last executing test programs: 1m43.385236452s ago: executing program 0 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) (async) 1m31.825157812s ago: executing program 0 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) (async) 1m18.965610449s ago: executing program 0 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) (async) 1m7.745709152s ago: executing program 0 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) (async) 58.583389088s ago: executing program 0 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b5318f0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c030a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214217b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d37827bab1a32c9d788e9f74ee57012ca5bfd0dc090b59077b7ef4a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76789ae79ccec252203bda7798de237bbe019d70a7a2d8176638fd53465acdd321f5a500", 0x3b5}], 0x1}}], 0x2, 0x8000) (async) 49.049482583s ago: executing program 0 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) recvfrom$inet6(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1d, &(0x7f0000000000)='/proc/\x00et/\x00\x00t4/\x06\x00aK\fX\a0\x04\x00\x00\a\x00\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.min\x00', 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x8000) (async) 6.32005442s ago: executing program 1 (id=2984): bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000050000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008000900000000005c000b8008000a"], 0x184}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.955082217s ago: executing program 1 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="040100001a00ffff0000000000000000fe80000000000000000000000000001d6401010000000000000000000000000000010000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20040400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='writeback_bdi_register\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x74, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x80}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="8484", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xcf, 0x0, 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000000)={0x10000001}) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250100000008000700e00000010800020005000000080008000a1e01010c0001006e6c383032313100"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 5.615192568s ago: executing program 1 (id=2993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4009ea0c084632f0f3bfaa68c00000000000000000016000000000000ed1859e2550e606e32065ff88f009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a000000000000000100000604000000060000000000000000000020005f5f06"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6(0xa, 0x40000080806, 0x0) (async) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r3, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) (async) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmmsg$inet6(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001380)=[{0x0}, {&(0x7f0000000200)="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", 0xffa}, {&(0x7f0000001200)="03883c1183a4d77a6d0f2edb17bd69de70ade30cb33fdecc32b7e528dd130425c653e4c20107633287bb719274ea160817ed001fcd65f896d0da4f09dd3a40e026c20480bbf321c0e639ca16709ba1035921979325f6073642152dee842dcb8e542ed5bed8b5d1e3defef9b8100348346a147affa3c1d6455b4b1fcf638041723e337e8590c54a44e8fa35888f5cc5f39d1d0da2d84c578b91ee", 0x9a}], 0x3, &(0x7f0000002dc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x297}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts={{0x20, 0x29, 0x36, {0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}}}], 0x50}}], 0x1, 0x48081) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001007800000008000300", @ANYRES32=r2, @ANYBLOB="0c001780040003000400020008000500060000001400040070696d3672656725"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001007800000008000300", @ANYRES32=r2, @ANYBLOB="0c001780040003000400020008000500060000001400040070696d3672656725"], 0x4c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000046072a0e0000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280030800e000100627974656f7264657200000014000280080003400000000708000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000046072a0e0000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280030800e000100627974656f7264657200000014000280080003400000000708000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) bind$tipc(r0, 0x0, 0x0) 5.380348442s ago: executing program 1 (id=2998): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000000000000000000000000000000000000000000000000000000d000400000000000001000084000000000000000004"], &(0x7f00000002c0)=""/43, 0x6e, 0x2b, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008011) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}}) r3 = socket$inet6(0xa, 0x2, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) close(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r5, 0x4) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4(r4, 0x0, 0x0, 0x80000) 3.734171418s ago: executing program 4 (id=3010): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x73, 0x1}, 0xe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000300)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x6, 0x4) writev(r2, &(0x7f00000002c0), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x4) listen(r2, 0x2) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xbf, "ab8bb5fa6e5a575259087af040600dffc9a4b337cacd02eba88558769becd692f5ed22017dbd012db6a589137d3cb67e6eb0d734c6b062bcff572140d6f1c097f7ecacadd6e76d54f5dd31dd47d9271da6cbc67b104c9dfbaf619ccda86a6d60175e0a11640dbe6a1dd1a30a69640a1b2ac693519ba44ebf2678cd9926cf88ce603fb681c62e59a317833ccd60c04236b77227c4f9d5119a945e053cccead2a94c3fe36d7cf596a045e2441d43953da57b5ac2d845377c2aeea707f12df1b9"}, &(0x7f0000000040)=0xc7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x48000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x393, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x6, 0xede}, &(0x7f00000000c0)=0x8) 3.729394768s ago: executing program 3 (id=3011): socket(0x10, 0x3, 0x0) unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa6}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.533772599s ago: executing program 3 (id=3012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r3, 0x0, 0x23b7784ccfddd22, &(0x7f0000000000)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x36}, @remote}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08000d0004000000080026009e0900000800a0000000000008002700020020000c00700004000700040005000a0018"], 0x60}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x60, r2, 0x5, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x60}, 0x1, 0xffffffff00000003}, 0x24000081) 3.410536771s ago: executing program 4 (id=3014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000017552f1f1d75606c000000000000000000000000008500896700000f000000950000000000ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000007000800612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="fffc00000000000000d6de614400000000000000000000000000000000ee4024df8ac7b00416ff48af519ff5f3996ef5f93266811341a5effa47863ad61948f901"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r7, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x18}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4c080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000080)=@tcp6}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@dev, @initdev, 0x0}, &(0x7f0000000100)=0xc) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001439) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x4004743d, 0x2000000b) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) ppoll(&(0x7f0000000180)=[{r11}], 0x1, 0x0, 0x0, 0x0) close(r10) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x80000000, 0x4b98, 0x0, 0x800, r4, 0x7, '\x00', r9, r15, 0x0, 0x2, 0x1, 0xc, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r14], 0x104}}, 0x20008881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000000000513c6ec4000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.224464441s ago: executing program 3 (id=3015): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x21, 0x4) accept4$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @none}, 0x0, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14751, 0x40020}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4060010}, 0x4080194) 2.364303376s ago: executing program 4 (id=3018): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r1, 0x1, 0x45, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000400)={'vlan0\x00', 0xfffffffffffffffe, 0x41}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x55}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x106, &(0x7f0000000600)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0xd7, [@rand_addr, @rand_addr, @broadcast]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"123fe731c379a8f9bf71593c5410200dc60bd26108892e2b380a605724777adf94de67182933bd30978e247c5a827353f07670b941cf6b2fbb39124f12234e36e50400830b1b45950d8fa5d40002931af1c7958730cef4830447ce2035b780dd7b394aec342c54e6047a6e96fc6a91f4e6406632b6369b177fb62c76c047ecac32a6a5ea01846bb4721dc16ab972471185f41d2c6b33edc6d9d1406de7554d738b6cf0711b9f2a16ca8f0a54a78fe56f"}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000340)="8f15b5c66f958f3d17cbdb7f14d4e794d02990550e98ea16871ede2be9c64074f33551f99d19c665b523514293199b54d898e79e5f7cedcbb57ba459ab810923adeca93e3e576a371c13919bdcd968691f74abd71ccc7604ed713e6a2f53b8ecbdd77e220defb98439d7654ee737a9fc1a5ee29ebed9573c6cd68a3ad6f9", 0x7e}, {&(0x7f00000003c0)="e13498cd04a836000eb852b62c1b9d38a19fbbfb2526495a25b49f567ad18fb7e05b5ecf72", 0x25}, {&(0x7f0000002700)="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", 0xff}, {&(0x7f0000002800)="19e0f2b362fd631f63a70c121abf6a9bfb45abb435d86ea992bc3f3fb0a94c05d7903732208d25b486ee1100587c4ba9958b796a90df522b0bacfd06aea3d42d277628f017cc063ad5cfe214ba41250fd86e9e0bfb962caa951dfae86cd30d224ba3f1c34ff258ed2313835deccfd4871eaaff6f595a42fdd522f022294df432b1a3bbee20cfe37c09944403a4a10c9e07e0240dca6a3a8ad7e53881f7def4930c476d000ce813e44b354374e2d4a1f2bb6d225b4c76985e3911449cca97fa9e1e9d3625ae1a8ab9f0afd0b5372444032526b22a7ba6d3d87ca1368e7ae7beafa02a62276dbbde9184dd", 0xea}, {&(0x7f0000000400)="64fe33e85ad4830eb78591bad47baac7bf10264a09ac8210259ea33e388cc0bd18522761e61212d19614b92c6c1e03ce85dddbbcfa", 0x35}, {&(0x7f0000001480)="420780a8908031fb2b00387cc4b32789e2415c63384a2f8d22333998fa8d21", 0x1f}], 0x6}}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005140)='W', 0x1}], 0x1}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd2d, 0xa5dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4008) 2.2573448s ago: executing program 3 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000000c0)=0x176f, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r4, &(0x7f0000000200)="3f030e000800120006001e0089e9", 0x5ee, 0x0, &(0x7f0000000fc0)={0x11, 0x0, r5}, 0x14) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000200000000000100", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r10, 0x2, 0x1, 0x400000, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r11, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008003400d500000008000300", @ANYRES32=r12, @ANYBLOB="08003c0002000000080031000000000005002d000100000005003500f2000000050033"], 0x54}}, 0x0) 2.064454022s ago: executing program 4 (id=3021): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) 1.936182172s ago: executing program 2 (id=3022): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x24040c44) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x10, 0x40, 0x7c8, 0x401, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end, @rr={0x7, 0xb, 0x24, [@rand_addr=0x64010101, @local]}, @cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}]}}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ac5fb5, 0x800}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="800e0000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007f00000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000f00000008000100", @ANYRES32=0x0, @ANYBLOB="a001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000e00000008000100", @ANYRES32=0x0, @ANYBLOB="1002028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000700000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000400088002000000070005060300000005007600090000000200571002000000ff0fb7810800000008000405000400000500ff81ff0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000001003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000040bc08000100", @ANYRES32=0x0, @ANYBLOB="cc0002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040001008408ff00000009001081926e000008000001abffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r8, @ANYBLOB="d400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400a60100005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400080069ee01040000ff2202813dfdffff0100096a1f0c0000060002def3ffffff020000f4030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="b00102804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000600810006000000080002e83dab0000020003030700000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f8ffffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000700000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000052000400030000003c00010024000100757365725f6c696e6b75700000000000000000000000000000000000000000000500030006000000040004000800", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040008000000"], 0xe80}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.916725636s ago: executing program 4 (id=3023): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80"], 0xfdef) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @func_proto, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4}]}]}}, &(0x7f00000002c0)=""/43, 0x6e, 0x2b, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.788126791s ago: executing program 3 (id=3024): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20ffffffff00030500"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) read$alg(r5, &(0x7f0000000280)=""/154, 0x9a) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x24c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x856}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r9, 0xffffffd6) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r8, &(0x7f0000000280)=@file={0x1}, 0x6e) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xf0, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 1.781464854s ago: executing program 2 (id=3025): r0 = socket(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa6}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004800128009000100766c616e000000003800028006000100000000002800038037ff010000000080020000000c00010001000000008000000c00010001000000050000000400048008000500", @ANYRES32=r6], 0x78}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000400000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r7], 0x3c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r8, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x24, [{}, {}, {}, {}, {}]}, 0x58) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@map=0x1, 0x34, 0x25, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r11 = socket$inet6_sctp(0xa, 0x4, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6a0ac4ff0000000071108f00000000009500000000000000abbf926732363f680dc5ce3c949abe9069eff33ce34336926ef225ada15c49f424cac43dc8d9bb13811a78f7b70ec2e030a3fa52a3c03924657572edd38b7a744ca5384a55b518678ce87b1ea326260d23e3365a75aa17d2f1e34758da6eb8283c987fc9924a513e1c7c6c7c4f402848aff744a97d016809897283845d91ecc763634c3718066caf387779"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x2a, &(0x7f0000000100)={0x9, {{0xa, 0x4e23, 0x5, @mcast1, 0x3}}}, 0x88) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_delrule={0x58, 0x21, 0x300, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x1001a}, [@FRA_DST={0x24, 0x1, @empty}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @private0}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.742205391s ago: executing program 3 (id=3026): bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100000000fffe0000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008000900000000005c000b8008000a"], 0x184}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.400243904s ago: executing program 2 (id=3027): shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x100012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x20, &(0x7f0000000200)={&(0x7f0000000080)=""/157, 0x9d, 0x0, &(0x7f0000000140)=""/68, 0x44}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x0, 0x87, 0x8000, 0xff, 0xffffffff80000000]}, &(0x7f0000000300)=0x78) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r8, 