last executing test programs: 41.766015274s ago: executing program 3 (id=1680): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x117, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x40000000000037c, 0x0) (fail_nth: 52) 41.4649441s ago: executing program 3 (id=1684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000002c0)="2ca1543e6fd139", 0x7, 0x4000880, 0x0, 0x0) 33.291616353s ago: executing program 3 (id=1684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000002c0)="2ca1543e6fd139", 0x7, 0x4000880, 0x0, 0x0) 22.707407136s ago: executing program 3 (id=1684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000002c0)="2ca1543e6fd139", 0x7, 0x4000880, 0x0, 0x0) 14.220883582s ago: executing program 3 (id=1684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000002c0)="2ca1543e6fd139", 0x7, 0x4000880, 0x0, 0x0) 6.007277881s ago: executing program 3 (id=1684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f00000002c0)="2ca1543e6fd139", 0x7, 0x4000880, 0x0, 0x0) 3.594517592s ago: executing program 4 (id=2056): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @empty}}, 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x200, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x200, @empty, 0x400000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 3.287101592s ago: executing program 4 (id=2061): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0xa, 0xf0}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000480)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}, {0x9, 0x6, 0x7f}, {0x5, 0xc, 0x6, 0x2}, {0x6, 0xf, 0x0, 0x8}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x18, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @broadcast, @broadcast}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x3, "3483ca", 0x6c, "4b53c1"}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a01060000"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2102, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000240)=ANY=[], 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) epoll_create(0x1) 3.13331413s ago: executing program 4 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2.515953141s ago: executing program 0 (id=2067): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000006000128008000100767469005400028008000500e00000010800050064010100080005007f000001080006"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x68}}, 0x40000a0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="2f0000000000c14f536dcdf388ca268d3a000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="2f001e001800000004000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x50, 0x2, 0x7, 0x61, @private2, @empty, 0x7, 0x8000, 0x0, 0x81}}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="8b3300000000fcdbdf250500000008000300", @ANYRES32=r12], 0x28}}, 0x50) recvmmsg(r10, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002042, 0x0) setsockopt$inet_tcp_buf(r9, 0x6, 0x2c, &(0x7f0000000200)="d71df3e7", 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5a9e5974265f6c40fca290427e8dd276a20233665b8fb3ef27e6a7ca4b848b0aa1729951fae26fe6b1c0c86c7b00a1f4eeb7f9f189fc647b0581371a969e2388b3970dfef402b2f83516e0804d65d1ab22f9cf509f678c0cc388592afc6c3e4d393736d4aea88f81b0e67f15e88dc7c070bc83ec6fa6e144987554d2060b2354588b4f6ca3cd54e0c4a8c80805150f51e912aeb9f821dc4a8d1203fc28b4148b1446a8a634a5ab764408b6b06db925ddd1dbe94d3f324ad7fe81", @ANYRES32=r8, @ANYBLOB="2000890708000700b7000000140003000700000005000000ff0000000300000008000100ac1414bb060006004e2300000800040066000000060006004e22000008000800", @ANYBLOB="9d31037f5e6aaf2ee109db5a6f9b0ce17386aea0ea64228033f283d2a056f13cb373d6f6b96d47727db884e82ec01f093b50eddebdbeb0db14aa263a6d4d3d4d24c61caa59fa3e508e6c814d7c26d3228e6ab420b9c45d8e1edacc2294ec0cf3978c4433143e95d9d538b4e57677b4b3528b6ec99528f2393dcd4084a620642f38885e36f1bb412541cf2cb3b99b434231cd0bab5956b7ef92fe43082fc6addcc344ca21489eb02f0b79e46f312a0a32cd66565d1a2b319c2e4f7c28ec0c96876d3180e9f0724d76d743fd56c288c0720eb11af85dc501823cfd5e503f7927193e860fa6fc7e9d1fdf50a0c600d9", @ANYRES8], 0x60}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdf3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x18) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 2.515223698s ago: executing program 4 (id=2068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x1c, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4a364e71}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00ca5d46e90000000000000000000090", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) connect$llc(r2, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) listen(r4, 0x9) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.198970197s ago: executing program 0 (id=2070): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x101, 0x0, @void, @value}, 0x28) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='rcu_utilization\x00', r4, 0x0, 0x6}, 0x18) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000f000000000010000000900010073797a30000000002c000000160a010000000000000000000100ce066800000900010073797a30000000000000001400000010000100"/116], 0x74}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000600000008000100000000000c000d"], 0x28}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)=""/205, 0x12a, 0xcd, 0x0, 0x1000, 0x0, @void, @value}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000025bf9dcd1800150775dbf0c0d0a771e209e2d2dd3cb20d6a57304a7c455b37b5fff83cb1a76b96dc3d1b29ba02fcf2bfc187fd43397017b67d25f23d91c2e43b890c82a8aecd672e480436a2f7272cf84c4dbc8ee77cdbb91c6ca6a6a5c17f2f004da32695efe8e53531fce4e6242602be10c6fb065f79fbfc5c68da3607ae16988d70841c3bc64358e3c29ae61ccd40ff228a4bc9f8501811b1738c746d0e54cce1372c6deb2bca202f2ebb3a9f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r9, &(0x7f0000000780)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5eaa00008000000061000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) 2.008226956s ago: executing program 1 (id=2071): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @empty}}, 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x200, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x200, @empty, 0x400000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1.798058987s ago: executing program 1 (id=2074): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f00000010c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1.561026295s ago: executing program 1 (id=2075): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0xa, 0xf0}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000480)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}, {0x9, 0x6, 0x7f}, {0x5, 0xc, 0x6, 0x2}, {0x6, 0xf, 0x0, 0x8}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x18, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @broadcast, @broadcast}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x3, "3483ca", 0x6c, "4b53c1"}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a01060000"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2102, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000240)=ANY=[], 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) epoll_create(0x1) 1.492635705s ago: executing program 2 (id=2076): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) unshare(0x400) (rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x100000, 0xc, 0x6}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000780)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1804470000000028b1000000000000b67b060085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf253900000060015a80280001800500070001000000140005000e0005000500720c01000100d0ff00030500070000000000180000801400050001000002ff7f000003000c00d80c04009800038014000500090081000c000500ff03030005000900390002002a34131c460b414c2512354118434b044c220e1905034f3a493411285032163e5400501f1e4d3e2f2057214d495144204e074736070000001900010003036c0c031b243612557d1216063605184818031b0000000500060000000000050006000100000005000600010000000500060000000000050004000200000078000280140005000500400005000080050002000000070019000100046c1b300b600b24096c036c1b0303010c36600130000000250002003950043c073032024d2e0d1e0c3849341d084d34543e0d2e2f2a45223c102010400000001400030007006c0907000500ff0100040700590005000600010000000c000080050004000200"], 0x174}, 0x1, 0x0, 0x0, 0xc0}, 0x81) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0xccaa, 0x7fffffffffffffff}}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000007060104000000000000000001000004050001000700"], 0x24}}, 0x20040810) r10 = socket(0x400000000010, 0x3, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r11 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffb}]}, 0x2c}}, 0x24008800) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000000000000000c60200", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x10, 0x6}, {0x0, 0xfff1}, {0x7, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x92}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) 1.395698308s ago: executing program 1 (id=2077): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xf, 0x0, 0x0, 0x0, 0x2, 0xd0, &(0x7f0000000240)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x40e9, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0xffffffff, 0x1}, 0x20) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12) sendfile(r5, r4, 0x0, 0xf03a0005) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000640)={0x8, 0xfe, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x1, [0x1]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8}, @generic={0xf7, 0x4f, "7f6750b376ecba74046f5a03d99637f903bd924613e53d016362b0d9cba4faa79bb1ab52648e8d92789a229f2963eb2af7b7ee83961fca5b6b696fae9c98665d920b8a4545c54201bc1552f662de71"}, @generic={0x1, 0x785, "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"}]}, 0x800) listen(r4, 0x3) listen(r6, 0x101) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x10d, 0x800000000d, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf00004bd4000008002700000000000800220117030000050019010a0000000800a000050000000800a1000900000008005700ff0700"/74], 0x50}, 0x1, 0x0, 0x0, 0x48001}, 0x4008000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 1.3083881s ago: executing program 2 (id=2078): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) recvfrom$llc(r0, &(0x7f0000000000)=""/204, 0xcc, 0x40000000, &(0x7f0000000100)={0x1a, 0x334, 0xfa, 0x4, 0x0, 0x2}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f00000004c0)={&(0x7f0000000140)=@sco, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/52, 0x34}], 0x3, &(0x7f00000003c0)=""/231, 0xe7}, 0x40000001) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000500)=0xb, 0x4) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @local}, &(0x7f0000000580)=0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000005c0)=@assoc_id=0x0, &(0x7f0000000600)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000640)={0xd859, 0x4, 0x9, 0x400, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4}, &(0x7f0000000680)={0xeb52, 0xffffffff, 0x5, 0x40, 0x5, 0xfff, 0x8, 0xa9}, &(0x7f00000006c0)={0xfffffffffffffffd, 0x5, 0x13dd, 0x2000000000, 0x1, 0x800, 0x1, 0x1}, &(0x7f0000000700)={0x77359400}, &(0x7f0000000780)={&(0x7f0000000740)={[0x7]}, 0x8}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000007c0)=0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000840)={0x1d, r7, 0x1, {0x1, 0xf0, 0x4}, 0xfd}, 0x18) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000880)={r4, 0x1000, "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"}, &(0x7f00000018c0)=0x1008) socketpair(0x2b, 0x6, 0x8, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r11, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000001ac0)={r8, 0x3ff}, &(0x7f0000001b00)=0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000001b40)={0xfff, 0xb7, 0x400b, 0x2, 0xffffff01, 0x0, 0x3, 0x8}, &(0x7f0000001b80)=0x20) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c00), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x108, r14, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x5}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x401}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x200440c0}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000001e00)=0x250, 0x4) writev(r3, &(0x7f0000002200)=[{&(0x7f0000001e40)="99b842525ce8be7e7e75d56622e83829554772479917cdbec978d03bf3b1d474c1a4b47aad14a9afd13f520793456c7f63758746f3efbf876e096fee1c63381689", 0x41}, {&(0x7f0000001ec0)="fabe099ea78cd4b16649b858af2a642c08510b963177c57fa386b7150b683867dc1efd00a8e121c65f0bb6fee4bde6d755f66feb75292e89e6455017dc2325b7056de594e461a9c6984a92309bd25d977b1d14c2a0b5ecc48e9a4f9092555d", 0x5f}, {&(0x7f0000001f40)="850b90d308eb3cc4535819573dd6421846fd33b4104c208b2bb07d8126478e5cbc4cf6311ec449fca89e8f859ee8c7c6c5f022553a0806a2803a01912832e6b9cf77ff87eaa9198237c2db78544abe8b3f9d06f7bd4b5070896a6e002d6982", 0x5f}, {&(0x7f0000001fc0)="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", 0xfd}, {&(0x7f00000020c0)="5606a6e492c37750ab6161d726986c23c47e6486dab3acdb02bd51cc9b8f5c53e65fb86ec657d3129a236209f3a274e2aa1f6a965137a5426721736214ba728ae86bac711f99d40f896a2d8c0785acbcdb8a35e7c109df1b1e1b20a54faa7eefcb3a6b6c72d6ee2c20260789aad2223dbb3a08c7341d059feea98c9b6f6cec2b18a5e9573ba3918568", 0x89}, {&(0x7f0000002180)="eb43ccbeaedb9a16b2c79a5a38a47c0163a8546383a19df406df4a94fa03ba75b743be2f742f", 0x26}, {&(0x7f00000021c0)="ebe3f791ffe41c4d8b", 0x9}], 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002280)={'wg1\x00'}) 1.192653161s ago: executing program 4 (id=2079): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 32) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r8], 0x40}}, 0x4000) (rerun: 32) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x50, 0x13, 0x800, 0x70bd29, 0x25dfdbfc, {0x6, 0x3, 0xe0, 0x2, {0x4e22, 0x4e23, [0xfffffffd, 0xff, 0x1000, 0x2800], [0xabf0, 0x8d37, 0xe, 0x7b9], r8, [0x4, 0x8]}, 0x9, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8850) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) unshare(0xc000000) (async, rerun: 32) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32) sendmmsg(r9, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000002000000000000000039000000"], 0x10}}], 0x1, 0x40084) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) (async) socket$kcm(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) 1.079354158s ago: executing program 0 (id=2080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200190ab2ca6d"], 0x7c}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r8, &(0x7f0000000040), 0x2) close(r8) r9 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4d8, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r11, {0x6, 0x9}, {0x0, 0xfff1}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4ac, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_INDEV={0x14, 0x8, 'ip6_vti0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xfff3}}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1, 0x3, 0xfb48, 0x7, 0x5, 0x3, 0xa, 0x0, 0x7, 0xec, 0x1, 0x8, 0x0, 0x6b, 0x7ff, 0x54f6f8ea, 0x7, 0xe491, 0x80000, 0xfb, 0x1, 0x1, 0xd8e, 0x8, 0x3, 0x5, 0x7ff, 0x8, 0x3, 0x5, 0x6, 0x3ff, 0x8, 0x1000, 0x7, 0x0, 0x10001, 0x8, 0x73bb, 0x9, 0xfff, 0xfff, 0x24, 0x8, 0xf5a1, 0xffff7fff, 0x7, 0x10, 0x5, 0x5, 0x8, 0x6, 0xf, 0x0, 0x9, 0xff, 0x726cb5a5, 0x6, 0x40, 0xb, 0x5, 0x9, 0xfffffff9, 0x2, 0x7, 0x4, 0xc67, 0x9, 0x3, 0x0, 0x0, 0x3, 0xfffffffb, 0x3, 0x7f, 0x3, 0x9, 0x3, 0x8, 0x5, 0x0, 0x1, 0xa, 0x1, 0x3, 0x8, 0x1000, 0x5, 0x9, 0x6a, 0xc, 0x6, 0x9c90, 0x89, 0x1, 0xc, 0x1, 0x3, 0x4, 0x0, 0x3, 0x5, 0x60000, 0xb51, 0x1, 0xfffffff8, 0x371, 0xf04f, 0xb2b0, 0x2, 0xb63d, 0x101, 0xb7b, 0x10, 0x3, 0x9, 0x1, 0x0, 0x2, 0x9, 0x69dd, 0x5, 0x4c92, 0x8, 0x760, 0x5, 0x2, 0x100, 0x7ff, 0x0, 0x6, 0xee2, 0x365a800, 0x6, 0x2, 0x5, 0x2, 0x6, 0x654, 0x3, 0x2, 0x6, 0x3, 0x7c, 0xe, 0xfffffeff, 0x1ff, 0x8, 0x7, 0x401, 0x2, 0x0, 0xffffffff, 0xf0c, 0x0, 0x7, 0x0, 0x7f, 0x6, 0xf, 0x2, 0x2, 0x2, 0x8, 0x7, 0x80000001, 0x1, 0x2, 0x0, 0x1, 0x0, 0x9, 0x3, 0xfffffff8, 0x1, 0x0, 0x8, 0x7f, 0x1, 0x5, 0x400, 0x1, 0xfff, 0x8e, 0x2, 0x3, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0xc, 0xc, 0x4, 0x6, 0xffff8000, 0x1, 0x7, 0x6, 0x7, 0x2, 0x401, 0x4, 0x2, 0x1, 0xa9, 0xffff, 0xa, 0x3f, 0x4, 0x1000, 0x4, 0x1, 0xff, 0x10001, 0x97e9, 0x8, 0x3ff, 0x7, 0xffffffff, 0x6, 0x94, 0xffff, 0x7, 0x9, 0x101, 0x5, 0x2, 0x800, 0x6, 0x2, 0x7ff, 0x6, 0x3, 0x2e4, 0xffff, 0x80000001, 0x9, 0xbd60, 0x8f3, 0x101, 0x9ad, 0x7, 0x9, 0x5, 0xfffffffd, 0x5, 0x0, 0x101, 0x77e, 0x1, 0xcc, 0x8]}]}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x8}}, @TCA_U32_ACT={0x58, 0x7, [@m_mpls={0x54, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x26, 0x6, "6e8681a6ab1f659ea7eed5dfedd7eefc3de94e92731fa347b1d03231edc06b5f8650"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_U32_POLICE={0x4}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x401}}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r10, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x0) 961.541996ms ago: executing program 2 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xe58ac855f3a312e9}, 0x20000000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001d00070f"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010f71905000000001d89820fe36e7a9287a535d0", @ANYRES32=0x0, @ANYBLOB="0000020000000000280012800b0001006d61637365630000180002800c0004000000000000000000050003000d000000"], 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000015}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x2, 0x1ff, 0x34, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x0, 0xc, 0x3}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r11}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r12, r11}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf250200000008000200030000003000018008000700", @ANYRES32=r6, @ANYBLOB="080006001000000014000400fe80000000951200000000000000000000bb08000700", @ANYRES32=r10, @ANYBLOB="38000180080006006b86ffec08000300ac14143a14000400fe880000000000000000000000000001080006001000000008000300e000000108000200050000000800020008000000080002000700000008000200020000000500050000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r13, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r14 = socket(0x11, 0x80a, 0x0) sendto$x25(r14, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) connect$l2tp6(r14, &(0x7f0000000380)={0xa, 0x0, 0x5dd, @mcast2, 0x7, 0x3}, 0x20) 505.754303ms ago: executing program 0 (id=2082): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x0, 0x100000, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc082}, 0x4008000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c52b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'pimreg0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 430.834815ms ago: executing program 2 (id=2083): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010001000100fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="1c002d"], 0x38}, 0x1, 0x1000000, 0x0, 0x40008d5}, 0x8000) 219.825288ms ago: executing program 2 