] ? vfs_write+0x7c4/0xc90 [ 490.434378][T11219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 490.440725][T11219] ? do_syscall_64+0x100/0x230 [ 490.445508][T11219] ? do_syscall_64+0xb6/0x230 [ 490.450201][T11219] do_syscall_64+0xf3/0x230 [ 490.454716][T11219] ? clear_bhb_loop+0x35/0x90 [ 490.459409][T11219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.465312][T11219] RIP: 0033:0x7ff33157def9 [ 490.469830][T11219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.489447][T11219] RSP: 002b:00007ff332301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.497881][T11219] RAX: ffffffffffffffda RBX: 00007ff331735f80 RCX: 00007ff33157def9 [ 490.505948][T11219] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000003 [ 490.513919][T11219] RBP: 00007ff332301090 R08: 0000000000000000 R09: 0000000000000000 [ 490.521891][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.529865][T11219] R13: 0000000000000000 R14: 00007ff331735f80 R15: 00007ffe8ca552a8 [ 490.537947][T11219] [ 490.577763][T11145] veth0_macvtap: entered promiscuous mode [ 490.603356][T11145] veth1_macvtap: entered promiscuous mode [ 490.609641][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.618827][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.633765][T11147] veth1_vlan: entered promiscuous mode [ 490.674864][T11221] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1725'. [ 490.693138][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.716380][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.745087][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.755907][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.765768][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.776085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.793473][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.813973][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.830444][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.840938][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.851660][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.863377][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.874264][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.884279][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.894772][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.907583][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.918397][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.930895][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.950429][T11224] netlink: 'syz.0.1717': attribute type 21 has an invalid length. [ 490.967546][T11224] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1717'. [ 490.988426][T11224] netlink: 'syz.0.1717': attribute type 4 has an invalid length. [ 490.996615][T11224] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1717'. [ 491.043605][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.071573][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.097525][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.124177][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.134288][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.145085][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.155045][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.165581][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.181786][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.203073][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.215538][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.226072][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.236738][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.247265][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.257580][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.269158][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.281099][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.295083][T11149] veth0_macvtap: entered promiscuous mode [ 491.332954][T11145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.343434][T11145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.352470][T11145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.362292][T11145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.451765][T11237] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1729'. [ 491.469878][T11149] veth1_macvtap: entered promiscuous mode [ 491.480789][T11237] netlink: zone id is out of range [ 491.569698][T11237] netlink: zone id is out of range [ 491.574898][T11237] netlink: zone id is out of range [ 491.581870][T11237] netlink: zone id is out of range [ 491.588388][T11237] netlink: zone id is out of range [ 491.591166][T11147] veth0_macvtap: entered promiscuous mode [ 491.593518][T11237] netlink: zone id is out of range [ 491.661941][T11147] veth1_macvtap: entered promiscuous mode [ 491.714381][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.742465][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.786094][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.809596][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.835654][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.864989][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.885477][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.906075][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.927270][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.938214][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.948224][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.959023][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.979215][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.992455][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.002392][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.012875][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.022784][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.035714][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.059931][T11149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.103231][T11248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1732'. [ 492.133678][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.147693][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.157983][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.168636][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.178799][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.193425][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.203785][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.216892][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.226888][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.238954][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.248978][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.259583][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.269531][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.280044][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.290032][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.303068][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.313103][T11149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.324756][T11149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.339941][T11149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.398205][T11149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.411511][T11149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.420773][T11149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.430707][T11149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.472833][ T2502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.481163][ T2502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.501340][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.514418][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.528023][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.545187][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.555071][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.573964][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.584083][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.596810][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.606682][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.620342][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.630543][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.641924][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.651807][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.662690][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.672597][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.683649][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.693609][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.707523][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.717534][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.728145][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.741401][T11147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.791116][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.805500][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.815405][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.827521][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.837419][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.855974][ C1] net_ratelimit: 116 callbacks suppressed [ 492.856007][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 492.857125][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.880055][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.893506][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.903765][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.914695][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.925118][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.935715][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.948707][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.959229][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.969220][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.979701][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.989683][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.000233][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.010254][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.021441][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.033936][T11147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.100369][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.102769][T11147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.134960][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.135973][T11147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.185911][T11147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.194679][T11147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.425144][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.439614][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.566184][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'. [ 493.752566][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.772922][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.832221][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.865949][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.896122][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.008227][ T2502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.026582][ T2502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.035054][T11280] pim6reg: entered allmulticast mode [ 494.063194][T11280] batadv_slave_0: entered allmulticast mode [ 494.359028][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 494.802345][T11310] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 494.936053][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 495.327867][T11325] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1751'. [ 495.396731][T11325] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 495.761636][T11335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1754'. [ 495.976861][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.361394][T11356] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 496.394058][T11356] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 496.424224][T11356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1758'. [ 497.015985][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 497.216695][T11372] mac80211_hwsim hwsim66 wlan1: entered allmulticast mode [ 497.256034][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1763'. [ 497.314653][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.354035][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.737757][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1765'. [ 498.056002][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 498.696884][ T4621] Bluetooth: hci9: command 0x0405 tx timeout [ 498.919945][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 499.096147][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.333397][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 499.365985][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1780'. [ 499.398720][T11437] netlink: 'syz.0.1780': attribute type 10 has an invalid length. [ 499.499140][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'. [ 499.796270][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1783'. [ 499.805228][T11441] bM1®NuëöÉÑ30Ê: renamed from lo (while UP) [ 499.869298][T11441] bM1®NuëöÉÑ30Ê: entered allmulticast mode [ 500.135967][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.370350][T11459] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 500.422136][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1789'. [ 500.875767][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1796'. [ 500.907921][T11480] netlink: 'syz.0.1796': attribute type 3 has an invalid length. [ 500.928683][T11480] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 501.029236][T11483] vlan1: entered promiscuous mode [ 501.034612][T11484] tap0: tun_chr_ioctl cmd 1074025673 [ 501.175954][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 501.330399][T11495] FAULT_INJECTION: forcing a failure. [ 501.330399][T11495] name failslab, interval 1, probability 0, space 0, times 0 [ 501.348667][T11495] CPU: 0 UID: 0 PID: 11495 Comm: syz.1.1802 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 501.359152][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 501.369242][T11495] Call Trace: [ 501.372557][T11495] [ 501.375519][T11495] dump_stack_lvl+0x241/0x360 [ 501.380248][T11495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.385501][T11495] ? __pfx__printk+0x10/0x10 [ 501.390148][T11495] ? __kmalloc_noprof+0xb0/0x400 [ 501.395116][T11495] ? __pfx___might_resched+0x10/0x10 [ 501.400441][T11495] should_fail_ex+0x3b0/0x4e0 [ 501.405164][T11495] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 501.411491][T11495] should_failslab+0xac/0x100 [ 501.416231][T11495] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 501.422509][T11495] __kmalloc_noprof+0xd8/0x400 [ 501.427337][T11495] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 501.433454][T11495] genl_rcv_msg+0x802/0xec0 [ 501.437995][T11495] ? mark_lock+0x9a/0x350 [ 501.442375][T11495] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.447471][T11495] ? __pfx_lock_acquire+0x10/0x10 [ 501.452561][T11495] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 501.457970][T11495] ? __pfx_nl80211_set_interface+0x10/0x10 [ 501.463808][T11495] ? __pfx_nl80211_post_doit+0x10/0x10 [ 501.469303][T11495] ? __pfx___might_resched+0x10/0x10 [ 501.474614][T11495] netlink_rcv_skb+0x1e3/0x430 [ 501.479399][T11495] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.484438][T11495] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.489755][T11495] ? __netlink_deliver_tap+0x77e/0x7c0 [ 501.495242][T11495] genl_rcv+0x28/0x40 [ 501.499238][T11495] netlink_unicast+0x7f6/0x990 [ 501.504027][T11495] ? __pfx_netlink_unicast+0x10/0x10 [ 501.509323][T11495] ? __virt_addr_valid+0x183/0x530 [ 501.514442][T11495] ? __check_object_size+0x49c/0x900 [ 501.519749][T11495] ? bpf_lsm_netlink_send+0x9/0x10 [ 501.524873][T11495] netlink_sendmsg+0x8e4/0xcb0 [ 501.529665][T11495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.534965][T11495] ? __import_iovec+0x536/0x820 [ 501.539826][T11495] ? aa_sock_msg_perm+0x91/0x160 [ 501.544781][T11495] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 501.550094][T11495] ? security_socket_sendmsg+0x87/0xb0 [ 501.555592][T11495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.560894][T11495] __sock_sendmsg+0x221/0x270 [ 501.565588][T11495] ____sys_sendmsg+0x525/0x7d0 [ 501.570368][T11495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.575670][T11495] __sys_sendmsg+0x2b0/0x3a0 [ 501.580274][T11495] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.585392][T11495] ? vfs_write+0x7c4/0xc90 [ 501.589858][T11495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.596199][T11495] ? do_syscall_64+0x100/0x230 [ 501.600973][T11495] ? do_syscall_64+0xb6/0x230 [ 501.605660][T11495] do_syscall_64+0xf3/0x230 [ 501.610180][T11495] ? clear_bhb_loop+0x35/0x90 [ 501.614866][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.620764][T11495] RIP: 0033:0x7ff33157def9 [ 501.625181][T11495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.644792][T11495] RSP: 002b:00007ff332301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.653216][T11495] RAX: ffffffffffffffda RBX: 00007ff331735f80 RCX: 00007ff33157def9 [ 501.661214][T11495] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000003 [ 501.669191][T11495] RBP: 00007ff332301090 R08: 