0x89e5, &(0x7f0000000640)={0x75, "8ba5433165a567642b6d43c76da3226ac34465b43e76c9461f019ef4ffd3fe71945ac8f089e46f11a2dbf7e8003b78c7945f7e2dd0bb52c8925ead55bd352394f4bdc7ae4a1018f2f6a82fca87fdaf87dba710c7a6205b7273e36a7ecc7993e032498aabd8f6d37581cf4c7324ba00a3e5533612ea9a1104f0e47fc005f41fc0"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100"/18, @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a0009e090000080026006c09000008009f0005000000"], 0x40}}, 0x0) 1.399753292s ago: executing program 4 (id=3028): unshare(0x62040200) unshare(0x40000000) mmap(&(0x7f0000627000/0x3000)=nil, 0x3000, 0xa, 0x80010, 0xffffffffffffffff, 0x60dce000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xe, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000190001002bbd7000fddbdf250a330004fc0400060000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0x0, 0x1}, 0xe) read(0xffffffffffffffff, &(0x7f00000006c0)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 988.334677ms ago: executing program 2 (id=3029): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffff3a3, 0x58}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r1, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) unshare(0x600) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 849.244301ms ago: executing program 2 (id=3030): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r0, &(0x7f0000001500)=[{0xfffffffffffffffe}], 0x1, 0x1, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) 583.532373ms ago: executing program 2 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x5, 0x7, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, 0x8, 0x8, 0x6, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000780)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x18, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x67) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}]}, 0x3c}}, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="2a2cb8f298f2b502d79b4d0e814b02167170efb179de9b137d16ced2b845cff862afafd302fbc0c1faf0b2b7066303f0d7f7557f", 0x34}, {0x0}, {&(0x7f0000000600)}, {&(0x7f0000000240)="0006d86d3dbf2dc9a61795145d6da02fe7aaf3840671dfa0ee6b0446fe8942297dcd77dbe94e6e44f70c1bd7fb08f65e8ffbd0ee822f83402bdd57", 0x3b}, {&(0x7f0000000280)}], 0x5}, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000100)="b9ff03076804268c989e", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf253800000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24048800) r11 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26}, 0x24}}, 0x6008001) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xa, 0xffff}, {0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xdd}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003200)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0xffe0, 0xfff2}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x87d8}, 0x8) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r13, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) 103.097217ms ago: executing program 1 (id=3032): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2a, 0xa5dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xfffffffffffffdc2}, 0x1, 0x0, 0x0, 0x20040881}, 0x4008) 0s ago: executing program 1 (id=3033): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x18) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000180)={r8, 0x5}, 0x8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) (async) r10 = socket(0x11, 0x3, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f00000001c0)={0xebc3, 0x2, 0x5a5, 0xfb, 0xf8, 0x1e, 0x1d, "4823a18e7c916314a658d12c36f0dac351b9ebff", "3b54d4db15e335cd158746ea24a90b717674d89f"}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r12, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @random="c4bcbcac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd0}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x9, 0x0, {{0x12, 0x4, 0x3, 0x6, 0x48, 0x64, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @remote, {[@timestamp_prespec={0x44, 0x34, 0x60, 0x3, 0x9, [{@empty, 0x401}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x80000000}, {@broadcast}, {@empty, 0x4}, {@loopback, 0x3ff}, {@broadcast, 0x1}]}]}}}}}) (async) r15 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@setlink={0x234, 0x13, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r13, 0x40000, 0x100}, [@IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8, 0xa, r14}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10}, @IFLA_NET_NS_PID={0x8, 0x13, r15}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x9}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xaa554}]}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_VF_PORTS={0x15c, 0x18, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "33e78930dc94a96768d250f1a2487ed7"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x66c}, @IFLA_PORT_VF={0x8, 0x1, 0x80}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a1c0e0dca1828ba96fb3517ae2fd77f"}, @IFLA_PORT_PROFILE={0x10, 0x2, '#$$%![+$,.*\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9eaa24ea83169e5dfb3aa168cd4ccb7f"}, @IFLA_PORT_PROFILE={0x7, 0x2, ']\x9f\x00'}, @IFLA_PORT_PROFILE={0xc, 0x2, '&#\'#/}S\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bf740cf270928246e3b9428f485bd614"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "100eb0c1095ef778898c809f46bfa1dc"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "952c7bc180b88c5911b90ea5af8a81ac"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a00dfdfebf526aa316935b38be8921a4"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6290}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ethtool\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x9e}]}]}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'bond_slave_1\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'wg0\x00'}]}]}, 0x234}}, 0x0) kernel console output (not intermixed with test programs): 4698][T13462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.209383][T13462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.260314][T13462] team0: Port device team_slave_0 added [ 399.268739][T13462] team0: Port device team_slave_1 added [ 399.283276][ T5858] Bluetooth: hci2: command tx timeout [ 399.388534][T13462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.405720][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.455307][T13462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.512569][T13462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.552312][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.591734][T13462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.747758][T13462] hsr_slave_0: entered promiscuous mode [ 399.764044][T13462] hsr_slave_1: entered promiscuous mode [ 399.772892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.336167][T13462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.356064][T13462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.373104][T13462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.395431][T13462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.530637][T13462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.550628][T13462] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.633517][T13462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.644842][T13462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.667930][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.675104][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.685796][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.692922][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.803192][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.840384][T13462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.889176][T13462] veth0_vlan: entered promiscuous mode [ 400.902308][T13462] veth1_vlan: entered promiscuous mode [ 400.927667][T13462] veth0_macvtap: entered promiscuous mode [ 400.937649][T13462] veth1_macvtap: entered promiscuous mode [ 400.954522][T13462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.987612][T13462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.998948][T13462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.008006][T13462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.016968][T13462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.026158][T13462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.139265][T10121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.169839][T10121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.211778][T10121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.233479][T13628] ipt_REJECT: TCP_RESET invalid for non-tcp [ 401.240963][T10121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.253919][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 401.363370][ T5858] Bluetooth: hci2: command tx timeout [ 401.672462][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 401.842947][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.960387][T13657] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2229'. [ 401.983201][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'. [ 402.004778][T13659] lo speed is unknown, defaulting to 1000 [ 402.010401][T13657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'. [ 402.029975][T13657] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2229'. [ 402.234529][T13668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2231'. [ 402.292701][T13659] ip6gretap0 speed is unknown, defaulting to 1000 [ 402.293414][T13663] lo speed is unknown, defaulting to 1000 [ 402.704521][T13684] veth9: entered promiscuous mode [ 402.721621][T13663] ip6gretap0 speed is unknown, defaulting to 1000 [ 402.892976][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.006986][T13693] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 403.619027][T13708] x_tables: duplicate underflow at hook 1 [ 403.647845][ T4345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.932907][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.837989][T13731] netlink: 'syz.1.2247': attribute type 7 has an invalid length. [ 404.963006][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.328875][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.339615][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.347780][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.356316][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.364272][ T5869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 405.371589][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.398959][ T4345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.451796][T13757] lo speed is unknown, defaulting to 1000 [ 405.545480][T13757] ip6gretap0 speed is unknown, defaulting to 1000 [ 405.656461][ T4345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.808103][T13765] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 405.828704][T13765] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2255'. [ 405.862593][T13766] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 405.904616][T13762] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 405.997397][ T4345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.012936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.043075][T13760] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 406.238232][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 406.252291][T13757] chnl_net:caif_netlink_parms(): no params data found [ 406.269789][ T4345] bridge_slave_1: left allmulticast mode [ 406.287601][ T4345] bridge_slave_1: left promiscuous mode [ 406.304706][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.334537][ T4345] bridge_slave_0: left allmulticast mode [ 406.340235][ T4345] bridge_slave_0: left promiscuous mode [ 406.362411][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.520332][T13799] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2262'. [ 406.638291][T13804] netlink: 'syz.4.2264': attribute type 2 has an invalid length. [ 406.666370][T13802] FAULT_INJECTION: forcing a failure. [ 406.666370][T13802] name failslab, interval 1, probability 0, space 0, times 0 [ 406.679282][T13802] CPU: 0 UID: 0 PID: 13802 Comm: syz.1.2263 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 406.689729][T13802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 406.699806][T13802] Call Trace: [ 406.703085][T13802] [ 406.706019][T13802] dump_stack_lvl+0x241/0x360 [ 406.710689][T13802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.715889][T13802] ? __pfx__printk+0x10/0x10 [ 406.720496][T13802] ? __kmalloc_node_noprof+0xb7/0x440 [ 406.725886][T13802] ? __pfx___might_resched+0x10/0x10 [ 406.731205][T13802] should_fail_ex+0x3b0/0x4e0 [ 406.735901][T13802] should_failslab+0xac/0x100 [ 406.740585][T13802] __kmalloc_node_noprof+0xdf/0x440 [ 406.745786][T13802] ? __kvmalloc_node_noprof+0x72/0x190 [ 406.751265][T13802] __kvmalloc_node_noprof+0x72/0x190 [ 406.756557][T13802] bpf_test_run_xdp_live+0x290/0x21f0 [ 406.761930][T13802] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 406.767824][T13802] ? __pfx_lock_release+0x10/0x10 [ 406.772852][T13802] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 406.778149][T13802] ? __pfx___might_resched+0x10/0x10 [ 406.783434][T13802] ? __mutex_unlock_slowpath+0x21e/0x790 [ 406.789064][T13802] ? __pfx_autoremove_wake_function+0x10/0x10 [ 406.795145][T13802] ? __mutex_unlock_slowpath+0x21e/0x790 [ 406.800777][T13802] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 406.806585][T13802] ? synchronize_rcu+0x11b/0x360 [ 406.811529][T13802] ? __pfx_synchronize_rcu+0x10/0x10 [ 406.816832][T13802] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 406.823074][T13802] ? 0xffffffffa000200c [ 406.827234][T13802] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 406.833135][T13802] ? _copy_from_user+0x99/0xc0 [ 406.837906][T13802] ? bpf_test_init+0x15a/0x180 [ 406.842658][T13802] ? xdp_convert_md_to_buff+0x5b/0x330 [ 406.848111][T13802] bpf_prog_test_run_xdp+0x805/0x11e0 [ 406.853483][T13802] ? __pfx_lock_release+0x10/0x10 [ 406.858511][T13802] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 406.864312][T13802] ? __fget_files+0x2a/0x410 [ 406.868900][T13802] ? __fget_files+0x2a/0x410 [ 406.873491][T13802] ? fput+0x21b/0x290 [ 406.877469][T13802] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 406.883271][T13802] bpf_prog_test_run+0x2e4/0x360 [ 406.888208][T13802] __sys_bpf+0x48d/0x810 [ 406.892449][T13802] ? __pfx___sys_bpf+0x10/0x10 [ 406.897221][T13802] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.903202][T13802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.909523][T13802] ? do_syscall_64+0x100/0x230 [ 406.914288][T13802] __x64_sys_bpf+0x7c/0x90 [ 406.918700][T13802] do_syscall_64+0xf3/0x230 [ 406.923196][T13802] ? clear_bhb_loop+0x35/0x90 [ 406.927885][T13802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.933771][T13802] RIP: 0033:0x7f8e1bf7e819 [ 406.938177][T13802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.957778][T13802] RSP: 002b:00007f8e1cd00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.966190][T13802] RAX: ffffffffffffffda RBX: 00007f8e1c135fa0 RCX: 00007f8e1bf7e819 [ 406.974155][T13802] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 406.982119][T13802] RBP: 00007f8e1cd00090 R08: 0000000000000000 R09: 0000000000000000 [ 406.990082][T13802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.998052][T13802] R13: 0000000000000000 R14: 00007f8e1c135fa0 R15: 00007ffd60fd19b8 [ 407.006037][T13802] [ 407.048336][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.264182][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.276843][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.287329][ T4345] bond0 (unregistering): Released all slaves [ 407.308554][T13796] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 407.443318][ T5858] Bluetooth: hci2: command tx timeout [ 407.623789][T13817] ip6gre2: entered promiscuous mode [ 407.630776][T13817] ip6gre2: entered allmulticast mode [ 407.789615][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.815200][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.822449][T13757] bridge_slave_0: entered allmulticast mode [ 407.840184][T13839] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2276'. [ 407.843575][T13757] bridge_slave_0: entered promiscuous mode [ 407.875311][T13757] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.888490][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.897194][T13757] bridge_slave_1: entered allmulticast mode [ 407.911332][T13842] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2276'. [ 407.924240][T13757] bridge_slave_1: entered promiscuous mode [ 407.937554][T13837] FAULT_INJECTION: forcing a failure. [ 407.937554][T13837] name failslab, interval 1, probability 0, space 0, times 0 [ 407.967767][T13837] CPU: 1 UID: 0 PID: 13837 Comm: syz.4.2275 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 407.978228][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 407.988283][T13837] Call Trace: [ 407.991558][T13837] [ 407.994488][T13837] dump_stack_lvl+0x241/0x360 [ 407.999159][T13837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.004347][T13837] ? __pfx__printk+0x10/0x10 [ 408.008936][T13837] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 408.014838][T13837] ? __pfx___might_resched+0x10/0x10 [ 408.020123][T13837] should_fail_ex+0x3b0/0x4e0 [ 408.024813][T13837] should_failslab+0xac/0x100 [ 408.029512][T13837] __kmalloc_cache_node_noprof+0x74/0x300 [ 408.035270][T13837] ? page_pool_create_percpu+0x77/0xa00 [ 408.040824][T13837] ? rcu_is_watching+0x15/0xb0 [ 408.045617][T13837] page_pool_create_percpu+0x77/0xa00 [ 408.051024][T13837] bpf_test_run_xdp_live+0x2e6/0x21f0 [ 408.056422][T13837] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 408.062353][T13837] ? __pfx_lock_release+0x10/0x10 [ 408.067404][T13837] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 408.072726][T13837] ? __pfx___might_resched+0x10/0x10 [ 408.078032][T13837] ? __mutex_unlock_slowpath+0x21e/0x790 [ 408.083667][T13837] ? __pfx_autoremove_wake_function+0x10/0x10 [ 408.089736][T13837] ? __mutex_unlock_slowpath+0x21e/0x790 [ 408.095369][T13837] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 408.101169][T13837] ? synchronize_rcu+0x11b/0x360 [ 408.106107][T13837] ? __pfx_synchronize_rcu+0x10/0x10 [ 408.111403][T13837] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 408.117644][T13837] ? 