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b411000000000003611150000000000006000000200000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 216.640265ms ago: executing program 1 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f00000010c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 144.877339ms ago: executing program 0 (id=2086): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0x8000000, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 85.869856ms ago: executing program 1 (id=2087): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0xa, 0xf0}, [@IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f0000000480)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}, {0x9, 0x6, 0x7f}, {0x5, 0xc, 0x6, 0x2}, {0x6, 0xf, 0x0, 0x8}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x18, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @broadcast, @broadcast}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x3, "3483ca", 0x6c, "4b53c1"}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a01060000"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2102, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000240)=ANY=[], 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) epoll_create(0x1) 48.221042ms ago: executing program 4 (id=2088): pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) shutdown(r2, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x550fe000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f80)={'veth0_to_bond\x00'}) r4 = socket(0x2, 0x3, 0x100000001) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006006000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 931.732µs ago: executing program 0 (id=2089): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@loopback, 0x4e22, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x20, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x800000000000001, 0x2cb, 0x6, 0x4000000000000, 0x1a00}, {0x0, 0x8, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4055}, 0x4800) 0s ago: executing program 2 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000003b0007010000000000000000027c0000040000000c00018066feb2b9a58900001800"], 0x3c}}, 0x8000) (fail_nth: 9) kernel console output (not intermixed with test programs): [ 155.948663][ T9267] RIP: 0033:0x7fea1438d169 [ 155.948681][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.948698][ T9267] RSP: 002b:00007fea1528a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.948720][ T9267] RAX: ffffffffffffffda RBX: 00007fea145a5fa0 RCX: 00007fea1438d169 [ 155.948735][ T9267] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 155.948750][ T9267] RBP: 00007fea1528a090 R08: 0000000000000000 R09: 0000000000000000 [ 155.948762][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.948776][ T9267] R13: 0000000000000000 R14: 00007fea145a5fa0 R15: 00007fff954b67f8 [ 155.948802][ T9267] [ 156.516355][ T9281] FAULT_INJECTION: forcing a failure. [ 156.516355][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 156.533314][ T9281] CPU: 0 UID: 0 PID: 9281 Comm: syz.4.1144 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 156.533347][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.533361][ T9281] Call Trace: [ 156.533368][ T9281] [ 156.533384][ T9281] dump_stack_lvl+0x241/0x360 [ 156.533419][ T9281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.533446][ T9281] ? __pfx__printk+0x10/0x10 [ 156.533475][ T9281] ? __pfx___might_resched+0x10/0x10 [ 156.533500][ T9281] should_fail_ex+0x424/0x570 [ 156.533534][ T9281] should_failslab+0xac/0x100 [ 156.533562][ T9281] __kvmalloc_node_noprof+0x170/0x5a0 [ 156.533592][ T9281] ? nf_hook_entries_grow+0x290/0x740 [ 156.533612][ T9281] ? trace_contention_end+0x3c/0x120 [ 156.533638][ T9281] nf_hook_entries_grow+0x290/0x740 [ 156.533676][ T9281] __nf_register_net_hook+0x278/0x8e0 [ 156.533707][ T9281] nf_register_net_hook+0xb0/0x190 [ 156.533728][ T9281] nf_register_net_hooks+0x41/0x1a0 [ 156.533750][ T9281] nf_defrag_ipv4_enable+0x85/0x110 [ 156.533780][ T9281] nf_ct_netns_do_get+0x181/0x680 [ 156.533799][ T9281] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 156.533822][ T9281] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 156.533842][ T9281] ? nf_ct_netns_do_get+0x574/0x680 [ 156.533864][ T9281] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 156.533891][ T9281] nf_ct_netns_inet_get+0x1f/0x150 [ 156.533914][ T9281] nf_ct_netns_get+0x5c/0xb0 [ 156.533934][ T9281] nft_connlimit_do_init+0x1ca/0x2c0 [ 156.533958][ T9281] nft_set_elem_expr_alloc+0x20c/0x610 [ 156.533992][ T9281] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 156.534034][ T9281] ? nft_rhash_init+0x2ec/0x430 [ 156.534055][ T9281] ? __pfx_nft_rhash_init+0x10/0x10 [ 156.534073][ T9281] ? lockdep_hardirqs_on+0x9d/0x150 [ 156.534093][ T9281] ? __pfx_nft_rhash_key+0x10/0x10 [ 156.534112][ T9281] ? __pfx_nft_rhash_obj+0x10/0x10 [ 156.534132][ T9281] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 156.534155][ T9281] nft_set_expr_alloc+0x385/0x770 [ 156.534191][ T9281] nf_tables_newset+0x245f/0x30e0 [ 156.534232][ T9281] ? __pfx_nf_tables_newset+0x10/0x10 [ 156.534276][ T9281] ? __nla_parse+0x40/0x60 [ 156.534300][ T9281] nfnetlink_rcv+0x12eb/0x28f0 [ 156.534327][ T9281] ? __kernel_text_address+0xd/0x40 [ 156.534382][ T9281] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 156.534422][ T9281] ? __lock_acquire+0xad5/0xd80 [ 156.534487][ T9281] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.534512][ T9281] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.534537][ T9281] netlink_unicast+0x7f8/0x9a0 [ 156.534563][ T9281] ? __pfx_netlink_unicast+0x10/0x10 [ 156.534581][ T9281] ? __virt_addr_valid+0x45f/0x530 [ 156.534607][ T9281] ? __phys_addr_symbol+0x2f/0x70 [ 156.534631][ T9281] ? __check_object_size+0x478/0x720 [ 156.534670][ T9281] netlink_sendmsg+0x8e8/0xce0 [ 156.534704][ T9281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.534730][ T9281] ? aa_sock_msg_perm+0x91/0x160 [ 156.534764][ T9281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.534786][ T9281] __sock_sendmsg+0x221/0x270 [ 156.534810][ T9281] ____sys_sendmsg+0x53c/0x870 [ 156.534846][ T9281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.534872][ T9281] ? __fget_files+0x2a/0x420 [ 156.534905][ T9281] ? __fget_files+0x2a/0x420 [ 156.534941][ T9281] __sys_sendmsg+0x271/0x360 [ 156.534974][ T9281] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.535043][ T9281] ? do_syscall_64+0xb6/0x230 [ 156.535067][ T9281] do_syscall_64+0xf3/0x230 [ 156.535088][ T9281] ? clear_bhb_loop+0x45/0xa0 [ 156.535112][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.535132][ T9281] RIP: 0033:0x7f7334b8d169 [ 156.535150][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.535168][ T9281] RSP: 002b:00007f7335933038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.535190][ T9281] RAX: ffffffffffffffda RBX: 00007f7334da5fa0 RCX: 00007f7334b8d169 [ 156.535205][ T9281] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000003 [ 156.535218][ T9281] RBP: 00007f7335933090 R08: 0000000000000000 R09: 0000000000000000 [ 156.535231][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.535243][ T9281] R13: 0000000000000000 R14: 00007f7334da5fa0 R15: 00007ffe4db07888 [ 156.535271][ T9281] [ 157.050119][ T9293] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 157.058015][ T9293] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 157.072957][ T9293] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.153971][ T9293] __nla_validate_parse: 12 callbacks suppressed [ 157.153996][ T9293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1147'. [ 157.400435][ T9306] netlink: 'syz.3.1150': attribute type 4 has an invalid length. [ 157.783819][ T9322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1157'. [ 158.883085][ T9319] macsec1: entered promiscuous mode [ 158.896010][ T9319] batadv0: entered promiscuous mode [ 158.933913][ T9319] batadv0: left promiscuous mode [ 158.990721][ T9329] FAULT_INJECTION: forcing a failure. [ 158.990721][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 159.019330][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.3.1159 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 159.019365][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.019379][ T9329] Call Trace: [ 159.019386][ T9329] [ 159.019395][ T9329] dump_stack_lvl+0x241/0x360 [ 159.019431][ T9329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.019467][ T9329] ? __pfx__printk+0x10/0x10 [ 159.019496][ T9329] ? __pfx___might_resched+0x10/0x10 [ 159.019520][ T9329] should_fail_ex+0x424/0x570 [ 159.019554][ T9329] should_failslab+0xac/0x100 [ 159.019582][ T9329] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 159.019612][ T9329] ? __alloc_skb+0x1c2/0x480 [ 159.019641][ T9329] __alloc_skb+0x1c2/0x480 [ 159.019671][ T9329] ? __pfx___alloc_skb+0x10/0x10 [ 159.019700][ T9329] ? netlink_autobind+0xd6/0x2f0 [ 159.019723][ T9329] ? netlink_autobind+0x2b0/0x2f0 [ 159.019750][ T9329] netlink_sendmsg+0x65c/0xce0 [ 159.019780][ T9329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.019806][ T9329] ? aa_sock_msg_perm+0x91/0x160 [ 159.019839][ T9329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.019861][ T9329] __sock_sendmsg+0x221/0x270 [ 159.019884][ T9329] ____sys_sendmsg+0x53c/0x870 [ 159.019919][ T9329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.019947][ T9329] ? __fget_files+0x2a/0x420 [ 159.019979][ T9329] ? __fget_files+0x2a/0x420 [ 159.020016][ T9329] __sys_sendmsg+0x271/0x360 [ 159.020049][ T9329] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.020116][ T9329] ? do_syscall_64+0xb6/0x230 [ 159.020141][ T9329] do_syscall_64+0xf3/0x230 [ 159.020163][ T9329] ? clear_bhb_loop+0x45/0xa0 [ 159.020185][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.020206][ T9329] RIP: 0033:0x7fea1438d169 [ 159.020242][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.020261][ T9329] RSP: 002b:00007fea1528a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.020284][ T9329] RAX: ffffffffffffffda RBX: 00007fea145a5fa0 RCX: 00007fea1438d169 [ 159.020299][ T9329] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 159.020313][ T9329] RBP: 00007fea1528a090 R08: 0000000000000000 R09: 0000000000000000 [ 159.020326][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.020338][ T9329] R13: 0000000000000000 R14: 00007fea145a5fa0 R15: 00007fff954b67f8 [ 159.020364][ T9329] [ 159.360640][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 159.374622][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 159.384272][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 159.492170][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 159.557614][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 159.567377][ T9341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1163'. [ 159.616232][ T5845] block nbd2: Receive control failed (result -107) [ 159.628282][ T9357] FAULT_INJECTION: forcing a failure. [ 159.628282][ T9357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.642411][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.0.1171 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 159.642446][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.642460][ T9357] Call Trace: [ 159.642468][ T9357] [ 159.642478][ T9357] dump_stack_lvl+0x241/0x360 [ 159.642515][ T9357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.642552][ T9357] ? __pfx__printk+0x10/0x10 [ 159.642589][ T9357] should_fail_ex+0x424/0x570 [ 159.642625][ T9357] _copy_from_user+0x2d/0xb0 [ 159.642653][ T9357] copy_msghdr_from_user+0xb3/0x580 [ 159.642681][ T9357] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.642702][ T9357] ? __fget_files+0x2a/0x420 [ 159.642740][ T9357] ? __fget_files+0x2a/0x420 [ 159.642776][ T9357] __sys_sendmmsg+0x361/0x7b0 [ 159.642812][ T9357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.642864][ T9357] ? rcu_read_lock_any_held+0xbb/0x160 [ 159.642885][ T9357] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.642909][ T9357] ? vfs_write+0xb29/0xd10 [ 159.642938][ T9357] ? ksys_write+0x24e/0x2d0 [ 159.642962][ T9357] ? __mutex_unlock_slowpath+0x229/0x800 [ 159.643003][ T9357] ? ksys_write+0x275/0x2d0 [ 159.643031][ T9357] __x64_sys_sendmmsg+0xa0/0xb0 [ 159.643058][ T9357] do_syscall_64+0xf3/0x230 [ 159.643078][ T9357] ? clear_bhb_loop+0x45/0xa0 [ 159.643101][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.643120][ T9357] RIP: 0033:0x7fb292b8d169 [ 159.643139][ T9357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.643156][ T9357] RSP: 002b:00007fb293a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.643176][ T9357] RAX: ffffffffffffffda RBX: 00007fb292da5fa0 RCX: 00007fb292b8d169 [ 159.643189][ T9357] RDX: 0000000000000001 RSI: 0000200000002980 RDI: 0000000000000003 [ 159.643201][ T9357] RBP: 00007fb293a56090 R08: 0000000000000000 R09: 0000000000000000 [ 159.643212][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.643223][ T9357] R13: 0000000000000000 R14: 00007fb292da5fa0 R15: 00007ffe44553b08 [ 159.643244][ T9357] [ 159.883805][ T9341] nbd2: detected capacity change from 0 to 256 [ 159.952688][ T9364] FAULT_INJECTION: forcing a failure. [ 159.952688][ T9364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.966827][ T9364] CPU: 0 UID: 0 PID: 9364 Comm: syz.0.1174 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 159.966858][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.966872][ T9364] Call Trace: [ 159.966879][ T9364] [ 159.966887][ T9364] dump_stack_lvl+0x241/0x360 [ 159.966922][ T9364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.966949][ T9364] ? __pfx__printk+0x10/0x10 [ 159.966983][ T9364] should_fail_ex+0x424/0x570 [ 159.967017][ T9364] _copy_from_user+0x2d/0xb0 [ 159.967044][ T9364] copy_msghdr_from_user+0xb3/0x580 [ 159.967071][ T9364] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.967104][ T9364] __sys_sendmmsg+0x361/0x7b0 [ 159.967142][ T9364] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.967197][ T9364] ? rcu_read_lock_any_held+0xbb/0x160 [ 159.967221][ T9364] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.967245][ T9364] ? vfs_write+0xb29/0xd10 [ 159.967274][ T9364] ? ksys_write+0x24e/0x2d0 [ 159.967298][ T9364] ? __mutex_unlock_slowpath+0x229/0x800 [ 159.967352][ T9364] ? ksys_write+0x275/0x2d0 [ 159.967383][ T9364] __x64_sys_sendmmsg+0xa0/0xb0 [ 159.967412][ T9364] do_syscall_64+0xf3/0x230 [ 159.967434][ T9364] ? clear_bhb_loop+0x45/0xa0 [ 159.967458][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.967478][ T9364] RIP: 0033:0x7fb292b8d169 [ 159.967496][ T9364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.967514][ T9364] RSP: 002b:00007fb293a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.967537][ T9364] RAX: ffffffffffffffda RBX: 00007fb292da5fa0 RCX: 00007fb292b8d169 [ 159.967552][ T9364] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 159.967567][ T9364] RBP: 00007fb293a56090 R08: 0000000000000000 R09: 0000000000000000 [ 159.967579][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.967591][ T9364] R13: 0000000000000000 R14: 00007fb292da5fa0 R15: 00007ffe44553b08 [ 159.967618][ T9364] [ 160.187116][ T9361] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 160.195315][ T9361] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1172'. [ 160.197617][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1173'. [ 160.501061][ T9383] tipc: Enabling of bearer rejected, already enabled [ 160.740917][ T9397] ip6gretap1: entered promiscuous mode [ 160.794662][ T9403] tipc: Enabling of bearer rejected, failed to enable media [ 160.860187][ T9405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.909484][ T9408] nbd: must specify at least one socket [ 161.899236][ T9457] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 161.978458][ T5845] block nbd4: Receive control failed (result -32) [ 162.077928][ T9469] pimreg: entered allmulticast mode [ 162.085465][ T9469] pimreg: left allmulticast mode [ 162.212580][ T9472] batadv0: entered promiscuous mode [ 162.221333][ T9472] macsec1: entered promiscuous mode [ 162.230873][ T9472] batadv0: left promiscuous mode [ 162.551570][ T9476] __nla_validate_parse: 14 callbacks suppressed [ 162.551592][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 162.770085][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'. [ 162.779940][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 163.061616][ T9500] FAULT_INJECTION: forcing a failure. [ 163.061616][ T9500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.106723][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.1.1223 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 163.106756][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.106769][ T9500] Call Trace: [ 163.106777][ T9500] [ 163.106785][ T9500] dump_stack_lvl+0x241/0x360 [ 163.106820][ T9500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.106847][ T9500] ? __pfx__printk+0x10/0x10 [ 163.106886][ T9500] should_fail_ex+0x424/0x570 [ 163.106919][ T9500] _copy_from_user+0x2d/0xb0 [ 163.106947][ T9500] move_addr_to_kernel+0x8c/0x170 [ 163.106970][ T9500] copy_msghdr_from_user+0x477/0x580 [ 163.106997][ T9500] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 163.107018][ T9500] ? __fget_files+0x2a/0x420 [ 163.107051][ T9500] ? __fget_files+0x2a/0x420 [ 163.107088][ T9500] __sys_sendmmsg+0x361/0x7b0 [ 163.107127][ T9500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.107182][ T9500] ? rcu_read_lock_any_held+0xbb/0x160 [ 163.107220][ T9500] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 163.107246][ T9500] ? vfs_write+0xb29/0xd10 [ 163.107275][ T9500] ? ksys_write+0x24e/0x2d0 [ 163.107298][ T9500] ? __mutex_unlock_slowpath+0x229/0x800 [ 163.107342][ T9500] ? ksys_write+0x275/0x2d0 [ 163.107372][ T9500] __x64_sys_sendmmsg+0xa0/0xb0 [ 163.107403][ T9500] do_syscall_64+0xf3/0x230 [ 163.107425][ T9500] ? clear_bhb_loop+0x45/0xa0 [ 163.107448][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.107468][ T9500] RIP: 0033:0x7fecd578d169 [ 163.107486][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.107504][ T9500] RSP: 002b:00007fecd653c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.107527][ T9500] RAX: ffffffffffffffda RBX: 00007fecd59a5fa0 RCX: 00007fecd578d169 [ 163.107542][ T9500] RDX: 0000000000000001 RSI: 0000200000002980 RDI: 0000000000000003 [ 163.107556][ T9500] RBP: 00007fecd653c090 R08: 0000000000000000 R09: 0000000000000000 [ 163.107569][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.107581][ T9500] R13: 0000000000000000 R14: 00007fecd59a5fa0 R15: 00007ffd7208f888 [ 163.107608][ T9500] [ 163.366415][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1222'. [ 163.552591][ T9510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1224'. [ 163.594942][ T9498] team0 (unregistering): Port device team_slave_0 removed [ 163.631941][ T9498] team0 (unregistering): Port device team_slave_1 removed [ 163.645267][ T9517] FAULT_INJECTION: forcing a failure. [ 163.645267][ T9517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.665992][ T9517] CPU: 1 UID: 0 PID: 9517 Comm: syz.2.1228 