0000000000000000 R09: 0000000000000000 [ 501.677172][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.685144][T11495] R13: 0000000000000000 R14: 00007ff331735f80 R15: 00007ffe8ca552a8 [ 501.693137][T11495] [ 501.761814][T11476] vlan1: left promiscuous mode [ 501.771532][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.026056][T11509] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 502.034556][T11509] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 502.215968][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 502.384273][ T5246] Bluetooth: hci0: command tx timeout [ 502.447477][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1810'. [ 502.827103][T11541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1813'. [ 502.893574][T11546] syzkaller1: entered promiscuous mode [ 502.906672][T11546] syzkaller1: entered allmulticast mode [ 503.239618][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 503.252826][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1819'. [ 503.262011][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.414549][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1822'. [ 503.548596][T11574] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1821'. [ 503.644020][T11563] sit0: entered promiscuous mode [ 503.692050][T11563] netlink: 'syz.1.1820': attribute type 1 has an invalid length. [ 503.712432][T11563] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1820'. [ 503.736839][T11564] netlink: 'syz.1.1820': attribute type 1 has an invalid length. [ 503.744658][T11564] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1820'. [ 503.993900][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1827'. [ 504.066418][T11593] netlink: 'syz.4.1828': attribute type 12 has an invalid length. [ 504.297033][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 504.544472][T11605] xt_CONNSECMARK: invalid mode: 0 [ 504.940243][T11615] xt_hashlimit: size too large, truncated to 1048576 [ 504.975840][T11615] xt_hashlimit: max too large, truncated to 1048576 [ 504.982944][T11615] xt_hashlimit: overflow, try lower: 0/0 [ 505.016115][T11618] netlink: 'syz.3.1837': attribute type 3 has an invalid length. [ 505.062308][T11620] netlink: 'syz.4.1839': attribute type 4 has an invalid length. [ 505.083152][T11620] netlink: 'syz.4.1839': attribute type 4 has an invalid length. [ 505.336071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.560502][T11653] netlink: 'syz.3.1847': attribute type 11 has an invalid length. [ 505.929773][T11660] __nla_validate_parse: 9 callbacks suppressed [ 505.929797][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1849'. [ 506.376175][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 506.899798][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 507.141477][T11691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.415959][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.443508][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1859'. [ 508.455966][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 508.608115][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 508.767255][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 508.988304][T11727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1870'. [ 509.020502][T11725] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 509.121632][T11735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.495954][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 510.536035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 510.862669][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1875'. [ 510.908527][T11749] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 510.969870][T11749] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 511.068172][T11762] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 511.576054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 511.767768][T11784] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1886'. [ 512.455393][T11802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 512.457466][T11800] netlink: 2680 bytes leftover after parsing attributes in process `syz.4.1892'. [ 512.537359][T11800] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 512.587069][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1892'. [ 512.616847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.204926][T11828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1903'. [ 513.251420][T11828] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 513.458611][T11828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 513.656098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.985639][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 514.159289][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1911'. [ 514.344966][T11864] vlan2: entered promiscuous mode [ 514.393809][T11864] dummy0: entered promiscuous mode [ 514.406262][T11864] vlan2: entered allmulticast mode [ 514.421591][T11864] dummy0: entered allmulticast mode [ 514.441363][T11864] dummy0: left allmulticast mode [ 514.446741][T11864] dummy0: left promiscuous mode [ 514.696022][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 515.437822][T11890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1923'. [ 515.472352][T11890] netlink: 'syz.4.1923': attribute type 10 has an invalid length. [ 515.518462][T11898] netlink: 868 bytes leftover after parsing attributes in process `syz.1.1926'. [ 515.567858][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1927'. [ 515.735985][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 515.801821][T11910] batadv0: entered promiscuous mode [ 515.838613][T11910] batadv_slave_0: entered promiscuous mode [ 515.844820][T11910] batadv_slave_0: left promiscuous mode [ 515.881116][T11910] batadv0: left promiscuous mode [ 516.292525][T11932] x_tables: duplicate underflow at hook 1 [ 516.775961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 516.817972][T11954] __nla_validate_parse: 1 callbacks suppressed [ 516.817995][T11954] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1942'. [ 516.868803][T11954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.152809][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 517.166101][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 517.183609][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1949'. [ 517.283325][T11974] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1948'. [ 517.668697][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 517.815954][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 517.996817][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 518.119564][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1960'. [ 518.142821][T12001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1956'. [ 518.178091][T12001] netlink: 'syz.4.1956': attribute type 10 has an invalid length. [ 518.434207][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 518.777193][T12035] xt_addrtype: ipv6 does not support BROADCAST matching [ 518.856489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 519.896049][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 519.929646][T12075] netlink: 'syz.2.1989': attribute type 10 has an invalid length. [ 519.971847][T12075] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 520.184839][T12078] bridge_slave_0: left allmulticast mode [ 520.214761][T12078] bridge_slave_0: left promiscuous mode [ 520.286236][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.370705][T12078] bridge_slave_1: left allmulticast mode [ 520.377097][T12078] bridge_slave_1: left promiscuous mode [ 520.383465][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.421861][T12078] bond0: (slave bond_slave_0): Releasing backup interface [ 520.451004][T12078] bond0: (slave bond_slave_1): Releasing backup interface [ 520.534981][T12078] team0: Port device team_slave_0 removed [ 520.556395][T12078] team0: Port device team_slave_1 removed [ 520.564332][T12078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.572572][T12078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.584911][T12078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.594279][T12078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.623055][T12082] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 520.636631][T12082] team0: entered promiscuous mode [ 520.650417][T12082] bridge0: port 1(team0) entered blocking state [ 520.672519][T12082] bridge0: port 1(team0) entered disabled state [ 520.695091][T12082] team0: entered allmulticast mode [ 520.712308][T12082] bridge0: port 1(team0) entered blocking state [ 520.718939][T12082] bridge0: port 1(team0) entered forwarding state [ 520.761065][ T964] bridge0: port 1(team0) entered disabled state [ 520.937789][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.882687][T12132] __nla_validate_parse: 