0xffffffffa000209c [ 408.121804][T13837] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 408.122910][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.127694][T13837] ? _copy_from_user+0x99/0xc0 [ 408.139300][T13837] ? bpf_test_init+0x15a/0x180 [ 408.144059][T13837] ? xdp_convert_md_to_buff+0x5b/0x330 [ 408.149518][T13837] bpf_prog_test_run_xdp+0x805/0x11e0 [ 408.154886][T13837] ? __pfx_lock_release+0x10/0x10 [ 408.159908][T13837] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.165705][T13837] ? __fget_files+0x2a/0x410 [ 408.170290][T13837] ? __fget_files+0x2a/0x410 [ 408.174880][T13837] ? fput+0x21b/0x290 [ 408.178859][T13837] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.184662][T13837] bpf_prog_test_run+0x2e4/0x360 [ 408.189599][T13837] __sys_bpf+0x48d/0x810 [ 408.193839][T13837] ? __pfx___sys_bpf+0x10/0x10 [ 408.198606][T13837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 408.204581][T13837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 408.210900][T13837] ? do_syscall_64+0x100/0x230 [ 408.215660][T13837] __x64_sys_bpf+0x7c/0x90 [ 408.220073][T13837] do_syscall_64+0xf3/0x230 [ 408.224569][T13837] ? clear_bhb_loop+0x35/0x90 [ 408.229245][T13837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.235131][T13837] RIP: 0033:0x7fd7ca37e819 [ 408.239537][T13837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.259137][T13837] RSP: 002b:00007fd7cb19b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.267547][T13837] RAX: ffffffffffffffda RBX: 00007fd7ca535fa0 RCX: 00007fd7ca37e819 [ 408.275511][T13837] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 408.283476][T13837] RBP: 00007fd7cb19b090 R08: 0000000000000000 R09: 0000000000000000 [ 408.291463][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.299426][T13837] R13: 0000000000000000 R14: 00007fd7ca535fa0 R15: 00007ffc2a2b6c98 [ 408.307408][T13837] [ 408.387944][T13757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.425904][T13757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.599112][T13757] team0: Port device team_slave_0 added [ 408.614885][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 408.625749][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 408.630094][T13757] team0: Port device team_slave_1 added [ 408.643497][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 408.653104][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 408.668516][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 408.694329][T13859] netlink: zone id is out of range [ 408.699738][T13859] netlink: zone id is out of range [ 408.731463][ T4345] hsr_slave_0: left promiscuous mode [ 408.734179][T13861] netlink: 'syz.2.2281': attribute type 2 has an invalid length. [ 408.745186][ T4345] hsr_slave_1: left promiscuous mode [ 408.752517][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.773453][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.782166][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.799167][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.806524][ C1] bridge0: port 1(macvlan1) entered forwarding state [ 408.806575][ C1] bridge0: topology change detected, propagating [ 408.852382][T13868] netlink: 'syz.3.2282': attribute type 10 has an invalid length. [ 408.861164][ T4345] veth1_macvtap: left promiscuous mode [ 408.875658][ T4345] veth0_macvtap: left promiscuous mode [ 408.881440][ T4345] veth1_vlan: left promiscuous mode [ 408.899117][ T4345] veth0_vlan: left promiscuous mode [ 409.212924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.472601][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 409.518797][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 409.527086][ T5858] Bluetooth: hci2: command tx timeout [ 409.937766][T13859] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.946679][T13859] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.955568][T13859] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.964355][T13859] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.048889][T13882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 410.078976][T13882] team0: Port device bond5 added [ 410.177481][T13757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.213703][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.247488][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.272997][T13757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.316643][T13757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.332646][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.363655][T13757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.700303][T13757] hsr_slave_0: entered promiscuous mode [ 410.720666][T13757] hsr_slave_1: entered promiscuous mode [ 411.132659][T13937] __nla_validate_parse: 7 callbacks suppressed [ 411.132680][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 411.183534][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 411.282991][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.332022][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2305'. [ 411.395375][T13949] vlan3: entered allmulticast mode [ 411.588548][T13958] FAULT_INJECTION: forcing a failure. [ 411.588548][T13958] name failslab, interval 1, probability 0, space 0, times 0 [ 411.602570][T13958] CPU: 1 UID: 0 PID: 13958 Comm: syz.3.2308 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 411.613030][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 411.623118][T13958] Call Trace: [ 411.626423][T13958] [ 411.629371][T13958] dump_stack_lvl+0x241/0x360 [ 411.634077][T13958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.639310][T13958] ? __pfx__printk+0x10/0x10 [ 411.643937][T13958] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 411.649947][T13958] ? __pfx___might_resched+0x10/0x10 [ 411.654024][ T5858] Bluetooth: hci2: command tx timeout [ 411.655236][T13958] ? trace_contention_end+0x3c/0x120 [ 411.655271][T13958] should_fail_ex+0x3b0/0x4e0 [ 411.655298][T13958] should_failslab+0xac/0x100 [ 411.655317][T13958] ? __alloc_skb+0x1c3/0x440 [ 411.679830][T13958] kmem_cache_alloc_node_noprof+0x71/0x320 [ 411.685639][T13958] __alloc_skb+0x1c3/0x440 [ 411.690048][T13958] ? __pfx___alloc_skb+0x10/0x10 [ 411.694981][T13958] ? netlink_ack_tlv_len+0x6e/0x200 [ 411.700172][T13958] netlink_ack+0x13f/0xa30 [ 411.704589][T13958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.710059][T13958] netlink_rcv_skb+0x262/0x430 [ 411.714823][T13958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.720283][T13958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.725570][T13958] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.730760][T13958] netlink_unicast+0x7f6/0x990 [ 411.735517][T13958] ? __pfx_netlink_unicast+0x10/0x10 [ 411.740791][T13958] ? __virt_addr_valid+0x183/0x530 [ 411.745898][T13958] ? __check_object_size+0x48e/0x900 [ 411.751178][T13958] netlink_sendmsg+0x8e4/0xcb0 [ 411.755958][T13958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.761274][T13958] ? aa_sock_msg_perm+0x91/0x160 [ 411.766216][T13958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.771499][T13958] __sock_sendmsg+0x221/0x270 [ 411.776199][T13958] ____sys_sendmsg+0x52a/0x7e0 [ 411.780960][T13958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.786233][T13958] ? __fget_files+0x2a/0x410 [ 411.790828][T13958] ? __fget_files+0x2a/0x410 [ 411.795466][T13958] __sys_sendmsg+0x269/0x350 [ 411.800077][T13958] ? __pfx_lock_release+0x10/0x10 [ 411.805122][T13958] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.810261][T13958] ? __pfx_vfs_write+0x10/0x10 [ 411.815071][T13958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.821421][T13958] ? do_syscall_64+0x100/0x230 [ 411.826201][T13958] ? do_syscall_64+0xb6/0x230 [ 411.830903][T13958] do_syscall_64+0xf3/0x230 [ 411.835392][T13958] ? clear_bhb_loop+0x35/0x90 [ 411.840054][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.845927][T13958] RIP: 0033:0x7fc91ef7e819 [ 411.850327][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.869935][T13958] RSP: 002b:00007fc91fd46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.878378][T13958] RAX: ffffffffffffffda RBX: 00007fc91f135fa0 RCX: 00007fc91ef7e819 [ 411.886373][T13958] RDX: 0000000000000040 RSI: 00000000200000c0 RDI: 0000000000000003 [ 411.894364][T13958] RBP: 00007fc91fd46090 R08: 0000000000000000 R09: 0000000000000000 [ 411.902354][T13958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.910341][T13958] R13: 0000000000000000 R14: 00007fc91f135fa0 R15: 00007ffc9b3a6fd8 [ 411.918351][T13958] [ 412.060431][T13757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.084440][T13757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.107658][T13757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.135556][T13757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.282774][T13979] tipc: Enabled bearer , priority 10 [ 412.322940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.443614][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.491976][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.544710][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.551843][T10121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.587990][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.595163][T10121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.855910][T13757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.959002][T13757] veth0_vlan: entered promiscuous mode [ 412.987344][T13757] veth1_vlan: entered promiscuous mode [ 413.019946][T13757] veth0_macvtap: entered promiscuous mode [ 413.022733][T14014] sctp: [Deprecated]: syz.3.2325 (pid 14014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.022733][T14014] Use struct sctp_sack_info instead [ 413.029750][T13757] veth1_macvtap: entered promiscuous mode [ 413.065186][T13757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.104503][T13757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.133285][T13757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.151877][T13757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.162304][T13757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.171719][T13757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.324523][T14021] netlink: 'syz.4.2327': attribute type 10 has an invalid length. [ 413.363091][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.393119][ T5904] tipc: Node number set to 3036691048 [ 413.410432][T14018] bridge0: entered promiscuous mode [ 413.425471][T14018] bridge0: entered allmulticast mode [ 413.468682][T14018] team0: Port device bridge0 added [ 413.518477][T14023] bridge0: port 1(ip6gretap0) entered blocking state [ 413.532257][T14023] bridge0: port 1(ip6gretap0) entered disabled state [ 413.545288][T14023] ip6gretap0: entered allmulticast mode [ 413.556455][T14023] ip6gretap0: entered promiscuous mode [ 413.569061][T14023] bridge0: port 1(ip6gretap0) entered blocking state [ 413.576267][T14023] bridge0: port 1(ip6gretap0) entered listening state [ 413.621272][T10121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.652981][T10121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.688306][ T8146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.696646][ T5858] Bluetooth: hci2: command tx timeout [ 413.712687][ T8146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.316945][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 414.336398][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 414.363523][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2339'. [ 414.402984][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.423800][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2341'. [ 414.515690][T14056] netlink: 'syz.3.2341': attribute type 2 has an invalid length. [ 414.594929][T14060] tipc: Enabling of bearer rejected, failed to enable media [ 414.675544][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'. [ 414.759907][T14076] lo speed is unknown, defaulting to 1000 [ 414.798227][T14074] syzkaller0: entered allmulticast mode [ 415.058012][T10121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.443064][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.452434][T14076] ip6gretap0 speed is unknown, defaulting to 1000 [ 416.428395][T10121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.492883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.571968][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 416.623723][T10121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.722450][T14105] netlink: 'syz.4.2356': attribute type 8 has an invalid length. [ 416.895525][T10121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.985787][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.010070][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.063779][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.072111][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.079990][T10121] bridge_slave_1: left allmulticast mode [ 417.086216][T10121] bridge_slave_1: left promiscuous mode [ 417.092020][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.100183][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 417.107944][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 417.142481][T10121] bridge_slave_0: left allmulticast mode [ 417.158760][T10121] bridge_slave_0: left promiscuous mode [ 417.187773][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.532952][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.955956][T10121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.969287][T10121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.981090][T10121] bond0 (unregistering): Released all slaves [ 418.007285][T14129] syzkaller0: entered allmulticast mode [ 418.232684][T14148] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 418.261380][T14117] lo speed is unknown, defaulting to 1000 [ 418.272591][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2363'. [ 418.298912][T14148] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 418.387266][T14154] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2365'. [ 418.428046][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2365'. [ 418.438144][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2363'. [ 418.456553][T14154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2365'. [ 418.483414][T14154] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2365'. [ 418.494236][T14117] ip6gretap0 speed is unknown, defaulting to 1000 [ 418.572886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.688204][T14163] syzkaller0: entered allmulticast mode [ 418.772915][T10121] hsr_slave_0: left promiscuous mode [ 418.784247][T10121] hsr_slave_1: left promiscuous mode [ 418.799023][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.840059][T10121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.876108][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.898479][T10121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.981590][T10121] veth1_macvtap: left promiscuous mode [ 418.991541][T10121] veth0_macvtap: left promiscuous mode [ 418.998685][T10121] veth1_vlan: left promiscuous mode [ 419.007691][T10121] veth0_vlan: left promiscuous mode [ 419.203194][ T5858] Bluetooth: hci2: command tx timeout [ 419.582046][T10121] team0 (unregistering): Port device team_slave_1 removed [ 419.608428][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.656527][T10121] team0 (unregistering): Port device team_slave_0 removed [ 420.402134][T14179] netlink: 'syz.1.2371': attribute type 58 has an invalid length. [ 420.423051][T14179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2371'. [ 420.508747][T14185] netlink: 'syz.4.2373': attribute type 3 has an invalid length. [ 420.527044][T14185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2373'. [ 420.582148][T14117] chnl_net:caif_netlink_parms(): no