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 163.666019][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.666031][ T9517] Call Trace: [ 163.666037][ T9517] [ 163.666043][ T9517] dump_stack_lvl+0x241/0x360 [ 163.666073][ T9517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.666097][ T9517] ? __pfx__printk+0x10/0x10 [ 163.666127][ T9517] should_fail_ex+0x424/0x570 [ 163.666160][ T9517] _copy_from_user+0x2d/0xb0 [ 163.666182][ T9517] copy_msghdr_from_user+0xb3/0x580 [ 163.666204][ T9517] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 163.666230][ T9517] __sys_sendmmsg+0x361/0x7b0 [ 163.666261][ T9517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.666307][ T9517] ? rcu_read_lock_any_held+0xbb/0x160 [ 163.666329][ T9517] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 163.666351][ T9517] ? vfs_write+0xb29/0xd10 [ 163.666374][ T9517] ? ksys_write+0x24e/0x2d0 [ 163.666394][ T9517] ? __mutex_unlock_slowpath+0x229/0x800 [ 163.666433][ T9517] ? ksys_write+0x275/0x2d0 [ 163.666459][ T9517] __x64_sys_sendmmsg+0xa0/0xb0 [ 163.666483][ T9517] do_syscall_64+0xf3/0x230 [ 163.666500][ T9517] ? clear_bhb_loop+0x45/0xa0 [ 163.666522][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.666542][ T9517] RIP: 0033:0x7fc0b158d169 [ 163.666559][ T9517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.666578][ T9517] RSP: 002b:00007fc0b23e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.666600][ T9517] RAX: ffffffffffffffda RBX: 00007fc0b17a5fa0 RCX: 00007fc0b158d169 [ 163.666615][ T9517] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 163.666629][ T9517] RBP: 00007fc0b23e3090 R08: 0000000000000000 R09: 0000000000000000 [ 163.666641][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.666652][ T9517] R13: 0000000000000000 R14: 00007fc0b17a5fa0 R15: 00007ffd2c14c648 [ 163.666678][ T9517] [ 163.943200][ T9502] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.959196][ T9502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.127665][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1231'. [ 164.258313][ T9543] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 164.287310][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 164.645999][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 164.707202][ T9566] syzkaller1: entered promiscuous mode [ 164.724947][ T9566] syzkaller1: entered allmulticast mode [ 164.822352][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'. [ 164.823279][ T9573] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1245'. [ 164.987696][ T9578] bridge0: entered promiscuous mode [ 164.994815][ T9582] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 165.020570][ T9578] ip6gretap0: entered promiscuous mode [ 165.029385][ T9578] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 165.046952][ T9578] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 165.060114][ T9582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 165.091103][ T5845] Bluetooth: hci4: link tx timeout [ 165.100228][ T5845] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 165.109260][ T5845] Bluetooth: hci4: link tx timeout [ 165.114512][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.325337][ T9597] xt_ecn: cannot match TCP bits for non-tcp packets [ 165.347256][ T9597] netlink: ct family unspecified [ 165.365461][ T9597] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.659908][ T9614] FAULT_INJECTION: forcing a failure. [ 165.659908][ T9614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.687831][ T9614] CPU: 1 UID: 0 PID: 9614 Comm: syz.1.1262 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 165.687864][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.687877][ T9614] Call Trace: [ 165.687885][ T9614] [ 165.687893][ T9614] dump_stack_lvl+0x241/0x360 [ 165.687927][ T9614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.687955][ T9614] ? __pfx__printk+0x10/0x10 [ 165.687990][ T9614] should_fail_ex+0x424/0x570 [ 165.688025][ T9614] _copy_from_iter+0x211/0x1c70 [ 165.688060][ T9614] ? __pfx__copy_from_iter+0x10/0x10 [ 165.688085][ T9614] ? __virt_addr_valid+0x183/0x530 [ 165.688110][ T9614] ? __virt_addr_valid+0x183/0x530 [ 165.688134][ T9614] ? __virt_addr_valid+0x45f/0x530 [ 165.688159][ T9614] ? __phys_addr_symbol+0x2f/0x70 [ 165.688183][ T9614] ? __check_object_size+0x478/0x720 [ 165.688214][ T9614] netlink_sendmsg+0x757/0xce0 [ 165.688247][ T9614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.688274][ T9614] ? aa_sock_msg_perm+0x91/0x160 [ 165.688307][ T9614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.688329][ T9614] __sock_sendmsg+0x221/0x270 [ 165.688353][ T9614] ____sys_sendmsg+0x53c/0x870 [ 165.688388][ T9614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.688415][ T9614] ? __fget_files+0x2a/0x420 [ 165.688445][ T9614] ? __fget_files+0x2a/0x420 [ 165.688481][ T9614] __sys_sendmsg+0x271/0x360 [ 165.688512][ T9614] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.688579][ T9614] ? do_syscall_64+0xb6/0x230 [ 165.688604][ T9614] do_syscall_64+0xf3/0x230 [ 165.688625][ T9614] ? clear_bhb_loop+0x45/0xa0 [ 165.688650][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.688674][ T9614] RIP: 0033:0x7fecd578d169 [ 165.688692][ T9614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.688710][ T9614] RSP: 002b:00007fecd653c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.688732][ T9614] RAX: ffffffffffffffda RBX: 00007fecd59a5fa0 RCX: 00007fecd578d169 [ 165.688747][ T9614] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 165.688760][ T9614] RBP: 00007fecd653c090 R08: 0000000000000000 R09: 0000000000000000 [ 165.688773][ T9614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.688784][ T9614] R13: 0000000000000000 R14: 00007fecd59a5fa0 R15: 00007ffd7208f888 [ 165.688817][ T9614] [ 165.958150][ T9620] macsec1: entered promiscuous mode [ 165.963603][ T9620] batadv0: entered promiscuous mode [ 165.991385][ T9620] batadv0: left promiscuous mode [ 166.139781][ T9630] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 166.152607][ T9626] sctp: [Deprecated]: syz.3.1266 (pid 9626) Use of int in max_burst socket option. [ 166.152607][ T9626] Use struct sctp_assoc_value instead [ 166.257925][ T9636] tipc: Enabling of bearer rejected, failed to enable media [ 166.355990][ T9642] fþ: left promiscuous mode [ 166.553067][ T9659] tipc: Enabling of bearer rejected, already enabled [ 166.564356][ T9659] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 166.698261][ T5831] block nbd7: Receive control failed (result -107) [ 166.762919][ T9657] nbd7: detected capacity change from 0 to 256 [ 167.150734][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 167.209566][ T9686] FAULT_INJECTION: forcing a failure. [ 167.209566][ T9686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.294751][ T9686] CPU: 0 UID: 0 PID: 9686 Comm: syz.3.1291 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 167.294786][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.294799][ T9686] Call Trace: [ 167.294808][ T9686] [ 167.294817][ T9686] dump_stack_lvl+0x241/0x360 [ 167.294852][ T9686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.294880][ T9686] ? __pfx__printk+0x10/0x10 [ 167.294916][ T9686] should_fail_ex+0x424/0x570 [ 167.294949][ T9686] _copy_from_user+0x2d/0xb0 [ 167.294977][ T9686] copy_msghdr_from_user+0xb3/0x580 [ 167.295004][ T9686] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 167.295039][ T9686] __sys_sendmmsg+0x361/0x7b0 [ 167.295077][ T9686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.295132][ T9686] ? rcu_read_lock_any_held+0xbb/0x160 [ 167.295155][ T9686] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 167.295181][ T9686] ? vfs_write+0xb29/0xd10 [ 167.295212][ T9686] ? ksys_write+0x24e/0x2d0 [ 167.295236][ T9686] ? __mutex_unlock_slowpath+0x229/0x800 [ 167.295280][ T9686] ? ksys_write+0x275/0x2d0 [ 167.295312][ T9686] __x64_sys_sendmmsg+0xa0/0xb0 [ 167.295343][ T9686] do_syscall_64+0xf3/0x230 [ 167.295365][ T9686] ? clear_bhb_loop+0x45/0xa0 [ 167.295389][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.295410][ T9686] RIP: 0033:0x7fea1438d169 [ 167.295427][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.295445][ T9686] RSP: 002b:00007fea1528a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.295468][ T9686] RAX: ffffffffffffffda RBX: 00007fea145a5fa0 RCX: 00007fea1438d169 [ 167.295484][ T9686] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 167.295498][ T9686] RBP: 00007fea1528a090 R08: 0000000000000000 R09: 0000000000000000 [ 167.295511][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.295523][ T9686] R13: 0000000000000000 R14: 00007fea145a5fa0 R15: 00007fff954b67f8 [ 167.295550][ T9686] [ 167.569783][ T9689] netlink: 'syz.4.1292': attribute type 11 has an invalid length. [ 167.661158][ T9695] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 167.676064][ T9695] __nla_validate_parse: 12 callbacks suppressed [ 167.676087][ T9695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1293'. [ 167.713278][ T9695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1293'. [ 167.732312][ T9699] tipc: Enabling of bearer rejected, failed to enable media [ 167.755827][ T9700] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.768075][ T9700] tipc: Enabled bearer , priority 10 [ 167.893005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.049627][ T9712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1300'. [ 168.097447][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1303'. [ 168.111282][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1303'. [ 168.130976][ T9721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.162922][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.171170][ T9723] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1305'. [ 168.185492][ T9721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.200234][ T9723] nbd: must specify a size in bytes for the device [ 168.208230][ T9721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.217455][ T9721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.226579][ T9721] geneve2: entered allmulticast mode [ 168.377806][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1308'. [ 168.411931][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 168.523856][ T9735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1309'. [ 168.557809][ T10] IPVS: starting estimator thread 0... [ 168.674359][ T9736] IPVS: using max 23 ests per chain, 55200 per kthread [ 168.693183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.973105][ T9746] netlink: 'syz.2.1311': attribute type 2 has an invalid length. [ 169.194513][ T9762] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1317'. [ 169.212955][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 169.773050][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.968626][ T9798] x_tables: ip_tables: osf match: only valid for protocol 6 [ 170.128421][ T9809] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 170.423471][ T5845] block nbd9: Receive control failed (result -107) [ 170.473032][ T9818] nbd9: detected capacity change from 0 to 256 [ 170.665316][ T9829] netlink: 'syz.1.1337': attribute type 58 has an invalid length. [ 170.813325][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.991928][ T9846] FAULT_INJECTION: forcing a failure. [ 170.991928][ T9846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.063345][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.3.1342 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 171.063379][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.063392][ T9846] Call Trace: [ 171.063399][ T9846] [ 171.063408][ T9846] dump_stack_lvl+0x241/0x360 [ 171.063441][ T9846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.063468][ T9846] ? __pfx__printk+0x10/0x10 [ 171.063501][ T9846] should_fail_ex+0x424/0x570 [ 171.063533][ T9846] _copy_from_user+0x2d/0xb0 [ 171.063557][ T9846] copy_msghdr_from_user+0xb3/0x580 [ 171.063583][ T9846] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 171.063616][ T9846] __sys_sendmmsg+0x361/0x7b0 [ 171.063653][ T9846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.063710][ T9846] ? rcu_read_lock_any_held+0xbb/0x160 [ 171.063732][ T9846] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 171.063755][ T9846] ? vfs_write+0xb29/0xd10 [ 171.063786][ T9846] ? ksys_write+0x24e/0x2d0 [ 171.063810][ T9846] ? __mutex_unlock_slowpath+0x229/0x800 [ 171.063854][ T9846] ? ksys_write+0x275/0x2d0 [ 171.063884][ T9846] __x64_sys_sendmmsg+0xa0/0xb0 [ 171.063913][ T9846] do_syscall_64+0xf3/0x230 [ 171.063943][ T9846] ? clear_bhb_loop+0x45/0xa0 [ 171.063965][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.063984][ T9846] RIP: 0033:0x7fea1438d169 [ 171.064001][ T9846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.064018][ T9846] RSP: 002b:00007fea1528a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.064056][ T9846] RAX: ffffffffffffffda RBX: 00007fea145a5fa0 RCX: 00007fea1438d169 [ 171.064070][ T9846] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 171.064085][ T9846] RBP: 00007fea1528a090 R08: 0000000000000000 R09: 0000000000000000 [ 171.064097][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.064109][ T9846] R13: 0000000000000000 R14: 00007fea145a5fa0 R15: 00007fff954b67f8 [ 171.064136][ T9846] [ 171.356031][ T9854] xt_bpf: check failed: parse error [ 171.763194][ T9879] xt_connbytes: Forcing CT accounting to be enabled [ 171.769956][ T9879] Cannot find add_set index 2 as target [ 171.862931][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.024463][ T9902] netlink: 'syz.0.1359': attribute type 9 has an invalid length. [ 172.299027][ T9922] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 172.325676][ T9924] batadv0: entered promiscuous mode [ 172.346602][ T9924] macsec1: entered promiscuous mode [ 172.358884][ T9924] batadv0: left promiscuous mode [ 172.388405][ T9928] IPv6: NLM_F_REPLACE set, but no existing node found! [ 172.588136][ T9943] dccp_v4_rcv: dropped packet with invalid checksum [ 172.673904][ T9949] x_tables: duplicate underflow at hook 1 [ 172.737623][ T9951] __nla_validate_parse: 19 callbacks suppressed [ 172.737653][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 172.789921][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 172.810814][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 172.892917][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.930295][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 172.948562][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 172.979078][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 173.031264][ T9966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1380'. [ 173.058630][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 173.068472][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 173.077597][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 173.193834][ T9972] batadv0: entered promiscuous mode [ 173.199970][ T9972] macsec1: entered promiscuous mode [ 173.213246][ T9972] batadv0: left promiscuous mode [ 173.631201][ T9994] batman_adv: batadv0: Adding interface: dummy0 [ 173.638067][ T9994] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.692636][ T9994] batman_adv: batadv0: Interface activated: dummy0 [ 173.932947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.060848][T10019] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 174.096703][ T977] IPVS: starting estimator thread 0... [ 174.293014][T10025] IPVS: using max 26 ests per chain, 62400 per kthread [ 174.512163][T10052] fþ²¹¥‰: left promiscuous mode [ 174.776619][ T5845] block nbd11: Receive control failed (result -107) [ 174.803256][T10061] nbd11: detected capacity change from 0 to 256 [ 174.977075][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.031152][T10086] netlink: 'syz.4.1422': attribute type 12 has an invalid length. [ 175.552527][T10124] netlink: 'syz.1.1435': attribute type 11 has an invalid length. [ 175.616610][T10128] FAULT_INJECTION: forcing a failure. [ 175.616610][T10128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.634481][T10128] CPU: 1 UID: 0 PID: 10128 Comm: syz.4.1437 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 175.634513][T10128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.634526][T10128] Call Trace: [ 175.634533][T10128] [ 175.634541][T10128] dump_stack_lvl+0x241/0x360 [ 175.634575][T10128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.634601][T10128] ? __pfx__printk+0x10/0x10 [ 175.634647][T10128] should_fail_ex+0x424/0x570 [ 175.634683][T10128] _copy_from_user+0x2d/0xb0 [ 175.634709][T10128] copy_msghdr_from_user+0xb3/0x580 [ 175.634735][T10128] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 175.634768][T10128] __sys_sendmmsg+0x361/0x7b0 [ 175.634806][T10128] ? __pfx___sys_sendmmsg+0x10/0x10 [ 175.634858][T10128] ? rcu_read_lock_any_held+0xbb/0x160 [ 175.634880][T10128] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 175.634904][T10128] ? vfs_write+0xb29/0xd10 [ 175.634943][T10128] ? ksys_write+0x24e/0x2d0 [ 175.634966][T10128] ? __mutex_unlock_slowpath+0x229/0x800 [ 175.635008][T10128] ? ksys_write+0x275/0x2d0 [ 175.635037][T10128] __x64_sys_sendmmsg+0xa0/0xb0 [ 175.635066][T10128] do_syscall_64+0xf3/0x230 [ 175.635087][T10128] ? clear_bhb_loop+0x45/0xa0 [ 175.635110][T10128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.635129][T10128] RIP: 0033:0x7f7334b8d169 [ 175.635146][T10128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.635164][T10128] RSP: 002b:00007f7335933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 175.635185][T10128] RAX: ffffffffffffffda RBX: 00007f7334da5fa0 RCX: 00007f7334b8d169 [ 175.635200][T10128] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 175.635214][T10128] RBP: 00007f7335933090 R08: 0000000000000000 R09: 0000000000000000 [ 175.635226][T10128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.635237][T10128] R13: 0000000000000000 R14: 00007f7334da5fa0 R15: 00007ffe4db07888 [ 175.635267][T10128] [ 176.022943][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.314096][T10163] netlink: 'syz.3.1449': attribute type 2 has an invalid length. [ 176.336962][T10166] netlink: 'syz.1.1450': attribute type 9 has an invalid length. [ 176.370936][T10164] bond3: entered promiscuous mode [ 176.400852][T10164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.052956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.273764][T10164] bond3 (unregistering): Released all slaves [ 177.669407][T10206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.821680][T10204] syz.1.1463 (10204) used greatest stack depth: 19432 bytes left [ 177.903994][T10217] __nla_validate_parse: 20 callbacks suppressed [ 177.904019][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1467'. [ 178.007734][T10224] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 178.030679][T10224] dummy0: left promiscuous mode [ 178.057502][T10224] team0: Port device dummy0 added [ 178.092933][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.425374][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 