10 callbacks suppressed [ 521.882712][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 521.900488][T12132] batadv0: default FDB implementation only supports local addresses [ 521.909363][T12130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2010'. [ 521.955775][T12130] netlink: 'syz.2.2010': attribute type 10 has an invalid length. [ 521.975982][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 521.976431][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 522.246533][T12141] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2015'. [ 522.317927][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 522.477353][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2018'. [ 522.934455][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 522.974467][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 523.015965][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 523.047986][T12165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2024'. [ 523.315173][T12174] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.321832][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 523.323299][T12174] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.055947][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 524.617218][T12208] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 524.986759][T12221] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 525.092179][T12224] FAULT_INJECTION: forcing a failure. [ 525.092179][T12224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.096089][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 525.137958][T12224] CPU: 0 UID: 0 PID: 12224 Comm: syz.3.2048 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 525.148455][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 525.158552][T12224] Call Trace: [ 525.161858][T12224] [ 525.164809][T12224] dump_stack_lvl+0x241/0x360 [ 525.169561][T12224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.174774][T12224] ? __pfx__printk+0x10/0x10 [ 525.179408][T12224] should_fail_ex+0x3b0/0x4e0 [ 525.184127][T12224] prepare_alloc_pages+0x1da/0x5d0 [ 525.189293][T12224] __alloc_pages_noprof+0x166/0x6c0 [ 525.194537][T12224] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 525.200381][T12224] ? __pfx_validate_chain+0x10/0x10 [ 525.205596][T12224] ? __pfx_validate_chain+0x10/0x10 [ 525.210858][T12224] ? validate_chain+0x11e/0x5900 [ 525.215831][T12224] alloc_pages_mpol_noprof+0x3e8/0x680 [ 525.221341][T12224] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 525.227459][T12224] vma_alloc_folio_noprof+0x12e/0x230 [ 525.232890][T12224] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 525.238840][T12224] folio_prealloc+0x31/0x170 [ 525.243490][T12224] handle_pte_fault+0x255e/0x6fc0 [ 525.248580][T12224] ? __pfx_lock_acquire+0x10/0x10 [ 525.253651][T12224] ? mark_lock+0x9a/0x350 [ 525.258050][T12224] ? __pfx_handle_pte_fault+0x10/0x10 [ 525.263474][T12224] ? __lock_acquire+0x137a/0x2040 [ 525.268581][T12224] ? mt_find+0x226/0x850 [ 525.272878][T12224] ? __pfx_lock_release+0x10/0x10 [ 525.277953][T12224] handle_mm_fault+0x1109/0x1bc0 [ 525.282980][T12224] ? __pfx_handle_mm_fault+0x10/0x10 [ 525.288330][T12224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 525.294711][T12224] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 525.300049][T12224] exc_page_fault+0x2b9/0x8c0 [ 525.304782][T12224] asm_exc_page_fault+0x26/0x30 [ 525.309654][T12224] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 525.315479][T12224] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 525.335200][T12224] RSP: 0018:ffffc9001234f518 EFLAGS: 00050246 [ 525.341289][T12224] RAX: ffff8880511d8001 RBX: 00000000200010c0 RCX: 0000000000000040 [ 525.349268][T12224] RDX: 0000000000000000 RSI: ffff8880511d806a RDI: 0000000020001080 [ 525.357245][T12224] RBP: ffffc9001234f690 R08: ffff8880511d80a9 R09: 1ffff1100a23b015 [ 525.365224][T12224] R10: dffffc0000000000 R11: ffffed100a23b016 R12: dffffc0000000000 [ 525.373232][T12224] R13: 1ffff92002469eb8 R14: 0000000000000040 R15: ffff8880511d806a [ 525.381317][T12224] _copy_to_iter+0x4c0/0x1960 [ 525.386012][T12224] ? __virt_addr_valid+0x183/0x530 [ 525.391142][T12224] ? __pfx__copy_to_iter+0x10/0x10 [ 525.396266][T12224] ? __virt_addr_valid+0x183/0x530 [ 525.401384][T12224] ? __virt_addr_valid+0x183/0x530 [ 525.406515][T12224] ? __virt_addr_valid+0x45f/0x530 [ 525.411656][T12224] ? __check_object_size+0x49c/0x900 [ 525.416985][T12224] udp_recvmsg+0x8f9/0x1800 [ 525.421544][T12224] ? __pfx___might_resched+0x10/0x10 [ 525.426864][T12224] ? __pfx_udp_recvmsg+0x10/0x10 [ 525.431864][T12224] ? aa_sk_perm+0x96d/0xab0 [ 525.436381][T12224] ? sock_rps_record_flow+0x1a/0x400 [ 525.441680][T12224] ? inet_recvmsg+0xde/0x2d0 [ 525.446310][T12224] ? __pfx_udp_recvmsg+0x10/0x10 [ 525.451267][T12224] inet_recvmsg+0x22e/0x2d0 [ 525.455791][T12224] ? __pfx_inet_recvmsg+0x10/0x10 [ 525.460831][T12224] ? aa_sock_msg_perm+0x91/0x160 [ 525.465779][T12224] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 525.471082][T12224] ? security_socket_recvmsg+0x90/0xb0 [ 525.476561][T12224] sock_recvmsg+0x1ae/0x280 [ 525.481088][T12224] ____sys_recvmsg+0x1db/0x470 [ 525.485873][T12224] ? __pfx_____sys_recvmsg+0x10/0x10 [ 525.491187][T12224] do_recvmmsg+0x474/0xae0 [ 525.495617][T12224] ? __pfx_lock_release+0x10/0x10 [ 525.500660][T12224] ? __pfx_do_recvmmsg+0x10/0x10 [ 525.505623][T12224] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 525.511541][T12224] ? ksys_write+0x23e/0x2c0 [ 525.516070][T12224] ? __pfx_lock_release+0x10/0x10 [ 525.521129][T12224] ? vfs_write+0x7c4/0xc90 [ 525.525568][T12224] ? __mutex_unlock_slowpath+0x21d/0x750 [ 525.531240][T12224] ? __fget_files+0x3f6/0x470 [ 525.535950][T12224] __x64_sys_recvmmsg+0x199/0x250 [ 525.540988][T12224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 525.546551][T12224] ? do_syscall_64+0x100/0x230 [ 525.551337][T12224] ? do_syscall_64+0xb6/0x230 [ 525.556033][T12224] do_syscall_64+0xf3/0x230 [ 525.560552][T12224] ? clear_bhb_loop+0x35/0x90 [ 525.565413][T12224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.571316][T12224] RIP: 0033:0x7f5dd7d7def9 [ 525.575737][T12224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.595347][T12224] RSP: 002b:00007f5dd77ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 525.603769][T12224] RAX: ffffffffffffffda RBX: 00007f5dd7f35f80 RCX: 00007f5dd7d7def9 [ 525.611743][T12224] RDX: 0000000000000001 RSI: 00000000200008c0 RDI: 0000000000000003 [ 525.619723][T12224] RBP: 00007f5dd77ff090 R08: 0000000000000000 R09: 0000000000000000 [ 525.627703][T12224] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 525.635680][T12224] R13: 0000000000000000 R14: 00007f5dd7f35f80 R15: 00007ffdbf6d2d18 [ 525.643680][T12224] [ 526.136004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 526.509388][T12265] netlink: 'syz.2.2064': attribute type 32 has an invalid length. [ 526.556531][T12265] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 526.973162][T12282] __nla_validate_parse: 9 callbacks suppressed [ 526.973185][T12282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2071'. [ 527.004405][T12282] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 527.013756][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 527.175970][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 527.391148][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2079'. [ 527.402704][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'. [ 527.412149][T12301] tipc: Invalid UDP bearer configuration [ 527.412224][T12301] tipc: Enabling of bearer rejected, failed to enable media [ 527.520734][T12305] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.531384][T12305] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2081'. [ 527.577702][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2082'. [ 528.216092][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 528.244235][T12329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.294726][T12329] batadv_slave_1: entered promiscuous mode [ 528.401431][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 528.543341][T12339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2096'. [ 528.564511][T12339] netlink: 'syz.2.2096': attribute type 10 has an invalid length. [ 528.604103][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 528.619605][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 528.629619][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 528.656290][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 528.666162][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 528.673743][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 529.139170][T12342] chnl_net:caif_netlink_parms(): no params data found [ 529.256573][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 