params data found [ 420.652886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.765715][T14191] vlan1: left allmulticast mode [ 420.778661][T14191] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 420.800383][T14117] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.807606][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.815310][T14117] bridge_slave_0: entered allmulticast mode [ 420.822268][T14117] bridge_slave_0: entered promiscuous mode [ 420.830197][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.837447][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.844690][T14117] bridge_slave_1: entered allmulticast mode [ 420.851645][T14117] bridge_slave_1: entered promiscuous mode [ 420.924273][T14117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.949514][T14117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.151106][T14117] team0: Port device team_slave_0 added [ 421.175567][T14201] netlink: 'syz.3.2378': attribute type 10 has an invalid length. [ 421.229217][T14117] team0: Port device team_slave_1 added [ 421.241301][T14203] Bluetooth: MGMT ver 1.23 [ 421.283094][ T5858] Bluetooth: hci2: command tx timeout [ 421.380869][T14117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.388325][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.663261][T14117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.681535][T14117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.688649][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.709790][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.744262][T14117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.902461][T14117] hsr_slave_0: entered promiscuous mode [ 421.958272][T14117] hsr_slave_1: entered promiscuous mode [ 422.010242][T14226] netlink: 'syz.3.2384': attribute type 6 has an invalid length. [ 422.087238][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 422.220197][T14233] FAULT_INJECTION: forcing a failure. [ 422.220197][T14233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.241104][T14233] CPU: 1 UID: 0 PID: 14233 Comm: syz.4.2387 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 422.251560][T14233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 422.261632][T14233] Call Trace: [ 422.264921][T14233] [ 422.267874][T14233] dump_stack_lvl+0x241/0x360 [ 422.272571][T14233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.277781][T14233] ? __pfx__printk+0x10/0x10 [ 422.282404][T14233] should_fail_ex+0x3b0/0x4e0 [ 422.287105][T14233] prepare_alloc_pages+0x1da/0x5b0 [ 422.292251][T14233] __alloc_pages_noprof+0x16f/0x710 [ 422.297479][T14233] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 422.303240][T14233] alloc_pages_mpol_noprof+0x3e8/0x680 [ 422.308719][T14233] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 422.314725][T14233] vma_alloc_folio_noprof+0x12e/0x230 [ 422.320111][T14233] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 422.326023][T14233] ? do_raw_spin_unlock+0x13c/0x8b0 [ 422.331243][T14233] folio_prealloc+0x31/0x170 [ 422.335858][T14233] do_wp_page+0x11c4/0x52d0 [ 422.340391][T14233] ? __pfx_do_wp_page+0x10/0x10 [ 422.345267][T14233] ? __pfx_lock_acquire+0x10/0x10 [ 422.350311][T14233] ? do_raw_spin_lock+0x14f/0x370 [ 422.355372][T14233] handle_pte_fault+0x10e3/0x6820 [ 422.360678][T14233] ? mark_lock+0x9a/0x360 [ 422.365030][T14233] ? __lock_acquire+0x1397/0x2100 [ 422.370075][T14233] ? mark_lock+0x9a/0x360 [ 422.374424][T14233] ? __pfx_handle_pte_fault+0x10/0x10 [ 422.379819][T14233] ? __lock_acquire+0x1397/0x2100 [ 422.384891][T14233] ? __pfx_lock_acquire+0x10/0x10 [ 422.389939][T14233] ? do_raw_spin_lock+0x14f/0x370 [ 422.394995][T14233] handle_mm_fault+0x1106/0x1bb0 [ 422.399992][T14233] ? __pfx_handle_mm_fault+0x10/0x10 [ 422.405293][T14233] ? follow_page_pte+0x1057/0x2010 [ 422.410435][T14233] ? __pfx_find_vma+0x10/0x10 [ 422.415134][T14233] ? vma_is_secretmem+0xd/0x50 [ 422.419914][T14233] ? check_vma_flags+0x52b/0x5a0 [ 422.424879][T14233] __get_user_pages+0x1c82/0x49e0 [ 422.429944][T14233] ? mark_lock+0x9a/0x360 [ 422.434312][T14233] ? __pfx___get_user_pages+0x10/0x10 [ 422.439705][T14233] ? __pfx_down_read_killable+0x10/0x10 [ 422.445271][T14233] ? __pfx_lock_acquire+0x10/0x10 [ 422.450310][T14233] ? try_get_folio+0xf1/0x6f0 [ 422.455009][T14233] ? __pfx_lock_release+0x10/0x10 [ 422.460054][T14233] __gup_longterm_locked+0xe64/0x17f0 [ 422.465456][T14233] ? mark_lock+0x9a/0x360 [ 422.469807][T14233] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.475825][T14233] ? __pfx___gup_longterm_locked+0x10/0x10 [ 422.481660][T14233] ? sanity_check_pinned_pages+0x12b2/0x13b0 [ 422.487694][T14233] gup_fast_fallback+0x276c/0x2b80 [ 422.492864][T14233] ? __pfx_gup_fast_fallback+0x10/0x10 [ 422.498353][T14233] ? 0xffffffffa000094c [ 422.502529][T14233] ? 0xffffffffa000094c [ 422.506701][T14233] ? is_bpf_text_address+0x26/0x2a0 [ 422.511919][T14233] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 422.518100][T14233] ? kernel_text_address+0xa7/0xe0 [ 422.523232][T14233] ? __kernel_text_address+0xd/0x40 [ 422.528447][T14233] ? unwind_get_return_address+0x4d/0x90 [ 422.534094][T14233] ? arch_stack_walk+0xfd/0x150 [ 422.538981][T14233] ? is_valid_gup_args+0x124/0x200 [ 422.544117][T14233] pin_user_pages_fast+0xcc/0x160 [ 422.549168][T14233] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 422.554817][T14233] ? stack_depot_save_flags+0x29/0x830 [ 422.560308][T14233] iov_iter_extract_pages+0x3bb/0x5c0 [ 422.565708][T14233] extract_iter_to_sg+0xf28/0x29c0 [ 422.570852][T14233] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 422.576432][T14233] ? __asan_memset+0x23/0x50 [ 422.581044][T14233] af_alg_get_rsgl+0x41e/0x850 [ 422.585846][T14233] aead_recvmsg+0x65a/0x19f0 [ 422.590448][T14233] ? unwind_next_frame+0x18e6/0x22d0 [ 422.595764][T14233] ? 0xffffffffa000094c [ 422.599956][T14233] ? __pfx_aead_recvmsg+0x10/0x10 [ 422.605004][T14233] ? stack_trace_save+0x118/0x1d0 [ 422.610049][T14233] ? __pfx_validate_chain+0x10/0x10 [ 422.615271][T14233] ? __pfx_stack_trace_save+0x10/0x10 [ 422.620659][T14233] ? validate_chain+0x11e/0x5920 [ 422.625617][T14233] ? stack_depot_save_flags+0x29/0x830 [ 422.631104][T14233] ? kasan_save_track+0x51/0x80 [ 422.635970][T14233] ? kasan_save_track+0x3f/0x80 [ 422.640835][T14233] ? __kasan_kmalloc+0x98/0xb0 [ 422.645612][T14233] ? __kmalloc_noprof+0x1fc/0x400 [ 422.650650][T14233] ? iovec_from_user+0x87/0x240 [ 422.655517][T14233] ? __import_iovec+0x152/0x870 [ 422.660385][T14233] ? import_iovec+0xeb/0x120 [ 422.664991][T14233] ? copy_msghdr_from_user+0x52f/0x680 [ 422.670470][T14233] ? do_recvmmsg+0x3bd/0xab0 [ 422.675074][T14233] ? __x64_sys_recvmmsg+0x199/0x250 [ 422.680290][T14233] ? do_syscall_64+0xf3/0x230 [ 422.684979][T14233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.691104][T14233] ? iovec_from_user+0x87/0x240 [ 422.695971][T14233] ? iovec_from_user+0x87/0x240 [ 422.700838][T14233] ? rcu_is_watching+0x15/0xb0 [ 422.705620][T14233] ? iovec_from_user+0x87/0x240 [ 422.710484][T14233] ? iovec_from_user+0x87/0x240 [ 422.715351][T14233] ? trace_kmalloc+0x1f/0xd0 [ 422.719957][T14233] ? __kmalloc_noprof+0x21a/0x400 [ 422.725006][T14233] ? iovec_from_user+0x1b4/0x240 [ 422.729968][T14233] ? __import_iovec+0x3a8/0x870 [ 422.734830][T14233] ? __pfx_aead_recvmsg+0x10/0x10 [ 422.739870][T14233] sock_recvmsg_nosec+0x18e/0x1d0 [ 422.742932][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.744906][T14233] ____sys_recvmsg+0x3cd/0x480 [ 422.756551][T14233] ? __pfx_____sys_recvmsg+0x10/0x10 [ 422.761870][T14233] ? __might_fault+0xaa/0x120 [ 422.766665][T14233] do_recvmmsg+0x426/0xab0 [ 422.771115][T14233] ? __pfx_do_recvmmsg+0x10/0x10 [ 422.776526][T14233] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 422.782436][T14233] ? ksys_write+0x22a/0x2b0 [ 422.786955][T14233] ? __pfx_lock_release+0x10/0x10 [ 422.791999][T14233] ? vfs_write+0x730/0xd30 [ 422.796463][T14233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.802455][T14233] ? __fget_files+0x2a/0x410 [ 422.807079][T14233] __x64_sys_recvmmsg+0x199/0x250 [ 422.812131][T14233] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 422.817700][T14233] ? do_syscall_64+0x100/0x230 [ 422.822480][T14233] ? do_syscall_64+0xb6/0x230 [ 422.827178][T14233] do_syscall_64+0xf3/0x230 [ 422.831695][T14233] ? clear_bhb_loop+0x35/0x90 [ 422.836391][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.842298][T14233] RIP: 0033:0x7fd7ca37e819 [ 422.848122][T14233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.867752][T14233] RSP: 002b:00007fd7cb19b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 422.876193][T14233] RAX: ffffffffffffffda RBX: 00007fd7ca535fa0 RCX: 00007fd7ca37e819 [ 422.884178][T14233] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000004 [ 422.892166][T14233] RBP: 00007fd7cb19b090 R08: 0000000000000000 R09: 0000000000000000 [ 422.900154][T14233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.908140][T14233] R13: 0000000000000000 R14: 00007fd7ca535fa0 R15: 00007ffc2a2b6c98 [ 422.916142][T14233] [ 422.979100][T14233] syz.4.2387 (14233) used greatest stack depth: 18304 bytes left [ 423.059236][T14231] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 423.349713][T14238] xt_TCPMSS: Only works on TCP SYN packets [ 423.379900][ T5858] Bluetooth: hci2: command tx timeout [ 423.402707][T14241] netlink: 'syz.4.2388': attribute type 10 has an invalid length. [ 423.523136][T14243] ip6gre1: entered allmulticast mode [ 423.610684][T14244] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.724411][T14244] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.762932][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.765778][T14252] delete_channel: no stack [ 423.865784][T14244] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.935474][T14239] syz_tun (unregistering): left promiscuous mode [ 424.030834][T14244] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.057128][T14117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.074343][T14117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.087737][T14117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.116883][T14117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.220053][T14273] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2399'. [ 424.221876][T14244] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.249796][T14244] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.300501][T14244] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.340010][T14244] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.434732][T14117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.483454][T14117] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.510510][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.517659][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.554380][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.561563][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.563360][T14283] netlink: del zone limit has 4 unknown bytes [ 424.584109][T14280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2401'. [ 424.803137][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.919314][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'. [ 425.019666][T14304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.072582][T14312] netlink: 'syz.1.2408': attribute type 21 has an invalid length. [ 425.092656][T14312] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2408'. [ 425.127328][T14117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.210971][T14117] veth0_vlan: entered promiscuous mode [ 425.218999][T14315] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2409'. [ 425.248094][T14117] veth1_vlan: entered promiscuous mode [ 425.309085][T14117] veth0_macvtap: entered promiscuous mode [ 425.328431][T14117] veth1_macvtap: entered promiscuous mode [ 425.379462][T14117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.417472][T14117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.440292][T14117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.449960][ T5858] Bluetooth: hci2: command tx timeout [ 425.462377][T14117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.472016][T14117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.486504][T14117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.617786][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.661271][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.762010][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.792923][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.840213][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2414'. [ 425.850336][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2414'. [ 425.852936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.645594][T14352] lo speed is unknown, defaulting to 1000 [ 426.699442][T14358] No such timeout policy "syz0" [ 426.882937][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.930296][T14354] lo speed is unknown, defaulting to 1000 [ 426.937373][T14352] ip6gretap0 speed is unknown, defaulting to 1000 [ 426.965467][T14360] tipc: Enabled bearer , priority 0 [ 427.074391][T14360] tipc: Resetting bearer [ 427.107848][T14359] tipc: Resetting bearer [ 427.928455][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.642955][ C1] bridge0: port 1(ip6gretap0) entered learning state [ 428.972885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.742048][T14359] tipc: Disabling bearer [ 429.764590][T14354] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.789849][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.801850][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.814622][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.846216][ T8147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.876882][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.933847][ T5869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 429.942641][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.002983][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.340413][ T8147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.442641][T14364] lo speed is unknown, defaulting to 1000 [ 430.521127][ T8147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.646361][ T8147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.739217][T14364] ip6gretap0 speed is unknown, defaulting to 1000 [ 430.855100][T14391] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2429'. [ 430.864579][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2429'. [ 430.873867][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2429'. [ 430.883692][T14391] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2429'. [ 431.024872][ T8147] bridge_slave_1: left allmulticast mode [ 431.030556][ T8147] bridge_slave_1: left promiscuous mode [ 431.037142][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.044673][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.071087][ T8147] bridge_slave_0: left allmulticast mode [ 431.076835][ T8147] bridge_slave_0: left promiscuous mode [ 431.082558][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.639692][ T8147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.653159][ T8147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.668861][ T8147] bond0 (unregistering): Released all slaves [ 431.698592][T14418] netlink: 'syz.1.2437': attribute type 15 has an invalid length. [ 431.712024][T14418] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2437'. [ 431.845132][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2442'. [ 431.967298][T14442] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2443'. [ 431.982484][T14364] chnl_net:caif_netlink_parms(): no params data found [ 431.992628][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2443'. [ 432.030585][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2443'. [ 432.051804][T14442] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2443'. [ 432.093006][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 432.207330][T14444] : renamed from bond0 (while UP) [ 432.363002][ T5869] Bluetooth: hci2: command tx timeout [ 432.484281][T14364] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.491595][T14364] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.499332][T14364] bridge_slave_0: entered allmulticast mode [ 432.525729][T14364] bridge_slave_0: entered promiscuous mode [ 432.534117][T14364] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.541218][T14364] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.587431][T14364] bridge_slave_1: entered allmulticast mode [ 432.617773][T14364] bridge_slave_1: entered promiscuous mode [ 432.705111][ T8147] hsr_slave_0: left promiscuous mode [ 432.714147][ T8147] hsr_slave_1: left promiscuous mode [ 432.720558][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.728720][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.738281][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.746559][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.798551][ T8147] veth1_macvtap: left