last executing test programs: 9.193108514s ago: executing program 4 (id=472): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 4.324654483s ago: executing program 3 (id=513): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x22, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3c) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x3c, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async, rerun: 32) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000001100)="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", 0x2a7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 4.074665677s ago: executing program 3 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6}]}, 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xfffffff8, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x5c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc3f}]}, 0x5c}}, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000100)=0x4120, 0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f00000001c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) sendfile(r8, r12, &(0x7f00000000c0), 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4c015) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) 3.993308529s ago: executing program 4 (id=517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x1002, &(0x7f0000002800)=""/4098}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x0, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="01"], 0x20}}, 0x0) 3.9877425s ago: executing program 0 (id=518): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002fc0)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @typedef={0x5, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x43}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x24020400) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffce}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20010}, 0x10}, 0x90) 3.805227707s ago: executing program 0 (id=520): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0xb, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/216, &(0x7f0000000180)=0xd8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/4096, 0x1000, 0x40, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x80) (async, rerun: 32) socket$kcm(0x29, 0xd, 0x0) (async, rerun: 32) close(0x3) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="018001000000000014002b8007000800", @ANYRES32, @ANYBLOB="080003001900000008001b0000000000c3e96940912c18defba6cdc272717147112c76d0be6222aa6e7ec8fb7c43444d894cd1"], 0x3c}}, 0x0) 3.536576697s ago: executing program 3 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x400, 0xfffffffe, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) accept4(0xffffffffffffffff, &(0x7f0000000140)=@nl=@proc, &(0x7f00000001c0)=0x80, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x7c}}, 0x0) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000240)={0x10000000}) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x60}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r3, 0x2, 0x4, 0xbf2}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_int(r9, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) (async, rerun: 32) sendto$inet6(r9, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x0) 3.246018839s ago: executing program 3 (id=523): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x200000000000001}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xf7ffff7f, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240000c4) 3.1323556s ago: executing program 3 (id=524): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6, 0x2}]}, 0x10) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6, 0x2}]}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000780)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@generic="634dd951746fe35a3d7f459357f5bf9d14f402d77419df0ad4b207b079f1e94261344641553e5fd4dc2124d022a188b59bf94d0b8e8fb35e2bcba7a54bafb59d4ac975c1f0269d2d60257614a64e4065874f88b774eadad615899ab2849b4d875f8e8aeae0a04d758db2073fdd6ea65bdf5b40d68be578e54ac5d648eea73348783ef332e3335bcede70f2206781b5c1dfecfdb00df4e35d6a5a839f96cb767f101a340f51bb05ff468cc68e11acc73b277cf0c92e1496a2c76d57b86930927bc2adc1d4c9eb637ff5c7ffbeb6ef5531802d1a51c6ee791a6b15d828518f78c9967ff8b460dc952a4b63038402", @generic="26c1e5e4409b7b2f21eaecd84205d99f8ac72bcfe4b88e7040ad9a6c845fff292724b9ce7c1b3eafaa90e91de0"]}]}, 0x184}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.008618s ago: executing program 0 (id=525): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000100d09e5455236b4dfad4b4f190050000000000000700000092180fd023144cee"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x34, 0xc, 0x0, @prog_fd}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000ffff030000005800018044000400200001000a00000000007fffffff000000a0ffffff0000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1, 0x4300}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r10, @ANYBLOB="000000000000000018100000", @ANYRES32=r11, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000300)=@int=0x7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r12, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000a935fa9b1d362ad7faeb592c4f65ad0000000000000000", @ANYRES16=r14, @ANYBLOB="00000000000000002000128009000100766c616e000000001000028006000100000000000400038008000500", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r14, @ANYRESHEX=r1], 0x50}, 0x1, 0xba01}, 0x0) 1.969641578s ago: executing program 2 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffe, 0x8, 0x0, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffe, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60122d9200283afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000feffffff0000000000000001ff0000aaff0100bd0000000000000000000000013bcccfa4a30f25471a3c20d559a80f0aa659491d02dee8d99944fa6fa5d4a9e2d86bfd4f48ecb2ecef7b3ff3835d0405549ceb9b28ad431567525179ed988f33faa2e86b5a93a20e150a6615319360ab9f6fd5f7e2525140d87609831f140e116cb57799c7e0a6"], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60122d9200283afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000feffffff0000000000000001ff0000aaff0100bd0000000000000000000000013bcccfa4a30f25471a3c20d559a80f0aa659491d02dee8d99944fa6fa5d4a9e2d86bfd4f48ecb2ecef7b3ff3835d0405549ceb9b28ad431567525179ed988f33faa2e86b5a93a20e150a6615319360ab9f6fd5f7e2525140d87609831f140e116cb57799c7e0a6"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0100000000000000000028000000060006", @ANYRES32=r8, @ANYBLOB], 0x34}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0100000000000000000028000000060006", @ANYRES32=r8, @ANYBLOB], 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={0x0, 0x5, 0x1, [0x6, 0x80000001, 0x0, 0x6], [0x3, 0x3, 0x0, 0x1ff, 0xfffffffffffffffa, 0x1, 0x7, 0x80000000, 0xc, 0x9d8c, 0x1, 0x608, 0x6, 0x800, 0x3, 0x0, 0x0, 0x2, 0x81, 0xc, 0x9, 0x0, 0x2, 0x7, 0xffffffff, 0x5, 0x10, 0x3, 0x6, 0x3, 0x18000000000, 0x0, 0x4, 0xfffffffffffffffb, 0x7, 0x100, 0xffffffffffffffff, 0x34, 0x8, 0x69, 0x2, 0xb199, 0xfffffffffffffff9, 0x6, 0x2, 0x74f5, 0x7, 0x8, 0x7, 0x3, 0x8000000000000000, 0x8, 0x8, 0x4, 0x0, 0x2, 0x1, 0x7, 0x0, 0x2, 0x7, 0x10001, 0xfff, 0x3, 0x7e93, 0x2, 0x293, 0xf36, 0x4, 0x461, 0x7, 0x6, 0x9, 0xe1e, 0xa889, 0x9, 0x7, 0x2, 0x4, 0x31b, 0x9, 0x40, 0xc33, 0x101, 0x9, 0x7f, 0x1ff, 0x80000000, 0x6, 0x6, 0x4, 0x255, 0xb, 0x1, 0xffffffff, 0x3, 0x2, 0xb797, 0x0, 0x4, 0x100000000, 0x4a35a9c7, 0xf9e6, 0x9, 0x7fff, 0x7d4b, 0x9, 0x80, 0x4, 0x3f08c7f8, 0x2, 0x2, 0x9, 0x101, 0x6, 0x2f, 0xbe, 0x6, 0xfccd, 0x0, 0xffffffffffffffff]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={0x0, 0x5, 0x1, [0x6, 0x80000001, 0x0, 0x6], [0x3, 0x3, 0x0, 0x1ff, 0xfffffffffffffffa, 0x1, 0x7, 0x80000000, 0xc, 0x9d8c, 0x1, 0x608, 0x6, 0x800, 0x3, 0x0, 0x0, 0x2, 0x81, 0xc, 0x9, 0x0, 0x2, 0x7, 0xffffffff, 0x5, 0x10, 0x3, 0x6, 0x3, 0x18000000000, 0x0, 0x4, 0xfffffffffffffffb, 0x7, 0x100, 0xffffffffffffffff, 0x34, 0x8, 0x69, 0x2, 0xb199, 0xfffffffffffffff9, 0x6, 0x2, 0x74f5, 0x7, 0x8, 0x7, 0x3, 0x8000000000000000, 0x8, 0x8, 0x4, 0x0, 0x2, 0x1, 0x7, 0x0, 0x2, 0x7, 0x10001, 0xfff, 0x3, 0x7e93, 0x2, 0x293, 0xf36, 0x4, 0x461, 0x7, 0x6, 0x9, 0xe1e, 0xa889, 0x9, 0x7, 0x2, 0x4, 0x31b, 0x9, 0x40, 0xc33, 0x101, 0x9, 0x7f, 0x1ff, 0x80000000, 0x6, 0x6, 0x4, 0x255, 0xb, 0x1, 0xffffffff, 0x3, 0x2, 0xb797, 0x0, 0x4, 0x100000000, 0x4a35a9c7, 0xf9e6, 0x9, 0x7fff, 0x7d4b, 0x9, 0x80, 0x4, 0x3f08c7f8, 0x2, 0x2, 0x9, 0x101, 0x6, 0x2f, 0xbe, 0x6, 0xfccd, 0x0, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000b80)={0x1, 0x0, @start={r13, 0x0, "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", "695817133684856518c3c0368c14257e33f5464da597d80231482d7d23e799eeeda66e73a78e3e7ebe2a91771f7a29a39827bb4cfc7ebcdb59a231afb829655b1ef12828ca20f2bbd15b94d84a2c7696707930cc43abca25b65d41a5b15253852ba3d162b4e167a54754ab76cd6712101f6c57bd9ef8eeb10fda01e4b9d6a407a5fe6966124906609e715a2781eb1558fb8a4dbd0d12ab7afcf077397ab955ef3a0f135559dd2994e1159134392800d06d25dc4c6b7b78be3ec064deec9acc07be2eeaa3c6895555f4395d030812cefbce5090dee65d278a91c2f4fbb830bbe711a5b69ce7ed8b35d7b5a66e1c8e9e3678dff41733ffb53ee509740c1a48e1f2ba7d3ba72102d21bfce3426b0f63adb419fa3a014535470815b7d43a3b5d5e86ba2820f9fe283f7014deb37848d3c3268b546366ab567ef60bd164532eed863a207eb46cc6049847be01c87c0c541868fdb1b028c00bcd22cd412cf5f09eb2128685b41e416525166fd71cfba338ba9a4fb460fc48f0c4e21616c0b537276d35848bbd99b419f0070f1b23c274debd95bb8bd71a94d06ef161edeb72fc27ca0664cc0c50f675151a4c12e42d82cfad39fd16e3193d296db03ffdddc4373b31aae1688afefbc658131d414b37da88fc9e130f07b08c508747a2666aa399848b81c65437322f0989e02edaac9cd75d4816af4982cbfc983541b36bb9c717bb1c640caf4aa26b8ba2c10294e9bc389a0f436f51b083dacf13a31517520f556648a452c12197719ac82a30d05ae4b85d10dcb8521b89b4a04d9ffb48a5612fd94a5ccfecd9abccf306a227bb60414efef28d670227417fde09c8e9b3836a1fed6482c115c4e6ad4570e6e68e77b90a161de507ccd25ab61a67575f9c553fe23d26a840be28088a866e820ca78edf2f60cb065c3fd7ba1770f54aaa41cbdcebd939db86e4b3a23b878c3f4df6c5369e72bd3a80949950fbc09bcc788eb8967fd655d8dccf7898faa4ceb405eb73ab2c494b5016382628f6e97767ed1e26040e7f90a29c7c751afa93b026b8fd8dec8faedc860c14114445da8486d0a51327552d4d8326c29edba8262d175644a0f3f0188c8a89e8fbb51ee44ae0816673d55604a1ce725af4770c2f2507dc721b5b21236117f4e39f08f498255aed24cc1314734522826fee027640d62554a2b7c2efce10c33bc3040caa8231ecab9bc77b892ff0ac0aa3aa484451f905ac2b1f93cecda27e7cfc160a1cf44d869dbac8b316689cd80d27c5d183f58b7b3612159d13a564b1fca425d35f087d795370fabdccb59beb8511ac9ebfafb7b44b73bdd7300442378c370c73ae08a9598079ecb5d4508443c034b3dbb521d70ba395895cce3a70a58d3dcbc088bf87e4cbc5a0abd29a7fd0dbd4d1da42e7f1868311e19ae3cb144c2d74970aeb68841213a46f8a1459b54153"}, [0x8001, 0xa, 0x6, 0x1, 0x3, 0x4e, 0x4, 0x9, 0x2e2c17b7, 0x500000, 0x0, 0x7, 0x1, 0x9, 0x5, 0x7fff, 0x8, 0x8, 0x9, 0xb0e, 0xffffffffffff0000, 0x0, 0x0, 0x6, 0x8000000000000000, 0xffffffff, 0x7, 0x5, 0x0, 0x7, 0xfffffffffffffffb, 0xa5d, 0x8, 0xad7, 0x48b6, 0x5, 0x6e, 0x1ff, 0x10000, 0xfffffffffffffffb, 0xfffffffffffffffd, 0xbc03, 0x8, 0x8, 0xd13, 0x9, 0x3902cd20, 0x3, 0x67, 0x8, 0x1, 0x5, 0x7fffffffffffffff, 0x7, 0x2, 0x1ff, 0xa1, 0x7, 0x5, 0x4, 0xcd0, 0xfffffffffffffeff]}) writev(r12, &(0x7f0000000080)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f0000000140)="ae05b668e5bbf23333b53d60d181385a5c985b2e66d8dfa68720ca3e0da2230bb3f45649c7c4192b27bb48f5ea287b9d631387223ef7a2e1f974f8525640fc2f3c78ac6b4da598f5977d76ce25cc8762acaa671302ff635b3aaf06a58c4ab1ab495e68ca44b4d564125e80", 0x6b}, {&(0x7f00000002c0)="bc96e811fea6de558888a45ec56f960487167085a68926ecbc514e9902ec7d0f85251ed1b65433d33d55c5da3ad0294cf48faf5e8115536a89c81f809f60cb03e9ae1a8ddcf16880", 0x48}, {&(0x7f0000000480)}], 0x3, 0x1) 1.881417261s ago: executing program 3 (id=527): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 1.879019728s ago: executing program 1 (id=528): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {0x4801}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 1.878528155s ago: executing program 4 (id=529): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r2, @ANYBLOB="bd399105034887d87484a34756b8e8d80e6ff0cdf085000000000000000028"], 0x48}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x40000000}]}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0x40000000}]}}]}, 0x4c}}, 0x0) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100)=0xe, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.573936093s ago: executing program 1 (id=530): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfffffffd, 0x3}, 0x20) getsockname$llc(r0, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002340)={'wlan0\x00', 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="38002d800a000000010101010101000028"], 0x54}}, 0x0) 1.573603734s ago: executing program 0 (id=531): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x90) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x6, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000a00)=[@window={0x3, 0x6}, @sack_perm, @timestamp, @window, @window={0x3, 0xff77, 0x800}, @timestamp, @timestamp, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x0, 0x5}, @sack_perm, @mss={0x2, 0x7}, @sack_perm, @sack_perm, @timestamp], 0x10) (async) sendto$inet(r3, &(0x7f0000001740)="cb", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="058403", 0x3}], 0x1}}], 0x1, 0x4008095) (async) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 4:'], 0x8) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x10) 1.559946935s ago: executing program 4 (id=532): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150006000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000400)=""/55}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/66}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="240000002e0021460000000000000000110000800c000000000000000000000011000000b7e402a51f054be05918d21d9ef0d4bb66e0abd3f2353ca401cdac048eef1e54eb2a9bf0e488ed9b6aac5b5ef83ddac1bdd64806625f4a4d360951b290d03d1ca8e9571756809d0c76e78c66f53745159df36de67a77e377aa9f4d650b3cb7e9a9e6eb584a3e44a739565314e21100440f5a9116a0c5be5bf2ad3176013fa7653f572c5b40b669ff000000000000001e1dd8baa1494fe04e20b178f10f1997c58962c62d6354f762617aa1591e6636fbae23ebb28c6eb4112e"], 0x24}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000040000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000004000000850000009b0000001865000009000000000000005709000018000000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000000000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095000040000000"], &(0x7f0000000640)='GPL\x00', 0x8, 0x1000, &(0x7f0000002bc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xb, 0x9, 0x8}, 0x10, 0x317c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000740)=[{0x5, 0x4, 0xc, 0x3}, {0x1, 0x1, 0x8, 0x7}]}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) listen(r3, 0x0) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x116c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10a8, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x95, 0x1, "cada8a507688cd9e6c4796e7ce8f77d76093f7b65d0623ffb34c6e90945bf8bfeb9ec4d649f58090ab5b76892dfd63465fe61cc20d46cbd45ad8878053ca94e85662d8eb5b84fc1f1dcfc56907db98f01129f30b04a03b9605440a4ae65b6feaa1e249a08b86227b3b3b54b6c33fabdf51233c3bfe9553ebbec524de9421bec7db212675ed51e55ce1f1af6c8da956869e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x84, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "fc4a400a233c44dda1abd7ca904d11c010af41671a095147612f7eab6c85df00142b3ed1f2b8b69d76af51706cd29b1c211a64baa65f416d2fe2207fb1a5edd57b0a419a969eb8b2a7610fbd22cfb1238188c03a5c230729ffc124b59238c82d33e13639960aa72bc2c9a7796d2f21b6fa9b2f4f8f"}}]}]}, 0x116c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) 1.419789673s ago: executing program 2 (id=533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8, 0x80, 0x6, 0x8, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x44, 0x72, 0x1, 0x9, [{@local, 0x4}, {@multicast2, 0x8b96}, {@broadcast, 0x6}, {@local, 0xfd1e}, {@multicast2, 0x2}, {@private=0xa010101}, {@broadcast, 0x6}, {@remote, 0x852}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd2ef8b37a4f0bcb5, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f00000002c0), &(0x7f00000002c0)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000000), &(0x7f00000002c0)=""/255}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f00002f6000/0x4000)=nil, 