178.667547][T10265] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1489'. [ 178.858743][T10270] raw_sendmsg: syz.2.1491 forgot to set AF_INET. Fix it! [ 178.922981][T10276] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 179.132900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.554592][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 179.574774][T10317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1507'. [ 179.652121][T10321] FAULT_INJECTION: forcing a failure. [ 179.652121][T10321] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 179.730111][T10321] CPU: 0 UID: 0 PID: 10321 Comm: syz.1.1509 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 179.730144][T10321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.730164][T10321] Call Trace: [ 179.730171][T10321] [ 179.730179][T10321] dump_stack_lvl+0x241/0x360 [ 179.730212][T10321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.730239][T10321] ? __pfx__printk+0x10/0x10 [ 179.730271][T10321] should_fail_ex+0x424/0x570 [ 179.730303][T10321] prepare_alloc_pages+0x1dd/0x5c0 [ 179.730330][T10321] __alloc_frozen_pages_noprof+0x181/0x7b0 [ 179.730355][T10321] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.730392][T10321] alloc_pages_mpol+0x339/0x690 [ 179.730422][T10321] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.730456][T10321] vma_alloc_folio_noprof+0x12d/0x260 [ 179.730486][T10321] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 179.730520][T10321] folio_prealloc+0x2e/0x170 [ 179.730540][T10321] do_wp_page+0x1255/0x49b0 [ 179.730580][T10321] ? __pfx_do_wp_page+0x10/0x10 [ 179.730612][T10321] ? __lock_acquire+0xad5/0xd80 [ 179.730643][T10321] ? do_raw_spin_lock+0x151/0x370 [ 179.730681][T10321] __handle_mm_fault+0x2305/0x6ef0 [ 179.730731][T10321] ? __pfx___handle_mm_fault+0x10/0x10 [ 179.730770][T10321] ? mtree_range_walk+0x700/0x8e0 [ 179.730808][T10321] ? mt_find+0x28a/0x8f0 [ 179.730827][T10321] ? mt_find+0x28a/0x8f0 [ 179.730848][T10321] ? mt_find+0x699/0x8f0 [ 179.730870][T10321] ? mt_find+0x28a/0x8f0 [ 179.730892][T10321] ? __pfx_mt_find+0x10/0x10 [ 179.730927][T10321] ? find_vma+0xfa/0x170 [ 179.730955][T10321] ? __pfx_find_vma+0x10/0x10 [ 179.730987][T10321] handle_mm_fault+0x3e5/0x8d0 [ 179.731024][T10321] exc_page_fault+0x2bb/0x8b0 [ 179.731048][T10321] asm_exc_page_fault+0x26/0x30 [ 179.731067][T10321] RIP: 0010:__put_user_4+0xd/0x20 [ 179.731088][T10321] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 179.731105][T10321] RSP: 0018:ffffc900034a79b8 EFLAGS: 00050202 [ 179.731124][T10321] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003038 [ 179.731137][T10321] RDX: 0000200000003000 RSI: ffffffff8e4ca585 RDI: ffffffff8ca0f580 [ 179.731152][T10321] RBP: ffffc900034a7ed0 R08: 0000000000000001 R09: 0000000000000000 [ 179.731171][T10321] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900034a7d20 [ 179.731184][T10321] R13: 000000000000037c R14: ffffc900034a7d00 R15: 1ffff92000694f48 [ 179.731211][T10321] __sys_sendmmsg+0x524/0x7b0 [ 179.731249][T10321] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.731303][T10321] ? rcu_read_lock_any_held+0xbb/0x160 [ 179.731325][T10321] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 179.731349][T10321] ? vfs_write+0xb29/0xd10 [ 179.731377][T10321] ? ksys_write+0x24e/0x2d0 [ 179.731401][T10321] ? __mutex_unlock_slowpath+0x229/0x800 [ 179.731444][T10321] ? ksys_write+0x275/0x2d0 [ 179.731474][T10321] __x64_sys_sendmmsg+0xa0/0xb0 [ 179.731503][T10321] do_syscall_64+0xf3/0x230 [ 179.731524][T10321] ? clear_bhb_loop+0x45/0xa0 [ 179.731559][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.731577][T10321] RIP: 0033:0x7fecd578d169 [ 179.731592][T10321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.731608][T10321] RSP: 002b:00007fecd653c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.731627][T10321] RAX: ffffffffffffffda RBX: 00007fecd59a5fa0 RCX: 00007fecd578d169 [ 179.731640][T10321] RDX: 040000000000037c RSI: 0000200000002440 RDI: 0000000000000004 [ 179.731653][T10321] RBP: 00007fecd653c090 R08: 0000000000000000 R09: 0000000000000000 [ 179.731665][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.731693][T10321] R13: 0000000000000000 R14: 00007fecd59a5fa0 R15: 00007ffd7208f888 [ 179.731719][T10321] [ 180.173080][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.273990][T10342] FAULT_INJECTION: forcing a failure. [ 180.273990][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.307340][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.2.1517 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 180.307371][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.307384][T10342] Call Trace: [ 180.307391][T10342] [ 180.307398][T10342] dump_stack_lvl+0x241/0x360 [ 180.307431][T10342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.307456][T10342] ? __pfx__printk+0x10/0x10 [ 180.307488][T10342] should_fail_ex+0x424/0x570 [ 180.307521][T10342] _copy_to_user+0x31/0xb0 [ 180.307547][T10342] simple_read_from_buffer+0xdc/0x170 [ 180.307577][T10342] proc_fail_nth_read+0x1ef/0x260 [ 180.307598][T10342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.307619][T10342] ? rw_verify_area+0x246/0x630 [ 180.307639][T10342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.307659][T10342] vfs_read+0x21f/0xb90 [ 180.307683][T10342] ? __pfx___mutex_lock+0x10/0x10 [ 180.307704][T10342] ? __pfx_vfs_read+0x10/0x10 [ 180.307727][T10342] ? __fget_files+0x2a/0x420 [ 180.307757][T10342] ? __fget_files+0x39d/0x420 [ 180.307784][T10342] ? __fget_files+0x2a/0x420 [ 180.307820][T10342] ksys_read+0x19d/0x2d0 [ 180.307842][T10342] ? __pfx_ksys_read+0x10/0x10 [ 180.307867][T10342] ? do_syscall_64+0xb6/0x230 [ 180.307890][T10342] do_syscall_64+0xf3/0x230 [ 180.307912][T10342] ? clear_bhb_loop+0x45/0xa0 [ 180.307934][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.307954][T10342] RIP: 0033:0x7fc0b158bb7c [ 180.307971][T10342] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 180.307988][T10342] RSP: 002b:00007fc0b23e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.308009][T10342] RAX: ffffffffffffffda RBX: 00007fc0b17a5fa0 RCX: 00007fc0b158bb7c [ 180.308024][T10342] RDX: 000000000000000f RSI: 00007fc0b23e30a0 RDI: 0000000000000004 [ 180.308037][T10342] RBP: 00007fc0b23e3090 R08: 0000000000000000 R09: 0000000000000000 [ 180.308049][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.308061][T10342] R13: 0000000000000000 R14: 00007fc0b17a5fa0 R15: 00007ffd2c14c648 [ 180.308087][T10342] [ 180.549181][T10326] netlink: 'syz.0.1510': attribute type 9 has an invalid length. [ 180.601871][T10326] xt_SECMARK: invalid mode: 0 [ 180.609124][T10352] netlink: 'syz.2.1520': attribute type 2 has an invalid length. [ 180.653225][T10350] FAULT_INJECTION: forcing a failure. [ 180.653225][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 180.653580][T10352] fþ²¹¥‰: entered promiscuous mode [ 180.666702][T10350] CPU: 0 UID: 0 PID: 10350 Comm: syz.4.1521 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 180.666734][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.666748][T10350] Call Trace: [ 180.666755][T10350] [ 180.666763][T10350] dump_stack_lvl+0x241/0x360 [ 180.666798][T10350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.666824][T10350] ? __pfx__printk+0x10/0x10 [ 180.666851][T10350] ? __pfx___might_resched+0x10/0x10 [ 180.666877][T10350] should_fail_ex+0x424/0x570 [ 180.666927][T10350] should_failslab+0xac/0x100 [ 180.666957][T10350] __kvmalloc_node_noprof+0x170/0x5a0 [ 180.666987][T10350] ? nf_hook_entries_grow+0x290/0x740 [ 180.667014][T10350] nf_hook_entries_grow+0x290/0x740 [ 180.667044][T10350] __nf_register_net_hook+0x278/0x8e0 [ 180.667075][T10350] nf_register_net_hook+0xb0/0x190 [ 180.667105][T10350] nf_register_net_hooks+0x41/0x1a0 [ 180.667129][T10350] nf_ct_netns_do_get+0x3d0/0x680 [ 180.667148][T10350] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 180.667173][T10350] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 180.667194][T10350] ? nf_ct_netns_do_get+0x574/0x680 [ 180.667217][T10350] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 180.667246][T10350] nf_ct_netns_inet_get+0x1f/0x150 [ 180.667269][T10350] nf_ct_netns_get+0x5c/0xb0 [ 180.667289][T10350] nft_connlimit_do_init+0x1ca/0x2c0 [ 180.667314][T10350] nft_set_elem_expr_alloc+0x20c/0x610 [ 180.667348][T10350] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 180.667409][T10350] ? nft_rhash_init+0x2ec/0x430 [ 180.667432][T10350] ? __pfx_nft_rhash_init+0x10/0x10 [ 180.667451][T10350] ? lockdep_hardirqs_on+0x9d/0x150 [ 180.667472][T10350] ? __pfx_nft_rhash_key+0x10/0x10 [ 180.667493][T10350] ? __pfx_nft_rhash_obj+0x10/0x10 [ 180.667514][T10350] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 180.667538][T10350] nft_set_expr_alloc+0x385/0x770 [ 180.667576][T10350] nf_tables_newset+0x245f/0x30e0 [ 180.667620][T10350] ? __pfx_nf_tables_newset+0x10/0x10 [ 180.667668][T10350] ? __nla_parse+0x40/0x60 [ 180.667693][T10350] nfnetlink_rcv+0x12eb/0x28f0 [ 180.667721][T10350] ? __kernel_text_address+0xd/0x40 [ 180.667778][T10350] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.667820][T10350] ? __lock_acquire+0xad5/0xd80 [ 180.667889][T10350] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.667917][T10350] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.667943][T10350] netlink_unicast+0x7f8/0x9a0 [ 180.667971][T10350] ? __pfx_netlink_unicast+0x10/0x10 [ 180.667990][T10350] ? __virt_addr_valid+0x45f/0x530 [ 180.668017][T10350] ? __phys_addr_symbol+0x2f/0x70 [ 180.668043][T10350] ? __check_object_size+0x478/0x720 [ 180.668075][T10350] netlink_sendmsg+0x8e8/0xce0 [ 180.668117][T10350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.668146][T10350] ? aa_sock_msg_perm+0x91/0x160 [ 180.668180][T10350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.668202][T10350] __sock_sendmsg+0x221/0x270 [ 180.668228][T10350] ____sys_sendmsg+0x53c/0x870 [ 180.668266][T10350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.668294][T10350] ? __fget_files+0x2a/0x420 [ 180.668331][T10350] ? __fget_files+0x2a/0x420 [ 180.668370][T10350] __sys_sendmsg+0x271/0x360 [ 180.668405][T10350] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.668480][T10350] ? do_syscall_64+0xb6/0x230 [ 180.668505][T10350] do_syscall_64+0xf3/0x230 [ 180.668528][T10350] ? clear_bhb_loop+0x45/0xa0 [ 180.668553][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.668575][T10350] RIP: 0033:0x7f7334b8d169 [ 180.668594][T10350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.668614][T10350] RSP: 002b:00007f7335933038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.668638][T10350] RAX: ffffffffffffffda RBX: 00007f7334da5fa0 RCX: 00007f7334b8d169 [ 180.668654][T10350] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000003 [ 180.668668][T10350] RBP: 00007f7335933090 R08: 0000000000000000 R09: 0000000000000000 [ 180.668682][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.668696][T10350] R13: 0000000000000000 R14: 00007f7334da5fa0 R15: 00007ffe4db07888 [ 180.668723][T10350] [ 181.212932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.308817][T10372] netlink: 'syz.1.1529': attribute type 9 has an invalid length. [ 181.621822][T10389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.747174][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 181.800178][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.859293][T10396] tipc: Enabling of bearer rejected, already enabled [ 182.085508][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1542'. [ 182.124521][T10403] netlink: 'syz.0.1542': attribute type 2 has an invalid length. [ 182.140560][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1543'. [ 182.180975][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1543'. [ 182.199087][T10403] fþ: entered promiscuous mode [ 182.238462][T10408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.247830][T10408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.256555][T10408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.262897][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.271989][T10408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.281242][T10408] geneve2: entered allmulticast mode [ 182.321272][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 182.353345][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.697557][T10431] tipc: Enabling of bearer rejected, already enabled [ 182.755621][T10432] batadv0: entered promiscuous mode [ 182.783741][T10432] macsec1: entered promiscuous mode [ 182.810653][T10432] batadv0: left promiscuous mode [ 182.918384][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1553'. [ 183.023423][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'. [ 183.302934][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.336288][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 183.372700][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1560'. [ 183.394150][T10471] tipc: Enabling of bearer rejected, already enabled [ 183.436267][T10472] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1563'. [ 183.642159][T10488] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 183.672399][T10482] wg1: entered promiscuous mode [ 183.685123][ T5922] IPVS: starting estimator thread 0... [ 183.692352][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 183.695995][T10482] wg1: entered allmulticast mode [ 183.755802][T10498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1571'. [ 183.773114][T10495] IPVS: using max 34 ests per chain, 81600 per kthread [ 183.846076][T10501] FAULT_INJECTION: forcing a failure. [ 183.846076][T10501] name failslab, interval 1, probability 0, space 0, times 0 [ 183.893141][T10501] CPU: 0 UID: 0 PID: 10501 Comm: syz.0.1572 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 183.893175][T10501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.893198][T10501] Call Trace: [ 183.893205][T10501] [ 183.893215][T10501] dump_stack_lvl+0x241/0x360 [ 183.893261][T10501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.893288][T10501] ? __pfx__printk+0x10/0x10 [ 183.893317][T10501] ? __pfx___might_resched+0x10/0x10 [ 183.893341][T10501] should_fail_ex+0x424/0x570 [ 183.893375][T10501] should_failslab+0xac/0x100 [ 183.893411][T10501] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 183.893441][T10501] ? __alloc_skb+0x1c2/0x480 [ 183.893470][T10501] __alloc_skb+0x1c2/0x480 [ 183.893500][T10501] ? __pfx___alloc_skb+0x10/0x10 [ 183.893527][T10501] ? netlink_autobind+0xd6/0x2f0 [ 183.893549][T10501] ? netlink_autobind+0x2b0/0x2f0 [ 183.893574][T10501] netlink_sendmsg+0x65c/0xce0 [ 183.893604][T10501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.893630][T10501] ? aa_sock_msg_perm+0x91/0x160 [ 183.893663][T10501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.893683][T10501] __sock_sendmsg+0x221/0x270 [ 183.893707][T10501] ____sys_sendmsg+0x53c/0x870 [ 183.893740][T10501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.893766][T10501] ? __fget_files+0x2a/0x420 [ 183.893797][T10501] ? __fget_files+0x2a/0x420 [ 183.893833][T10501] __sys_sendmsg+0x271/0x360 [ 183.893865][T10501] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.893930][T10501] ? do_syscall_64+0xb6/0x230 [ 183.893955][T10501] do_syscall_64+0xf3/0x230 [ 183.893975][T10501] ? clear_bhb_loop+0x45/0xa0 [ 183.893998][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.894017][T10501] RIP: 0033:0x7fb292b8d169 [ 183.894042][T10501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.894059][T10501] RSP: 002b:00007fb293a56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.894085][T10501] RAX: ffffffffffffffda RBX: 00007fb292da5fa0 RCX: 00007fb292b8d169 [ 183.894100][T10501] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 183.894114][T10501] RBP: 00007fb293a56090 R08: 0000000000000000 R09: 0000000000000000 [ 183.894125][T10501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.894136][T10501] R13: 0000000000000000 R14: 00007fb292da5fa0 R15: 00007ffe44553b08 [ 183.894161][T10501] [ 184.268942][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 184.333191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.365029][T10517] SET target dimension over the limit! [ 184.388692][T10515] tipc: Enabling of bearer rejected, already enabled [ 184.603136][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1585'. [ 184.730993][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1589'. [ 184.832460][T10548] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 184.859584][T10548] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 184.877764][T10548] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 185.382879][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.430282][T10584] netlink: 'syz.0.1603': attribute type 2 has an invalid length. [ 185.442468][T10584] fþ²¹¥‰: entered promiscuous mode [ 185.756091][T10598] FAULT_INJECTION: forcing a failure. [ 185.756091][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 185.800572][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.1.1608 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 185.800606][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.800619][T10598] Call Trace: [ 185.800627][T10598] [ 185.800637][T10598] dump_stack_lvl+0x241/0x360 [ 185.800672][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.800700][T10598] ? __pfx__printk+0x10/0x10 [ 185.800730][T10598] ? __pfx___might_resched+0x10/0x10 [ 185.800756][T10598] should_fail_ex+0x424/0x570 [ 185.800792][T10598] should_failslab+0xac/0x100 [ 185.800822][T10598] __kvmalloc_node_noprof+0x170/0x5a0 [ 185.800851][T10598] ? nf_hook_entries_grow+0x290/0x740 [ 185.800878][T10598] nf_hook_entries_grow+0x290/0x740 [ 185.800908][T10598] __nf_register_net_hook+0x278/0x8e0 [ 185.800939][T10598] nf_register_net_hook+0xb0/0x190 [ 185.800962][T10598] nf_register_net_hooks+0x41/0x1a0 [ 185.800985][T10598] nf_ct_netns_do_get+0x206/0x680 [ 185.801005][T10598] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 185.801029][T10598] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 185.801049][T10598] ? nf_ct_netns_do_get+0x574/0x680 [ 185.801072][T10598] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 185.801101][T10598] nf_ct_netns_inet_get+0x3b/0x150 [ 185.801125][T10598] nf_ct_netns_get+0x5c/0xb0 [ 185.801145][T10598] nft_connlimit_do_init+0x1ca/0x2c0 [ 185.801170][T10598] nft_set_elem_expr_alloc+0x20c/0x610 [ 185.801204][T10598] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 185.801247][T10598] ? nft_rhash_init+0x2ec/0x430 [ 185.801270][T10598] ? __pfx_nft_rhash_init+0x10/0x10 [ 185.801288][T10598] ? lockdep_hardirqs_on+0x9d/0x150 [ 185.801308][T10598] ? __pfx_nft_rhash_key+0x10/0x10 [ 185.801328][T10598] ? __pfx_nft_rhash_obj+0x10/0x10 [ 185.801348][T10598] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 185.801371][T10598] nft_set_expr_alloc+0x385/0x770 [ 185.801407][T10598] nf_tables_newset+0x245f/0x30e0 [ 185.801451][T10598] ? __pfx_nf_tables_newset+0x10/0x10 [ 185.801508][T10598] ? __nla_parse+0x40/0x60 [ 