promiscuous mode [ 432.809196][ T8147] veth0_macvtap: left promiscuous mode [ 432.815037][ T8147] veth1_vlan: left promiscuous mode [ 432.820438][ T8147] veth0_vlan: left promiscuous mode [ 433.128381][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.623578][ T8147] team0 (unregistering): Port device team_slave_1 removed [ 433.714024][ T8147] team0 (unregistering): Port device team_slave_0 removed [ 434.147009][T14498] ip6gretap0: entered promiscuous mode [ 434.154719][T14498] ip6gretap0: left promiscuous mode [ 434.163303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 434.191498][T14364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.242355][T14364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.301074][T14507] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 434.390374][T14364] team0: Port device team_slave_0 added [ 434.408790][ T5858] Bluetooth: hci2: command tx timeout [ 434.420954][T14364] team0: Port device team_slave_1 added [ 434.490966][T14364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.498515][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.525637][T14364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.538649][T14364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.545741][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.592570][T14364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.690797][T14524] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 434.721522][T14364] hsr_slave_0: entered promiscuous mode [ 434.744928][T14364] hsr_slave_1: entered promiscuous mode [ 435.212882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.457316][T14364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 435.497450][T14364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 435.552040][T14364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.588262][T14364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.737154][T14364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.796105][T14575] macvtap1: entered promiscuous mode [ 435.801463][T14575] team0: entered promiscuous mode [ 435.828092][T14575] team_slave_0: entered promiscuous mode [ 435.863484][T14575] team_slave_1: entered promiscuous mode [ 435.869295][T14575] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 435.894720][T14575] macvtap1: entered allmulticast mode [ 435.900136][T14575] team0: entered allmulticast mode [ 435.923935][T14575] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 435.948945][T14364] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.971124][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.978317][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.026705][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.033940][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.124311][T14582] syzkaller0: entered allmulticast mode [ 436.192145][T14582] __nla_validate_parse: 5 callbacks suppressed [ 436.192163][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 436.243045][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 436.483518][ T5858] Bluetooth: hci2: command tx timeout [ 436.490428][T14364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.563641][T14601] bridge_slave_1: left allmulticast mode [ 436.569804][T14601] bridge_slave_1: left promiscuous mode [ 436.576220][T14601] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.684105][T14601] team0: Port device team_slave_0 removed [ 436.714903][T14601] team0: Port device team_slave_1 removed [ 436.754059][T14601] macvlan1: left allmulticast mode [ 436.769484][T14601] veth1_vlan: left allmulticast mode [ 436.779584][T14601] macvlan1: left promiscuous mode [ 436.790411][T14606] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 436.793820][T14601] bridge0: port 1(macvlan1) entered disabled state [ 436.802087][T14606] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2487'. [ 436.889872][T14364] veth0_vlan: entered promiscuous mode [ 436.921238][T14364] veth1_vlan: entered promiscuous mode [ 436.992356][T14364] veth0_macvtap: entered promiscuous mode [ 437.028453][T14364] veth1_macvtap: entered promiscuous mode [ 437.075586][T14364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.109050][T14364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.147789][T14364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.169901][T14364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.189323][T14364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.212128][T14364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.237691][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 437.282936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 437.355425][ T8146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.382705][ T8146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.427420][T14634] netlink: 'syz.2.2494': attribute type 8 has an invalid length. [ 437.438931][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 437.453577][ T8147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.462170][ T8147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.484833][T14634] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 437.549151][T14634] bond0: entered promiscuous mode [ 437.602288][T14634] bond0: (slave vcan2): The slave device specified does not support setting the MAC address [ 437.624878][T14634] bond0: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 437.644618][T14634] bond0: (slave vcan2): making interface the new active one [ 437.651945][T14634] vcan2: entered promiscuous mode [ 437.671989][T14634] bond0: (slave vcan2): Enslaving as an active interface with an up link [ 437.704722][T14633] bond0: left promiscuous mode [ 437.709853][T14633] vcan2: left promiscuous mode [ 437.792004][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 437.887139][T14649] netlink: 'syz.2.2496': attribute type 13 has an invalid length. [ 438.322982][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.330555][T14671] syzkaller0: entered allmulticast mode [ 438.375463][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 438.494679][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 438.598016][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'. [ 438.709963][T14687] delete_channel: no stack [ 439.004724][T14700] netlink: 'syz.1.2510': attribute type 13 has an invalid length. [ 439.014349][T14700] netlink: 'syz.1.2510': attribute type 10 has an invalid length. [ 439.061245][ T8145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.362893][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.029774][ T8145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.096790][ T8145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.159550][ T8145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.171843][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.242193][ T8145] bridge_slave_1: left allmulticast mode [ 440.248101][ T8145] bridge_slave_1: left promiscuous mode [ 440.255979][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.265574][ T8145] bridge_slave_0: left allmulticast mode [ 440.271525][ T8145] bridge_slave_0: left promiscuous mode [ 440.277420][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.404514][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.591721][ T8145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.603348][ T8145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.616162][ T8145] bond0 (unregistering): Released all slaves [ 440.758430][T14708] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2513'. [ 440.774431][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2513'. [ 440.944795][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 440.956428][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.023895][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.033342][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.040912][ T5869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 441.048573][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.201419][T14718] lo speed is unknown, defaulting to 1000 [ 441.443520][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.470317][T14721] lo speed is unknown, defaulting to 1000 [ 441.544290][T14748] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 441.620694][T14750] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 441.710774][T14754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.721507][T14754] bond6: (slave bond7): making interface the new active one [ 441.734414][T14754] bond6: (slave bond7): Enslaving as an active interface with an up link [ 441.751303][T14721] ip6gretap0 speed is unknown, defaulting to 1000 [ 441.777388][T14718] ip6gretap0 speed is unknown, defaulting to 1000 [ 441.988865][ T8145] hsr_slave_0: left promiscuous mode [ 442.009160][ T8145] hsr_slave_1: left promiscuous mode [ 442.016906][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.024555][ T8145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.033406][ T8145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.040856][ T8145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.062405][T14764] __nla_validate_parse: 5 callbacks suppressed [ 442.062425][T14764] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2527'. [ 442.074197][ T8145] veth1_macvtap: left promiscuous mode [ 442.090700][ T8145] veth0_macvtap: left promiscuous mode [ 442.091374][T14764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2527'. [ 442.100763][ T8145] veth1_vlan: left promiscuous mode [ 442.110208][T14764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2527'. [ 442.115706][ T8145] veth0_vlan: left promiscuous mode [ 442.121439][T14764] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2527'. [ 442.482939][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.530193][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 442.701591][ T8145] team0 (unregistering): Port device team_slave_1 removed [ 442.749448][ T8145] team0 (unregistering): Port device team_slave_0 removed [ 443.127236][ T5858] Bluetooth: hci2: command tx timeout [ 443.176079][T14767] macsec0: entered promiscuous mode [ 443.482914][T14718] chnl_net:caif_netlink_parms(): no params data found [ 443.532882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.660066][T14718] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.671594][T14718] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.679521][T14718] bridge_slave_0: entered allmulticast mode [ 443.688031][T14718] bridge_slave_0: entered promiscuous mode [ 443.713762][T14718] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.731155][T14718] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.741337][T14718] bridge_slave_1: entered allmulticast mode [ 443.754125][T14718] bridge_slave_1: entered promiscuous mode [ 443.845790][T14718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.865606][T14718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.923516][T14718] team0: Port device team_slave_0 added [ 443.931665][T14718] team0: Port device team_slave_1 added [ 443.982664][T14718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.993401][T14718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.019461][ C1] bridge0: port 1(ip6gretap0) entered forwarding state [ 444.019491][ C1] bridge0: topology change detected, propagating [ 444.046300][T14820] netlink: 'syz.2.2539': attribute type 1 has an invalid length. [ 444.063454][T14718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.084161][T14718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.101351][T14718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.148448][T14718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.187944][T14820] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 444.217319][T14718] hsr_slave_0: entered promiscuous mode [ 444.272559][T14718] hsr_slave_1: entered promiscuous mode [ 444.527470][T14832] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2544'. [ 444.562992][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 444.617150][T14836] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2544'. [ 444.867860][T14718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.885762][T14718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.904419][T14718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.919868][T14718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.995060][T14718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.014527][T14718] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.034941][T14848] lo: left allmulticast mode [ 445.046826][T14848] tunl0: left allmulticast mode [ 445.073508][T14848] gre0: left allmulticast mode [ 445.078386][T14848] gretap0: left allmulticast mode [ 445.084612][T14848] erspan0: left allmulticast mode [ 445.089851][T14848] ip6_vti0: left allmulticast mode [ 445.114095][T14848] sit0: left allmulticast mode [ 445.119006][T14848] ip6tnl0: left allmulticast mode [ 445.143083][T14848] ip6gre0: left allmulticast mode [ 445.148252][T14848] ip6gretap0: left allmulticast mode [ 445.167550][T14848] vcan0: left allmulticast mode [ 445.178079][T14848] nlmon0: left allmulticast mode [ 445.193447][T14848] caif0: left allmulticast mode [ 445.198449][T14848] batadv0: left allmulticast mode [ 445.203114][ T5858] Bluetooth: hci2: command tx timeout [ 445.204354][T14848] vxcan0: left allmulticast mode [ 445.214200][T14848] vxcan1: left allmulticast mode [ 445.219362][T14848] veth0: left allmulticast mode [ 445.224403][T14848] veth1: left allmulticast mode [ 445.229501][T14848] wg0: left allmulticast mode [ 445.234845][T14848] wg1: left allmulticast mode [ 445.239720][T14848] wg2: left allmulticast mode [ 445.246459][T14848] veth0_to_bridge: left allmulticast mode [ 445.252399][T14848] bridge_slave_0: left allmulticast mode [ 445.258424][T14848] veth1_to_bridge: left allmulticast mode [ 445.264698][T14848] bridge_slave_1: left allmulticast mode [ 445.270483][T14848] veth0_to_bond: left allmulticast mode [ 445.276902][T14848] veth1_to_bond: left allmulticast mode [ 445.282682][T14848] veth0_to_team: left allmulticast mode [ 445.323412][T14848] veth1_to_team: left allmulticast mode [ 445.329222][T14848] veth0_to_batadv: left allmulticast mode [ 445.343251][T14848] batadv_slave_0: left allmulticast mode [ 445.349045][T14848] veth1_to_batadv: left allmulticast mode [ 445.373108][T14848] batadv_slave_1: left allmulticast mode [ 445.378899][T14848] xfrm0: left allmulticast mode [ 445.393041][T14848] veth0_to_hsr: left allmulticast mode [ 445.398735][T14848] veth1_to_hsr: left allmulticast mode [ 445.423322][T14848] hsr0: left allmulticast mode [ 445.428133][T14848] hsr_slave_0: left allmulticast mode [ 445.443158][T14848] hsr_slave_1: left allmulticast mode [ 445.448699][T14848] veth1_virt_wifi: left allmulticast mode [ 445.463969][T14848] veth0_virt_wifi: left allmulticast mode [ 445.495628][T14848] veth1_vlan: left allmulticast mode [ 445.501165][T14848] vlan0: left allmulticast mode [ 445.513182][T14848] macvlan1: left allmulticast mode [ 445.518434][T14848] ipvlan0: left allmulticast mode [ 445.533434][T14848] ipvlan1: left allmulticast mode [ 445.538494][T14848] veth0_vlan: left allmulticast mode [ 445.563412][T14848] veth1_macvtap: left allmulticast mode [ 445.569136][T14848] veth0_macvtap: left allmulticast mode [ 445.593224][T14848] macvtap0: left allmulticast mode [ 445.598674][T14848] geneve0: left allmulticast mode [ 445.603840][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.623287][T14848] geneve1: left allmulticast mode [ 445.628474][T14848] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 445.643043][T14848] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 445.650295][T14848] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 445.684159][T14848] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 445.691489][T14848] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 445.715105][T14848] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 445.734113][T14848] hsr1: left allmulticast mode [ 445.738923][T14848] dummy0: left allmulticast mode [ 445.752892][T14848] bond0: left allmulticast mode [ 445.757824][T14848] bond_slave_0: left allmulticast mode [ 445.773306][T14848] bond_slave_1: left allmulticast mode [ 445.778925][T14848] bridge1: left allmulticast mode [ 445.792972][T14848] bridge2: left allmulticast mode [ 445.798150][T14848] ip6gre1: left allmulticast mode [ 445.813142][T14848] vlan2: left allmulticast mode [ 445.818181][T14848] mac80211_hwsim hwsim4 nicvv0: left allmulticast mode [ 445.846135][T14848] ip6tnl1: left allmulticast mode [ 445.851313][T14848] bridge3: left allmulticast mode [ 445.870001][T14848] ': left allmulticast mode [ 445.888992][T14848] syztnl1: left allmulticast mode [ 445.903388][T14848] gre1: left allmulticast mode [ 445.908455][T14848] macvlan2: left allmulticast mode [ 445.940400][T14848] sit1: left allmulticast mode [ 445.945748][T14848] bond1: left allmulticast mode [ 