0x4000, 0x100000a, 0x28011, r7, 0x46861000) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r8, r5, 0x0, 0x10000a007) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800002c001e0925eef9ff47d752e0abbbe9000000000000000000000071123d00"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xd}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[@ANYRES16=r9, @ANYRESOCT], 0x31) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r12, 0x65, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRESDEC=r5, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac1414aa08000700e000030a08000a00", @ANYRES32], 0x48}}, 0x0) 1.313987865s ago: executing program 1 (id=534): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x200000000000001}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xffffff97, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240000c4) 1.313495544s ago: executing program 0 (id=535): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8000000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050008"], 0x58}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.20911808s ago: executing program 4 (id=536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000200000000002000000080001"], 0x1c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x62, 0x5, 0x448, 0x2b8, 0x188, 0xffffffff, 0x0, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 1.176003265s ago: executing program 1 (id=537): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x36, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) unshare(0x22020600) socket$inet(0x2, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xfffffe4f}, {0xc}}}]}]}, 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r2}, 0x10) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="d9899e2c9368de114f3dc848ce40a288ec019073280320846b8b7423dc334e9fe3e045dbfdb2adb3a8ccf583c773d6db91af5669fc8535b5e4c7233ec6c868e32ab74b74f2c2112c4749201cf4cc4daf9434de7d6671323928adffec20cb472e03fad0d26eba9dea2032b41378ad4662b29b1c689772cef8d109", 0x7a}], 0x1) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe80000000000000000000007bc925be9b2136000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x8e, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x4, @remote, 0x2}}]}, 0x110) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 862.794422ms ago: executing program 4 (id=538): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000200)=""/97, 0x61}], 0x1, 0x8, 0x4) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="05000000010000", 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) 787.585044ms ago: executing program 0 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 626.006082ms ago: executing program 1 (id=540): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {0x7300}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 585.656397ms ago: executing program 2 (id=541): unshare(0x24020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) socket$inet6_udp(0xa, 0x2, 0x0) 439.178561ms ago: executing program 1 (id=542): r0 = socket(0x10, 0x3, 0x0) pipe(0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r2, 0x3) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x7f) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r3, 0x3) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r5, 0x0, 0xffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='xprt_retransmit\x00'}, 0xffffffffffffffd8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000104000000000057557e7a8292878e1f74da030000", @ANYRES32=r8, @ANYBLOB="0000000000100000"], 0x20}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0xa, 0x7fff}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000000a00000c000b00100000000000fa2b"], 0x24}}, 0x0) 349.83846ms ago: executing program 2 (id=543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x840) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="140000009d4800000100080400004b00", @ANYRES32, @ANYBLOB="d5c0a076c7b9478a91def2c4d21ea1fe2984177b05087ffe28ab85fcace92debe02d255d957ed0223dbfa36c32385d89ec15dfc879977bdaee9c6f5ce8f38b5c6a02d7378826bc20a6d29f1cf4de679a56ac5be3db17f93525b78c98168fe84d1b1284cfaea9d459462790c4"], 0x18, 0x20000040}, 0x44000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0xff51) (async, rerun: 32) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r8 = socket(0x10, 0xf38714e11fcc2735, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0xe0}}, 0x0) (async) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0800285e000000dbdf251f00000008009a0001000000050092008000000005009200030000000804000000000000050092000100000005009200a70000000400cc00c8c8410aa3670ccf61b5d5153d0ea40ee779f92698f2d80a3a77e707d2458b7b0036f4b7ae00aec78ffcd002aab9ec1e4b22e6997c5cde9c9ecc1ea12d8d3a30447d4539d58a941f48019c632322a0c3502b48f8b435c2f9b790b4b9dcba9a68d0d37e559eb1619f7bca00"/188], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r9, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x8004) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffff6) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r11, @ANYRES32=r13, @ANYRESOCT], 0x20}}, 0x0) (async) socket(0x10, 0x3, 0x0) 161.60511ms ago: executing program 2 (id=544): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x6, 0x8, 0x4, 0x5, 0xfffffffa]}, &(0x7f0000000100)=0x54) sendmmsg$alg(r2, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a000000001800000000000000170100000400000006020000004000001800000000000000170100000300000001"], 0x60}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c, 0x800) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) accept4(r0, 0x0, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x6, 0x8, 0x4, 0x5, 0xfffffffa]}, &(0x7f0000000100)=0x54) (async) sendmmsg$alg(r2, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a000000001800000000000000170100000400000006020000004000001800000000000000170100000300000001"], 0x60}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) (async) 0s ago: executing program 2 (id=545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000eac7b22918135cfb953436ffffffffffffff000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140c, 0xefae5b9e2929ee3d, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 68.305753][ T5220] cgroup: Unknown subsys name 'net' [ 68.505705][ T5220] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.269904][ T5220] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.710159][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.716859][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.823365][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.833821][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.846287][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.867459][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.886512][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.914880][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.916804][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.927252][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.932199][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.938284][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.943902][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.952235][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.957445][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.965185][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.980023][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.980149][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.987948][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.994264][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.003164][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.010243][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.017407][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.023469][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.031682][ T4621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.036541][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.043391][ T4621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.053924][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.058202][ T4621] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.064671][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.072374][ T4621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.080607][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.689911][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 73.781310][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 73.840065][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 73.890272][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 73.970560][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 74.048058][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.055303][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.063443][ T5231] bridge_slave_0: entered allmulticast mode [ 74.071442][ T5231] bridge_slave_0: entered promiscuous mode [ 74.110686][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.118044][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.125568][ T5231] bridge_slave_1: entered allmulticast mode [ 74.133058][ T5231] bridge_slave_1: entered promiscuous mode [ 74.243284][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.250897][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.258716][ T5237] bridge_slave_0: entered allmulticast mode [ 74.265757][ T5237] bridge_slave_0: entered promiscuous mode [ 74.288209][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.295375][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.303093][ T5240] bridge_slave_0: entered allmulticast mode [ 74.310270][ T5240] bridge_slave_0: entered promiscuous mode [ 74.320041][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.327326][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.334602][ T5240] bridge_slave_1: entered allmulticast mode [ 74.342343][ T5240] bridge_slave_1: entered promiscuous mode [ 74.364171][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.374670][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.382490][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.390301][ T5237] bridge_slave_1: entered allmulticast mode [ 74.398246][ T5237] bridge_slave_1: entered promiscuous mode [ 74.428945][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.436363][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.443599][ T5235] bridge_slave_0: entered allmulticast mode [ 74.451488][ T5235] bridge_slave_0: entered promiscuous mode [ 74.461524][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.508904][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.516390][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.523591][ T5230] bridge_slave_0: entered allmulticast mode [ 74.531220][ T5230] bridge_slave_0: entered promiscuous mode [ 74.550970][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.558552][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.565725][ T5235] bridge_slave_1: entered allmulticast mode [ 74.573120][ T5235] bridge_slave_1: entered promiscuous mode [ 74.610249][ T5231] team0: Port device team_slave_0 added [ 74.632068][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.642108][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.649610][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.656945][ T5230] bridge_slave_1: entered allmulticast mode [ 74.664026][ T5230] bridge_slave_1: entered promiscuous mode [ 74.673264][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.686791][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.715229][ T5231] team0: Port device team_slave_1 added [ 74.724254][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.783685][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.796780][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.834138][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.848072][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.896392][ T5237] team0: Port device team_slave_0 added [ 74.924318][ T5240] team0: Port device team_slave_0 added [ 74.944588][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.951662][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.977811][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.991493][ T5237] team0: Port device team_slave_1 added [ 75.013998][ T5230] team0: Port device team_slave_0 added [ 75.022169][ T5240] team0: Port device team_slave_1 added [ 75.031319][ T5235] team0: Port device team_slave_0 added [ 75.041022][ T5235] team0: Port device team_slave_1 added [ 75.047632][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.054592][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.081034][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.105840][ T5230] team0: Port device team_slave_1 added [ 75.147180][ T5234] Bluetooth: hci0: command tx timeout [ 75.152983][ T5238] Bluetooth: hci1: command tx timeout [ 75.153006][ T5234] Bluetooth: hci4: command tx timeout [ 75.153205][ T5234] Bluetooth: hci2: command tx timeout [ 75.158794][ T5238] Bluetooth: hci3: command tx timeout [ 75.222980][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.230488][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.257471][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.281643][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.288685][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.315577][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.329930][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.337201][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.363868][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.376555][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.383647][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.410096][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.422052][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.429455][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.455761][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.469315][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.476446][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.502401][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.514293][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.521640][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.548384][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.590299][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.597449][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.623672][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.672098][ T5231] hsr_slave_0: entered promiscuous mode [ 75.679681][ T5231] hsr_slave_1: entered promiscuous mode [ 75.791030][ T5240] hsr_slave_0: entered promiscuous mode [ 75.798135][ T5240] hsr_slave_1: entered promiscuous mode [ 75.804377][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.812370][ T5240] Cannot create hsr debugfs directory [ 75.837499][ T5230] hsr_slave_0: entered promiscuous mode [ 75.846978][ T5230] hsr_slave_1: entered promiscuous mode [ 75.853321][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.861073][ T5230] Cannot create hsr debugfs directory [ 75.898238][ T5235] hsr_slave_0: entered promiscuous mode [ 75.907964][ T5235] hsr_slave_1: entered promiscuous mode [ 75.914250][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.921910][ T5235] Cannot create hsr debugfs directory [ 75.983087][ T5237] hsr_slave_0: entered promiscuous mode [ 75.989823][ T5237] hsr_slave_1: entered promiscuous mode [ 75.997394][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.004981][ T5237] Cannot create hsr debugfs directory [ 76.500984][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.515353][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.533642][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.545074][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.605525][ T5240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.625397][ T5240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.644890][ T5240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.657457][ T5240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.735790][ T5230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.749841][ T5230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.760603][ T5230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.795623][ T5230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.929386][ T5235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.940918][ T5235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.971724][ T5235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.983230][ T5235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.009315][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.086722][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.120017][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.131465][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.154241][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.198527][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.236191][ T5238] Bluetooth: hci2: command tx timeout [ 77.236963][ T5242] Bluetooth: hci1: command tx timeout [ 77.241657][ T5238] Bluetooth: hci4: command tx timeout [ 77.247199][ T5234] Bluetooth: hci0: command tx timeout [ 77.247258][ T5234] Bluetooth: hci3: command tx timeout [ 77.269833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.277360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.299161][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.325657][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.332843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.402487][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.470631][ T2553] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.477831][ T2553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.489607][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.496811][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.533322][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.565689][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.632724][ T5240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.643493][ T5240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.687508][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.723352][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.755114][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.777951][ T2553] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.785157][ T2553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.828247][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.835454][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.875471][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.901024][ T2553] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.908281][ T2553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.955239][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.962486][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.992213][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.999494][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.049423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.056640][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.138343][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.221700][ T5237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.265240][ T5230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.335847][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.426024][ T5240] veth0_vlan: entered promiscuous mode [ 78.479466][ T5240] veth1_vlan: entered promiscuous mode [ 78.640544][ T5240] veth0_macvtap: entered promiscuous mode [ 78.693773][ T5240] veth1_macvtap: entered promiscuous mode [ 78.745538][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.800851][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.831183][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.883199][ T5240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.892634][ T5240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.906939][ T5240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.915867][ T5240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.015256][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.082197][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.103243][ T5237] veth0_vlan: entered promiscuous mode [ 79.132895][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.147640][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.195910][ T5237] veth1_vlan: entered promiscuous mode [ 79.223611][ T2553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.234260][ T2553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.273982][ T5235] veth0_vlan: entered promiscuous mode [ 79.306693][ T5242] Bluetooth: hci4: command tx timeout [ 79.316497][ T5234] Bluetooth: hci2: command tx timeout [ 79.321964][ T5234] Bluetooth: hci0: command tx timeout [ 79.327765][ T5238] Bluetooth: hci1: command tx timeout [ 79.333670][ T4621] Bluetooth: hci3: command tx timeout [ 79.372252][ T5231] veth0_vlan: entered promiscuous mode [ 79.388821][ T5231] veth1_vlan: entered promiscuous mode [ 79.412361][ T5235] veth1_vlan: entered promiscuous mode [ 79.447726][ T5230] veth0_vlan: entered promiscuous mode [ 79.515723][ T5230] veth1_vlan: entered promiscuous mode [ 79.538708][ T5237] veth0_macvtap: entered promiscuous mode [ 79.584588][ T5237] veth1_macvtap: entered promiscuous mode [ 79.602727][ T5235] veth0_macvtap: entered promiscuous mode [ 79.618609][ T5235] veth1_macvtap: entered promiscuous mode [ 79.634798][ T5231] veth0_macvtap: entered promiscuous mode [ 79.658368][ T5231] veth1_macvtap: entered promiscuous mode [ 79.697091][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.712081][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.729038][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.752768][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.770502][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.785068][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.802135][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.815611][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.824776][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.835710][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.846040][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.858617][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.872127][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.884566][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.896582][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.920948][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.934295][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.953970][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.964929][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.981954][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.992718][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.009815][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.025604][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.043518][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.053736][ T5318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.108065][ T5318] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'. [ 80.158764][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.167590][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.176679][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.185405][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200997][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.211106][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.220391][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.230743][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.242784][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.255069][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.264943][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.275980][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.286019][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.296639][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.308431][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.350196][ T5230] veth0_macvtap: entered promiscuous mode [ 80.371350][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.380279][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.390188][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.400571][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.499827][ T5230] veth1_macvtap: entered promiscuous mode [ 80.632962][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.644280][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.655130][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.667936][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.681061][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.691678][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.703129][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.713848][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.725520][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.738765][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.741361][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.759500][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.769377][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.777770][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.788326][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.798281][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.810087][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.820095][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.830659][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.842601][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.882334][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 80.909055][ T5327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6'. [ 80.921500][ T5327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6'. [ 80.973171][ T5230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.984646][ T5230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.000643][ T5230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.010654][ T5230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.023014][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.050341][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.112880][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.122265][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.248508][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.276228][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.283727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.304492][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.332564][ T5331] €Â: renamed from bridge_slave_0 (while UP) [ 81.387900][ T5234] Bluetooth: hci0: command tx timeout [ 81.393372][ T5238] Bluetooth: hci4: command tx timeout [ 81.400698][ T5245] Bluetooth: hci2: command tx timeout [ 81.401061][ T5242] Bluetooth: hci3: command tx timeout [ 81.407856][ T4621] Bluetooth: hci1: command tx timeout [ 81.457888][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.482361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.489767][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.489788][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.674329][ T5333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8'. [ 81.760593][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.777647][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.793573][ T5337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 82.118678][ T5336] IPVS: Scheduler module ip_vs_sip not found [ 82.201934][ T5352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.251999][ T5336] syz.2.3 (5336) used greatest stack depth: 17072 bytes left [ 82.973775][ T5359] Zero length message leads to an empty skb [ 83.630182][ T5388] bridge_slave_0: left allmulticast mode [ 83.640666][ T5388] bridge_slave_0: left promiscuous mode [ 83.649406][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.684622][ T5388] bridge_slave_1: left allmulticast mode [ 83.697274][ T5388] bridge_slave_1: left promiscuous mode [ 83.726147][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.773259][ T5388] bond0: (slave bond_slave_0): Releasing backup interface [ 83.862968][ T5388] bond0: (slave bond_slave_1): Releasing backup interface [ 83.988518][ T5388] team0: Port device team_slave_0 removed [ 84.067465][ T5388] team0: Port device team_slave_1 removed [ 84.086697][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.103721][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.125776][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.134299][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.210699][ T5391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.219417][ T5391] team0: Port device bond0 added [ 84.234736][ T5392] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19'. [ 84.245430][ T5402] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.600444][ T5407] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 84.644623][ T5285] IPVS: starting estimator thread 0... [ 84.654051][ T5410] tipc: Enabling of bearer rejected, failed to enable media [ 84.746629][ T5414] IPVS: using max 17 ests per chain, 40800 per kthread [ 84.754042][ T5413] tipc: Started in network mode [ 84.764978][ T5413] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.784948][ T5413] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.804050][ T5413] tipc: Enabled bearer , priority 10 [ 84.917865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.056386][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.116354][ T5424] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 85.196270][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.213390][ T5424] team0: Port device netdevsim0 added [ 85.254010][ T5428] __nla_validate_parse: 6 callbacks suppressed [ 85.254032][ T5428] netlink: 538 bytes leftover after parsing attributes in process `syz.4.27'. [ 85.283000][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 85.336583][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.363378][ T5433] caif0: entered promiscuous mode [ 85.409219][ T5433] caif0: entered allmulticast mode [ 85.414490][ T5427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'. [ 85.431727][ T5427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'. [ 85.476399][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.488311][ T5424] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 85.519098][ T5424] team0: Port device netdevsim0 removed [ 85.538046][ T5424] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 85.549017][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 85.578843][ T5436] caif0: left promiscuous mode [ 85.603506][ T5436] caif0: left allmulticast mode [ 85.616303][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.756268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 85.900562][ T5287] tipc: Node number set to 2886997162 [ 85.963119][ T5452] can: request_module (can-proto-3) failed. [ 86.017224][ T5449] syz.4.32 uses obsolete (PF_INET,SOCK_PACKET) [ 86.036261][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.306304][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.541500][ T5472] nbd: must specify at least one socket [ 87.100153][ T1135] cfg80211: failed to load regulatory.db [ 87.361822][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.41'. [ 87.438127][ T5488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.619818][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 87.725125][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43'. [ 87.836659][ T5497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 87.952681][ T5498] netlink: 180 bytes leftover after parsing attributes in process `syz.2.46'. [ 88.013815][ T5503] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 88.689016][ T5522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.263739][ T5534] vxcan1: entered promiscuous mode [ 89.299230][ T5534] vxcan1: left promiscuous mode [ 89.342316][ T5534] vxcan1: entered allmulticast mode [ 89.391109][ T5535] netlink: 'syz.1.54': attribute type 3 has an invalid length. [ 89.418326][ T5535] netlink: 'syz.1.54': attribute type 7 has an invalid length. [ 