185.801533][T10598] nfnetlink_rcv+0x12eb/0x28f0 [ 185.801590][T10598] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 185.801659][T10598] ? skb_clone+0x240/0x390 [ 185.801700][T10598] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.801726][T10598] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.801750][T10598] netlink_unicast+0x7f8/0x9a0 [ 185.801778][T10598] ? __pfx_netlink_unicast+0x10/0x10 [ 185.801796][T10598] ? __virt_addr_valid+0x45f/0x530 [ 185.801822][T10598] ? __phys_addr_symbol+0x2f/0x70 [ 185.801847][T10598] ? __check_object_size+0x478/0x720 [ 185.801878][T10598] netlink_sendmsg+0x8e8/0xce0 [ 185.801913][T10598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.801940][T10598] ? aa_sock_msg_perm+0x91/0x160 [ 185.801973][T10598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.801995][T10598] __sock_sendmsg+0x221/0x270 [ 185.802019][T10598] ____sys_sendmsg+0x53c/0x870 [ 185.802056][T10598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.802084][T10598] ? __fget_files+0x2a/0x420 [ 185.802117][T10598] ? __fget_files+0x2a/0x420 [ 185.802155][T10598] __sys_sendmsg+0x271/0x360 [ 185.802189][T10598] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.802261][T10598] ? do_syscall_64+0xb6/0x230 [ 185.802286][T10598] do_syscall_64+0xf3/0x230 [ 185.802308][T10598] ? clear_bhb_loop+0x45/0xa0 [ 185.802332][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.802352][T10598] RIP: 0033:0x7fecd578d169 [ 185.802371][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.802389][T10598] RSP: 002b:00007fecd653c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.802411][T10598] RAX: ffffffffffffffda RBX: 00007fecd59a5fa0 RCX: 00007fecd578d169 [ 185.802427][T10598] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000003 [ 185.802440][T10598] RBP: 00007fecd653c090 R08: 0000000000000000 R09: 0000000000000000 [ 185.802453][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.802472][T10598] R13: 0000000000000000 R14: 00007fecd59a5fa0 R15: 00007ffd7208f888 [ 185.802500][T10598] [ 186.412822][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.646408][T10623] netlink: 'syz.4.1617': attribute type 9 has an invalid length. [ 186.816800][T10630] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 186.834734][T10630] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 186.860085][T10638] tipc: Enabling of bearer rejected, failed to enable media [ 187.365812][T10664] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.452951][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.833326][T10681] tipc: Enabling of bearer rejected, failed to enable media [ 188.028142][T10689] __nla_validate_parse: 7 callbacks suppressed [ 188.028165][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 188.074401][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 188.087083][T10689] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 188.095809][T10689] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1638'. [ 188.218445][ T5845] block nbd14: Receive control failed (result -32) [ 188.447220][T10703] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1644'. [ 188.492871][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.684591][T10716] tipc: Enabling of bearer rejected, failed to enable media [ 188.794699][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 188.804659][T10722] fþ²¹¥‰: left promiscuous mode [ 189.493561][T10737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1658'. [ 189.532864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.569866][T10743] vxcan3: entered allmulticast mode [ 189.638217][T10747] tipc: Enabling of bearer rejected, failed to enable media [ 189.794354][T10759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1667'. [ 189.836885][T10765] x_tables: duplicate entry at hook 1 [ 189.900468][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 190.214685][T10793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1676'. [ 190.501720][T10805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'. [ 190.582866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.898145][T10819] FAULT_INJECTION: forcing a failure. [ 190.898145][T10819] name failslab, interval 1, probability 0, space 0, times 0 [ 190.956475][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.4.1689 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 190.956508][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.956522][T10819] Call Trace: [ 190.956530][T10819] [ 190.956539][T10819] dump_stack_lvl+0x241/0x360 [ 190.956575][T10819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.956613][T10819] ? __pfx__printk+0x10/0x10 [ 190.956642][T10819] ? __pfx___might_resched+0x10/0x10 [ 190.956667][T10819] should_fail_ex+0x424/0x570 [ 190.956701][T10819] should_failslab+0xac/0x100 [ 190.956728][T10819] __kvmalloc_node_noprof+0x170/0x5a0 [ 190.956757][T10819] ? nf_hook_entries_grow+0x290/0x740 [ 190.956782][T10819] nf_hook_entries_grow+0x290/0x740 [ 190.956810][T10819] __nf_register_net_hook+0x278/0x8e0 [ 190.956839][T10819] nf_register_net_hook+0xb0/0x190 [ 190.956860][T10819] nf_register_net_hooks+0x41/0x1a0 [ 190.956882][T10819] nf_ct_netns_do_get+0x206/0x680 [ 190.956902][T10819] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 190.956925][T10819] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 190.956945][T10819] ? nf_ct_netns_do_get+0x574/0x680 [ 190.956967][T10819] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 190.956994][T10819] nf_ct_netns_inet_get+0x3b/0x150 [ 190.957018][T10819] nf_ct_netns_get+0x5c/0xb0 [ 190.957038][T10819] nft_connlimit_do_init+0x1ca/0x2c0 [ 190.957062][T10819] nft_set_elem_expr_alloc+0x20c/0x610 [ 190.957096][T10819] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 190.957138][T10819] ? nft_rhash_init+0x2ec/0x430 [ 190.957160][T10819] ? __pfx_nft_rhash_init+0x10/0x10 [ 190.957178][T10819] ? lockdep_hardirqs_on+0x9d/0x150 [ 190.957198][T10819] ? __pfx_nft_rhash_key+0x10/0x10 [ 190.957218][T10819] ? __pfx_nft_rhash_obj+0x10/0x10 [ 190.957238][T10819] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 190.957260][T10819] nft_set_expr_alloc+0x385/0x770 [ 190.957296][T10819] nf_tables_newset+0x245f/0x30e0 [ 190.957338][T10819] ? __pfx_nf_tables_newset+0x10/0x10 [ 190.957382][T10819] ? __nla_parse+0x40/0x60 [ 190.957407][T10819] nfnetlink_rcv+0x12eb/0x28f0 [ 190.957434][T10819] ? __kernel_text_address+0xd/0x40 [ 190.957488][T10819] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 190.957528][T10819] ? __lock_acquire+0xad5/0xd80 [ 190.957600][T10819] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.957625][T10819] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.957650][T10819] netlink_unicast+0x7f8/0x9a0 [ 190.957676][T10819] ? __pfx_netlink_unicast+0x10/0x10 [ 190.957693][T10819] ? __virt_addr_valid+0x45f/0x530 [ 190.957720][T10819] ? __phys_addr_symbol+0x2f/0x70 [ 190.957744][T10819] ? __check_object_size+0x478/0x720 [ 190.957774][T10819] netlink_sendmsg+0x8e8/0xce0 [ 190.957808][T10819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.957834][T10819] ? aa_sock_msg_perm+0x91/0x160 [ 190.957867][T10819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.957889][T10819] __sock_sendmsg+0x221/0x270 [ 190.957913][T10819] ____sys_sendmsg+0x53c/0x870 [ 190.957949][T10819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.957977][T10819] ? __fget_files+0x2a/0x420 [ 190.958009][T10819] ? __fget_files+0x2a/0x420 [ 190.958046][T10819] __sys_sendmsg+0x271/0x360 [ 190.958078][T10819] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.958149][T10819] ? do_syscall_64+0xb6/0x230 [ 190.958174][T10819] do_syscall_64+0xf3/0x230 [ 190.958196][T10819] ? clear_bhb_loop+0x45/0xa0 [ 190.958220][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.958240][T10819] RIP: 0033:0x7f7334b8d169 [ 190.958258][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.958276][T10819] RSP: 002b:00007f7335933038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.958299][T10819] RAX: ffffffffffffffda RBX: 00007f7334da5fa0 RCX: 00007f7334b8d169 [ 190.958314][T10819] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000003 [ 190.958327][T10819] RBP: 00007f7335933090 R08: 0000000000000000 R09: 0000000000000000 [ 190.958339][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.958352][T10819] R13: 0000000000000000 R14: 00007f7334da5fa0 R15: 00007ffe4db07888 [ 190.958379][T10819] [ 191.510387][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.519487][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.528619][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.538003][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.546993][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.612814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.944549][T10826] chnl_net:caif_netlink_parms(): no params data found [ 191.986195][T10852] netlink: 'syz.1.1696': attribute type 58 has an invalid length. [ 192.361648][T10869] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.546530][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.556855][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.567838][T10826] bridge_slave_0: entered allmulticast mode [ 192.602559][T10826] bridge_slave_0: entered promiscuous mode [ 192.648216][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.662842][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.672546][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.682506][T10826] bridge_slave_1: entered allmulticast mode [ 192.692184][T10826] bridge_slave_1: entered promiscuous mode [ 192.831828][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.885770][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.027441][T10889] geneve2: entered allmulticast mode [ 193.041531][T10826] team0: Port device team_slave_0 added [ 193.052545][T10826] team0: Port device team_slave_1 added [ 193.126329][ T5879] IPVS: starting estimator thread 0... [ 193.224018][T10898] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.237940][T10900] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 193.248223][T10900] __nla_validate_parse: 9 callbacks suppressed [ 193.248246][T10900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1709'. [ 193.269327][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.276875][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.304425][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.317187][T10900] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 193.397984][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.407864][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.439881][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.518021][T10905] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 193.568120][T10905] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1711'. [ 193.614151][ T5845] Bluetooth: hci2: command tx timeout [ 193.638525][T10909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1711'. [ 193.667339][T10826] hsr_slave_0: entered promiscuous mode [ 193.677124][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 193.688836][T10826] hsr_slave_1: entered promiscuous mode [ 193.702807][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.706577][T10826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.721490][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'. [ 193.738016][T10826] Cannot create hsr debugfs directory [ 193.752543][T10918] netlink: 'syz.0.1713': attribute type 1 has an invalid length. [ 193.773184][T10918] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1713'. [ 193.877031][ T5845] block nbd13: Receive control failed (result -32) [ 194.050181][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 194.143520][T10826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.257743][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.308606][T10937] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 194.349555][T10826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.428549][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 194.443625][T10940] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 194.515831][T10826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.642569][T10946] xt_CT: No such helper "pptp" [ 194.652350][T10826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.741638][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1725'. [ 194.750721][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.796470][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1725'. [ 194.884540][T10953] geneve1: entered allmulticast mode [ 195.236960][T10826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.286846][T10826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.390773][T10826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.431374][T10826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.693628][ T5839] Bluetooth: hci2: command 0x041b tx timeout [ 195.696568][T10826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.744429][T10826] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.756093][T10995] tipc: Enabling of bearer rejected, failed to enable media [ 195.770831][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.778032][T10926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.782881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.836477][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.843683][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.940803][T10826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.964401][T10826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.994761][T10999] fþ²¹¥‰: left promiscuous mode [ 196.276423][T10826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.336401][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 196.336431][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 196.342449][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 196.539060][T10826] veth0_vlan: entered promiscuous mode [ 196.552680][T10826] veth1_vlan: entered promiscuous mode [ 196.577074][T10826] veth0_macvtap: entered promiscuous mode [ 196.611110][T10826] veth1_macvtap: entered promiscuous mode [ 196.635201][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.646751][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.657282][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.668117][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.677988][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.688870][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.700519][T10826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.720816][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.773285][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.802651][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.813569][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.836313][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.862802][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.889667][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.908732][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.920017][T11041] set match dimension is over the limit! [ 196.929518][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.959543][T10826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.994642][T10826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.021740][T10826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.043781][T10826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.054764][T10826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.267912][T10926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.288676][T10926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.336620][T10926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.354996][T10926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.548171][T11067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 197.560357][T11067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.625805][T11069] netlink: 'syz.4.1763': attribute type 12 has an invalid length. [ 197.785358][T11072] x_tables: ip_tables: osf match: only valid for protocol 6 [ 197.852980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.921953][T11081] netlink: 'syz.2.1767': attribute type 4 has an invalid length. [ 198.430508][T11087] __nla_validate_parse: 16 callbacks suppressed [ 198.430533][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 198.456624][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 198.466528][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 198.892814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.017996][ T1027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.091184][T11129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.166510][T11135] tipc: Enabling of bearer rejected, already enabled [ 199.226342][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1784'. [ 199.256912][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'. [ 199.610915][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.621100][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.636024][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.645496][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.653699][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.932887][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.057610][T11150] chnl_net:caif_netlink_parms(): no params data found [ 200.089462][T11164] macsec1: entered promiscuous mode [ 200.096192][T11164] batadv0: entered promiscuous mode [ 200.359999][T11164] batadv0: left promiscuous mode [ 200.531739][T11150] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.559467][T11150] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.589567][T11150] bridge_slave_0: entered allmulticast mode [ 200.616580][T11150] bridge_slave_0: entered promiscuous mode [ 200.628564][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1795'. [ 200.657856][T11150] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.666594][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1795'. [ 200.684987][T11150] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.693218][T11150] bridge_slave_1: entered allmulticast mode [ 200.700053][T11150] bridge_slave_1: entered promiscuous mode [ 200.739553][ T1027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.859224][T11188] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1799'. [ 200.877690][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1799'. [ 200.963650][T11150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.972832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.141951][ T1027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.175935][T11150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.260130][T11206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1804'. [ 201.270032][T11150] team0: Port device team_slave_0 added [ 201.299187][T11150] team0: Port device team_slave_1 added [ 201.591298][ T1027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.655229][T11219] netlink: 'syz.2.1811': attribute type 29 has an invalid length. [ 201.704157][ T5836] Bluetooth: hci2: command tx