445.974908][T14848] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.984375][T14848] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.993305][T14848] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.002362][T14848] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.067678][T14848] team0: left allmulticast mode [ 446.072658][T14848] team_slave_0: left allmulticast mode [ 446.078262][T14848] team_slave_1: left allmulticast mode [ 446.093323][T14848] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 446.106158][T14848] team0: left promiscuous mode [ 446.121331][T14848] team_slave_0: left promiscuous mode [ 446.133150][T14848] team_slave_1: left promiscuous mode [ 446.138691][T14848] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 446.173591][T14848] macvtap1: left promiscuous mode [ 446.187447][T14848] macvtap1: left allmulticast mode [ 446.221773][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.228986][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.296095][T14859] netlink: 'syz.4.2552': attribute type 3 has an invalid length. [ 446.328086][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.335285][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.417558][T14864] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2553'. [ 446.642999][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.774872][T14718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.856968][T14718] veth0_vlan: entered promiscuous mode [ 446.883783][T14718] veth1_vlan: entered promiscuous mode [ 446.955046][T14718] veth0_macvtap: entered promiscuous mode [ 446.974738][T14718] veth1_macvtap: entered promiscuous mode [ 447.011487][T14718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.047900][T14718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.075759][T14718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.094692][T14718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.113888][T14718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.132843][T14718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.173697][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 447.283728][ T5858] Bluetooth: hci2: command tx timeout [ 447.315734][ T8145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.369723][ T8145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.434312][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.463494][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.682960][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.001439][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2560'. [ 448.303839][ T8147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.626051][ T8147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.732939][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 448.985483][ T8147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.341842][ T8147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.500360][ T8147] bridge_slave_1: left allmulticast mode [ 449.510109][ T8147] bridge_slave_1: left promiscuous mode [ 449.520374][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.534797][ T8147] bridge_slave_0: left allmulticast mode [ 449.545555][ T8147] bridge_slave_0: left promiscuous mode [ 449.562584][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.772891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.234038][ T8147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.303454][ T8147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.321729][ T8147] bond0 (unregistering): Released all slaves [ 450.666470][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 450.676279][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 450.684176][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 450.691968][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 450.699786][ T5869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 450.707151][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.802928][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.951123][T14904] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 450.995828][T14898] lo speed is unknown, defaulting to 1000 [ 451.008579][T14904] bond4: entered promiscuous mode [ 451.126032][T14903] bond4: left promiscuous mode [ 451.403617][T14909] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2567'. [ 451.496096][T14898] ip6gretap0 speed is unknown, defaulting to 1000 [ 451.842918][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.027418][ T8147] hsr_slave_0: left promiscuous mode [ 452.040995][ T8147] hsr_slave_1: left promiscuous mode [ 452.264774][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.272350][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.291421][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.324052][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.386329][ T8147] veth1_macvtap: left promiscuous mode [ 452.405008][ T8147] veth0_macvtap: left promiscuous mode [ 452.426322][ T8147] veth1_vlan: left promiscuous mode [ 452.431651][ T8147] veth0_vlan: left promiscuous mode [ 452.644584][T14932] netlink: 'syz.3.2572': attribute type 2 has an invalid length. [ 452.668549][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 452.882922][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.883853][ T5864] Bluetooth: hci2: command tx timeout [ 453.126757][ T8147] team0 (unregistering): Port device team_slave_1 removed [ 453.171664][ T8147] team0 (unregistering): Port device team_slave_0 removed [ 453.772012][T14898] chnl_net:caif_netlink_parms(): no params data found [ 453.926705][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.100907][T14964] netlink: 'syz.3.2580': attribute type 7 has an invalid length. [ 454.112289][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2578'. [ 454.115624][T14898] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.129152][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.136430][T14898] bridge_slave_0: entered allmulticast mode [ 454.144157][T14898] bridge_slave_0: entered promiscuous mode [ 454.147604][T14960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2578'. [ 454.151739][T14898] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.166258][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.173760][T14898] bridge_slave_1: entered allmulticast mode [ 454.174708][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2578'. [ 454.180643][T14898] bridge_slave_1: entered promiscuous mode [ 454.211839][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2578'. [ 454.231663][T14898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.257237][T14898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.329115][T14898] team0: Port device team_slave_0 added [ 454.337847][T14971] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2581'. [ 454.350905][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 454.361673][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2581'. [ 454.371129][T14971] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2581'. [ 454.373720][T14898] team0: Port device team_slave_1 added [ 454.417339][T14898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.427779][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.457444][T14898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.471354][T14898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.478641][T14898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.506274][T14898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.555726][T14898] hsr_slave_0: entered promiscuous mode [ 454.563686][T14898] hsr_slave_1: entered promiscuous mode [ 454.633620][T14979] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2584'. [ 454.953331][T14898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.962958][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.963376][ T5869] Bluetooth: hci2: command tx timeout [ 454.982154][T14898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.999641][T14898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.019413][T14898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.172734][T14898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.202209][T14898] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.222502][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.229705][ T8145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.245424][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.252597][ T8145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.466802][T14898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.522310][T14898] veth0_vlan: entered promiscuous mode [ 455.540789][T14898] veth1_vlan: entered promiscuous mode [ 455.584652][T14898] veth0_macvtap: entered promiscuous mode [ 455.594795][T14898] veth1_macvtap: entered promiscuous mode [ 455.611313][T14898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.647062][T15014] vlan4: entered promiscuous mode [ 455.653057][T15014] team0: Device vlan4 is already an upper device of the team interface [ 455.669154][T14898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.683578][T14898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.692588][T14898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.702149][T14898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.711132][T14898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.770568][T10121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.786428][T10121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.827614][ T8145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.842397][ T8145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.003185][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.165502][T15032] netlink: 'syz.4.2598': attribute type 7 has an invalid length. [ 456.402476][T15040] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 456.492254][T15045] netlink: 'syz.1.2603': attribute type 3 has an invalid length. [ 456.501034][T15044] netlink: 'syz.1.2603': attribute type 3 has an invalid length. [ 456.510885][T15043] sch_fq: defrate 511 ignored. [ 456.825597][T15064] xt_l2tp: v2 doesn't support IP mode [ 456.840898][T15066] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20004 [ 457.043073][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.511330][T15106] netlink: 'syz.2.2626': attribute type 1 has an invalid length. [ 457.519453][T15106] netlink: 'syz.2.2626': attribute type 4 has an invalid length. [ 457.724397][ T8147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.748823][T15121] __nla_validate_parse: 10 callbacks suppressed [ 457.748842][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 457.771511][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2629'. [ 458.092985][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.122978][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.459441][ T8147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.518305][ T8147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.773781][ T8147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.971515][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.993590][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.013784][T15142] lo speed is unknown, defaulting to 1000 [ 460.020194][ T8147] bridge_slave_1: left allmulticast mode [ 460.033417][ T8147] bridge_slave_1: left promiscuous mode [ 460.056683][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.136832][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.156668][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.162891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 460.165510][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.179036][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.208719][ T8147] bridge_slave_0: left allmulticast mode [ 460.255034][ T8147] bridge_slave_0: left promiscuous mode [ 460.260806][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.879144][ T8147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.891301][ T8147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.907697][ T8147] bond0 (unregistering): Released all slaves [ 461.017978][T15183] FAULT_INJECTION: forcing a failure. [ 461.017978][T15183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.047268][T15183] CPU: 0 UID: 0 PID: 15183 Comm: syz.2.2650 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 461.057735][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 461.067813][T15183] Call Trace: [ 461.071118][T15183] [ 461.074065][T15183] dump_stack_lvl+0x241/0x360 [ 461.078768][T15183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.083995][T15183] ? __pfx__printk+0x10/0x10 [ 461.088616][T15183] ? aa_label_sk_perm+0x4f3/0x6c0 [ 461.093661][T15183] should_fail_ex+0x3b0/0x4e0 [ 461.098336][T15183] _copy_from_user+0x2f/0xc0 [ 461.102928][T15183] copy_from_sockptr+0x62/0xa0 [ 461.107703][T15183] packet_setsockopt+0xcac/0x1970 [ 461.112732][T15183] ? __pfx_packet_setsockopt+0x10/0x10 [ 461.118189][T15183] ? rcu_read_lock_any_held+0xb7/0x160 [ 461.123646][T15183] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 461.129540][T15183] ? aa_sk_perm+0x96d/0xab0 [ 461.134046][T15183] ? vfs_write+0x730/0xd30 [ 461.138461][T15183] ? do_sys_openat2+0x17a/0x1d0 [ 461.143306][T15183] ? aa_sock_opt_perm+0x79/0x120 [ 461.148245][T15183] ? __pfx_packet_setsockopt+0x10/0x10 [ 461.153701][T15183] do_sock_setsockopt+0x3af/0x720 [ 461.158729][T15183] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 461.164278][T15183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 461.170258][T15183] __x64_sys_setsockopt+0x1ee/0x280 [ 461.175457][T15183] do_syscall_64+0xf3/0x230 [ 461.179953][T15183] ? clear_bhb_loop+0x35/0x90 [ 461.184631][T15183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.190518][T15183] RIP: 0033:0x7f7f8bb7e819 [ 461.194928][T15183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.214531][T15183] RSP: 002b:00007f7f8c9ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.222945][T15183] RAX: ffffffffffffffda RBX: 00007f7f8bd35fa0 RCX: 00007f7f8bb7e819 [ 461.230911][T15183] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 461.238876][T15183] RBP: 00007f7f8c9ca090 R08: 0000000000000004 R09: 0000000000000000 [ 461.246842][T15183] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.254811][T15183] R13: 0000000000000000 R14: 00007f7f8bd35fa0 R15: 00007ffed4a51258 [ 461.262793][T15183] [ 461.267243][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.331525][T15188] syz.2.2653[15188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.331637][T15188] syz.2.2653[15188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.350144][T15188] syz.2.2653[15188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.448466][T15144] lo speed is unknown, defaulting to 1000 [ 462.000713][T15214] lo speed is unknown, defaulting to 1000 [ 462.017147][ T8147] hsr_slave_0: left promiscuous mode [ 462.033059][ T8147] hsr_slave_1: left promiscuous mode [ 462.057834][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.070027][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.089305][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.101411][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.135216][ T8147] veth1_macvtap: left promiscuous mode [ 462.140832][ T8147] veth0_macvtap: left promiscuous mode [ 462.146722][ T8147] veth1_vlan: left promiscuous mode [ 462.152091][ T8147] veth0_vlan: left promiscuous mode [ 462.253197][ T5869] Bluetooth: hci2: command tx timeout [ 462.322879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.451378][T15226] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 1024 [ 462.469162][T15226] netlink: 'syz.1.2662': attribute type 12 has an invalid length. [ 462.627224][ T8147] team0 (unregistering): Port device team_slave_1 removed [ 462.670041][ T8147] team0 (unregistering): Port device team_slave_0 removed [ 463.108705][T15144] chnl_net:caif_netlink_parms(): no params data found [ 463.362934][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.485731][T15144] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.493940][T15252] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2669'. [ 463.509947][T15144] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.528998][T15144] bridge_slave_0: entered allmulticast mode [ 463.554373][T15144] bridge_slave_0: entered promiscuous mode [ 463.572441][T15144] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.599226][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.633384][T15144] bridge_slave_1: entered allmulticast mode [ 463.653117][T15144] bridge_slave_1: entered promiscuous mode [ 463.714117][T15144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.747830][T15144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.857248][T15144] team0: Port device team_slave_0 added [ 463.880536][T15271] sch_tbf: burst 4398 is lower than device lo mtu (17891342) ! [ 463.908550][T15273] netlink: 'syz.4.2677': attribute type 21 has an invalid length. [ 463.918757][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2678'. [ 463.947665][T15273] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 463.965892][T15144] team0: Port device team_slave_1 