89.490167][ T5535] : entered promiscuous mode [ 89.628364][ T5543] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 89.696712][ T5543] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 89.946259][ C0] net_ratelimit: 4 callbacks suppressed [ 89.946281][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.257632][ T5552] atomic_op ffff88806acd4198 conn xmit_atomic 0000000000000000 [ 90.299911][ T5552] __nla_validate_parse: 9 callbacks suppressed [ 90.299931][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 90.692552][ T5557] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.744539][ T5557] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 90.780949][ T5557] netlink: 140 bytes leftover after parsing attributes in process `syz.3.61'. [ 90.844752][ T5557] netlink: 344 bytes leftover after parsing attributes in process `syz.3.61'. [ 90.884681][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 90.986264][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 91.602601][ T5583] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 91.742983][ T5583] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.026268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 92.342784][ T5595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72'. [ 92.397485][ T5595] Cannot find add_set index 0 as target [ 93.066389][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 93.800245][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'. [ 93.828969][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 94.055986][ T5620] Bluetooth: MGMT ver 1.23 [ 94.108968][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.247428][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 94.302660][ T5626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.80'. [ 94.438655][ T5626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.80'. [ 95.146218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.607742][ T5643] netlink: 3895 bytes leftover after parsing attributes in process `syz.3.84'. [ 95.828202][ T5642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.042374][ T5658] ɶƣ0GCTw: entered promiscuous mode [ 96.090446][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 96.155502][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 96.179753][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.186300][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 96.194163][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.204968][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.215214][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.964434][ T5684] €Â: left allmulticast mode [ 96.974133][ T5684] €Â: left promiscuous mode [ 96.994221][ T5684] bridge0: port 1(€Â) entered disabled state [ 97.074403][ T5684] bridge_slave_1: left allmulticast mode [ 97.094625][ T5684] bridge_slave_1: left promiscuous mode [ 97.102626][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.162945][ T5684] bond0: (slave bond_slave_0): Releasing backup interface [ 97.226247][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 97.270569][ T5684] bond0: (slave bond_slave_1): Releasing backup interface [ 97.382298][ T5684] team0: Port device team_slave_0 removed [ 97.427104][ T5684] team0: Port device team_slave_1 removed [ 97.600394][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.623787][ T5685] team0: Port device bond0 added [ 97.757260][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 97.767038][ T5696] tipc: Started in network mode [ 97.772048][ T5696] tipc: Node identity , cluster identity 8 [ 98.266218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 98.641227][ T5743] xt_TCPMSS: Only works on TCP SYN packets [ 98.961748][ T5750] Cannot find add_set index 0 as target [ 99.153055][ T5753] team0: Port device bond0 removed [ 99.206354][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 99.306218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 99.334704][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.358443][ T5760] team0: Port device bond0 added [ 99.488360][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 99.535126][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 99.566686][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 100.129203][ T5801] Cannot find add_set index 0 as target [ 100.346234][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 100.472930][ T5817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.132'. [ 100.527961][ T5819] netlink: 'syz.4.132': attribute type 21 has an invalid length. [ 100.751786][ T5822] bridge_slave_0: left allmulticast mode [ 100.768971][ T5822] bridge_slave_0: left promiscuous mode [ 100.797084][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.816733][ T5822] bridge_slave_1: left allmulticast mode [ 100.839227][ T5822] bridge_slave_1: left promiscuous mode [ 100.853961][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.872490][ T5822] bond0: (slave bond_slave_0): Releasing backup interface [ 100.908895][ T5822] bond0: (slave bond_slave_1): Releasing backup interface [ 101.071975][ T5822] team0: Port device team_slave_0 removed [ 101.115765][ T5822] team0: Port device team_slave_1 removed [ 101.143973][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.154407][ T5839] Bluetooth: MGMT ver 1.23 [ 101.166748][ T5839] Bluetooth: hci3: unsupported parameter 64512 [ 101.172989][ T5839] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 101.200369][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.234642][ T5845] Bluetooth: hci3: unsupported parameter 64512 [ 101.244339][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.283721][ T5845] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 101.294225][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.386362][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 101.412058][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.439226][ T5827] team0: Port device bond0 added [ 101.566356][ T5854] Cannot find add_set index 0 as target [ 101.743622][ T5857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.839625][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 101.861022][ T5857] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 102.159586][ T5880] tipc: Enabling of bearer rejected, already enabled [ 102.207279][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 102.237470][ T5882] IPVS: set_ctl: invalid protocol: 4 172.20.20.17:20002 [ 102.346895][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'. [ 102.400540][ T5892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.153'. [ 102.400882][ T5894] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 102.426504][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 102.458334][ T5896] netlink: 'syz.4.153': attribute type 3 has an invalid length. [ 102.492790][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'. [ 102.550447][ T5896] : entered promiscuous mode [ 102.648945][ T5898] veth0_vlan: left promiscuous mode [ 102.886748][ T5890] delete_channel: no stack [ 102.978042][ T5907] team0: Port device bond0 removed [ 102.989105][ T5907] bond0 (unregistering): Released all slaves [ 103.466320][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 103.713545][ T5945] FAULT_INJECTION: forcing a failure. [ 103.713545][ T5945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.759746][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz.2.169 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 103.770428][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.780538][ T5945] Call Trace: [ 103.783855][ T5945] [ 103.786832][ T5945] dump_stack_lvl+0x241/0x360 [ 103.791586][ T5945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.796871][ T5945] ? __pfx__printk+0x10/0x10 [ 103.801520][ T5945] ? __pfx_lock_release+0x10/0x10 [ 103.806608][ T5945] should_fail_ex+0x3b0/0x4e0 [ 103.811346][ T5945] _copy_from_user+0x2f/0xe0 [ 103.816002][ T5945] copy_msghdr_from_user+0xae/0x680 [ 103.821258][ T5945] ? _parse_integer_limit+0x1b5/0x200 [ 103.826694][ T5945] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 103.832564][ T5945] __sys_sendmmsg+0x374/0x740 [ 103.837277][ T5945] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.842524][ T5945] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 103.848463][ T5945] ? ksys_write+0x23e/0x2c0 [ 103.852993][ T5945] ? __pfx_lock_release+0x10/0x10 [ 103.858051][ T5945] ? vfs_write+0x7c4/0xc90 [ 103.862489][ T5945] ? __mutex_unlock_slowpath+0x21d/0x750 [ 103.868133][ T5945] ? __pfx_vfs_write+0x10/0x10 [ 103.872936][ T5945] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.878938][ T5945] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.885283][ T5945] ? do_syscall_64+0x100/0x230 [ 103.890078][ T5945] __x64_sys_sendmmsg+0xa0/0xb0 [ 103.894962][ T5945] do_syscall_64+0xf3/0x230 [ 103.899485][ T5945] ? clear_bhb_loop+0x35/0x90 [ 103.904185][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.910103][ T5945] RIP: 0033:0x7fe05ed79e79 [ 103.914540][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.934160][ T5945] RSP: 002b:00007fe05fb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.942599][ T5945] RAX: ffffffffffffffda RBX: 00007fe05ef15f80 RCX: 00007fe05ed79e79 [ 103.950579][ T5945] RDX: 0000000000000002 RSI: 0000000020001fc0 RDI: 0000000000000003 [ 103.958558][ T5945] RBP: 00007fe05fb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 103.966538][ T5945] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 103.974524][ T5945] R13: 0000000000000000 R14: 00007fe05ef15f80 R15: 00007ffde6038d38 [ 103.982521][ T5945] [ 104.035862][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 104.361198][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 104.381381][ T5967] ip6t_srh: unknown srh invflags 5F00 [ 104.424769][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 104.506462][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 104.704186][ T5983] xt_bpf: check failed: parse error [ 104.791689][ T5987] hsr0: VLAN not yet supported [ 104.940064][ T5991] team0: Port device bond0 removed [ 105.049790][ T6004] FAULT_INJECTION: forcing a failure. [ 105.049790][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.081892][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.2.187 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 105.092559][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 105.102657][ T6004] Call Trace: [ 105.104825][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.105960][ T6004] [ 105.115523][ T6004] dump_stack_lvl+0x241/0x360 [ 105.120260][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.125503][ T6004] ? __pfx__printk+0x10/0x10 [ 105.130163][ T6004] should_fail_ex+0x3b0/0x4e0 [ 105.134893][ T6004] _copy_from_user+0x2f/0xe0 [ 105.137762][ T5996] team0: Port device bond0 added [ 105.139510][ T6004] move_addr_to_kernel+0x82/0x150 [ 105.149511][ T6004] copy_msghdr_from_user+0x43e/0x680 [ 105.154848][ T6004] ? _parse_integer_limit+0x1b5/0x200 [ 105.160274][ T6004] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.166150][ T6004] __sys_sendmmsg+0x374/0x740 [ 105.170877][ T6004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.176142][ T6004] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 105.182058][ T6004] ? ksys_write+0x23e/0x2c0 [ 105.186576][ T6004] ? __pfx_lock_release+0x10/0x10 [ 105.191625][ T6004] ? vfs_write+0x7c4/0xc90 [ 105.196064][ T6004] ? __mutex_unlock_slowpath+0x21d/0x750 [ 105.201716][ T6004] ? __pfx_vfs_write+0x10/0x10 [ 105.206521][ T6004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.212522][ T6004] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.218865][ T6004] ? do_syscall_64+0x100/0x230 [ 105.223648][ T6004] __x64_sys_sendmmsg+0xa0/0xb0 [ 105.228520][ T6004] do_syscall_64+0xf3/0x230 [ 105.233033][ T6004] ? clear_bhb_loop+0x35/0x90 [ 105.237731][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.243648][ T6004] RIP: 0033:0x7fe05ed79e79 [ 105.248160][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.267777][ T6004] RSP: 002b:00007fe05fb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.276316][ T6004] RAX: ffffffffffffffda RBX: 00007fe05ef15f80 RCX: 00007fe05ed79e79 [ 105.284300][ T6004] RDX: 0000000000000002 RSI: 0000000020001fc0 RDI: 0000000000000003 [ 105.292277][ T6004] RBP: 00007fe05fb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 105.300256][ T6004] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 105.308237][ T6004] R13: 0000000000000000 R14: 00007fe05ef15f80 R15: 00007ffde6038d38 [ 105.316231][ T6004] [ 105.546260][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 105.780737][ T6014] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 105.806220][ T6014] netlink: 55 bytes leftover after parsing attributes in process `syz.4.191'. [ 105.823379][ T6014] team0: Port device virt_wifi0 added [ 106.017521][ T6032] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 106.065954][ T6035] dccp_invalid_packet: P.Data Offset(0) too small [ 106.193158][ T6035] tipc: Started in network mode [ 106.216486][ T6035] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.249888][ T6035] tipc: Enabled bearer , priority 10 [ 106.482671][ T6050] FAULT_INJECTION: forcing a failure. [ 106.482671][ T6050] name failslab, interval 1, probability 0, space 0, times 1 [ 106.520597][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz.2.202 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 106.531337][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.541442][ T6050] Call Trace: [ 106.544754][ T6050] [ 106.547732][ T6050] dump_stack_lvl+0x241/0x360 [ 106.552462][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.557698][ T6050] ? __pfx__printk+0x10/0x10 [ 106.562357][ T6050] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 106.568387][ T6050] ? __pfx___might_resched+0x10/0x10 [ 106.573725][ T6050] should_fail_ex+0x3b0/0x4e0 [ 106.578450][ T6050] should_failslab+0xac/0x100 [ 106.583178][ T6050] ? __alloc_skb+0x1c3/0x440 [ 106.587806][ T6050] kmem_cache_alloc_node_noprof+0x71/0x320 [ 106.593659][ T6050] __alloc_skb+0x1c3/0x440 [ 106.598122][ T6050] ? __pfx___alloc_skb+0x10/0x10 [ 106.603114][ T6050] sock_omalloc+0xd5/0x1e0 [ 106.607577][ T6050] msg_zerocopy_realloc+0x9a/0x7d0 [ 106.612742][ T6050] __ip6_append_data+0xd71/0x4070 [ 106.617839][ T6050] ? __pfx_lock_acquire+0x10/0x10 [ 106.622927][ T6050] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 106.628535][ T6050] ? __pfx___ip6_append_data+0x10/0x10 [ 106.634043][ T6050] ? ip6_setup_cork+0x9fd/0xfb0 [ 106.638940][ T6050] ip6_make_skb+0x43b/0x530 [ 106.643486][ T6050] ? ip6_dst_check+0xe7/0x7e0 [ 106.648196][ T6050] ? ip6_dst_check+0x5d9/0x7e0 [ 106.653005][ T6050] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 106.658604][ T6050] ? __pfx_ip6_make_skb+0x10/0x10 [ 106.663683][ T6050] ? ip6_sk_dst_lookup_flow+0x87c/0xa30 [ 106.669286][ T6050] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 106.675226][ T6050] ? tomoyo_check_inet_address+0x8c8/0xbb0 [ 106.681073][ T6050] ? udpv6_sendmsg+0x1cc7/0x3270 [ 106.686054][ T6050] udpv6_sendmsg+0x237f/0x3270 [ 106.690878][ T6050] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 106.696477][ T6050] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 106.701667][ T6050] ? inet_send_prepare+0x21/0x260 [ 106.706739][ T6050] ? inet_send_prepare+0x5a/0x260 [ 106.711827][ T6050] __sock_sendmsg+0xef/0x270 [ 106.716468][ T6050] ____sys_sendmsg+0x525/0x7d0 [ 106.721282][ T6050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.726661][ T6050] __sys_sendmmsg+0x3b2/0x740 [ 106.731405][ T6050] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.736708][ T6050] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 106.742672][ T6050] ? ksys_write+0x23e/0x2c0 [ 106.747236][ T6050] ? __pfx_lock_release+0x10/0x10 [ 106.752328][ T6050] ? vfs_write+0x7c4/0xc90 [ 106.756797][ T6050] ? __mutex_unlock_slowpath+0x21d/0x750 [ 106.762468][ T6050] ? __pfx_vfs_write+0x10/0x10 [ 106.767308][ T6050] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.773438][ T6050] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.780005][ T6050] ? do_syscall_64+0x100/0x230 [ 106.784819][ T6050] __x64_sys_sendmmsg+0xa0/0xb0 [ 106.789803][ T6050] do_syscall_64+0xf3/0x230 [ 106.794358][ T6050] ? clear_bhb_loop+0x35/0x90 [ 