timeout [ 201.796803][T11150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.818503][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.851056][T11150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.909056][T11219] netlink: 'syz.2.1811': attribute type 29 has an invalid length. [ 201.983096][T11150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.990359][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.023091][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.026609][T11150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.070794][T11219] IPv6: sit1: Disabled Multicast RS [ 202.080103][T11219] sit1: entered allmulticast mode [ 202.242637][T11229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.373507][T11150] hsr_slave_0: entered promiscuous mode [ 202.386878][T11150] hsr_slave_1: entered promiscuous mode [ 202.399909][T11150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.419023][T11150] Cannot create hsr debugfs directory [ 202.533843][ T1027] bridge_slave_1: left allmulticast mode [ 202.539902][ T1027] bridge_slave_1: left promiscuous mode [ 202.572128][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.604481][ T1027] bridge_slave_0: left allmulticast mode [ 202.611466][ T1027] bridge_slave_0: left promiscuous mode [ 202.623136][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.062947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.118216][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.138095][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.156517][ T1027] bond0 (unregistering): Released all slaves [ 203.636064][T11272] __nla_validate_parse: 6 callbacks suppressed [ 203.636084][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 203.661880][T11272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'. [ 203.774656][ T5836] Bluetooth: hci2: command tx timeout [ 203.931978][ T1027] hsr_slave_0: left promiscuous mode [ 203.948918][ T1027] hsr_slave_1: left promiscuous mode [ 203.956818][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 203.973053][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.981012][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.990125][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.998058][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.031918][ T1027] veth1_macvtap: left promiscuous mode [ 204.038075][ T1027] veth0_macvtap: left promiscuous mode [ 204.044039][ T1027] veth1_vlan: left promiscuous mode [ 204.049572][ T1027] veth0_vlan: left promiscuous mode [ 204.092898][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.508969][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 204.548081][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 205.039581][T11290] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 205.048040][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1827'. [ 205.121830][T11290] team0: Port device dummy0 removed [ 205.128806][T11290] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.144678][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.186798][T11297] tipc: Enabling of bearer rejected, failed to enable media [ 205.300064][T11150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.363960][T11150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.432337][T11150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.483352][T11150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.616754][T11150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.718039][T11150] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.763614][T11314] tipc: Enabling of bearer rejected, failed to enable media [ 205.779947][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.787194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.820256][T11318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 205.863656][ T5836] Bluetooth: hci2: command tx timeout [ 205.866987][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.876380][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.172827][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.247402][T11150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.284562][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1844'. [ 206.324136][T11342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 206.442233][T11345] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1845'. [ 206.587232][T11150] veth0_vlan: entered promiscuous mode [ 206.632643][T11150] veth1_vlan: entered promiscuous mode [ 206.696900][T11356] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1848'. [ 206.724253][T11150] veth0_macvtap: entered promiscuous mode [ 206.735508][T11150] veth1_macvtap: entered promiscuous mode [ 206.753512][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.765725][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.776124][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.787114][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.797102][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.807838][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.819740][T11150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.835429][T11360] tipc: Enabling of bearer rejected, already enabled [ 206.852243][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.882904][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.899928][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.924760][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.941535][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.958409][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.970109][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.983242][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.009673][T11150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.020837][T11150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.040302][T11150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.049747][T11150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.066625][T11150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.204013][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 207.213170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.275985][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.277187][T11371] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 207.302666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.387256][ T5836] block nbd16: Receive control failed (result -32) [ 207.511995][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.539689][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.586814][T11384] FAULT_INJECTION: forcing a failure. [ 207.586814][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 207.611475][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.2.1859 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 207.611509][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.611521][T11384] Call Trace: [ 207.611529][T11384] [ 207.611537][T11384] dump_stack_lvl+0x241/0x360 [ 207.611571][T11384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.611599][T11384] ? __pfx__printk+0x10/0x10 [ 207.611628][T11384] ? __pfx___might_resched+0x10/0x10 [ 207.611661][T11384] should_fail_ex+0x424/0x570 [ 207.611695][T11384] should_failslab+0xac/0x100 [ 207.611723][T11384] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 207.611751][T11384] ? __alloc_skb+0x1c2/0x480 [ 207.611781][T11384] __alloc_skb+0x1c2/0x480 [ 207.611811][T11384] ? __pfx___alloc_skb+0x10/0x10 [ 207.611836][T11384] ? nla_policy_len+0x2b0/0x330 [ 207.611863][T11384] ovs_dp_cmd_del+0x68/0x370 [ 207.611894][T11384] genl_rcv_msg+0xb38/0xf00 [ 207.611931][T11384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.611957][T11384] ? stack_trace_save+0x11a/0x1d0 [ 207.611986][T11384] ? stack_depot_save_flags+0x3a/0x970 [ 207.612029][T11384] ? __lock_acquire+0xad5/0xd80 [ 207.612059][T11384] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 207.612098][T11384] netlink_rcv_skb+0x208/0x480 [ 207.612121][T11384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.612151][T11384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.612188][T11384] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.612215][T11384] genl_rcv+0x28/0x40 [ 207.612240][T11384] netlink_unicast+0x7f8/0x9a0 [ 207.612267][T11384] ? __pfx_netlink_unicast+0x10/0x10 [ 207.612285][T11384] ? __virt_addr_valid+0x45f/0x530 [ 207.612313][T11384] ? __phys_addr_symbol+0x2f/0x70 [ 207.612337][T11384] ? __check_object_size+0x478/0x720 [ 207.612368][T11384] netlink_sendmsg+0x8e8/0xce0 [ 207.612401][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.612429][T11384] ? aa_sock_msg_perm+0x91/0x160 [ 207.612461][T11384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.612483][T11384] __sock_sendmsg+0x221/0x270 [ 207.612507][T11384] ____sys_sendmsg+0x53c/0x870 [ 207.612543][T11384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.612572][T11384] ? __fget_files+0x2a/0x420 [ 207.612605][T11384] ? __fget_files+0x2a/0x420 [ 207.612642][T11384] __sys_sendmsg+0x271/0x360 [ 207.612692][T11384] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.612760][T11384] ? do_syscall_64+0xb6/0x230 [ 207.612784][T11384] do_syscall_64+0xf3/0x230 [ 207.612804][T11384] ? clear_bhb_loop+0x45/0xa0 [ 207.612828][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.612847][T11384] RIP: 0033:0x7fc0b158d169 [ 207.612865][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.612882][T11384] RSP: 002b:00007fc0b23e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.612905][T11384] RAX: ffffffffffffffda RBX: 00007fc0b17a5fa0 RCX: 00007fc0b158d169 [ 207.612920][T11384] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 207.612933][T11384] RBP: 00007fc0b23e3090 R08: 0000000000000000 R09: 0000000000000000 [ 207.612945][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.612957][T11384] R13: 0000000000000000 R14: 00007fc0b17a5fa0 R15: 00007ffd2c14c648 [ 207.612982][T11384] [ 207.948330][ T5836] Bluetooth: hci2: command tx timeout [ 208.252798][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.749663][T11428] tipc: Enabling of bearer rejected, failed to enable media [ 208.821946][T11430] __nla_validate_parse: 7 callbacks suppressed [ 208.821969][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 208.850494][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 208.858265][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 208.873889][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 208.935483][T11437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1873'. [ 209.104054][T11445] netlink: 15654 bytes leftover after parsing attributes in process `syz.2.1876'. [ 209.292927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.369560][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 209.451613][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 210.248276][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.260263][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.269304][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.295538][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.306375][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.332967][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.986496][T11490] chnl_net:caif_netlink_parms(): no params data found [ 211.155987][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 211.330694][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.363816][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.372919][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.399537][T11490] bridge_slave_0: entered allmulticast mode [ 211.408197][T11490] bridge_slave_0: entered promiscuous mode [ 211.423414][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.431145][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.438632][T11490] bridge_slave_1: entered allmulticast mode [ 211.446398][T11490] bridge_slave_1: entered promiscuous mode [ 211.567425][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.602597][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.779878][T11490] team0: Port device team_slave_0 added [ 211.826405][T11490] team0: Port device team_slave_1 added [ 211.921489][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.948137][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.017944][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.069389][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.086993][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.159747][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.329479][T11490] hsr_slave_0: entered promiscuous mode [ 212.335532][ T5848] Bluetooth: hci2: command tx timeout [ 212.362551][T11490] hsr_slave_1: entered promiscuous mode [ 212.377541][T11490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.387129][T11490] Cannot create hsr debugfs directory [ 212.422904][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.657770][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1907'. [ 213.039259][T11490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.313500][T11490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.462916][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.472422][T11490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.610301][T11490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.838579][T11490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.882353][T11490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.931592][T11490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.986482][T11490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.010847][T11581] __nla_validate_parse: 4 callbacks suppressed [ 214.010871][T11581] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1914'. [ 214.312528][T11595] netlink: 'syz.2.1918': attribute type 2 has an invalid length. [ 214.348515][T11595] fþ²¹¥‰: entered promiscuous mode [ 214.365168][T11597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1919'. [ 214.414268][ T5848] Bluetooth: hci2: command tx timeout [ 214.429044][T11490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.492897][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.503882][T11490] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.541544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.548834][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.599910][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.607170][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.005378][T11618] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1926'. [ 215.083822][T11623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1928'. [ 215.193376][T11490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.283715][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1930'. [ 215.301213][T11490] veth0_vlan: entered promiscuous mode [ 215.332585][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'. [ 215.342434][T11631] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1930'. [ 215.355911][T11490] veth1_vlan: entered promiscuous mode [ 215.444372][T11490] veth0_macvtap: entered promiscuous mode [ 215.477846][T11490] veth1_macvtap: entered promiscuous mode [ 215.514548][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.533316][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.560747][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.594057][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.623104][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.643228][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.670594][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.693456][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.726216][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.754388][T11490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.826036][T11641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1933'. [ 215.827791][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.885929][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.911822][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.925839][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.939159][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.950613][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.961399][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.972360][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.984153][T11490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.998478][T11490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.025773][T11490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.125336][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 216.125757][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 216.245777][T11657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.437894][T11490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.456513][T11490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.472004][T11490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.482578][T11490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.493601][ T5848] Bluetooth: hci2: command tx timeout [ 216.572828][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.834760][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.856992][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.919768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.940395][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.475221][T11711] netlink: 'syz.0.1953': attribute type 39 has an invalid length. [ 217.594345][T11718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.613763][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.626194][T11718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.840900][T11731] tipc: Enabling of bearer rejected, already enabled [ 218.652862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.843829][T11760] netlink: 'syz.4.1966': attribute type 58 has an invalid length. [ 219.124259][T11769] __nla_validate_parse: 11 callbacks suppressed [ 219.124290][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 219.151243][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.161477][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.172455][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.181322][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.190030][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.339321][T11783] tipc: Enabling of bearer rejected, already enabled [ 219.493156][T11791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'. [ 219.531679][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1977'. [ 219.552432][T11789] tipc: Enabling of bearer rejected, failed to enable media [ 219.690444][T11799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1980'. [ 219.691503][T11802] netlink: 'syz.2.1981': attribute type 2 has an invalid length. [ 219.699628][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.702463][T11772] chnl_net:caif_netlink_parms(): no params data found [ 219.779803][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 219.878908][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1982'. [ 