529.638823][T12342] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.656708][T12342] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.664778][T12342] bridge_slave_0: entered allmulticast mode [ 529.708846][T12342] bridge_slave_0: entered promiscuous mode [ 529.740244][T12342] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.765715][T12342] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.775612][T12342] bridge_slave_1: entered allmulticast mode [ 529.784455][T12342] bridge_slave_1: entered promiscuous mode [ 529.800911][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 529.883952][T12377] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2108'. [ 529.980271][T12342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.020943][T12342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.175702][T12342] team0: Port device team_slave_0 added [ 530.203681][T12342] team0: Port device team_slave_1 added [ 530.295937][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.310690][T12342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.320280][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.376540][T12342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.397097][T12400] vlan1: entered promiscuous mode [ 530.451342][T12401] vlan1 (unregistering): left promiscuous mode [ 530.606992][T12342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.614009][T12342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.644889][T12415] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 530.665156][T12342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.725560][T12415] nbd: must specify at least one socket [ 530.776138][ T5246] Bluetooth: hci5: command tx timeout [ 530.887970][T12342] hsr_slave_0: entered promiscuous mode [ 530.942620][T12342] hsr_slave_1: entered promiscuous mode [ 530.980979][T12342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.016521][T12342] Cannot create hsr debugfs directory [ 531.336051][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 531.713159][T12342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.941443][T12342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.240056][T12452] __nla_validate_parse: 3 callbacks suppressed [ 532.240073][T12452] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2132'. [ 532.376276][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 532.627517][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2133'. [ 532.696911][ T5246] Bluetooth: hci0: command tx timeout [ 532.856477][ T5246] Bluetooth: hci5: command tx timeout [ 533.416097][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.455975][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.937947][ T5246] Bluetooth: hci5: command tx timeout [ 535.211127][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 535.299184][T12342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.482183][T12342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.495968][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.544160][T12473] ip6tnl0: Caught tx_queue_len zero misconfig [ 535.890138][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2145'. [ 535.917221][T12342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.943642][T12342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.980210][T12342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 536.008509][T12342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 536.317320][T12342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.340227][T12499] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2149'. [ 536.392119][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.424944][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.432207][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.472788][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.480071][ T964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.535936][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 537.016063][ T5246] Bluetooth: hci5: command tx timeout [ 537.318324][T12528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2157'. [ 537.350347][T12342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.388023][T12529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2158'. [ 537.444025][T12528] netlink: 'syz.3.2157': attribute type 10 has an invalid length. [ 537.540641][T12528] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 537.578041][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 537.583575][T12529] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2158'. [ 537.954519][T12545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2160'. [ 538.418290][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2163'. [ 538.492446][T12342] veth0_vlan: entered promiscuous mode [ 538.548373][T12342] veth1_vlan: entered promiscuous mode [ 538.553913][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 538.615957][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.802762][T12342] veth0_macvtap: entered promiscuous mode [ 538.842907][T12342] veth1_macvtap: entered promiscuous mode [ 539.004028][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.045058][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.065347][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.088011][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.101227][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.112412][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.123064][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.137493][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.147942][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.158940][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.170194][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.182052][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.197575][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.208551][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.218823][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.230150][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.243778][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.254913][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.265382][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.277312][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.303006][T12342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.328752][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2170'. [ 539.349312][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.360365][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.370557][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.382870][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.397386][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.415345][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.431572][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.457220][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.468172][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.478903][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.492569][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.505638][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.518727][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.530782][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.543788][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.556038][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.566185][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.580008][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.592998][T12342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.655952][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 539.670964][T12342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.727860][T12342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.757073][T12342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.775792][T12342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.981054][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 540.119164][ T2546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.146016][ T2546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.216373][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.250648][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.283117][T12596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2178'. [ 540.315077][T12596] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 540.696095][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 540.808724][T12617] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.2185'. [ 540.837421][T12617] netlink: 'syz.0.2185': attribute type 2 has an invalid length. [ 540.887260][T12617] tipc: Started in network mode [ 540.892217][T12617] tipc: Node identity ac14140f, cluster identity 4711 [ 540.933560][T12617] tipc: New replicast peer: 255.255.255.255 [ 540.956544][T12617] tipc: Enabled bearer , priority 10 [ 541.735996][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.068292][ T5341] tipc: Node number set to 2886997007 [ 542.319500][T12648] infiniband syz0: set active [ 542.334853][T12648] infiniband syz0: added macvlan0 [ 542.517495][T12648] RDS/IB: syz0: added [ 542.521616][T12648] smc: adding ib device syz0 with port count 1 [ 542.589567][T12648] smc: ib device syz0 port 1 has pnetid [ 542.597551][T12679] __nla_validate_parse: 2 callbacks suppressed [ 542.597574][T12679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2203'. [ 542.776299][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.963457][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 543.108175][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2207'. [ 543.430004][T12695] team0: Caught tx_queue_len zero misconfig [ 543.505392][T12699] netlink: 'syz.3.2212': attribute type 29 has an invalid length. [ 543.537378][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 543.816378][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.844004][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2216'. [ 544.106608][T12728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2219'. [ 544.127269][T12728] netlink: 'syz.1.2219': attribute type 10 has an invalid length. [ 544.306719][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2221'. [ 544.855938][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.457146][T12758] netlink: 'syz.2.2227': attribute type 10 has an invalid length. [ 545.511567][T12758] macvlan0: entered promiscuous mode [ 545.525387][T12758] macvlan0: entered allmulticast mode [ 545.548408][T12758] veth1_vlan: entered allmulticast mode [ 545.571391][T12758] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 545.771597][T12765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2229'. [ 545.782531][T12767] FAULT_INJECTION: forcing a failure. [ 545.782531][T12767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.812269][T12767] CPU: 0 UID: 0 PID: 12767 Comm: syz.3.2230 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 545.822827][T12767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 545.832925][T12767] Call Trace: [ 545.836239][T12767] [ 545.839234][T12767] dump_stack_lvl+0x241/0x360 [ 545.843979][T12767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.849240][T12767] ? __pfx__printk+0x10/0x10 [ 545.853875][T12767] ? __pfx_lock_release+0x10/0x10 [ 545.858979][T12767] should_fail_ex+0x3b0/0x4e0 [ 545.863702][T12767] _copy_from_user+0x2f/0xe0 [ 545.868313][T12767] copy_msghdr_from_user+0xae/0x680 [ 545.873567][T12767] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 545.879411][T12767] __sys_sendmsg+0x23d/0x3a0 [ 545.884037][T12767] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.889181][T12767] ? vfs_write+0x7c4/0xc90 [ 545.893772][T12767] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.897806][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.900128][T12767] ? do_syscall_64+0x100/0x230 [ 545.911888][T12767] ? do_syscall_64+0xb6/0x230 [ 545.916711][T12767] do_syscall_64+0xf3/0x230 [ 545.921242][T12767] ? clear_bhb_loop+0x35/0x90 [ 545.925944][T12767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.931857][T12767] RIP: 0033:0x7f5dd7d7def9 [ 545.936281][T12767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.955944][T12767] RSP: 002b:00007f5dd77ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.964384][T12767] RAX: ffffffffffffffda RBX: 00007f5dd7f35f80 RCX: 00007f5dd7d7def9 [ 545.972369][T12767] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 545.980352][T12767] RBP: 00007f5dd77ff090 R08: 0000000000000000 R09: 0000000000000000 [ 545.988332][T12767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.996321][T12767] R13: 0000000000000000 R14: 00007f5dd7f35f80 R15: 00007ffdbf6d2d18 [ 546.004352][T12767] [ 546.277568][T12767] tipc: Started in network mode [ 546.282519][T12767] tipc: Node identity ac14140f, cluster identity 4711 [ 546.308363][T12767] tipc: New replicast peer: 255.255.255.255 [ 546.315072][T12767] tipc: Enabled bearer , priority 10 [ 546.357691][T12775] netlink: 'syz.2.2233': attribute type 29 has an invalid length. [ 546.373496][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 546.404611][T12778] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2234'. [ 546.414104][T12777] netlink: 'syz.2.2233': attribute type 29 has an invalid length. [ 546.935943][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.427403][T11189] tipc: Node number set to 2886997007 [ 547.975957][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.043019][ T36] bridge_slave_1: left allmulticast mode [ 548.048940][ T36] bridge_slave_1: left promiscuous mode [ 548.054753][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.128069][ T36] bridge_slave_0: left allmulticast mode [ 548.133800][ T36] bridge_slave_0: left promiscuous mode [ 548.186216][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.015968][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 550.055958][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 550.700819][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.770225][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.826462][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 550.872589][ T36] bond0 (unregistering): Released all slaves [ 551.096050][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.860505][T12800] __nla_validate_parse: 2 callbacks suppressed [ 551.860535][T12800] netlink: 203452 bytes leftover after parsing attributes in process `syz.2.2243'. [ 551.926371][T12800] netlink: 'syz.2.2243': attribute type 2 has an invalid length. [ 551.954472][T12802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2241'. [ 551.956078][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 552.006328][T12802] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2241'. [ 552.015286][T12802] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2241'. [ 552.047388][T12803] tipc: Started in network mode [ 552.052350][T12803] tipc: Node identity ac14140f, cluster identity 4711 [ 552.073331][T12803] tipc: New replicast peer: 255.255.255.255 [ 552.087099][T12803] tipc: Enabled bearer , priority 10 [ 552.137215][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 552.147569][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'. [ 552.518218][ T4621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 552.530369][ T4621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 552.540081][T12818] netlink: 'syz.3.2247': attribute type 29 has an invalid length. [ 552.551110][ T4621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 552.566267][ T4621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 552.575287][ T4621] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 552.575946][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 552.594071][ T4621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 552.637002][T12820] netlink: 'syz.3.2247': attribute type 29 has an invalid length. [ 552.680125][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 552.990831][T12831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2251'. [ 553.176010][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.208877][ T5284] tipc: Node number set to 2886997007 [ 553.345273][T12836] rdma_rxe: rxe_newlink: failed to add macvlan0 [ 553.614016][T12835] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 553.750124][T12835] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 553.920424][ T36] hsr_slave_0: left promiscuous mode [ 553.949521][ T36] hsr_slave_1: left promiscuous mode [ 553.961960][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.973163][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.985610][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.993520][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.023732][ T36] veth1_macvtap: left promiscuous mode [ 554.031343][ T36] veth0_macvtap: left promiscuous mode [ 554.037243][ T36] veth1_vlan: left promiscuous mode [ 554.042635][ T36] veth0_vlan: left promiscuous mode [ 554.216949][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 554.231740][ T36] pimreg (unregistering): left allmulticast mode [ 554.697674][ T5246] Bluetooth: hci8: command tx timeout [ 554.864031][ T36] team0 (unregistering): Port device team_slave_1 removed [ 554.942442][ T36] team0 (unregistering): Port device team_slave_0 removed [ 555.256035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 555.403591][ T4621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.441539][ T4621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.451267][ T4621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.491993][ T4621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.501984][ T4621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 555.512758][ T4621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.081161][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2258'. [ 556.263137][T12858] netlink: 'syz.2.2259': attribute type 29 has an invalid length. [ 556.277315][T12858] netlink: 'syz.2.2259': attribute type 29 has an invalid length. [ 556.295944][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 556.702566][T12815] chnl_net:caif_netlink_parms(): no params data found [ 556.778860][ T5246] Bluetooth: hci8: command tx timeout [ 556.900631][T12870] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 557.170611][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.189214][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.198566][T12815] bridge_slave_0: entered allmulticast mode [ 557.207835][T12815] bridge_slave_0: entered promiscuous mode [ 557.223726][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.238685][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.246436][T12815] bridge_slave_1: entered allmulticast mode [ 557.258214][T12815] bridge_slave_1: entered promiscuous mode [ 557.335987][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 557.338764][T12884] rdma_rxe: rxe_newlink: failed to add macvlan0 [ 557.451661][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.576400][ T5246] Bluetooth: hci5: command tx timeout [ 557.614846][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.741704][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.898041][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.043680][T12815] team0: Port device team_slave_0 added [ 558.071263][ T30] INFO: task syz.4.1361:9970 blocked for more than 143 seconds. [ 558.082600][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 558.106400][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.115357][ T30] task:syz.4.1361 state:D stack:24504 pid:9970 tgid:9969 ppid:8895 flags:0x00000004 [ 558.145405][ T30] Call Trace: [ 558.149978][ T30] [ 558.152968][ T30] __schedule+0x1800/0x4a60 [ 558.227246][ T30] ? __pfx___schedule+0x10/0x10 [ 558.232210][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.268928][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 558.274493][ T30] ? schedule+0x90/0x320 [ 558.296717][ T30] schedule+0x14b/0x320 [ 558.300974][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.320528][ T30] __mutex_lock+0x6a4/0xd70 [ 558.325125][ T30] ? __mutex_lock+0x527/0xd70 [ 558.353219][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 558.366330][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.371475][ T30] ? genlmsg_put+0x145/0x2e0 [ 558.375964][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.385984][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 558.391630][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 558.406055][ T30] ? __asan_memcpy+0x40/0x70 [ 558.410730][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 558.415449][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 558.432670][ T30] genl_rcv_msg+0xb14/0xec0 [ 558.437351][ T30] ? mark_lock+0x9a/0x350 [ 558.441828][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.447066][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 558.452224][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 558.475959][ T30] ? __pfx___might_resched+0x10/0x10 [ 558.481355][ T30] netlink_rcv_skb+0x1e3/0x430 [ 558.488002][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.493219][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.498674][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 558.504202][ T30] genl_rcv+0x28/0x40 [ 558.508484][ T30] netlink_unicast+0x7f6/0x990 [ 558.513296][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 558.519058][ T30] ? __virt_addr_valid+0x183/0x530 [ 558.524208][ T30] ? __check_object_size+0x49c/0x900 [ 558.529822][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 558.534974][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 558.541768][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.547526][ T30] ? __import_iovec+0x536/0x820 [ 558.552439][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 558.557551][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 558.562889][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 558.569761][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.575181][ T30] __sock_sendmsg+0x221/0x270 [ 558.580364][ T30] ____sys_sendmsg+0x525/0x7d0 [ 558.585168][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.592415][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 558.599597][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 558.604817][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 558.611512][ T30] ? do_syscall_64+0x100/0x230 [ 558.616531][ T30] ? do_syscall_64+0xb6/0x230 [ 558.621302][ T30] do_syscall_64+0xf3/0x230 [ 558.625985][ T30] ? clear_bhb_loop+0x35/0x90 [ 558.630876][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.637237][ T30] RIP: 0033:0x7fe486d7def9 [ 558.641693][ T30] RSP: 002b:00007fe487aac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.653080][ T30] RAX: ffffffffffffffda RBX: 00007fe486f35f80 RCX: 00007fe486d7def9 [ 558.666987][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000008 [ 558.675510][ T30] RBP: 00007fe486df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 558.685470][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.695092][ T30] R13: 0000000000000000 R14: 00007fe486f35f80 R15: 00007ffed55de858 [ 558.705095][ T30] [ 558.708587][ T30] [ 558.708587][ T30] Showing all locks held in the system: [ 558.736364][ T30] 4 locks held by kworker/u8:1/12: [ 558.741555][ T30] 1 lock held by khungtaskd/30: [ 558.756030][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 558.776079][ T30] 6 locks held by kworker/u8:3/36: [ 558.787060][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 558.816057][ T30] #1: ffffc90000ac7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 558.835899][ T30] #2: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 558.845516][ T30] #3: ffff8880250530e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 558.867258][ T5246] Bluetooth: hci8: command tx timeout [ 558.886137][ T30] #4: ffff888025054250 (&devlink->lock_key#34){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 558.926986][ T30] #5: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 558.956288][ T30] 3 locks held by kworker/u8:4/62: [ 558.961487][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 559.013792][ T30] #1: ffffc900015d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 559.046003][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 559.055125][ T30] 2 locks held by kworker/u8:6/1116: [ 559.076994][ T30] 3 locks held by kworker/u8:7/2502: [ 559.082370][ T30] #0: ffff88803038b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 559.120276][ T30] #1: ffffc90008e47d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 559.138148][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 559.148785][ T30] 2 locks held by getty/4985: [ 559.153571][ T30] #0: ffff888030de40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 559.163505][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 559.173844][ T30] 3 locks held by kworker/1:5/5341: [ 559.179811][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 559.191002][ T30] #1: ffffc90004097d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 559.206467][ T30] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 559.216589][ T30] 2 locks held by syz.1.518/7300: [ 559.221634][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 559.230009][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 559.240351][ T30] 2 locks held by syz.4.1361/9970: [ 559.245464][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 559.255282][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 559.266814][ T30] 3 locks held by kworker/1:6/11189: [ 559.272166][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 559.283347][ T30] #1: ffffc90004717d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 559.293909][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 559.308544][ T30] 1 lock held by syz-executor/12815: [ 559.313886][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 559.323439][ T30] 2 locks held by syz.0.2254/12842: [ 559.328754][ T30] #0: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 559.339924][ T30] #1: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 559.349157][ T30] 1 lock held by syz-executor/12851: [ 559.354480][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 559.365120][ T30] 4 locks held by syz.3.2266/12889: [ 559.370526][ T30] #0: ffff88805f370d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 559.381645][ T30] #1: ffff88805f370078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 