106.799094][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.805129][ T6050] RIP: 0033:0x7fe05ed79e79 [ 106.809600][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.829303][ T6050] RSP: 002b:00007fe05fb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 106.837774][ T6050] RAX: ffffffffffffffda RBX: 00007fe05ef15f80 RCX: 00007fe05ed79e79 [ 106.845800][ T6050] RDX: 0000000000000002 RSI: 0000000020001fc0 RDI: 0000000000000003 [ 106.853990][ T6050] RBP: 00007fe05fb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 106.862007][ T6050] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 106.870021][ T6050] R13: 0000000000000000 R14: 00007fe05ef15f80 R15: 00007ffde6038d38 [ 106.878054][ T6050] [ 106.881964][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 107.051657][ T6070] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.207'. [ 107.076469][ T6070] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 107.253805][ T6073] netlink: 'syz.2.208': attribute type 3 has an invalid length. [ 107.272264][ T6073] netlink: 99276 bytes leftover after parsing attributes in process `syz.2.208'. [ 107.297287][ T5285] tipc: Node number set to 2886997162 [ 107.333358][ T6078] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 107.510256][ T5285] IPVS: starting estimator thread 0... [ 107.521021][ T6084] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 107.596278][ T6061] dccp_close: ABORT with 32 bytes unread [ 107.608073][ T6087] ip_vti0: Master is either lo or non-ether device [ 107.616206][ T6085] IPVS: using max 16 ests per chain, 38400 per kthread [ 107.650991][ T6089] netlink: 100 bytes leftover after parsing attributes in process `syz.1.214'. [ 107.926850][ T6097] trusted_key: syz.0.217 sent an empty control message without MSG_MORE. [ 107.946240][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 107.992821][ T6097] dvmrp1: entered allmulticast mode [ 108.013742][ T6097] dvmrp1: left allmulticast mode [ 108.574977][ T6140] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 108.907672][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.227'. [ 108.936406][ T6163] FAULT_INJECTION: forcing a failure. [ 108.936406][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 108.983437][ T6163] CPU: 1 UID: 0 PID: 6163 Comm: syz.4.232 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 108.986266][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 108.994072][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 108.994090][ T6163] Call Trace: [ 108.994099][ T6163] [ 108.994110][ T6163] dump_stack_lvl+0x241/0x360 [ 109.021979][ T6163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.027222][ T6163] ? __pfx__printk+0x10/0x10 [ 109.031864][ T6163] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 109.037888][ T6163] ? __pfx___might_resched+0x10/0x10 [ 109.043233][ T6163] ? sock_omalloc+0xd5/0x1e0 [ 109.047873][ T6163] ? __ip6_append_data+0xd71/0x4070 [ 109.053216][ T6163] should_fail_ex+0x3b0/0x4e0 [ 109.057942][ T6163] should_failslab+0xac/0x100 [ 109.062674][ T6163] ? __alloc_skb+0x1c3/0x440 [ 109.067305][ T6163] kmem_cache_alloc_node_noprof+0x71/0x320 [ 109.073159][ T6163] __alloc_skb+0x1c3/0x440 [ 109.077631][ T6163] ? __pfx___alloc_skb+0x10/0x10 [ 109.082610][ T6163] ? aa_get_newest_label+0xff/0x6f0 [ 109.087859][ T6163] alloc_skb_with_frags+0xc3/0x770 [ 109.093011][ T6163] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 109.098427][ T6163] ? apparmor_capable+0x138/0x1b0 [ 109.103516][ T6163] sock_alloc_send_pskb+0x91a/0xa60 [ 109.108788][ T6163] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 109.114553][ T6163] ? sock_omalloc+0x122/0x1e0 [ 109.119282][ T6163] ? msg_zerocopy_realloc+0x28a/0x7d0 [ 109.124712][ T6163] __ip6_append_data+0x2ad8/0x4070 [ 109.129987][ T6163] ? __ip6_append_data+0xf51/0x4070 [ 109.135239][ T6163] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 109.140845][ T6163] ? __pfx___ip6_append_data+0x10/0x10 [ 109.146439][ T6163] ? ip6_setup_cork+0x9fd/0xfb0 [ 109.151348][ T6163] ip6_make_skb+0x43b/0x530 [ 109.155986][ T6163] ? ip6_dst_check+0xe7/0x7e0 [ 109.160870][ T6163] ? ip6_dst_check+0x5d9/0x7e0 [ 109.165793][ T6163] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 109.171474][ T6163] ? __pfx_ip6_make_skb+0x10/0x10 [ 109.176639][ T6163] ? ip6_sk_dst_lookup_flow+0x87c/0xa30 [ 109.182244][ T6163] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 109.188273][ T6163] ? tomoyo_check_inet_address+0x8c8/0xbb0 [ 109.194119][ T6163] ? udpv6_sendmsg+0x1cc7/0x3270 [ 109.199107][ T6163] udpv6_sendmsg+0x237f/0x3270 [ 109.204018][ T6163] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 109.209624][ T6163] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 109.214824][ T6163] ? inet_send_prepare+0x21/0x260 [ 109.219898][ T6163] ? inet_send_prepare+0x5a/0x260 [ 109.224980][ T6163] __sock_sendmsg+0xef/0x270 [ 109.229627][ T6163] ____sys_sendmsg+0x525/0x7d0 [ 109.234535][ T6163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.239887][ T6163] __sys_sendmmsg+0x3b2/0x740 [ 109.244637][ T6163] ? __pfx___sys_sendmmsg+0x10/0x10 [ 109.249923][ T6163] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 109.256308][ T6163] ? ksys_write+0x23e/0x2c0 [ 109.260853][ T6163] ? __pfx_lock_release+0x10/0x10 [ 109.265937][ T6163] ? vfs_write+0x7c4/0xc90 [ 109.270402][ T6163] ? __mutex_unlock_slowpath+0x21d/0x750 [ 109.276077][ T6163] ? __pfx_vfs_write+0x10/0x10 [ 109.280903][ T6163] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.287295][ T6163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.293677][ T6163] ? do_syscall_64+0x100/0x230 [ 109.298496][ T6163] __x64_sys_sendmmsg+0xa0/0xb0 [ 109.303400][ T6163] do_syscall_64+0xf3/0x230 [ 109.307949][ T6163] ? clear_bhb_loop+0x35/0x90 [ 109.312672][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.318867][ T6163] RIP: 0033:0x7f99e4779e79 [ 109.323317][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.343139][ T6163] RSP: 002b:00007f99e54e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.351615][ T6163] RAX: ffffffffffffffda RBX: 00007f99e4915f80 RCX: 00007f99e4779e79 [ 109.359631][ T6163] RDX: 0000000000000002 RSI: 0000000020001fc0 RDI: 0000000000000003 [ 109.367736][ T6163] RBP: 00007f99e54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 109.375750][ T6163] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 109.383764][ T6163] R13: 0000000000000000 R14: 00007f99e4915f80 R15: 00007ffc25e6ad18 [ 109.391812][ T6163] [ 109.512231][ T6180] netlink: 'syz.3.236': attribute type 10 has an invalid length. [ 109.661932][ T6182] netlink: 'syz.3.236': attribute type 10 has an invalid length. [ 109.696634][ T6182] bridge0: port 1(team0) entered blocking state [ 109.703057][ T6182] bridge0: port 1(team0) entered disabled state [ 109.742201][ T6182] team0: entered allmulticast mode [ 109.762108][ T6182] team0: entered promiscuous mode [ 110.008546][ T6208] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 110.026226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.039987][ T6206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.242'. [ 110.350450][ T6220] netlink: 'syz.2.248': attribute type 4 has an invalid length. [ 110.690797][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.066377][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.150689][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'. [ 111.316489][ T6264] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 111.423285][ T6266] FAULT_INJECTION: forcing a failure. [ 111.423285][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 111.475010][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.4.261 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 111.485674][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.495773][ T6266] Call Trace: [ 111.499090][ T6266] [ 111.502051][ T6266] dump_stack_lvl+0x241/0x360 [ 111.506781][ T6266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.512020][ T6266] ? __pfx__printk+0x10/0x10 [ 111.516668][ T6266] ? __pfx_lock_acquire+0x10/0x10 [ 111.521745][ T6266] ? nf_ct_pernet+0x45/0x270 [ 111.526384][ T6266] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.532434][ T6266] should_fail_ex+0x3b0/0x4e0 [ 111.537158][ T6266] ? __nf_conntrack_alloc+0x8f/0x380 [ 111.542495][ T6266] should_failslab+0xac/0x100 [ 111.547229][ T6266] ? __nf_conntrack_alloc+0x8f/0x380 [ 111.552570][ T6266] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 111.557989][ T6266] __nf_conntrack_alloc+0x8f/0x380 [ 111.563159][ T6266] init_conntrack+0x3c3/0x1310 [ 111.567961][ T6266] ? __pfx_init_conntrack+0x10/0x10 [ 111.573183][ T6266] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 111.579188][ T6266] ? __local_bh_enable_ip+0x168/0x200 [ 111.584590][ T6266] nf_conntrack_in+0xd59/0x1880 [ 111.589484][ T6266] ? __pfx_nf_conntrack_in+0x10/0x10 [ 111.594814][ T6266] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 111.600564][ T6266] nf_hook_slow+0xc3/0x220 [ 111.604996][ T6266] ? __ip6_local_out+0x4dc/0x800 [ 111.609943][ T6266] __ip6_local_out+0x6fa/0x800 [ 111.614719][ T6266] ? __pfx___ip6_local_out+0x10/0x10 [ 111.620015][ T6266] ? __pfx_dst_output+0x10/0x10 [ 111.624877][ T6266] ? ip6_make_skb+0x48b/0x530 [ 111.629570][ T6266] ? ip6_dst_check+0xe7/0x7e0 [ 111.634261][ T6266] ? ip6_dst_check+0x5d9/0x7e0 [ 111.639067][ T6266] ip6_local_out+0x26/0x70 [ 111.643529][ T6266] ip6_send_skb+0x112/0x230 [ 111.648069][ T6266] udp_v6_send_skb+0xbf5/0x1870 [ 111.652961][ T6266] udpv6_sendmsg+0x23b3/0x3270 [ 111.657759][ T6266] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 111.663331][ T6266] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 111.668487][ T6266] ? inet_send_prepare+0x21/0x260 [ 111.673534][ T6266] ? inet_send_prepare+0x5a/0x260 [ 111.678590][ T6266] __sock_sendmsg+0xef/0x270 [ 111.683209][ T6266] ____sys_sendmsg+0x525/0x7d0 [ 111.688000][ T6266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.693320][ T6266] __sys_sendmmsg+0x3b2/0x740 [ 111.698038][ T6266] ? __pfx___sys_sendmmsg+0x10/0x10 [ 111.703300][ T6266] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 111.709237][ T6266] ? ksys_write+0x23e/0x2c0 [ 111.713790][ T6266] ? __pfx_lock_release+0x10/0x10 [ 111.718851][ T6266] ? vfs_write+0x7c4/0xc90 [ 111.723296][ T6266] ? __mutex_unlock_slowpath+0x21d/0x750 [ 111.728945][ T6266] ? __pfx_vfs_write+0x10/0x10 [ 111.733747][ T6266] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.739748][ T6266] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.746098][ T6266] ? do_syscall_64+0x100/0x230 [ 111.750877][ T6266] __x64_sys_sendmmsg+0xa0/0xb0 [ 111.755747][ T6266] do_syscall_64+0xf3/0x230 [ 111.760260][ T6266] ? clear_bhb_loop+0x35/0x90 [ 111.764954][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.770857][ T6266] RIP: 0033:0x7f99e4779e79 [ 111.775302][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.794935][ T6266] RSP: 002b:00007f99e54e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.803371][ T6266] RAX: ffffffffffffffda RBX: 00007f99e4915f80 RCX: 00007f99e4779e79 [ 111.811355][ T6266] RDX: 0000000000000002 RSI: 0000000020001fc0 RDI: 0000000000000003 [ 111.819338][ T6266] RBP: 00007f99e54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 111.827320][ T6266] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 111.835300][ T6266] R13: 0000000000000000 R14: 00007f99e4915f80 R15: 00007ffc25e6ad18 [ 111.843306][ T6266] [ 111.903490][ T6271] FAULT_INJECTION: forcing a failure. [ 111.903490][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.945893][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.1.263 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 111.956558][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.966672][ T6271] Call Trace: [ 111.969983][ T6271] [ 111.972947][ T6271] dump_stack_lvl+0x241/0x360 [ 111.977677][ T6271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.982917][ T6271] ? __pfx__printk+0x10/0x10 [ 111.987561][ T6271] ? __pfx_lock_release+0x10/0x10 [ 111.992644][ T6271] should_fail_ex+0x3b0/0x4e0 [ 111.997374][ T6271] _copy_from_iter+0x1f6/0x1960 [ 112.002267][ T6271] ? __virt_addr_valid+0x183/0x530 [ 112.007408][ T6271] ? __pfx_lock_release+0x10/0x10 [ 112.012449][ T6271] ? skb_set_owner_w+0x238/0x3e0 [ 112.017401][ T6271] ? sock_alloc_send_pskb+0x93b/0xa60 [ 112.022795][ T6271] ? __pfx__copy_from_iter+0x10/0x10 [ 112.028126][ T6271] ? __virt_addr_valid+0x183/0x530 [ 112.033273][ T6271] ? __virt_addr_valid+0x183/0x530 [ 112.038418][ T6271] ? __virt_addr_valid+0x45f/0x530 [ 112.043567][ T6271] ? __check_object_size+0x49c/0x900 [ 112.048896][ T6271] ip_generic_getfrag+0xf2/0x310 [ 112.053899][ T6271] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.059590][ T6271] ? skb_page_frag_refill+0x177/0x2f0 [ 112.065024][ T6271] __ip6_append_data+0x1eef/0x4070 [ 112.070218][ T6271] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.075828][ T6271] ? __pfx___ip6_append_data+0x10/0x10 [ 112.081446][ T6271] ? ip6_setup_cork+0x9fd/0xfb0 [ 112.086362][ T6271] ip6_make_skb+0x43b/0x530 [ 112.090926][ T6271] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.096515][ T6271] ? __pfx_ip6_make_skb+0x10/0x10 [ 112.101566][ T6271] ? ip6_sk_dst_lookup_flow+0x87c/0xa30 [ 112.106242][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 112.107131][ T6271] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 112.119882][ T6271] ? udpv6_sendmsg+0x1be1/0x3270 [ 112.124838][ T6271] udpv6_sendmsg+0x237f/0x3270 [ 112.129619][ T6271] ? release_sock+0x30/0x1f0 [ 112.134234][ T6271] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 112.139807][ T6271] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 112.144944][ T6271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.151302][ T6271] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 112.157041][ T6271] ? inet_send_prepare+0x1b7/0x260 [ 112.162170][ T6271] ? do_raw_spin_unlock+0x13c/0x8b0 [ 112.167398][ T6271] ? inet_send_prepare+0x1b7/0x260 [ 112.172532][ T6271] __sock_sendmsg+0xef/0x270 [ 112.177144][ T6271] ____sys_sendmsg+0x525/0x7d0 [ 112.181933][ T6271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.187273][ T6271] __sys_sendmmsg+0x3b2/0x740 [ 112.191979][ T6271] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.197234][ T6271] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 112.203151][ T6271] ? ksys_write+0x23e/0x2c0 [ 112.207672][ T6271] ? __pfx_lock_release+0x10/0x10 [ 112.212721][ T6271] ? vfs_write+0x7c4/0xc90 [ 112.217154][ T6271] ? __mutex_unlock_slowpath+0x21d/0x750 [ 112.222801][ T6271] ? __pfx_vfs_write+0x10/0x10 [ 112.227599][ T6271] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.233595][ T6271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.239941][ T6271] ? do_syscall_64+0x100/0x230 [ 112.244804][ T6271] __x64_sys_sendmmsg+0xa0/0xb0 [ 112.249689][ T6271] do_syscall_64+0xf3/0x230 [ 112.254201][ T6271] ? clear_bhb_loop+0x35/0x90 [ 112.258892][ T6271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.264796][ T6271] RIP: 0033:0x7f49c5f79e79 [ 112.269229][ T6271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.288868][ T6271] RSP: 002b:00007f49c6cff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.297300][ T6271] RAX: ffffffffffffffda RBX: 00007f49c6115f80 RCX: 00007f49c5f79e79 [ 112.305288][ T6271] RDX: 0000000000000001 RSI: 00000000200027c0 RDI: 0000000000000005 [ 112.313269][ T6271] RBP: 00007f49c6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 112.321249][ T6271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.329230][ T6271] R13: 0000000000000000 R14: 00007f49c6115f80 R15: 00007ffd82b5c188 [ 112.337226][ T6271] [ 112.479504][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 112.522722][ T6288] x_tables: duplicate underflow at hook 1 [ 112.673990][ T6294] team0: Port device bond0 removed [ 112.701904][ T6296] Cannot find add_set index 0 as target [ 112.772213][ T6294] team0: Port device virt_wifi0 removed [ 112.840773][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.858448][ T6297] team0: Port device bond0 added [ 112.892726][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.272'. [ 112.908459][ T6304] rose0: tun_chr_ioctl cmd 2147767519 [ 113.026616][ T6310] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 113.146210][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 