219.911083][T11772] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.924144][T11772] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.932067][T11772] bridge_slave_0: entered allmulticast mode [ 219.941472][T11772] bridge_slave_0: entered promiscuous mode [ 219.952997][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 219.960054][T11814] netlink: 'syz.0.1984': attribute type 9 has an invalid length. [ 219.993290][T11772] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.000550][T11772] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.013864][T11772] bridge_slave_1: entered allmulticast mode [ 220.026230][T11772] bridge_slave_1: entered promiscuous mode [ 220.156974][T11823] tipc: Enabling of bearer rejected, already enabled [ 220.187342][T11772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.278175][T11772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.346987][T11833] FAULT_INJECTION: forcing a failure. [ 220.346987][T11833] name failslab, interval 1, probability 0, space 0, times 0 [ 220.373326][T11833] CPU: 1 UID: 0 PID: 11833 Comm: syz.1.1991 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 220.373358][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.373371][T11833] Call Trace: [ 220.373378][T11833] [ 220.373387][T11833] dump_stack_lvl+0x241/0x360 [ 220.373422][T11833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.373449][T11833] ? __pfx__printk+0x10/0x10 [ 220.373478][T11833] ? __pfx___might_resched+0x10/0x10 [ 220.373501][T11833] should_fail_ex+0x424/0x570 [ 220.373534][T11833] should_failslab+0xac/0x100 [ 220.373563][T11833] __kmalloc_cache_noprof+0x73/0x370 [ 220.373590][T11833] ? __nft_trans_set_add+0x60/0x6f0 [ 220.373617][T11833] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 220.373642][T11833] __nft_trans_set_add+0x60/0x6f0 [ 220.373674][T11833] nf_tables_newset+0x259a/0x30e0 [ 220.373716][T11833] ? __pfx_nf_tables_newset+0x10/0x10 [ 220.373759][T11833] ? __nla_parse+0x40/0x60 [ 220.373782][T11833] nfnetlink_rcv+0x12eb/0x28f0 [ 220.373836][T11833] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 220.373901][T11833] ? skb_clone+0x240/0x390 [ 220.373941][T11833] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.373966][T11833] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.373991][T11833] netlink_unicast+0x7f8/0x9a0 [ 220.374015][T11833] ? __pfx_netlink_unicast+0x10/0x10 [ 220.374033][T11833] ? __virt_addr_valid+0x45f/0x530 [ 220.374059][T11833] ? __phys_addr_symbol+0x2f/0x70 [ 220.374083][T11833] ? __check_object_size+0x478/0x720 [ 220.374113][T11833] netlink_sendmsg+0x8e8/0xce0 [ 220.374144][T11833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.374169][T11833] ? aa_sock_msg_perm+0x91/0x160 [ 220.374207][T11833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.374227][T11833] __sock_sendmsg+0x221/0x270 [ 220.374249][T11833] ____sys_sendmsg+0x53c/0x870 [ 220.374284][T11833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.374309][T11833] ? __fget_files+0x2a/0x420 [ 220.374339][T11833] ? __fget_files+0x2a/0x420 [ 220.374379][T11833] __sys_sendmsg+0x271/0x360 [ 220.374411][T11833] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.374481][T11833] ? do_syscall_64+0xb6/0x230 [ 220.374505][T11833] do_syscall_64+0xf3/0x230 [ 220.374527][T11833] ? clear_bhb_loop+0x45/0xa0 [ 220.374550][T11833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.374570][T11833] RIP: 0033:0x7fecd578d169 [ 220.374588][T11833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.374606][T11833] RSP: 002b:00007fecd653c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.374628][T11833] RAX: ffffffffffffffda RBX: 00007fecd59a5fa0 RCX: 00007fecd578d169 [ 220.374644][T11833] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000003 [ 220.374657][T11833] RBP: 00007fecd653c090 R08: 0000000000000000 R09: 0000000000000000 [ 220.374670][T11833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.374682][T11833] R13: 0000000000000000 R14: 00007fecd59a5fa0 R15: 00007ffd7208f888 [ 220.374709][T11833] [ 220.731415][T11772] team0: Port device team_slave_0 added [ 220.742930][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.761475][T11772] team0: Port device team_slave_1 added [ 220.809817][T11838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1994'. [ 220.842662][T11772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.850757][T11772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.880471][T11772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.894104][T11772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.902627][T11772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.932027][T11772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.981675][T11772] hsr_slave_0: entered promiscuous mode [ 220.991682][T11772] hsr_slave_1: entered promiscuous mode [ 220.998905][T11772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.008910][T11772] Cannot create hsr debugfs directory [ 221.217257][ T5848] Bluetooth: hci2: command tx timeout [ 221.395425][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'. [ 221.501003][T11772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.645057][T11772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.706026][T11873] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 221.747944][T11873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2004'. [ 221.774543][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.810147][T11772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.828681][T11873] bridge0: port 3(dummy0) entered blocking state [ 221.838355][T11873] bridge0: port 3(dummy0) entered disabled state [ 221.845244][T11873] dummy0: entered allmulticast mode [ 221.851863][T11873] dummy0: entered promiscuous mode [ 221.946653][T11772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.490406][T11772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.519248][T11772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.571314][T11772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.623248][T11772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.813050][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.824999][T11772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.867836][T11772] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.909385][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.916584][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.020321][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.027610][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.294952][ T5848] Bluetooth: hci2: command tx timeout [ 223.606448][T11772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.676582][T11925] bond0: (slave bond_slave_0): Releasing backup interface [ 223.681702][T11927] netlink: 'syz.2.2019': attribute type 58 has an invalid length. [ 223.698872][T11925] bond0: (slave bond_slave_1): Releasing backup interface [ 223.713951][T11925] team0: Port device team_slave_0 removed [ 223.724486][T11925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.733466][T11930] netlink: 'syz.4.2018': attribute type 10 has an invalid length. [ 223.750492][T11925] team0: Port device geneve0 removed [ 223.779976][T11930] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 223.853086][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.889730][T11772] veth0_vlan: entered promiscuous mode [ 223.944928][T11772] veth1_vlan: entered promiscuous mode [ 224.002341][T11772] veth0_macvtap: entered promiscuous mode [ 224.056424][T11772] veth1_macvtap: entered promiscuous mode [ 224.145196][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.181259][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.201865][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.225340][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.248003][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.272300][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.305748][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.329596][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.355020][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.384312][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.495094][T11772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.509699][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.520800][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.531076][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.541713][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.552159][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.573292][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.584919][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.617412][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.642996][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.663162][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.682655][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.705209][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.729951][T11772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.759091][T11952] sch_fq: defrate 2048 ignored. [ 224.832354][T11956] __nla_validate_parse: 10 callbacks suppressed [ 224.832376][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2026'. [ 224.855805][T11772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.865981][T11772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.887787][T11772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.897534][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.913766][T11772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.975031][T11958] openvswitch: netlink: IP tunnel dst address not specified [ 225.101407][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 225.260908][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.288194][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.327687][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.348437][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.373916][ T5848] Bluetooth: hci2: command tx timeout [ 225.490355][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2032'. [ 225.906016][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 225.941487][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 225.943064][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.951654][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 226.024705][T11772] syz-executor (11772) used greatest stack depth: 19400 bytes left [ 226.045341][T11991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 226.083272][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 226.110682][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 226.148084][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 226.972862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.996742][T12006] tipc: Enabling of bearer rejected, failed to enable media [ 227.218366][T12016] vti0: entered promiscuous mode [ 227.443471][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.455093][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.464074][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.472356][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.482096][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.561710][T12031] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 227.770466][T12031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.022942][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.199359][T12027] chnl_net:caif_netlink_parms(): no params data found [ 228.350163][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.379605][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.397924][T12027] bridge_slave_0: entered allmulticast mode [ 228.405303][T12027] bridge_slave_0: entered promiscuous mode [ 228.423854][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.437379][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.453035][T12027] bridge_slave_1: entered allmulticast mode [ 228.484340][T12027] bridge_slave_1: entered promiscuous mode [ 228.666336][T12070] tipc: Enabling of bearer rejected, failed to enable media [ 228.695304][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.715426][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.840114][T12027] team0: Port device team_slave_0 added [ 228.884352][T12085] bond0: (slave bond_slave_0): Releasing backup interface [ 228.946787][T12085] bond0: (slave bond_slave_1): Releasing backup interface [ 229.035983][T12085] team0: Port device team_slave_0 removed [ 229.052901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.057101][T12085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.086790][T12085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.102270][T12085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.128081][T12085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.296119][T12085] team0: Port device geneve0 removed [ 229.328905][T12085] bond0: (slave wlan1): Releasing backup interface [ 229.370674][T12085] bond1: (slave veth3): Releasing backup interface [ 229.389462][T12085] veth3: left promiscuous mode [ 229.412041][T12085] bond2: (slave veth9): Releasing active interface [ 229.428824][T12027] team0: Port device team_slave_1 added [ 229.509308][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.533864][ T5848] Bluetooth: hci2: command tx timeout [ 229.563035][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.615113][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.633245][T12106] vti0: entered promiscuous mode [ 229.641592][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.665411][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.720641][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.033245][T12027] hsr_slave_0: entered promiscuous mode [ 230.053931][T12027] hsr_slave_1: entered promiscuous mode [ 230.060439][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.095793][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.109597][T12027] Cannot create hsr debugfs directory [ 230.185188][T12120] tipc: Enabling of bearer rejected, already enabled [ 230.375362][T12125] __nla_validate_parse: 25 callbacks suppressed [ 230.375386][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 230.571679][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2075'. [ 230.879295][T12027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.011670][T12027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.116647][T12027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.132863][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.166431][T12153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2080'. [ 231.567054][T12027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.612902][ T5848] Bluetooth: hci2: command tx timeout [ 231.639975][T12162] ip6erspan0: entered promiscuous mode [ 231.742608][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2083'. [ 231.957483][T12027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.985332][T12027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.015041][ T31] INFO: task udevd:5829 blocked for more than 143 seconds. [ 232.022323][ T31] Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 [ 232.049252][T12027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.056180][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.069283][ T31] task:udevd state:D stack:22864 pid:5829 tgid:5829 ppid:1 task_flags:0x400140 flags:0x00004002 [ 232.087751][ T31] Call Trace: [ 232.092919][ T31] [ 232.096088][ T31] __schedule+0x1b18/0x50e0 [ 232.101190][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 232.108264][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 232.114294][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 232.120592][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 232.127184][ T31] ? __pfx___schedule+0x10/0x10 [ 232.136617][T12182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2087'. [ 232.147702][ T31] ? __blk_flush_plug+0x44b/0x500 [ 232.153206][ T31] ? schedule+0x90/0x360 [ 232.157860][ T31] ? schedule+0x90/0x360 [ 232.163664][ T31] schedule+0x163/0x360 [ 232.170358][ T31] schedule_timeout+0x15b/0x290 [ 232.175534][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.183973][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 232.189653][ T31] ? __pfx_process_timeout+0x10/0x10 [ 232.195831][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 232.201744][ T31] nbd_queue_rq+0x773/0xf70 [ 232.206956][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 232.214250][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 232.222538][ T31] ? __lock_acquire+0xad5/0xd80 [ 232.228340][ T31] blk_mq_dispatch_rq_list+0xad8/0x19d0 [ 232.236450][ T31] ? sbitmap_get+0x289/0x3f0 [ 232.242452][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 232.249962][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 232.256936][ T31] __blk_mq_sched_dispatch_requests+0xb8c/0x1840 [ 232.263846][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 232.272038][ T31] ? __lock_acquire+0xad5/0xd80 [ 232.278349][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 232.284829][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 232.290157][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 232.295746][ T31] blk_mq_flush_plug_list+0x1190/0x1880 [ 232.301390][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 232.308082][ T31] ? blk_mq_submit_bio+0xfbb/0x25e0 [ 232.313813][ T31] ? do_syscall_64+0xf3/0x230 [ 232.318896][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.325202][ T31] ? blk_mq_submit_bio+0x496/0x25e0 [ 232.330801][ T31] __blk_flush_plug+0x422/0x500 [ 232.336166][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 232.341740][ T31] __submit_bio+0x56d/0x6d0 [ 232.347757][ T31] ? __pfx___submit_bio+0x10/0x10 [ 232.353029][ T31] submit_bio_noacct_nocheck+0x4d5/0xe30 [ 232.358750][ T31] ? __pfx___might_resched+0x10/0x10 [ 232.364259][ T31] ? bio_associate_blkg+0x6c/0x230 [ 232.370653][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 232.377317][ T31] block_read_full_folio+0x7c1/0x850 [ 232.382873][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 232.388393][ T31] filemap_read_folio+0x14a/0x3b0 [ 232.393926][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 232.399444][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 232.405335][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 232.410674][ T31] ? __asan_memcpy+0x40/0x70 [ 232.415881][ T31] do_read_cache_folio+0x373/0x5b0 [ 232.421072][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 232.426701][ T31] read_part_sector+0xb3/0x260 [ 232.431623][ T31] adfspart_check_ICS+0xcd/0xa20 [ 232.436855][ T31] ? snprintf+0xdd/0x130 [ 232.441147][ T31] ? vsnprintf+0x114c/0x1230 [ 232.445917][ T31] ? vsnprintf+0x190/0x1230 [ 232.450472][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 232.456516][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 232.461769][ T31] bdev_disk_changed+0x783/0x14e0 [ 232.467118][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 232.479211][ T31] ? wait_on_inode+0xc6/0x230 [ 232.483997][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 