559.391714][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 559.401870][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 559.415748][ T30] 3 locks held by syz.2.2267/12893: [ 559.421147][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 559.429841][ T30] #0: ffff888061c94d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 559.439968][ T30] #1: ffff888061c94078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 559.449812][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 559.461611][ T30] [ 559.463990][ T30] ============================================= [ 559.463990][ T30] [ 559.475319][ T30] NMI backtrace for cpu 1 [ 559.479708][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 559.489885][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.499946][ T30] Call Trace: [ 559.503224][ T30] [ 559.506166][ T30] dump_stack_lvl+0x241/0x360 [ 559.510891][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.516116][ T30] ? __pfx__printk+0x10/0x10 [ 559.520748][ T30] ? vprintk_emit+0x667/0x7c0 [ 559.525444][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 559.530595][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 559.535549][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 559.541019][ T30] ? _printk+0xd5/0x120 [ 559.545193][ T30] ? __pfx__printk+0x10/0x10 [ 559.549799][ T30] ? __wake_up_klogd+0xcc/0x110 [ 559.554665][ T30] ? __pfx__printk+0x10/0x10 [ 559.559276][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 559.564309][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 559.570306][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 559.576305][ T30] watchdog+0xff4/0x1040 [ 559.580566][ T30] ? watchdog+0x1ea/0x1040 [ 559.585006][ T30] ? __pfx_watchdog+0x10/0x10 [ 559.589699][ T30] kthread+0x2f0/0x390 [ 559.593787][ T30] ? __pfx_watchdog+0x10/0x10 [ 559.598477][ T30] ? __pfx_kthread+0x10/0x10 [ 559.603085][ T30] ret_from_fork+0x4b/0x80 [ 559.607514][ T30] ? __pfx_kthread+0x10/0x10 [ 559.612119][ T30] ret_from_fork_asm+0x1a/0x30 [ 559.616941][ T30] [ 559.622462][ T30] Sending NMI from CPU 1 to CPUs 0: [ 559.629294][ C0] NMI backtrace for cpu 0 [ 559.629309][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 559.629331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.629344][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 559.629372][ C0] RIP: 0010:debug_check_no_obj_freed+0x1d5/0x580 [ 559.629396][ C0] Code: c1 ea 0c 48 8d 84 24 a0 00 00 00 48 8d 70 20 48 89 74 24 40 48 83 c0 10 48 89 44 24 10 45 31 f6 4c 89 64 24 68 4c 89 6c 24 78 1d 45 01 fe 48 8b 4c 24 60 48 81 c1 00 10 00 00 48 8b 54 24 58 [ 559.629417][ C0] RSP: 0018:ffffc90000106c80 EFLAGS: 00000246 [ 559.629433][ C0] RAX: ffffc90000106d30 RBX: ffff88806b737800 RCX: ffff88806b737000 [ 559.629448][ C0] RDX: 0000000000000001 RSI: ffffc90000106d40 RDI: ffffc90000106d48 [ 559.629461][ C0] RBP: ffffc90000106dc8 R08: ffffc90000106d47 R09: 0000000000000000 [ 559.629475][ C0] R10: ffffc90000106d20 R11: fffff52000020da9 R12: ffff88806b737c00 [ 559.629489][ C0] R13: ffff88806b737800 R14: 0000000000000000 R15: ffffea0001adcc00 [ 559.629503][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 559.629518][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.629532][ C0] CR2: 0000560a0a5006d8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 559.629549][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.629560][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.629572][ C0] Call Trace: [ 559.629580][ C0] [ 559.629589][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 559.629611][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 559.629639][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 559.629660][ C0] ? nmi_handle+0x2a/0x5a0 [ 559.629689][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 559.629712][ C0] ? nmi_handle+0x14f/0x5a0 [ 559.629730][ C0] ? nmi_handle+0x2a/0x5a0 [ 559.629749][ C0] ? debug_check_no_obj_freed+0x1d5/0x580 [ 559.629769][ C0] ? default_do_nmi+0x63/0x160 [ 559.629791][ C0] ? exc_nmi+0x123/0x1f0 [ 559.629812][ C0] ? end_repeat_nmi+0xf/0x53 [ 559.629843][ C0] ? debug_check_no_obj_freed+0x1d5/0x580 [ 559.629863][ C0] ? debug_check_no_obj_freed+0x1d5/0x580 [ 559.629884][ C0] ? debug_check_no_obj_freed+0x1d5/0x580 [ 559.629905][ C0] [ 559.629911][ C0] [ 559.629921][ C0] ? bpf_trace_run2+0x36e/0x540 [ 559.629946][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 559.629975][ C0] ? ieee80211_inform_bss+0xbb2/0x1080 [ 559.629999][ C0] kfree+0x10f/0x360 [ 559.630021][ C0] ieee80211_inform_bss+0xbb2/0x1080 [ 559.630051][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 559.630079][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 559.630107][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 559.630160][ C0] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 559.630190][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 559.630215][ C0] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 559.630253][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 559.630299][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 559.630325][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 559.630352][ C0] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 559.630384][ C0] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 559.630439][ C0] ? __pfx_validate_chain+0x10/0x10 [ 559.630473][ C0] ? __pfx_validate_chain+0x10/0x10 [ 559.630494][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 559.630527][ C0] ? mark_lock+0x9a/0x350 [ 559.630556][ C0] ? __lock_acquire+0x137a/0x2040 [ 559.630601][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 559.630625][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 559.630653][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 559.630689][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 559.630714][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 559.630742][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 559.630767][ C0] ? __pfx_lock_release+0x10/0x10 [ 559.630803][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 559.630839][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 559.630862][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 559.630893][ C0] ? mark_lock+0x9a/0x350 [ 559.630922][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.630949][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.630976][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 559.631008][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 559.631040][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 559.631064][ C0] ? process_scheduled_works+0x945/0x1830 [ 559.631088][ C0] process_scheduled_works+0xa2c/0x1830 [ 559.631131][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.631162][ C0] ? assign_work+0x364/0x3d0 [ 559.631188][ C0] worker_thread+0x870/0xd30 [ 559.631223][ C0] ? __kthread_parkme+0x169/0x1d0 [ 559.631250][ C0] ? __pfx_worker_thread+0x10/0x10 [ 559.631275][ C0] kthread+0x2f0/0x390 [ 559.631314][ C0] ? __pfx_worker_thread+0x10/0x10 [ 559.631337][ C0] ? __pfx_kthread+0x10/0x10 [ 559.631364][ C0] ret_from_fork+0x4b/0x80 [ 559.631388][ C0] ? __pfx_kthread+0x10/0x10 [ 559.631419][ C0] ret_from_fork_asm+0x1a/0x30 [ 559.631453][ C0] [ 560.141699][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 560.148636][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 560.158826][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 560.168930][ T30] Call Trace: [ 560.172244][ T30] [ 560.175219][ T30] dump_stack_lvl+0x241/0x360 [ 560.179952][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.185202][ T30] ? __pfx__printk+0x10/0x10 [ 560.189832][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 560.195861][ T30] ? vscnprintf+0x5d/0x90 [ 560.200230][ T30] panic+0x349/0x860 [ 560.204165][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 560.210363][ T30] ? __pfx_panic+0x10/0x10 [ 560.214839][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 560.220245][ T30] ? __irq_work_queue_local+0x137/0x410 [ 560.225844][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 560.231266][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 560.237464][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 560.243648][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 560.249825][ T30] watchdog+0x1033/0x1040 [ 560.254177][ T30] ? watchdog+0x1ea/0x1040 [ 560.258618][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.263311][ T30] kthread+0x2f0/0x390 [ 560.267432][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.272126][ T30] ? __pfx_kthread+0x10/0x10 [ 560.276738][ T30] ret_from_fork+0x4b/0x80 [ 560.281168][ T30] ? __pfx_kthread+0x10/0x10 [ 560.285771][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.290565][ T30] [ 560.293893][ T30] Kernel Offset: disabled [ 560.298227][ T30] Rebooting in 86400 seconds..