added [ 464.103286][T15144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.133562][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.168830][T15144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.208546][T15144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.222229][T15144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.279297][T15144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.322924][ T5869] Bluetooth: hci2: command tx timeout [ 464.326769][T15287] syzkaller0: entered allmulticast mode [ 464.402895][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 464.477466][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2679'. [ 464.621671][T15144] hsr_slave_0: entered promiscuous mode [ 464.628274][T15144] hsr_slave_1: entered promiscuous mode [ 464.637010][T15316] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 464.767229][T15320] vlan3: entered promiscuous mode [ 464.789383][T15325] lo speed is unknown, defaulting to 1000 [ 465.223425][T15144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 465.245459][T15144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.265645][T15144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 465.285516][T15144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 465.443010][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.572322][T15144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.598490][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'. [ 465.612516][T15356] syzkaller0: entered allmulticast mode [ 465.662625][T15360] netlink: 'syz.1.2701': attribute type 3 has an invalid length. [ 465.788968][T15144] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.803526][T15361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2699'. [ 465.818496][T10121] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.825636][T10121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.899094][T10121] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.906216][T10121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.278492][T15381] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2704'. [ 466.280244][T15144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.295221][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2704'. [ 466.308254][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2704'. [ 466.320450][T15381] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2704'. [ 466.351803][T15144] veth0_vlan: entered promiscuous mode [ 466.379191][T15144] veth1_vlan: entered promiscuous mode [ 466.404531][ T5869] Bluetooth: hci2: command tx timeout [ 466.417694][T15144] veth0_macvtap: entered promiscuous mode [ 466.452648][T15144] veth1_macvtap: entered promiscuous mode [ 466.482903][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.501938][T15144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.521625][T15144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.571854][T15144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.595890][T15144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.613243][T15144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.629973][T15144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.788284][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.808858][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.877032][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.895589][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.068208][T15409] syzkaller0: entered allmulticast mode [ 467.082480][T15410] lo speed is unknown, defaulting to 1000 [ 467.084855][T15409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2713'. [ 467.523065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.483130][ T5864] Bluetooth: hci2: command tx timeout [ 468.500992][T15449] lo speed is unknown, defaulting to 1000 [ 468.562901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.690290][T15460] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 468.714702][T15459] __nla_validate_parse: 1 callbacks suppressed [ 468.714720][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 468.721998][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2727'. [ 469.514415][T15476] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2732'. [ 469.602997][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.016778][T15489] tipc: Resetting bearer [ 470.031226][T15489] tipc: Resetting bearer [ 470.271475][T15501] xt_bpf: check failed: parse error [ 470.278784][T15500] nr0: entered promiscuous mode [ 470.326161][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 470.377698][T15501] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2741'. [ 470.397803][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 470.575091][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 470.585888][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 470.642889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.779665][T15514] ebtables: ebtables: counters copy to user failed while replacing table [ 470.802048][T15520] lo speed is unknown, defaulting to 1000 [ 470.822121][T15514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2746'. [ 470.874050][T15524] netlink: 'syz.4.2746': attribute type 4 has an invalid length. [ 471.037806][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 471.089471][T15517] lo speed is unknown, defaulting to 1000 [ 471.494402][T15519] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 471.682927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.113602][T15551] x_tables: duplicate underflow at hook 1 [ 472.299196][T15563] syzkaller0: entered allmulticast mode [ 472.659597][T15595] dvmrp0: left allmulticast mode [ 472.722883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.067226][T15613] bridge0: entered promiscuous mode [ 473.221699][T15612] bridge0: left promiscuous mode [ 473.294738][T15626] 0ªX¹¦Dö»: renamed from gretap0 [ 473.325895][T15626] 0ªX¹¦Dö»: entered allmulticast mode [ 473.538296][T15639] netlink: 'syz.4.2774': attribute type 1 has an invalid length. [ 473.762933][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.925052][T15663] __nla_validate_parse: 9 callbacks suppressed [ 473.925071][T15663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2777'. [ 474.138162][T15676] team0 (unregistering): Port device bond5 removed [ 474.153679][T15676] bridge0: port 1(ip6gretap0) entered disabled state [ 474.208638][T15676] team0 (unregistering): Port device bridge0 removed [ 474.802902][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.377509][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 475.534363][T15705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2788'. [ 475.628520][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 475.638076][T15711] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2790'. [ 475.647319][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'. [ 475.684415][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2790'. [ 475.768074][T15718] syzkaller0: entered allmulticast mode [ 475.781835][T15720] netlink: 'syz.3.2793': attribute type 21 has an invalid length. [ 475.790975][T15720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2793'. [ 475.802057][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2794'. [ 475.806177][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'. [ 475.842927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 476.466581][T15747] bridge0: port 1(bridge_slave_1) entered blocking state [ 476.470459][T15748] Cannot find add_set index 4 as target [ 476.474179][T15747] bridge0: port 1(bridge_slave_1) entered disabled state [ 476.486735][T15747] bridge_slave_1: entered allmulticast mode [ 476.494265][T15748] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 476.500530][T15747] bridge_slave_1: entered promiscuous mode [ 476.635072][T15753] netlink: 'syz.4.2804': attribute type 10 has an invalid length. [ 476.648227][T15753] netlink: 'syz.4.2804': attribute type 10 has an invalid length. [ 476.882890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.213861][T15786] @ÿ: renamed from bond_slave_0 [ 477.314249][T15792] syzkaller0: entered allmulticast mode [ 477.923121][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.966034][T15824] macvlan0: entered allmulticast mode [ 477.984428][T15824] veth1_vlan: entered allmulticast mode [ 477.998525][T15824] veth1_vlan: left allmulticast mode [ 478.044191][T15824] macvlan0 (unregistering): left allmulticast mode [ 478.227012][T15836] syzkaller0: entered allmulticast mode [ 478.413475][T15840] tipc: Resetting bearer [ 478.504512][T15840] sctp: [Deprecated]: syz.2.2829 (pid 15840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.504512][T15840] Use struct sctp_sack_info instead [ 478.642953][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 478.737777][T15858] netlink: 'syz.4.2835': attribute type 2 has an invalid length. [ 478.962887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.966393][T15862] netlink: 'syz.3.2837': attribute type 13 has an invalid length. [ 479.430952][T15904] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.478150][T15904] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.548571][T15904] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.602683][T15904] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.742365][T15904] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.766146][T15904] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.786397][T15904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.807389][T15904] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.002981][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 480.642310][T15932] netlink: 'syz.2.2854': attribute type 12 has an invalid length. [ 480.895269][T15936] __nla_validate_parse: 22 callbacks suppressed [ 480.895290][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2856'. [ 481.042880][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.967040][T15943] dvmrp0: entered allmulticast mode [ 482.041016][T15945] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 482.082929][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.151188][T15947] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2860'. [ 482.386452][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2861'. [ 482.586700][T15957] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2862'. [ 482.914258][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2863'. [ 482.943161][T15962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2863'. [ 483.122884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.261765][T15971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2867'. [ 483.299349][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 483.630971][T15981] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20002 [ 483.879799][T15986] FAULT_INJECTION: forcing a failure. [ 483.879799][T15986] name failslab, interval 1, probability 0, space 0, times 0 [ 483.913019][T15986] CPU: 1 UID: 0 PID: 15986 Comm: syz.2.2873 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 483.923496][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 483.933573][T15986] Call Trace: [ 483.936872][T15986] [ 483.939820][T15986] dump_stack_lvl+0x241/0x360 [ 483.944530][T15986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.949762][T15986] ? __pfx__printk+0x10/0x10 [ 483.954450][T15986] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 483.959952][T15986] ? __pfx___might_resched+0x10/0x10 [ 483.965277][T15986] should_fail_ex+0x3b0/0x4e0 [ 483.969985][T15986] should_failslab+0xac/0x100 [ 483.974693][T15986] ? pfkey_add+0x12e9/0x3030 [ 483.979313][T15986] __kmalloc_cache_noprof+0x6c/0x2c0 [ 483.984635][T15986] pfkey_add+0x12e9/0x3030 [ 483.989105][T15986] ? __pfx_pfkey_add+0x10/0x10 [ 483.993907][T15986] ? pfkey_broadcast+0x45/0x400 [ 483.998784][T15986] ? pfkey_broadcast+0x3e3/0x400 [ 484.003754][T15986] pfkey_sendmsg+0xbcc/0x1050 [ 484.008473][T15986] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 484.013629][T15986] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.018510][T15986] ? __pfx_lock_release+0x10/0x10 [ 484.023559][T15986] ? __import_iovec+0x590/0x870 [ 484.028435][T15986] ? aa_sock_msg_perm+0x91/0x160 [ 484.033410][T15986] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 484.038547][T15986] __sock_sendmsg+0x221/0x270 [ 484.043253][T15986] ____sys_sendmsg+0x52a/0x7e0 [ 484.048051][T15986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.053359][T15986] ? __fget_files+0x2a/0x410 [ 484.057983][T15986] ? __fget_files+0x2a/0x410 [ 484.062606][T15986] __sys_sendmmsg+0x36a/0x720 [ 484.067336][T15986] ? __pfx___sys_sendmmsg+0x10/0x10 [ 484.072566][T15986] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.078578][T15986] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 484.084506][T15986] ? lockdep_hardirqs_on+0x99/0x150 [ 484.089750][T15986] ? group_send_sig_info+0x2e0/0x310 [ 484.095077][T15986] ? __pfx_group_send_sig_info+0x10/0x10 [ 484.100749][T15986] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 484.106675][T15986] ? bpf_trace_run2+0x1fc/0x540 [ 484.111552][T15986] ? __pfx_lock_release+0x10/0x10 [ 484.116605][T15986] ? __mutex_unlock_slowpath+0x21e/0x790 [ 484.122275][T15986] ? bpf_trace_run2+0x1fc/0x540 [ 484.127164][T15986] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.133180][T15986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.139546][T15986] __x64_sys_sendmmsg+0xa0/0xb0 [ 484.144431][T15986] do_syscall_64+0xf3/0x230 [ 484.148956][T15986] ? clear_bhb_loop+0x35/0x90 [ 484.153662][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.159576][T15986] RIP: 0033:0x7f7f8bb7e819 [ 484.162942][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 484.164010][T15986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.190486][T15986] RSP: 002b:00007f7f8c9a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 484.198933][T15986] RAX: ffffffffffffffda RBX: 00007f7f8bd36080 RCX: 00007f7f8bb7e819 [ 484.206927][T15986] RDX: 0000000000000393 RSI: 0000000020000180 RDI: 0000000000000003 [ 484.214918][T15986] RBP: 00007f7f8c9a9090 R08: 0000000000000000 R09: 0000000000000000 [ 484.222917][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.230910][T15986] R13: 0000000000000000 R14: 00007f7f8bd36080 R15: 00007ffed4a51258 [ 484.238938][T15986] [ 485.202894][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.355960][T16014] lo speed is unknown, defaulting to 1000 [ 485.491657][T16012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 485.917391][T16037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2885'. [ 485.940073][T16037] netlink: 'syz.2.2885': attribute type 10 has an invalid length. [ 485.948916][T16037] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2885'. [ 486.052551][T16042] FAULT_INJECTION: forcing a failure. [ 486.052551][T16042] name failslab, interval 1, probability 0, space 0, times 0 [ 486.066984][T16042] CPU: 0 UID: 0 PID: 16042 Comm: syz.2.2886 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 486.077439][T16042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 486.087524][T16042] Call Trace: [ 486.090837][T16042] [ 486.093794][T16042] dump_stack_lvl+0x241/0x360 [ 486.098505][T16042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.103729][T16042] ? __pfx__printk+0x10/0x10 [ 486.108359][T16042] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 486.113848][T16042] ? __pfx___might_resched+0x10/0x10 [ 486.119173][T16042] should_fail_ex+0x3b0/0x4e0 [ 486.124321][T16042] should_failslab+0xac/0x100 [ 486.129028][T16042] ? ipcomp_init_state+0x12f/0x860 [ 486.134168][T16042] __kmalloc_cache_noprof+0x6c/0x2c0 [ 486.139487][T16042] ipcomp_init_state+0x12f/0x860 [ 486.144452][T16042] ? __pfx_lock_release+0x10/0x10 [ 486.149509][T16042] ipcomp6_init_state+0xcb/0x900 [ 486.154481][T16042] __xfrm_init_state+0x9db/0xea0 [ 486.159464][T16042] xfrm_init_state+0x1f/0x80 [ 486.164089][T16042] pfkey_add+0x1dfe/0x3030 [ 486.168558][T16042] ? __pfx_pfkey_add+0x10/0x10 [ 486.173356][T16042] ? pfkey_broadcast+0x45/0x400 [ 486.178231][T16042] ? pfkey_broadcast+0x3e3/0x400 [ 486.183208][T16042] pfkey_sendmsg+0xbcc/0x1050 [ 486.187929][T16042] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 486.193093][T16042] ? __pfx_aa_sk_perm+0x10/0x10 [ 486.197977][T16042] ? __pfx_lock_release+0x10/0x10 [ 486.203039][T16042] ? __import_iovec+0x590/0x870 [ 486.207918][T16042] ? aa_sock_msg_perm+0x91/0x160 [ 486.212893][T16042] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 486.218039][T16042] __sock_sendmsg+0x221/0x270 [ 486.222751][T16042] ____sys_sendmsg+0x52a/0x7e0 [ 486.227555][T16042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.232866][T16042] ? __fget_files+0x2a/0x410 [ 486.237492][T16042] ? __fget_files+0x2a/0x410 [ 486.242124][T16042] __sys_sendmmsg+0x36a/0x720 [ 486.246851][T16042] ? __pfx___sys_sendmmsg+0x10/0x10 [ 486.252117][T16042] ? __pfx_lock_release+0x10/0x10 [ 486.257177][T16042] ? kstrtouint_from_user+0x128/0x190 [ 486.262597][T16042] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 