232.489315][ T31] blkdev_get_whole+0x36c/0x4f0 [ 232.500451][ T31] bdev_open+0x312/0xcd0 [ 232.504916][ T31] blkdev_open+0x38e/0x4e0 [ 232.509468][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 232.514642][ T31] do_dentry_open+0xdec/0x1960 [ 232.519486][ T31] ? vfs_open+0x31/0x370 [ 232.524105][ T31] vfs_open+0x3b/0x370 [ 232.528199][ T31] path_openat+0x2caf/0x35d0 [ 232.532975][ T31] ? kasan_save_track+0x51/0x80 [ 232.542792][ T31] ? __pfx_path_openat+0x10/0x10 [ 232.547916][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.554554][ T31] ? __lock_acquire+0xad5/0xd80 [ 232.559461][ T31] do_filp_open+0x284/0x4e0 [ 232.564106][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 232.569168][ T31] ? do_raw_spin_lock+0x151/0x370 [ 232.575750][ T31] do_sys_openat2+0x12b/0x1d0 [ 232.580534][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.586221][ T31] __x64_sys_openat+0x249/0x2a0 [ 232.591128][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.596639][ T31] ? do_syscall_64+0xb6/0x230 [ 232.601436][ T31] do_syscall_64+0xf3/0x230 [ 232.606060][ T31] ? clear_bhb_loop+0x45/0xa0 [ 232.610929][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.617368][ T31] RIP: 0033:0x7f9148f169a4 [ 232.621883][ T31] RSP: 002b:00007ffdef1144f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.630438][ T31] RAX: ffffffffffffffda RBX: 0000561f6a648e80 RCX: 00007f9148f169a4 [ 232.638693][ T31] RDX: 00000000000a0800 RSI: 0000561f6a637a10 RDI: 00000000ffffff9c [ 232.647243][ T31] RBP: 0000561f6a637a10 R08: 0000000000000001 R09: 7fffffffffffffff [ 232.655640][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 232.663751][ T31] R13: 0000561f6a649320 R14: 0000000000000001 R15: 0000561f6a628910 [ 232.672127][ T31] [ 232.675679][ T31] [ 232.675679][ T31] Showing all locks held in the system: [ 232.680133][T12027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.690529][ T31] 1 lock held by khungtaskd/31: [ 232.695665][ T31] #0: ffffffff8ed3a260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 232.705984][ T31] 2 locks held by kworker/u8:2/36: [ 232.711139][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.722934][ T31] #1: ffffc90000ad7c60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.736329][ T31] 3 locks held by kworker/u8:3/53: [ 232.741485][ T31] 3 locks held by kworker/0:2/977: [ 232.746828][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.758536][ T31] #1: ffffc90003e47c60 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.773897][ T31] #2: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 232.785482][ T31] 4 locks held by kworker/u8:5/1027: [ 232.790985][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.802310][ T31] #1: ffffc9000407fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.813748][ T31] #2: ffffffff900cb2d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 232.823779][ T31] #3: ffffffff900d7f08 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75c/0xf30 [ 232.833278][ T31] 2 locks held by getty/5592: [ 232.838028][ T31] #0: ffff88803186d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 232.848132][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x53d/0x16b0 [ 232.858820][ T31] 3 locks held by udevd/5829: [ 232.863584][ T31] #0: ffff888025968358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.874019][ T31] #1: ffff888025721790 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.885349][ T31] #2: ffff8880259c0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.894862][ T31] 3 locks held by udevd/5837: [ 232.899578][ T31] #0: ffff888025a77358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 232.909181][ T31] #1: ffff888020f9dc10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 232.918803][ T31] #2: ffff888025cee178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 232.929797][ T31] 3 locks held by kworker/1:3/5838: [ 232.935826][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.946929][ T31] #1: ffffc9000419fc60 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 232.960991][ T31] #2: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 232.971217][ T31] 3 locks held by kworker/0:4/5879: [ 232.976685][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 232.989079][ T31] #1: ffffc9000489fc60 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 233.004173][ T31] #2: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 233.014166][ T31] 3 locks held by kworker/1:5/5882: [ 233.019395][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 233.031289][ T31] #1: ffffc900048cfc60 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 233.045579][ T31] #2: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 233.055533][ T31] 3 locks held by kworker/u8:7/5899: [ 233.060860][ T31] #0: ffff888030ca4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 233.072580][ T31] #1: ffffc9000492fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 233.086778][ T31] #2: ffffffff900d7f08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 233.096540][ T31] 3 locks held by kworker/1:6/5922: [ 233.101761][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 233.113121][ T31] #1: ffffc9000490fc60 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 233.127046][ T31] #2: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 233.137631][ T31] 3 locks held by kworker/0:6/5943: [ 233.143247][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 233.154376][ T31] #1: ffffc900048dfc60 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 233.168246][ T31] #2: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 233.178449][ T31] 3 locks held by udevd/6204: [ 233.184108][ T31] #0: ffff888143b80358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 233.194552][ T31] #1: ffff888142f86090 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 233.204438][ T31] #2: ffff8880259f0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 233.213741][ T31] 3 locks held by syz-executor/12027: [ 233.219149][ T31] #0: ffffffff900d7f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 233.222865][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.228407][ T31] #1: ffff888079b80d28 (&dev->lock){+.+.}-{4:4}, at: do_setlink+0x209/0x4370 [ 233.247390][ T31] #2: ffffffff8ed3f778 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 233.260379][ T31] 4 locks held by syz.1.2087/12174: [ 233.266129][ T31] #0: ffff88805b054408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 233.277196][ T31] #1: ffffffff9013a370 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0x90 [ 233.288737][ T31] #2: ffff88802a3da8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x122/0x6c0 [ 233.302464][ T31] #3: ffffffff8ed3f778 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x454/0x830 [ 233.314531][ T31] 1 lock held by syz.1.2087/12175: [ 233.320914][ T31] #0: ffffffff900d7f08 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x292/0x3a0 [ 233.331564][ T31] 3 locks held by syz.2.2090/12178: [ 233.337190][ T31] #0: ffffffff9013c0d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 233.346551][ T31] #1: ffffffff9040d868 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_cmd_del+0x82/0x370 [ 233.355986][ T31] #2: ffffffff900d7f08 (rtnl_mutex){+.+.}-{4:4}, at: internal_dev_destroy+0xef/0x170 [ 233.365874][ T31] [ 233.368302][ T31] ============================================= [ 233.368302][ T31] [ 233.377074][ T31] NMI backtrace for cpu 0 [ 233.377093][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 233.377118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.377130][ T31] Call Trace: [ 233.377139][ T31] [ 233.377149][ T31] dump_stack_lvl+0x241/0x360 [ 233.377183][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.377210][ T31] ? __pfx__printk+0x10/0x10 [ 233.377244][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 233.377279][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 233.377306][ T31] ? _printk+0xd5/0x120 [ 233.377330][ T31] ? __wake_up_klogd+0xcc/0x110 [ 233.377356][ T31] ? __pfx__printk+0x10/0x10 [ 233.377383][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 233.377414][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 233.377446][ T31] watchdog+0x1058/0x10a0 [ 233.377475][ T31] ? watchdog+0x1ea/0x10a0 [ 233.377508][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.377534][ T31] kthread+0x7a9/0x920 [ 233.377560][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.377587][ T31] ? __pfx_kthread+0x10/0x10 [ 233.377609][ T31] ? __pfx_kthread+0x10/0x10 [ 233.377633][ T31] ? __pfx_kthread+0x10/0x10 [ 233.377664][ T31] ? __pfx_kthread+0x10/0x10 [ 233.377687][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.377716][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.377736][ T31] ? __pfx_kthread+0x10/0x10 [ 233.377761][ T31] ret_from_fork+0x4b/0x80 [ 233.377780][ T31] ? __pfx_kthread+0x10/0x10 [ 233.377804][ T31] ret_from_fork_asm+0x1a/0x30 [ 233.377845][ T31] [ 233.377852][ T31] Sending NMI from CPU 0 to CPUs 1: [ 233.382651][T12178] fþ²¹¥‰: left promiscuous mode [ 233.394709][ C1] NMI backtrace for cpu 1 [ 233.394732][ C1] CPU: 1 UID: 0 PID: 12178 Comm: syz.2.2090 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 233.394754][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.394765][ C1] RIP: 0010:lock_release+0xd1/0x3e0 [ 233.394795][ C1] Code: 00 00 00 00 9c 8f 44 24 20 4c 8b 74 24 20 fa 48 c7 c7 d2 25 73 8e e8 4e 70 81 0a 65 ff 05 77 3d c2 11 c7 44 24 20 01 00 00 00 <83> 3d 58 56 be 0e 00 0f 84 1a 01 00 00 48 89 6c 24 18 41 8b 85 e8 [ 233.394810][ C1] RSP: 0018:ffffc90000a08858 EFLAGS: 00000002 [ 233.394826][ C1] RAX: 0000000000000001 RBX: ffffffff93611020 RCX: 0000000000000001 [ 233.394838][ C1] RDX: dffffc0000000000 RSI: ffffffff8e7325d2 RDI: ffffffff8ca0f580 [ 233.394850][ C1] RBP: ffffffff85039252 R08: 0000000000000003 R09: fffff52000141108 [ 233.394868][ C1] R10: dffffc0000000000 R11: fffff52000141108 R12: 1ffff92000141118 [ 233.394880][ C1] R13: ffff88802a999e00 R14: 0000000000000006 R15: ffffffff9a88b8e0 [ 233.394893][ C1] FS: 00007fc0b23e36c0(0000) GS:ffff88812510f000(0000) knlGS:0000000000000000 [ 233.394907][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.394919][ C1] CR2: 0000200000001b40 CR3: 0000000056948000 CR4: 00000000003526f0 [ 233.394934][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.394944][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.394955][ C1] Call Trace: [ 233.394961][ C1] [ 233.394967][ C1] ? nmi_cpu_backtrace+0x3d1/0x4e0 [ 233.394995][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 233.395020][ C1] ? __kasan_check_byte+0x14/0x40 [ 233.395041][ C1] ? lock_acquire+0x89/0x2f0 [ 233.395067][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 233.395093][ C1] ? nmi_handle+0x196/0x5e0 [ 233.395111][ C1] ? nmi_handle+0x7e/0x5e0 [ 233.395129][ C1] ? lock_release+0xd1/0x3e0 [ 233.395151][ C1] ? default_do_nmi+0x63/0x160 [ 233.395174][ C1] ? exc_nmi+0x123/0x1f0 [ 233.395195][ C1] ? end_repeat_nmi+0xf/0x53 [ 233.395213][ C1] ? debug_check_no_obj_freed+0x572/0x590 [ 233.395242][ C1] ? lock_release+0xd1/0x3e0 [ 233.395265][ C1] ? lock_release+0xd1/0x3e0 [ 233.395287][ C1] ? lock_release+0xd1/0x3e0 [ 233.395310][ C1] [ 233.395316][ C1] [ 233.395325][ C1] _raw_spin_unlock_irqrestore+0x7a/0x140 [ 233.395353][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 233.395383][ C1] debug_check_no_obj_freed+0x572/0x590 [ 233.395410][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.395427][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 233.395456][ C1] ? skb_release_data+0x67a/0x8b0 [ 233.395479][ C1] ? mac80211_hwsim_beacon_tx+0x3c4/0x860 [ 233.395502][ C1] ? mac80211_hwsim_beacon_tx+0x3c4/0x860 [ 233.395525][ C1] kmem_cache_free+0x116/0x410 [ 233.395550][ C1] mac80211_hwsim_beacon_tx+0x3c4/0x860 [ 233.395576][ C1] __iterate_interfaces+0x297/0x570 [ 233.395595][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 233.395618][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 233.395641][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 233.395662][ C1] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 233.395684][ C1] mac80211_hwsim_beacon+0xd4/0x1f0 [ 233.395702][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 233.395719][ C1] __hrtimer_run_queues+0x5a6/0xd40 [ 233.395744][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 233.395761][ C1] ? read_tsc+0x9/0x20 [ 233.395782][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 233.395808][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 233.395827][ C1] handle_softirqs+0x2d6/0x9b0 [ 233.395866][ C1] ? __irq_exit_rcu+0xfb/0x220 [ 233.395892][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 233.395918][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 233.395941][ C1] __irq_exit_rcu+0xfb/0x220 [ 233.395965][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 233.395994][ C1] irq_exit_rcu+0x9/0x30 [ 233.396016][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 233.396042][ C1] [ 233.396047][ C1] [ 233.396054][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.396071][ C1] RIP: 0010:vprintk_emit+0x702/0xa10 [ 233.396089][ C1] Code: 00 e8 d2 51 21 00 4c 8d bc 24 a0 00 00 00 4d 85 e4 75 07 e8 c0 51 21 00 eb 06 e8 b9 51 21 00 fb 49 bc 00 00 00 00 00 fc ff df <48> c7 c7 00 5e c1 8e 31 f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 [ 233.396103][ C1] RSP: 0018:ffffc900044e6f80 EFLAGS: 00000293 [ 233.396117][ C1] RAX: ffffffff81a22547 RBX: 0000000000000000 RCX: ffff88802a999e00 [ 233.396129][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.396139][ C1] RBP: ffffc900044e7090 R08: ffffffff81a22520 R09: 1ffffffff20ba64e [ 233.396152][ C1] R10: dffffc0000000000 R11: fffffbfff20ba64f R12: dffffc0000000000 [ 233.396164][ C1] R13: 1ffff9200089cdf4 R14: ffffffff81a22382 R15: ffffc900044e7020 [ 233.396177][ C1] ? vprintk_emit+0x532/0xa10 [ 233.396196][ C1] ? vprintk_emit+0x6d0/0xa10 [ 233.396212][ C1] ? vprintk_emit+0x6f7/0xa10 [ 233.396233][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 233.396252][ C1] ? __lock_acquire+0xad5/0xd80 [ 233.396276][ C1] ? do_raw_spin_lock+0x151/0x370 [ 233.396298][ C1] _printk+0xd5/0x120 [ 233.396319][ C1] ? __netdev_printk+0x19e/0x4d0 [ 233.396334][ C1] ? __pfx__printk+0x10/0x10 [ 233.396355][ C1] ? __netdev_printk+0x30d/0x4d0 [ 233.396373][ C1] netdev_info+0x12d/0x180 [ 233.396393][ C1] ? __mutex_lock+0xb8b/0x1000 [ 233.396410][ C1] ? __dev_set_promiscuity+0x1ae/0x5a0 [ 233.396431][ C1] ? __pfx_netdev_info+0x10/0x10 [ 233.396453][ C1] ? internal_dev_destroy+0xef/0x170 [ 233.396471][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 233.396490][ C1] __dev_set_promiscuity+0x1c0/0x5a0 [ 233.396513][ C1] ? __pfx_ovs_dp_cmd_fill_info+0x10/0x10 [ 233.396539][ C1] dev_set_promiscuity+0x51/0xe0 [ 233.396561][ C1] internal_dev_destroy+0x10c/0x170 [ 233.396578][ C1] __dp_destroy+0x6a3/0x9b0 [ 233.396604][ C1] ovs_dp_cmd_del+0x23d/0x370 [ 233.396630][ C1] genl_rcv_msg+0xb38/0xf00 [ 233.396657][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.396679][ C1] ? rcu_is_watching+0x15/0xb0 [ 233.396695][ C1] ? trace_irq_disable+0x3b/0x120 [ 233.396716][ C1] ? preempt_schedule_irq+0x145/0x1c0 [ 233.396731][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 233.396756][ C1] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 233.396781][ C1] ? kasan_check_range+0x185/0x2a0 [ 233.396806][ C1] netlink_rcv_skb+0x208/0x480 [ 233.396823][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.396846][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.396878][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.396898][ C1] genl_rcv+0x28/0x40 [ 233.396918][ C1] netlink_unicast+0x7f8/0x9a0 [ 233.396937][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 233.396951][ C1] ? __virt_addr_valid+0x45f/0x530 [ 233.396971][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 233.396990][ C1] ? __check_object_size+0x478/0x720 [ 233.397014][ C1] netlink_sendmsg+0x8e8/0xce0 [ 233.397038][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.397058][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 233.397083][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.397101][ C1] __sock_sendmsg+0x221/0x270 [ 233.397119][ C1] ____sys_sendmsg+0x53c/0x870 [ 233.397145][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.397167][ C1] ? __fget_files+0x2a/0x420 [ 233.397192][ C1] ? __fget_files+0x2a/0x420 [ 233.397219][ C1] __sys_sendmsg+0x271/0x360 [ 233.397244][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.397290][ C1] ? do_syscall_64+0xb6/0x230 [ 233.397308][ C1] do_syscall_64+0xf3/0x230 [ 233.397325][ C1] ? clear_bhb_loop+0x45/0xa0 [ 233.397343][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.397359][ C1] RIP: 0033:0x7fc0b158d169 [ 233.397374][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.397387][ C1] RSP: 002b:00007fc0b23e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.397403][ C1] RAX: ffffffffffffffda RBX: 00007fc0b17a5fa0 RCX: 00007fc0b158d169 [ 233.397415][ C1] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.397426][ C1] RBP: 00007fc0b23e3090 R08: 0000000000000000 R09: 0000000000000000 [ 233.397436][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.397446][ C1] R13: 0000000000000000 R14: 00007fc0b17a5fa0 R15: 00007ffd2c14c648 [ 233.397464][ C1] [ 233.402856][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 233.402882][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 233.402911][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.402926][ T31] Call Trace: [ 233.402935][ T31] [ 233.402947][ T31] dump_stack_lvl+0x241/0x360 [ 233.402985][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.403015][ T31] ? __pfx__printk+0x10/0x10 [ 233.403049][ T31] ? vscnprintf+0x5d/0x90 [ 233.403082][ T31] panic+0x349/0x880 [ 233.403107][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 233.403142][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 233.403175][ T31] ? __pfx_panic+0x10/0x10 [ 233.403198][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 233.403228][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 233.403251][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 233.403282][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 233.403316][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 233.403351][ T31] watchdog+0x1097/0x10a0 [ 233.403384][ T31] ? watchdog+0x1ea/0x10a0 [ 233.403421][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.403452][ T31] kthread+0x7a9/0x920 [ 233.403483][ T31] ? __pfx_watchdog+0x10/0x10 [ 233.403514][ T31] ? __pfx_kthread+0x10/0x10 [ 233.403539][ T31] ? __pfx_kthread+0x10/0x10 [ 233.403562][ T31] ? __pfx_kthread+0x10/0x10 [ 233.403588][ T31] ? __pfx_kthread+0x10/0x10 [ 233.403688][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.403725][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.403748][ T31] ? __pfx_kthread+0x10/0x10 [ 233.403775][ T31] ret_from_fork+0x4b/0x80 [ 233.403797][ T31] ? __pfx_kthread+0x10/0x10 [ 233.403823][ T31] ret_from_fork_asm+0x1a/0x30 [ 233.403868][ T31] [ 233.408050][ T31] Kernel Offset: disabled