113.252660][ T6320] netlink: 44 bytes leftover after parsing attributes in process `syz.4.276'. [ 113.297121][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 113.354617][ T6326] netlink: zone id is out of range [ 113.684133][ T6336] FAULT_INJECTION: forcing a failure. [ 113.684133][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 113.697283][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.2.280 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 113.707928][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.718195][ T6336] Call Trace: [ 113.721511][ T6336] [ 113.724474][ T6336] dump_stack_lvl+0x241/0x360 [ 113.729190][ T6336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.734422][ T6336] ? __pfx__printk+0x10/0x10 [ 113.739064][ T6336] ? __pfx_lock_acquire+0x10/0x10 [ 113.744128][ T6336] ? nf_ct_pernet+0x45/0x270 [ 113.748763][ T6336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 113.754794][ T6336] should_fail_ex+0x3b0/0x4e0 [ 113.759514][ T6336] ? __nf_conntrack_alloc+0x8f/0x380 [ 113.764841][ T6336] should_failslab+0xac/0x100 [ 113.769675][ T6336] ? __nf_conntrack_alloc+0x8f/0x380 [ 113.774997][ T6336] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 113.780400][ T6336] __nf_conntrack_alloc+0x8f/0x380 [ 113.785541][ T6336] init_conntrack+0x3c3/0x1310 [ 113.790327][ T6336] ? __pfx_init_conntrack+0x10/0x10 [ 113.795538][ T6336] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 113.801627][ T6336] ? __local_bh_enable_ip+0x168/0x200 [ 113.807023][ T6336] nf_conntrack_in+0xd59/0x1880 [ 113.811917][ T6336] ? __pfx_nf_conntrack_in+0x10/0x10 [ 113.817268][ T6336] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 113.823006][ T6336] nf_hook_slow+0xc3/0x220 [ 113.827465][ T6336] ? __ip6_local_out+0x4dc/0x800 [ 113.832414][ T6336] __ip6_local_out+0x6fa/0x800 [ 113.837190][ T6336] ? __pfx___ip6_local_out+0x10/0x10 [ 113.842573][ T6336] ? __pfx_dst_output+0x10/0x10 [ 113.847437][ T6336] ? ip6_make_skb+0x48b/0x530 [ 113.852142][ T6336] ip6_local_out+0x26/0x70 [ 113.856568][ T6336] ip6_send_skb+0x112/0x230 [ 113.861092][ T6336] udp_v6_send_skb+0xbf5/0x1870 [ 113.865971][ T6336] ? udpv6_sendmsg+0x1be1/0x3270 [ 113.870952][ T6336] udpv6_sendmsg+0x23b3/0x3270 [ 113.875752][ T6336] ? release_sock+0x30/0x1f0 [ 113.880361][ T6336] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 113.885930][ T6336] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 113.891065][ T6336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.897428][ T6336] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 113.903163][ T6336] ? inet_send_prepare+0x1b7/0x260 [ 113.908382][ T6336] ? do_raw_spin_unlock+0x13c/0x8b0 [ 113.913598][ T6336] ? inet_send_prepare+0x1b7/0x260 [ 113.918756][ T6336] __sock_sendmsg+0xef/0x270 [ 113.923409][ T6336] ____sys_sendmsg+0x525/0x7d0 [ 113.928207][ T6336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.933551][ T6336] __sys_sendmmsg+0x3b2/0x740 [ 113.938278][ T6336] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.943529][ T6336] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 113.949462][ T6336] ? ksys_write+0x23e/0x2c0 [ 113.953994][ T6336] ? __pfx_lock_release+0x10/0x10 [ 113.959057][ T6336] ? vfs_write+0x7c4/0xc90 [ 113.963501][ T6336] ? __mutex_unlock_slowpath+0x21d/0x750 [ 113.969162][ T6336] ? __pfx_vfs_write+0x10/0x10 [ 113.973971][ T6336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 113.979971][ T6336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.986319][ T6336] ? do_syscall_64+0x100/0x230 [ 113.991093][ T6336] __x64_sys_sendmmsg+0xa0/0xb0 [ 113.995957][ T6336] do_syscall_64+0xf3/0x230 [ 114.000574][ T6336] ? clear_bhb_loop+0x35/0x90 [ 114.005265][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.011170][ T6336] RIP: 0033:0x7fe05ed79e79 [ 114.015600][ T6336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.035232][ T6336] RSP: 002b:00007fe05fb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 114.043690][ T6336] RAX: ffffffffffffffda RBX: 00007fe05ef15f80 RCX: 00007fe05ed79e79 [ 114.051767][ T6336] RDX: 0000000000000001 RSI: 00000000200027c0 RDI: 0000000000000005 [ 114.059743][ T6336] RBP: 00007fe05fb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.067721][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.075699][ T6336] R13: 0000000000000000 R14: 00007fe05ef15f80 R15: 00007ffde6038d38 [ 114.083803][ T6336] [ 114.186268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 114.335048][ T6340] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 114.550721][ T6344] netlink: 'syz.3.284': attribute type 21 has an invalid length. [ 114.573201][ T6344] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.603221][ T6351] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 114.873420][ T6358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.289'. [ 115.025917][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.292'. [ 115.081866][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 115.093967][ T6372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.290'. [ 115.105350][ T6372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.290'. [ 115.226309][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 115.471267][ T6380] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 115.977684][ T6396] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 116.091841][ T6398] team0: left allmulticast mode [ 116.112717][ T6398] team0: left promiscuous mode [ 116.118485][ T6398] bridge0: port 1(team0) entered disabled state [ 116.184650][ T6401] bridge_slave_0: left allmulticast mode [ 116.229865][ T6401] bridge_slave_0: left promiscuous mode [ 116.259625][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.266237][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.300622][ T6401] bridge_slave_1: left allmulticast mode [ 116.314895][ T6401] bridge_slave_1: left promiscuous mode [ 116.326701][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.373320][ T6401] bond0: (slave bond_slave_0): Releasing backup interface [ 116.409848][ T6401] bond0: (slave bond_slave_1): Releasing backup interface [ 116.416628][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 116.500536][ T6401] team0: Port device team_slave_0 removed [ 116.541253][ T6401] team0: Port device team_slave_1 removed [ 116.556003][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.564142][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.579264][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.588848][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.603833][ T6401] bond0: (slave netdevsim0): Releasing backup interface [ 116.628110][ T6401] bond0: (slave wlan1): Releasing backup interface [ 116.671866][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.689139][ T6404] team0: Port device bond0 added [ 116.975744][ T6424] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 117.149383][ T6428] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 117.306313][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 117.510139][ T6445] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 117.598970][ T6449] atomic_op ffff88806145b198 conn xmit_atomic 0000000000000000 [ 117.658214][ T6449] __nla_validate_parse: 2 callbacks suppressed [ 117.658235][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 117.737693][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 117.777289][ T6452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.313'. [ 117.815128][ T6452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.313'. [ 118.010823][ T6462] team0: Port device bond0 removed [ 118.167229][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.202681][ T6468] team0: Port device bond0 added [ 118.346215][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.433891][ T6477] netlink: 88 bytes leftover after parsing attributes in process `syz.2.325'. [ 118.482148][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 118.591164][ T6484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.594813][ T6485] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 119.208553][ T6510] syzkaller0: entered allmulticast mode [ 119.273454][ T6507] syzkaller0: left allmulticast mode [ 119.364935][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 119.386315][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.416319][ T6525] netlink: 152 bytes leftover after parsing attributes in process `syz.4.339'. [ 119.530982][ T6525] netlink: 152 bytes leftover after parsing attributes in process `syz.4.339'. [ 119.811704][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 119.912723][ T6546] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 120.043373][ T6547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.250068][ T6547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.411083][ T6547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.426242][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.527229][ T6547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.868698][ T6547] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.929326][ T6547] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.993381][ T6547] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.088024][ T6547] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.240598][ T6593] bridge_slave_0: left allmulticast mode [ 121.265092][ T6593] bridge_slave_0: left promiscuous mode [ 121.272466][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.295336][ T6593] bridge_slave_1: left allmulticast mode [ 121.313633][ T6593] bridge_slave_1: left promiscuous mode [ 121.331581][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.361889][ T6593] bond0: (slave bond_slave_0): Releasing backup interface [ 121.398986][ T6604] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 121.429284][ T6593] bond0: (slave bond_slave_1): Releasing backup interface [ 121.466213][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.563756][ T6593] team0: Port device team_slave_0 removed [ 121.634767][ T6593] team0: Port device team_slave_1 removed [ 121.661735][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.669628][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.684302][ T6593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.692057][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.771145][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.784257][ T6596] team0: Port device bond0 added [ 121.851016][ T6609] team0: Port device bond0 removed [ 121.885192][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.905432][ T6610] team0: Port device bond0 added [ 122.225470][ C1] vcan0: j1939_tp_rxtimer: 0xffff888071e1c800: rx timeout, send abort [ 122.235822][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888071e1c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.507175][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.613115][ T6641] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 122.632385][ T6640] xt_hashlimit: max too large, truncated to 1048576 [ 122.734136][ T6643] team0: Port device bond0 removed [ 122.779646][ T6640] Driver unsupported XDP return value 0 on prog (id 219) dev N/A, expect packet loss! [ 122.848124][ T6653] FAULT_INJECTION: forcing a failure. [ 122.848124][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 122.875839][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.1.378 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 122.886499][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.887944][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.896565][ T6653] Call Trace: [ 122.896580][ T6653] [ 122.896591][ T6653] dump_stack_lvl+0x241/0x360 [ 122.896642][ T6653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.896666][ T6653] ? __pfx__printk+0x10/0x10 [ 122.924030][ T6653] ? __pfx_mroute6_is_socket+0x10/0x10 [ 122.929538][ T6653] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 122.934791][ T6653] should_fail_ex+0x3b0/0x4e0 [ 122.939506][ T6653] ? skb_clone+0x20c/0x390 [ 122.943643][ T6648] team0: Port device bond0 added [ 122.943938][ T6653] should_failslab+0xac/0x100 [ 122.953587][ T6653] ? skb_clone+0x20c/0x390 [ 122.958044][ T6653] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 122.963449][ T6653] ? ipv6_chk_mcast_addr+0x2e/0x840 [ 122.968696][ T6653] skb_clone+0x20c/0x390 [ 122.972979][ T6653] ? ip6_finish_output2+0x3ef/0x1680 [ 122.978312][ T6653] ip6_finish_output2+0x408/0x1680 [ 122.983460][ T6653] ? ip6_mtu+0x81/0x3f0 [ 122.987632][ T6653] ? nf_hook+0x9e/0x450 [ 122.991803][ T6653] ? __ip6_local_out+0x7c1/0x800 [ 122.996777][ T6653] ? __pfx_ip6_finish_output2+0x10/0x10 [ 123.002346][ T6653] ? skb_gso_transport_seglen+0x345/0x580 [ 123.008091][ T6653] ? skb_gso_validate_network_len+0x12e/0x290 [ 123.014199][ T6653] ip6_finish_output+0x41e/0x810 [ 123.019180][ T6653] ip6_send_skb+0x112/0x230 [ 123.023709][ T6653] udp_v6_send_skb+0xbf5/0x1870 [ 123.028586][ T6653] ? udpv6_sendmsg+0x1be1/0x3270 [ 123.033542][ T6653] udpv6_sendmsg+0x23b3/0x3270 [ 123.038322][ T6653] ? release_sock+0x30/0x1f0 [ 123.042941][ T6653] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 123.048510][ T6653] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 123.053639][ T6653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.060021][ T6653] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 123.065755][ T6653] ? inet_send_prepare+0x1b7/0x260 [ 123.070882][ T6653] ? do_raw_spin_unlock+0x13c/0x8b0 [ 123.076102][ T6653] ? inet_send_prepare+0x1b7/0x260 [ 123.081246][ T6653] __sock_sendmsg+0xef/0x270 [ 123.085864][ T6653] ____sys_sendmsg+0x525/0x7d0 [ 123.090645][ T6653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.095961][ T6653] __sys_sendmmsg+0x3b2/0x740 [ 123.100657][ T6653] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.105898][ T6653] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.111808][ T6653] ? ksys_write+0x23e/0x2c0 [ 123.116321][ T6653] ? __pfx_lock_release+0x10/0x10 [ 123.121374][ T6653] ? vfs_write+0x7c4/0xc90 [ 123.125804][ T6653] ? __mutex_unlock_slowpath+0x21d/0x750 [ 123.131447][ T6653] ? __pfx_vfs_write+0x10/0x10 [ 123.136243][ T6653] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.142250][ T6653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.148613][ T6653] ? do_syscall_64+0x100/0x230 [ 123.153389][ T6653] __x64_sys_sendmmsg+0xa0/0xb0 [ 123.158253][ T6653] do_syscall_64+0xf3/0x230 [ 123.162765][ T6653] ? clear_bhb_loop+0x35/0x90 [ 123.167459][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.173388][ T6653] RIP: 0033:0x7f49c5f79e79 [ 123.177829][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.197713][ T6653] RSP: 002b:00007f49c6cff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.206169][ T6653] RAX: ffffffffffffffda RBX: 00007f49c6115f80 RCX: 00007f49c5f79e79 [ 123.214146][ T6653] RDX: 0000000000000001 RSI: 00000000200027c0 RDI: 0000000000000005 [ 123.222125][ T6653] RBP: 00007f49c6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 123.230108][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.238086][ T6653] R13: 0000000000000000 R14: 00007f49c6115f80 R15: 00007ffd82b5c188 [ 123.246093][ T6653] [ 123.310286][ T6658] bridge0: port 1(team0) entered blocking state [ 123.322879][ T6658] bridge0: port 1(team0) entered disabled state [ 123.329919][ T6658] team0: entered allmulticast mode [ 123.366179][ T6658] bond0: entered allmulticast mode [ 123.408465][ T6658] team0: entered promiscuous mode [ 123.427245][ T6658] bond0: entered promiscuous mode [ 123.546222][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.858726][ T6686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.859040][ T6681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.947320][ T6691] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 123.968558][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.122823][ T6701] FAULT_INJECTION: forcing a failure. [ 124.122823][ T6701] name failslab, interval 1, probability 0, space 0, times 0 [ 124.135877][ T6701] CPU: 1 UID: 0 PID: 6701 Comm: syz.0.392 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 124.146509][ T6701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 124.148763][ T6698] __nla_validate_parse: 2 callbacks suppressed [ 124.148781][ T6698] netlink: 76 bytes leftover after parsing attributes in process `syz.4.393'. [ 124.156582][ T6701] Call Trace: [ 124.156614][ T6701] [ 124.156625][ T6701] dump_stack_lvl+0x241/0x360 [ 124.156659][ T6701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.156683][ T6701] ? __pfx__printk+0x10/0x10 [ 124.156731][ T6701] should_fail_ex+0x3b0/0x4e0 [ 124.156761][ T6701] ? skb_clone+0x20c/0x390 [ 124.156790][ T6701] should_failslab+0xac/0x100 [ 124.156827][ T6701] ? skb_clone+0x20c/0x390 [ 124.156855][ T6701] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 124.216334][ T6701] skb_clone+0x20c/0x390 [ 124.220603][ T6701] ? dev_queue_xmit_nit+0x230/0xc10 [ 124.225830][ T6701] dev_queue_xmit_nit+0x419/0xc10 [ 124.230878][ T6701] ? dev_queue_xmit_nit+0x2b/0xc10 [ 124.236004][ T6701] ? validate_xmit_skb+0x9f9/0x1120 [ 124.241311][ T6701] dev_hard_start_xmit+0x15f/0x7e0 [ 124.246441][ T6701] ? __pfx_validate_xmit_skb+0x10/0x10 [ 124.251941][ T6701] __dev_queue_xmit+0x1b63/0x3e90 [ 124.256991][ T6701] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 124.262930][ T6701] ? __dev_queue_xmit+0x2da/0x3e90 [ 124.268070][ T6701] ? __pfx___dev_queue_xmit+0x10/0x10 [ 124.273477][ T6701] ? __pfx_lock_acquire+0x10/0x10 [ 124.278524][ T6701] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.284541][ T6701] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 124.290378][ T6701] ? ip6_finish_output2+0xdb6/0x1680 [ 124.295684][ T6701] ip6_finish_output2+0xfc2/0x1680 [ 124.300819][ T6701] ? ip6_finish_output2+0x712/0x1680 [ 124.306128][ T6701] ? nf_hook+0x9e/0x450 [ 124.310304][ T6701] ? __pfx_ip6_finish_output2+0x10/0x10 [ 124.315914][ T6701] ? skb_gso_transport_seglen+0x345/0x580 [ 124.321658][ T6701] ? skb_gso_validate_network_len+0x12e/0x290 [ 124.327751][ T6701] ip6_finish_output+0x41e/0x810 [ 124.332717][ T6701] ip6_send_skb+0x112/0x230 [ 124.337264][ T6701] udp_v6_send_skb+0xbf5/0x1870 [ 124.342169][ T6701] ? udpv6_sendmsg+0x1be1/0x3270 [ 124.347165][ T6701] udpv6_sendmsg+0x23b3/0x3270 [ 124.351945][ T6701] ? release_sock+0x30/0x1f0 [ 124.356571][ T6701] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 124.362147][ T6701] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 124.367316][ T6701] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.373685][ T6701] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 124.379523][ T6701] ? inet_send_prepare+0x1b7/0x260 [ 124.384651][ T6701] ? do_raw_spin_unlock+0x13c/0x8b0 [ 124.389868][ T6701] ? inet_send_prepare+0x1b7/0x260 [ 124.394998][ T6701] __sock_sendmsg+0xef/0x270 [ 124.399606][ T6701] ____sys_sendmsg+0x525/0x7d0 [ 124.404420][ T6701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.409736][ T6701] __sys_sendmmsg+0x3b2/0x740 [ 124.414516][ T6701] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.419757][ T6701] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.425664][ T6701] ? ksys_write+0x23e/0x2c0 [ 124.430185][ T6701] ? __pfx_lock_release+0x10/0x10 [ 124.435232][ T6701] ? vfs_write+0x7c4/0xc90 [ 124.439663][ T6701] ? __mutex_unlock_slowpath+0x21d/0x750 [ 124.445299][ T6701] ? __pfx_vfs_write+0x10/0x10 [ 124.450098][ T6701] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.456102][ T6701] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.462458][ T6701] ? do_syscall_64+0x100/0x230 [ 124.467465][ T6701] __x64_sys_sendmmsg+0xa0/0xb0 [ 124.472355][ T6701] do_syscall_64+0xf3/0x230 [ 124.476896][ T6701] ? clear_bhb_loop+0x35/0x90 [ 124.481600][ T6701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.487510][ T6701] RIP: 0033:0x7fdac5d79e79 [ 124.491955][ T6701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.511584][ T6701] RSP: 002b:00007fdac6b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.520102][ T6701] RAX: ffffffffffffffda RBX: 00007fdac5f15f80 RCX: 00007fdac5d79e79 [ 124.528084][ T6701] RDX: 0000000000000001 RSI: 00000000200027c0 RDI: 0000000000000005 [ 124.536067][ T6701] RBP: 00007fdac6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 124.544051][ T6701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.552028][ T6701] R13: 0000000000000000 R14: 00007fdac5f15f80 R15: 00007ffd380f8278 [ 124.560024][ T6701] [ 124.586232][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.632147][ T6703] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 124.644612][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 124.677831][ T6706] ip6t_srh: unknown srh invflags 5F00 [ 125.210863][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 125.367245][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 125.379246][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 125.511301][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 125.626582][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 125.634122][ T6752] netlink: 'syz.3.407': attribute type 21 has an invalid length. [ 125.723376][ T6758] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.409'. [ 125.746368][ T6758] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.409'. [ 125.788727][ T6752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.916452][ T6758] xt_CT: No such helper "syz0" [ 126.185427][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 126.527740][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 126.555701][ T6783] batadv0: entered promiscuous mode [ 126.565454][ T6783] macvtap1: entered promiscuous mode [ 126.574047][ T6783] macvtap1: entered allmulticast mode [ 126.584904][ T6783] batadv0: entered allmulticast mode [ 126.595674][ T6788] SET target dimension over the limit! [ 126.610028][ T6783] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 126.666351][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.820078][ T6789] batadv0: left allmulticast mode [ 126.825587][ T6789] batadv0: left promiscuous mode [ 127.105060][ T6795] FAULT_INJECTION: forcing a failure. [ 127.105060][ T6795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.132889][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.4.420 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 127.143544][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 127.153663][ T6795] Call Trace: [ 127.156948][ T6795] [ 127.159884][ T6795] dump_stack_lvl+0x241/0x360 [ 127.164577][ T6795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.169782][ T6795] ? __pfx__printk+0x10/0x10 [ 127.174391][ T6795] ? __pfx_lock_release+0x10/0x10 [ 127.179436][ T6795] should_fail_ex+0x3b0/0x4e0 [ 127.184126][ T6795] _copy_from_user+0x2f/0xe0 [ 127.188733][ T6795] copy_msghdr_from_user+0xae/0x680 [ 127.193954][ T6795] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.199789][ T6795] __sys_sendmsg+0x23d/0x3a0 [ 127.204393][ T6795] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.209513][ T6795] ? vfs_write+0x7c4/0xc90 [ 127.213971][ T6795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.220353][ T6795] ? do_syscall_64+0x100/0x230 [ 127.225137][ T6795] ? do_syscall_64+0xb6/0x230 [ 127.229831][ T6795] do_syscall_64+0xf3/0x230 [ 127.234345][ T6795] ? clear_bhb_loop+0x35/0x90 [ 127.239037][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.244939][ T6795] RIP: 0033:0x7f99e4779e79 [ 127.249364][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.269064][ T6795] RSP: 002b:00007f99e54e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.277489][ T6795] RAX: ffffffffffffffda RBX: 00007f99e4915f80 RCX: 00007f99e4779e79 [ 127.285483][ T6795] RDX: 000000000004c000 RSI: 0000000020000100 RDI: 0000000000000003 [ 127.293494][ T6795] RBP: 00007f99e54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 127.301484][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.309553][ T6795] R13: 0000000000000000 R14: 00007f99e4915f80 R15: 00007ffc25e6ad18 [ 127.317549][ T6795] [ 127.668153][ T6806] IPv6: Can't replace route, no match found [ 127.706304][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.874569][ T6812] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 127.915798][ T6816] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 128.239870][ T6828] FAULT_INJECTION: forcing a failure. [ 128.239870][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 128.306678][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.4.433 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 128.317340][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 128.327518][ T6828] Call Trace: [ 128.330827][ T6828] [ 128.333781][ T6828] dump_stack_lvl+0x241/0x360 [ 128.338497][ T6828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.343732][ T6828] ? __pfx__printk+0x10/0x10 [ 128.348365][ T6828] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 128.354471][ T6828] ? __pfx___might_resched+0x10/0x10 [ 128.359799][ T6828] should_fail_ex+0x3b0/0x4e0 [ 128.364572][ T6828] should_failslab+0xac/0x100 [ 128.369308][ T6828] ? __alloc_skb+0x1c3/0x440 [ 128.373933][ T6828] kmem_cache_alloc_node_noprof+0x71/0x320 [ 128.379781][ T6828] __alloc_skb+0x1c3/0x440 [ 128.384259][ T6828] ? __pfx___alloc_skb+0x10/0x10 [ 128.389273][ T6828] ? netlink_autobind+0xd6/0x2f0 [ 128.394232][ T6828] ? netlink_autobind+0x2b0/0x2f0 [ 128.399266][ T6828] netlink_sendmsg+0x638/0xcb0 [ 128.404051][ T6828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.409351][ T6828] ? __import_iovec+0x536/0x820 [ 128.414220][ T6828] ? aa_sock_msg_perm+0x91/0x160 [ 128.419169][ T6828] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.424472][ T6828] ? security_socket_sendmsg+0x87/0xb0 [ 128.429950][ T6828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.435249][ T6828] __sock_sendmsg+0x221/0x270 [ 128.439946][ T6828] ____sys_sendmsg+0x525/0x7d0 [ 128.444730][ T6828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.450040][ T6828] __sys_sendmsg+0x2b0/0x3a0 [ 128.454642][ T6828] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.459760][ T6828] ? vfs_write+0x7c4/0xc90 [ 128.464222][ T6828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.470570][ T6828] ? do_syscall_64+0x100/0x230 [ 128.475342][ T6828] ? do_syscall_64+0xb6/0x230 [ 128.480027][ T6828] do_syscall_64+0xf3/0x230 [ 128.484538][ T6828] ? clear_bhb_loop+0x35/0x90 [ 128.489229][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.495137][ T6828] RIP: 0033:0x7f99e4779e79 [ 128.499593][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.519313][ T6828] RSP: 002b:00007f99e54e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.527745][ T6828] RAX: ffffffffffffffda RBX: 00007f99e4915f80 RCX: 00007f99e4779e79 [ 128.535725][ T6828] RDX: 000000000004c000 RSI: 0000000020000100 RDI: 0000000000000003 [ 128.543725][ T6828] RBP: 00007f99e54e8090 R08: 0000000000000000 R09: 0000000000000000 [ 128.551702][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.559678][ T6828] R13: 0000000000000000 R14: 00007f99e4915f80 R15: 00007ffc25e6ad18 [ 128.567670][ T6828] [ 128.640988][ T6833] netlink: 'syz.2.434': attribute type 2 has an invalid length. [ 128.746240][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.756863][ T6833] netlink: 'syz.2.434': attribute type 2 has an invalid length. [ 129.238638][ T6855] __nla_validate_parse: 8 callbacks suppressed [ 129.238657][ T6855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.441'. [ 129.583781][ T6867] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 129.786287][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.953537][ T6875] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 130.224558][ T6878] team0: Port device bond0 removed [ 130.302698][ T6895] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.452'. [ 130.329906][ T6895] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 130.455830][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.491671][ T6883] team0: Port device bond0 added [ 130.502827][ T6889] netlink: 64 bytes leftover after parsing attributes in process `syz.4.451'. [ 130.657572][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.454'. [ 130.706285][ T6903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.454'. [ 130.826321][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.003479][ T6916] netlink: 64 bytes leftover after parsing attributes in process `syz.0.456'. [ 131.169460][ T6921] FAULT_INJECTION: forcing a failure. [ 131.169460][ T6921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.202049][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.2.459 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 131.212851][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.222951][ T6921] Call Trace: [ 131.226263][ T6921] [ 131.229222][ T6921] dump_stack_lvl+0x241/0x360 [ 131.233943][ T6921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.239182][ T6921] ? __pfx__printk+0x10/0x10 [ 131.243828][ T6921] ? __pfx_lock_release+0x10/0x10 [ 131.248939][ T6921] should_fail_ex+0x3b0/0x4e0 [ 131.253673][ T6921] _copy_from_iter+0x1f6/0x1960 [ 131.258578][ T6921] ? __virt_addr_valid+0x183/0x530 [ 131.263736][ T6921] ? __pfx_lock_release+0x10/0x10 [ 131.268819][ T6921] ? __alloc_skb+0x28f/0x440 [ 131.273451][ T6921] ? __pfx__copy_from_iter+0x10/0x10 [ 131.278794][ T6921] ? __virt_addr_valid+0x183/0x530 [ 131.283948][ T6921] ? __virt_addr_valid+0x183/0x530 [ 131.289091][ T6921] ? __virt_addr_valid+0x45f/0x530 [ 131.294217][ T6921] ? __check_object_size+0x49c/0x900 [ 131.299520][ T6921] netlink_sendmsg+0x73d/0xcb0 [ 131.304308][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.309602][ T6921] ? __import_iovec+0x536/0x820 [ 131.314480][ T6921] ? aa_sock_msg_perm+0x91/0x160 [ 131.319452][ T6921] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.324766][ T6921] ? security_socket_sendmsg+0x87/0xb0 [ 131.330259][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.335571][ T6921] __sock_sendmsg+0x221/0x270 [ 131.340278][ T6921] ____sys_sendmsg+0x525/0x7d0 [ 131.345074][ T6921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.350389][ T6921] __sys_sendmsg+0x2b0/0x3a0 [ 131.355013][ T6921] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.360155][ T6921] ? vfs_write+0x7c4/0xc90 [ 131.364648][ T6921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.371004][ T6921] ? do_syscall_64+0x100/0x230 [ 131.375781][ T6921] ? do_syscall_64+0xb6/0x230 [ 131.380483][ T6921] do_syscall_64+0xf3/0x230 [ 131.385001][ T6921] ? clear_bhb_loop+0x35/0x90 [ 131.389693][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.395596][ T6921] RIP: 0033:0x7fe05ed79e79 [ 131.400023][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.419906][ T6921] RSP: 002b:00007fe05fb7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.428336][ T6921] RAX: ffffffffffffffda RBX: 00007fe05ef15f80 RCX: 00007fe05ed79e79 [ 131.436325][ T6921] RDX: 000000000004c000 RSI: 0000000020000100 RDI: 0000000000000003 [ 131.444335][ T6921] RBP: 00007fe05fb7c090 R08: 0000000000000000 R09: 0000000000000000 [ 131.452418][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.460490][ T6921] R13: 0000000000000000 R14: 00007fe05ef15f80 R15: 00007ffde6038d38 [ 131.468485][ T6921] [ 131.560816][ T6924] team0: Port device bond0 removed [ 131.728665][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.778560][ T6934] team0: Port device bond0 added [ 131.866743][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.194979][ T6967] netlink: 212 bytes leftover after parsing attributes in process `syz.0.469'. [ 132.205341][ T6967] netlink: 212 bytes leftover after parsing attributes in process `syz.0.469'. [ 132.219039][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 132.239014][ T6967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.469'. [ 132.595721][ T6980] ip6gretap0: entered promiscuous mode [ 132.607085][ T6980] ip6gretap0: left promiscuous mode [ 132.613511][ T6976] IPVS: Scheduler module ip_vs_sip not found [ 132.769777][ T6982] FAULT_INJECTION: forcing a failure. [ 132.769777][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 132.787916][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.0.475 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 132.798576][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 132.808663][ T6982] Call Trace: [ 132.811968][ T6982] [ 132.814921][ T6982] dump_stack_lvl+0x241/0x360 [ 132.819643][ T6982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.824967][ T6982] ? __pfx__printk+0x10/0x10 [ 132.829607][ T6982] ? ref_tracker_alloc+0x332/0x490 [ 132.834752][ T6982] should_fail_ex+0x3b0/0x4e0 [ 132.839463][ T6982] ? skb_clone+0x20c/0x390 [ 132.843942][ T6982] should_failslab+0xac/0x100 [ 132.848669][ T6982] ? skb_clone+0x20c/0x390 [ 132.853269][ T6982] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 132.858686][ T6982] skb_clone+0x20c/0x390 [ 132.862984][ T6982] __netlink_deliver_tap+0x3cc/0x7c0 [ 132.868322][ T6982] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.873577][ T6982] netlink_deliver_tap+0x19d/0x1b0 [ 132.878736][ T6982] netlink_unicast+0x7be/0x990 [ 132.883552][ T6982] ? __pfx_netlink_unicast+0x10/0x10 [ 132.888880][ T6982] ? __virt_addr_valid+0x183/0x530 [ 132.894029][ T6982] ? __check_object_size+0x49c/0x900 [ 132.899345][ T6982] ? bpf_lsm_netlink_send+0x9/0x10 [ 132.904502][ T6982] netlink_sendmsg+0x8e4/0xcb0 [ 132.906429][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.909306][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.921479][ T6982] ? __import_iovec+0x536/0x820 [ 132.926368][ T6982] ? aa_sock_msg_perm+0x91/0x160 [ 132.931345][ T6982] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.936671][ T6982] ? security_socket_sendmsg+0x87/0xb0 [ 132.942180][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.947510][ T6982] __sock_sendmsg+0x221/0x270 [ 132.952235][ T6982] ____sys_sendmsg+0x525/0x7d0 [ 132.957048][ T6982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.962395][ T6982] __sys_sendmsg+0x2b0/0x3a0 [ 132.967025][ T6982] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.972178][ T6982] ? vfs_write+0x7c4/0xc90 [ 132.976686][ T6982] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.983065][ T6982] ? do_syscall_64+0x100/0x230 [ 132.987885][ T6982] ? do_syscall_64+0xb6/0x230 [ 132.992615][ T6982] do_syscall_64+0xf3/0x230 [ 132.997153][ T6982] ? clear_bhb_loop+0x35/0x90 [ 133.001871][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.007808][ T6982] RIP: 0033:0x7fdac5d79e79 [ 133.012256][ T6982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.031902][ T6982] RSP: 002b:00007fdac6b49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.040361][ T6982] RAX: ffffffffffffffda RBX: 00007fdac5f15f80 RCX: 00007fdac5d79e79 [ 133.048365][ T6982] RDX: 000000000004c000 RSI: 0000000020000100 RDI: 0000000000000003 [ 133.056368][ T6982] RBP: 00007fdac6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 133.064377][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.072384][ T6982] R13: 0000000000000000 R14: 00007fdac5f15f80 R15: 00007ffd380f8278 [ 133.080413][ T6982] [ 133.382173][ T6991] bridge0: port 1(team0) entered blocking state [ 133.409451][ T6991] bridge0: port 1(team0) entered disabled state [ 133.415953][ T6991] team0: entered allmulticast mode [ 133.434056][ T6991] team0: entered promiscuous mode [ 133.754058][ T7007] sctp: [Deprecated]: syz.0.482 (pid 7007) Use of int in maxseg socket option. [ 133.754058][ T7007] Use struct sctp_assoc_value instead [ 133.797172][ T7008] warning: `syz.3.484' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.946243][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.257140][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 134.283355][ T7024] netlink: 152 bytes leftover after parsing attributes in process `syz.0.486'. [ 134.314213][ T7024] netlink: 152 bytes leftover after parsing attributes in process `syz.0.486'. [ 134.358101][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 134.387567][ T7025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 134.509052][ T7025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 134.986325][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.159279][ T7036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'. [ 135.684320][ T7056] netlink: 3 bytes leftover after parsing attributes in process `syz.3.495'. [ 135.823844][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 135.962133][ T7065] team0: Port device bond0 removed [ 136.026226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.051086][ T7068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.091923][ T7068] team0: Port device bond0 added [ 136.497879][ T7083] pim6reg1: entered promiscuous mode [ 136.503247][ T7083] pim6reg1: entered allmulticast mode [ 136.633731][ T7086] geneve0: entered allmulticast mode [ 136.972652][ T7102] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 137.066244][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.173524][ T7104] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 137.216176][ T7104] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.510'. [ 137.268243][ T7104] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 137.402349][ T7120] netlink: 'syz.1.514': attribute type 23 has an invalid length. [ 137.447484][ T7120] netlink: 'syz.1.514': attribute type 9 has an invalid length. [ 137.547773][ T7123] tipc: Enabled bearer , priority 0 [ 137.699404][ T7123] tipc: Resetting bearer [ 137.878927][ T6132] tipc: Resetting bearer [ 137.888184][ T7127] netlink: 'syz.4.517': attribute type 1 has an invalid length. [ 137.915052][ T7122] tipc: Resetting bearer [ 138.107588][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.148425][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.363601][ T7122] tipc: Disabling bearer [ 139.408044][ T7127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.709029][ T7181] __nla_validate_parse: 1 callbacks suppressed [ 139.709048][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.529'. [ 139.727477][ T7183] Cannot find add_set index 0 as target [ 140.042710][ T7196] netlink: 'syz.0.531': attribute type 10 has an invalid length. [ 140.136633][ T7199] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 140.174973][ T7199] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 140.187980][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.382380][ T7208] netlink: 'syz.0.535': attribute type 11 has an invalid length. [ 140.431676][ T7208] netlink: 'syz.0.535': attribute type 11 has an invalid length. [ 140.445915][ T7212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.533'. [ 140.475059][ T7213] xt_connbytes: Forcing CT accounting to be enabled [ 140.505238][ T7213] x_tables: ip_tables: osf match: only valid for protocol 6 [ 140.534082][ T7208] debugfs: Directory 'netdev:' with parent 'phy11' already present! [ 140.583512][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 140.602666][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 140.973101][ T7231] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 141.226263][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.240094][ T7237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.543'. [ 141.522448][ T7223] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 141.542131][ T4621] ================================================================== [ 141.550266][ T4621] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 141.557945][ T4621] Read of size 8 at addr ffff88801c350a98 by task kworker/u9:1/4621 [ 141.565945][ T4621] [ 141.568300][ T4621] CPU: 0 UID: 0 PID: 4621 Comm: kworker/u9:1 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 141.579169][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 141.589249][ T4621] Workqueue: hci0 hci_cmd_sync_work [ 141.594490][ T4621] Call Trace: [ 141.597791][ T4621] [ 141.600740][ T4621] dump_stack_lvl+0x241/0x360 [ 141.605453][ T4621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.610680][ T4621] ? __pfx__printk+0x10/0x10 [ 141.615305][ T4621] ? _printk+0xd5/0x120 [ 141.619501][ T4621] ? __virt_addr_valid+0x183/0x530 [ 141.624645][ T4621] ? __virt_addr_valid+0x183/0x530 [ 141.629798][ T4621] print_report+0x169/0x550 [ 141.634342][ T4621] ? __virt_addr_valid+0x183/0x530 [ 141.639485][ T4621] ? __virt_addr_valid+0x183/0x530 [ 141.644626][ T4621] ? __virt_addr_valid+0x45f/0x530 [ 141.649769][ T4621] ? __phys_addr+0xba/0x170 [ 141.654301][ T4621] ? set_powered_sync+0x3a/0xc0 [ 141.659194][ T4621] kasan_report+0x143/0x180 [ 141.663743][ T4621] ? set_powered_sync+0x3a/0xc0 [ 141.668636][ T4621] set_powered_sync+0x3a/0xc0 [ 141.673358][ T4621] ? __pfx_set_powered_sync+0x10/0x10 [ 141.678771][ T4621] hci_cmd_sync_work+0x22b/0x400 [ 141.683754][ T4621] ? process_scheduled_works+0x945/0x1830 [ 141.684482][ T7249] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 141.689485][ T4621] process_scheduled_works+0xa2c/0x1830 [ 141.689536][ T4621] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.689571][ T4621] ? assign_work+0x364/0x3d0 [ 141.713491][ T4621] worker_thread+0x86d/0xd40 [ 141.718133][ T4621] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.724075][ T4621] ? __kthread_parkme+0x169/0x1d0 [ 141.729143][ T4621] ? __pfx_worker_thread+0x10/0x10 [ 141.734298][ T4621] kthread+0x2f0/0x390 [ 141.738408][ T4621] ? __pfx_worker_thread+0x10/0x10 [ 141.743555][ T4621] ? __pfx_kthread+0x10/0x10 [ 141.748186][ T4621] ret_from_fork+0x4b/0x80 [ 141.752638][ T4621] ? __pfx_kthread+0x10/0x10 [ 141.757269][ T4621] ret_from_fork_asm+0x1a/0x30 [ 141.757963][ T7249] Bluetooth: MGMT ver 1.23 [ 141.762061][ T4621] [ 141.762073][ T4621] [ 141.762078][ T4621] Allocated by task 7227: [ 141.762090][ T4621] kasan_save_track+0x3f/0x80 [ 141.780913][ T4621] __kasan_kmalloc+0x98/0xb0 [ 141.785570][ T4621] __kmalloc_cache_noprof+0x19c/0x2c0 [ 141.790980][ T4621] mgmt_pending_new+0x65/0x250 [ 141.795797][ T4621] mgmt_pending_add+0x36/0x120 [ 141.800607][ T4621] set_powered+0x3cd/0x5e0 [ 141.805060][ T4621] hci_mgmt_cmd+0xc47/0x11d0 [ 141.809688][ T4621] hci_sock_sendmsg+0x7b8/0x11c0 [ 141.814656][ T4621] __sock_sendmsg+0x221/0x270 [ 141.819387][ T4621] sock_write_iter+0x2dd/0x400 [ 141.824183][ T4621] vfs_write+0xa72/0xc90 [ 141.828456][ T4621] ksys_write+0x1a0/0x2c0 [ 141.832818][ T4621] do_syscall_64+0xf3/0x230 [ 141.837354][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.843277][ T4621] [ 141.845619][ T4621] Freed by task 7226: [ 141.849714][ T4621] kasan_save_track+0x3f/0x80 [ 141.854428][ T4621] kasan_save_free_info+0x40/0x50 [ 141.859479][ T4621] poison_slab_object+0xe0/0x150 [ 141.864450][ T4621] __kasan_slab_free+0x37/0x60 [ 141.869244][ T4621] kfree+0x149/0x360 [ 141.873176][ T4621] settings_rsp+0x2bc/0x390 [ 141.877714][ T4621] mgmt_pending_foreach+0xd1/0x130 [ 141.882858][ T4621] __mgmt_power_off+0x112/0x420 [ 141.887749][ T4621] hci_dev_close_sync+0x665/0x11a0 [ 141.892898][ T4621] hci_dev_close+0x112/0x210 [ 141.897532][ T4621] sock_do_ioctl+0x158/0x460 [ 141.902158][ T4621] sock_ioctl+0x629/0x8e0 [ 141.906521][ T4621] __se_sys_ioctl+0xfc/0x170 [ 141.911140][ T4621] do_syscall_64+0xf3/0x230 [ 141.915668][ T4621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.921595][ T4621] [ 141.923939][ T4621] The buggy address belongs to the object at ffff88801c350a80 [ 141.923939][ T4621] which belongs to the cache kmalloc-96 of size 96 [ 141.937844][ T4621] The buggy address is located 24 bytes inside of [ 141.937844][ T4621] freed 96-byte region [ffff88801c350a80, ffff88801c350ae0) [ 141.951585][ T4621] [ 141.953928][ T4621] The buggy address belongs to the physical page: [ 141.960369][ T4621] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c350 [ 141.969172][ T4621] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 141.976662][ T4621] page_type: 0xfdffffff(slab) [ 141.981410][ T4621] raw: 00fff00000000000 ffff888015841280 ffffea0001f2b680 dead000000000003 [ 141.990028][ T4621] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 141.998631][ T4621] page dumped because: kasan: bad access detected [ 142.005079][ T4621] page_owner tracks the page as allocated [ 142.010811][ T4621] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5465, tgid 5459 (syz.2.33), ts 86987764831, free_ts 86942848927 [ 142.031166][ T4621] post_alloc_hook+0x1f3/0x230 [ 142.035969][ T4621] get_page_from_freelist+0x2e4c/0x2f10 [ 142.041550][ T4621] __alloc_pages_noprof+0x256/0x6c0 [ 142.046789][ T4621] alloc_slab_page+0x5f/0x120 [ 142.051499][ T4621] allocate_slab+0x5a/0x2f0 [ 142.056032][ T4621] ___slab_alloc+0xcd1/0x14b0 [ 142.060829][ T4621] __slab_alloc+0x58/0xa0 [ 142.065183][ T4621] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 142.070581][ T4621] dst_cow_metrics_generic+0x56/0x1c0 [ 142.075981][ T4621] icmp6_dst_alloc+0x270/0x420 [ 142.080865][ T4621] ndisc_send_skb+0x32a/0x1380 [ 142.085660][ T4621] addrconf_rs_timer+0x36e/0x660 [ 142.090625][ T4621] call_timer_fn+0x18e/0x650 [ 142.095257][ T4621] __run_timer_base+0x66a/0x8e0 [ 142.100146][ T4621] run_timer_softirq+0xb7/0x170 [ 142.105027][ T4621] handle_softirqs+0x2c4/0x970 [ 142.109822][ T4621] page last free pid 5481 tgid 5480 stack trace: [ 142.116162][ T4621] free_unref_page+0xd22/0xea0 [ 142.120976][ T4621] __put_partials+0xeb/0x130 [ 142.125603][ T4621] put_cpu_partial+0x17c/0x250 [ 142.130396][ T4621] __slab_free+0x2ea/0x3d0 [ 142.134927][ T4621] qlist_free_all+0x9e/0x140 [ 142.139549][ T4621] kasan_quarantine_reduce+0x14f/0x170 [ 142.145130][ T4621] __kasan_slab_alloc+0x23/0x80 [ 142.150015][ T4621] __kmalloc_noprof+0x1a6/0x400 [ 142.154892][ T4621] fib6_info_alloc+0x2e/0xf0 [ 142.159513][ T4621] ip6_route_info_create+0x445/0x12b0 [ 142.164916][ T4621] ip6_route_add+0x28/0x160 [ 142.169448][ T4621] add_v4_addrs+0xb5a/0x1160 [ 142.174057][ T4621] addrconf_init_auto_addrs+0x208/0xeb0 [ 142.179637][ T4621] addrconf_notify+0xaff/0x1020 [ 142.184526][ T4621] notifier_call_chain+0x19f/0x3e0 [ 142.189693][ T4621] __dev_notify_flags+0x207/0x400 [ 142.194746][ T4621] [ 142.197085][ T4621] Memory state around the buggy address: [ 142.202729][ T4621] ffff88801c350980: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 142.210810][ T4621] ffff88801c350a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 142.218888][ T4621] >ffff88801c350a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 142.226963][ T4621] ^ [ 142.231831][ T4621] ffff88801c350b00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 142.239915][ T4621] ffff88801c350b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 142.247995][ T4621] ================================================================== [ 142.264635][ T4621] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.271882][ T4621] CPU: 0 UID: 0 PID: 4621 Comm: kworker/u9:1 Not tainted 6.11.0-rc3-syzkaller-00174-g4b3e33fcc38f #0 [ 142.282933][ T4621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 142.293021][ T4621] Workqueue: hci0 hci_cmd_sync_work [ 142.298277][ T4621] Call Trace: [ 142.301577][ T4621] [ 142.304530][ T4621] dump_stack_lvl+0x241/0x360 [ 142.309240][ T4621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.314470][ T4621] ? __pfx__printk+0x10/0x10 [ 142.319078][ T4621] ? preempt_schedule+0xe1/0xf0 [ 142.323956][ T4621] ? vscnprintf+0x5d/0x90 [ 142.328331][ T4621] panic+0x349/0x860 [ 142.332244][ T4621] ? check_panic_on_warn+0x21/0xb0 [ 142.337364][ T4621] ? __pfx_panic+0x10/0x10 [ 142.341796][ T4621] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 142.347786][ T4621] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.354215][ T4621] ? print_report+0x502/0x550 [ 142.358911][ T4621] check_panic_on_warn+0x86/0xb0 [ 142.363854][ T4621] ? set_powered_sync+0x3a/0xc0 [ 142.368720][ T4621] end_report+0x77/0x160 [ 142.372972][ T4621] kasan_report+0x154/0x180 [ 142.377489][ T4621] ? set_powered_sync+0x3a/0xc0 [ 142.382355][ T4621] set_powered_sync+0x3a/0xc0 [ 142.387068][ T4621] ? __pfx_set_powered_sync+0x10/0x10 [ 142.392461][ T4621] hci_cmd_sync_work+0x22b/0x400 [ 142.397418][ T4621] ? process_scheduled_works+0x945/0x1830 [ 142.403150][ T4621] process_scheduled_works+0xa2c/0x1830 [ 142.408734][ T4621] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.414727][ T4621] ? assign_work+0x364/0x3d0 [ 142.419329][ T4621] worker_thread+0x86d/0xd40 [ 142.423958][ T4621] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.429866][ T4621] ? __kthread_parkme+0x169/0x1d0 [ 142.434904][ T4621] ? __pfx_worker_thread+0x10/0x10 [ 142.440027][ T4621] kthread+0x2f0/0x390 [ 142.444140][ T4621] ? __pfx_worker_thread+0x10/0x10 [ 142.449278][ T4621] ? __pfx_kthread+0x10/0x10 [ 142.453892][ T4621] ret_from_fork+0x4b/0x80 [ 142.458325][ T4621] ? __pfx_kthread+0x10/0x10 [ 142.462933][ T4621] ret_from_fork_asm+0x1a/0x30 [ 142.467728][ T4621] [ 142.471155][ T4621] Kernel Offset: disabled [ 142.475489][ T4621] Rebooting in 86400 seconds..