486.268588][T16042] ? ksys_write+0x22a/0x2b0 [ 486.273119][T16042] ? __pfx_lock_release+0x10/0x10 [ 486.278185][T16042] ? vfs_write+0x730/0xd30 [ 486.282642][T16042] ? __mutex_unlock_slowpath+0x21e/0x790 [ 486.288331][T16042] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 486.294347][T16042] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 486.300706][T16042] ? do_syscall_64+0x100/0x230 [ 486.305500][T16042] __x64_sys_sendmmsg+0xa0/0xb0 [ 486.310385][T16042] do_syscall_64+0xf3/0x230 [ 486.314915][T16042] ? clear_bhb_loop+0x35/0x90 [ 486.315375][T16017] lo speed is unknown, defaulting to 1000 [ 486.319601][T16042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.331264][T16042] RIP: 0033:0x7f7f8bb7e819 [ 486.335703][T16042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.355337][T16042] RSP: 002b:00007f7f8c9ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 486.363782][T16042] RAX: ffffffffffffffda RBX: 00007f7f8bd35fa0 RCX: 00007f7f8bb7e819 [ 486.371795][T16042] RDX: 0000000000000393 RSI: 0000000020000180 RDI: 0000000000000003 [ 486.379792][T16042] RBP: 00007f7f8c9ca090 R08: 0000000000000000 R09: 0000000000000000 [ 486.387789][T16042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.395866][T16042] R13: 0000000000000000 R14: 00007f7f8bd35fa0 R15: 00007ffed4a51258 [ 486.403880][T16042] [ 486.409087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 486.844500][T16053] xt_ecn: cannot match TCP bits for non-tcp packets [ 487.436536][T16063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2891'. [ 487.442977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.464086][T16063] batadv_slave_1: entered promiscuous mode [ 487.621978][T16063] batadv_slave_1 (unregistering): left promiscuous mode [ 488.478638][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2896'. [ 488.482972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.523276][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 488.547062][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 488.860351][T16085] netlink: 'syz.2.2899': attribute type 12 has an invalid length. [ 489.245947][T16092] netlink: 'syz.1.2901': attribute type 32 has an invalid length. [ 489.522942][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.746462][T16094] xt_CT: No such helper "netbios-ns" [ 490.250285][T16107] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2905'. [ 490.563066][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.653425][T16110] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 491.602907][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 491.850511][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2913'. [ 492.106991][T16147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2916'. [ 492.244752][T16152] netlink: 'syz.4.2918': attribute type 1 has an invalid length. [ 492.262015][T16152] pimreg3: entered allmulticast mode [ 492.272775][T16152] netlink: 'syz.4.2918': attribute type 1 has an invalid length. [ 492.286460][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2918'. [ 492.328196][T16152] pimreg3: left allmulticast mode [ 492.596004][T16164] netlink: 'syz.3.2923': attribute type 21 has an invalid length. [ 492.643165][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 493.127442][T16198] lo: entered promiscuous mode [ 493.682975][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.000536][T16198] lo: left promiscuous mode [ 494.065810][T16210] syzkaller0: entered allmulticast mode [ 494.105741][T16210] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 494.137864][T16210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2938'. [ 494.366975][T16221] batadv_slave_1: entered promiscuous mode [ 494.394330][T16221] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 494.722972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 495.762890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.612587][T16297] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2963'. [ 496.633272][T16297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2963'. [ 496.656990][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2963'. [ 496.682961][T16297] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2963'. [ 496.740438][T16299] FAULT_INJECTION: forcing a failure. [ 496.740438][T16299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.773154][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.1.2962 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 496.783615][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 496.793700][T16299] Call Trace: [ 496.796994][T16299] [ 496.799940][T16299] dump_stack_lvl+0x241/0x360 [ 496.802990][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.804620][T16299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.804646][T16299] ? __pfx__printk+0x10/0x10 [ 496.821246][T16299] ? __mutex_unlock_slowpath+0x21e/0x790 [ 496.826891][T16299] should_fail_ex+0x3b0/0x4e0 [ 496.831573][T16299] _copy_to_user+0x31/0xb0 [ 496.835993][T16299] xsk_getsockopt+0x8e2/0xbc0 [ 496.840672][T16299] ? __pfx_xsk_getsockopt+0x10/0x10 [ 496.845877][T16299] ? __pfx___might_resched+0x10/0x10 [ 496.851162][T16299] ? __might_fault+0xaa/0x120 [ 496.855841][T16299] ? __pfx_lock_release+0x10/0x10 [ 496.860868][T16299] ? __might_fault+0xc6/0x120 [ 496.865544][T16299] ? __pfx_xsk_getsockopt+0x10/0x10 [ 496.870738][T16299] do_sock_getsockopt+0x3c4/0x7e0 [ 496.875766][T16299] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 496.881307][T16299] ? __fget_files+0x2a/0x410 [ 496.885895][T16299] ? __fget_files+0x395/0x410 [ 496.890566][T16299] ? __fget_files+0x2a/0x410 [ 496.895154][T16299] __x64_sys_getsockopt+0x2a1/0x370 [ 496.900355][T16299] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 496.906075][T16299] ? do_syscall_64+0x100/0x230 [ 496.910851][T16299] ? do_syscall_64+0xb6/0x230 [ 496.915525][T16299] do_syscall_64+0xf3/0x230 [ 496.920023][T16299] ? clear_bhb_loop+0x35/0x90 [ 496.924698][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.930585][T16299] RIP: 0033:0x7f8e1bf7e819 [ 496.935001][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.954603][T16299] RSP: 002b:00007f8e1cd00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 496.963021][T16299] RAX: ffffffffffffffda RBX: 00007f8e1c135fa0 RCX: 00007f8e1bf7e819 [ 496.971000][T16299] RDX: 0000000000000008 RSI: 000000000000011b RDI: 0000000000000008 [ 496.978965][T16299] RBP: 00007f8e1cd00090 R08: 0000000020000040 R09: 0000000000000000 [ 496.986935][T16299] R10: 0000000020003140 R11: 0000000000000246 R12: 0000000000000001 [ 496.994901][T16299] R13: 0000000000000000 R14: 00007f8e1c135fa0 R15: 00007ffd60fd19b8 [ 497.002883][T16299] [ 497.313495][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 497.348624][T16307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 497.741257][T16315] syzkaller0: entered allmulticast mode [ 497.800039][T16315] syzkaller0: mtu greater than device maximum [ 497.842933][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 498.424848][T16334] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 498.437312][T16337] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 498.559235][T16341] pimreg3: entered allmulticast mode [ 498.621907][T16336] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 498.625105][T16343] lo speed is unknown, defaulting to 1000 [ 498.680915][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 498.703920][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'. [ 498.859939][T16336] pimreg3: left allmulticast mode [ 498.883015][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.079701][T16361] lo speed is unknown, defaulting to 1000 [ 499.151852][T16364] xt_CONNSECMARK: invalid mode: 6 [ 499.655397][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 499.895818][T16375] xt_policy: too many policy elements [ 499.906437][T16375] xt_policy: too many policy elements [ 499.923006][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.124462][T16384] FAULT_INJECTION: forcing a failure. [ 500.124462][T16384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.160605][T16384] CPU: 1 UID: 0 PID: 16384 Comm: syz.4.2983 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 500.171096][T16384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 500.181172][T16384] Call Trace: [ 500.184461][T16384] [ 500.187421][T16384] dump_stack_lvl+0x241/0x360 [ 500.192100][T16384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.197318][T16384] ? __pfx__printk+0x10/0x10 [ 500.201929][T16384] ? snprintf+0xda/0x120 [ 500.206175][T16384] should_fail_ex+0x3b0/0x4e0 [ 500.210866][T16384] _copy_to_user+0x31/0xb0 [ 500.215313][T16384] simple_read_from_buffer+0xca/0x150 [ 500.220699][T16384] proc_fail_nth_read+0x1e9/0x250 [ 500.225732][T16384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.231283][T16384] ? rw_verify_area+0x55e/0x6f0 [ 500.236132][T16384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.241676][T16384] vfs_read+0x1fc/0xb70 [ 500.245837][T16384] ? __pfx___mutex_lock+0x10/0x10 [ 500.250857][T16384] ? __pfx_vfs_read+0x10/0x10 [ 500.255536][T16384] ? __fget_files+0x2a/0x410 [ 500.260121][T16384] ? __fget_files+0x395/0x410 [ 500.264818][T16384] ? __fget_files+0x2a/0x410 [ 500.269423][T16384] ksys_read+0x18f/0x2b0 [ 500.273670][T16384] ? __pfx_ksys_read+0x10/0x10 [ 500.278435][T16384] ? do_syscall_64+0x100/0x230 [ 500.283203][T16384] ? do_syscall_64+0xb6/0x230 [ 500.287879][T16384] do_syscall_64+0xf3/0x230 [ 500.292376][T16384] ? clear_bhb_loop+0x35/0x90 [ 500.297057][T16384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.302960][T16384] RIP: 0033:0x7fd7ca37d25c [ 500.307378][T16384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 500.326990][T16384] RSP: 002b:00007fd7cb19b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.335408][T16384] RAX: ffffffffffffffda RBX: 00007fd7ca535fa0 RCX: 00007fd7ca37d25c [ 500.343381][T16384] RDX: 000000000000000f RSI: 00007fd7cb19b0a0 RDI: 0000000000000007 [ 500.351347][T16384] RBP: 00007fd7cb19b090 R08: 0000000000000000 R09: 0000000000000000 [ 500.359316][T16384] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 500.367287][T16384] R13: 0000000000000000 R14: 00007fd7ca535fa0 R15: 00007ffc2a2b6c98 [ 500.375270][T16384] [ 500.481494][T16389] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2984'. [ 500.500850][T16389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2984'. [ 500.535652][T16389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2984'. [ 500.599090][T16389] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2984'. [ 500.874459][T16408] netlink: 'syz.1.2988': attribute type 4 has an invalid length. [ 500.908489][T16408] netlink: 'syz.1.2988': attribute type 10 has an invalid length. [ 500.917255][T16408] batman_adv: batadv0: Adding interface: team0 [ 500.924078][T16408] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 500.944211][T16408] netlink: 'syz.1.2988': attribute type 10 has an invalid length. [ 500.953596][T16408] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2988'. [ 500.962706][T16408] team0: entered promiscuous mode [ 500.967854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 500.980556][T16413] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 500.991812][T16408] team_slave_0: entered promiscuous mode [ 500.999748][T16408] team_slave_1: entered promiscuous mode [ 501.012028][T16408] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 501.021164][T16408] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.032025][T16408] batman_adv: batadv0: Interface activated: team0 [ 501.038766][T16408] batman_adv: batadv0: Interface deactivated: team0 [ 501.051160][T16408] batman_adv: batadv0: Removing interface: team0 [ 501.051225][T16413] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 501.082743][T16420] netlink: 'syz.2.2991': attribute type 29 has an invalid length. [ 501.104521][T16418] netlink: 'syz.2.2991': attribute type 29 has an invalid length. [ 501.342602][T15580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.361651][T15580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.609403][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.753861][T16454] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 502.002929][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 502.127333][T16465] lo speed is unknown, defaulting to 1000 [ 502.724418][T16473] sctp: [Deprecated]: syz.2.3007 (pid 16473) Use of int in max_burst socket option deprecated. [ 502.724418][T16473] Use struct sctp_assoc_value instead [ 503.042978][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.336615][T16492] __nla_validate_parse: 8 callbacks suppressed [ 503.336634][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 503.377904][T16494] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3013'. [ 503.393490][T16494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3013'. [ 503.419180][T16494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'. [ 503.433093][T16494] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3013'. [ 503.738811][T16511] lo speed is unknown, defaulting to 1000 [ 504.082940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 504.722293][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 504.737331][T16528] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3021'. [ 505.098223][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 505.122977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.123504][T16538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3025'. [ 505.381182][T16544] lo speed is unknown, defaulting to 1000 [ 505.568306][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3028'. [ 505.781501][T16547] lo speed is unknown, defaulting to 1000 [ 505.934867][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.945648][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.958166][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.984577][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.992112][ T5864] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 506.007674][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.135401][T16556] lo speed is unknown, defaulting to 1000 [ 506.162927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.202935][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.366220][ T5933] ------------[ cut here ]------------ [ 507.372033][ T5933] WARNING: CPU: 1 PID: 5933 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 507.381101][ T5933] Modules linked in: [ 507.385018][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 507.395460][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 507.405540][ T5933] Workqueue: events l2cap_chan_timeout [ 507.411043][ T5933] RIP: 0010:__queue_work+0xcd3/0xf50 [ 507.416357][ T5933] Code: ff e8 e1 9a 37 00 90 0f 0b 90 e9 1e fd ff ff e8 d3 9a 37 00 eb 13 e8 cc 9a 37 00 eb 0c e8 c5 9a 37 00 eb 05 e8 be 9a 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 507.435987][ T5933] RSP: 0018:ffffc900045778e8 EFLAGS: 00010093 [ 507.442076][ T5933] RAX: ffffffff815d6822 RBX: ffff88801ac94408 RCX: ffff888024d1bc00 [ 507.450064][ T5933] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 507.458050][ T5933] RBP: 0000000000000020 R08: ffffffff81605549 R09: 0000000000000000 [ 507.466038][ T5933] R10: ffffc900045779c0 R11: fffff520008aef39 R12: ffff8880223a6800 [ 507.474031][ T5933] R13: ffff8880223a69c0 R14: dffffc0000000000 R15: 0000000000000008 [ 507.482023][ T5933] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 507.490979][ T5933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.497579][ T5933] CR2: 0000000000000000 CR3: 0000000064cd8000 CR4: 00000000003526f0 [ 507.505572][ T5933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 507.513554][ T5933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 507.521554][ T5933] Call Trace: [ 507.524849][ T5933] [ 507.527803][ T5933] ? __warn+0x168/0x4e0 [ 507.531975][ T5933] ? __queue_work+0xcd3/0xf50 [ 507.536672][ T5933] ? report_bug+0x2b3/0x500 [ 507.541195][ T5933] ? __queue_work+0xcd3/0xf50 [ 507.545895][ T5933] ? handle_bug+0x60/0x90 [ 507.550246][ T5933] ? exc_invalid_op+0x1a/0x50 [ 507.554945][ T5933] ? asm_exc_invalid_op+0x1a/0x20 [ 507.559993][ T5933] ? kthread_data+0x49/0xd0 [ 507.564509][ T5933] ? __queue_work+0xcd2/0xf50 [ 507.569201][ T5933] ? __queue_work+0xcd3/0xf50 [ 507.573891][ T5933] ? __queue_work+0xcd2/0xf50 [ 507.578596][ T5933] ? __queue_delayed_work+0x17e/0x250 [ 507.583999][ T5933] queue_delayed_work_on+0x1ca/0x390 [ 507.589302][ T5933] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 507.595118][ T5933] ? do_raw_spin_unlock+0x13c/0x8b0 [ 507.600358][ T5933] ? hci_conn_drop+0x152/0x280 [ 507.605146][ T5933] l2cap_chan_del+0x291/0x5d0 [ 507.609851][ T5933] l2cap_chan_close+0x38b/0x9f0 [ 507.614725][ T5933] ? __pfx_l2cap_chan_close+0x10/0x10 [ 507.620126][ T5933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.626477][ T5933] l2cap_chan_timeout+0x142/0x360 [ 507.631522][ T5933] ? process_scheduled_works+0x976/0x1850 [ 507.637261][ T5933] process_scheduled_works+0xa63/0x1850 [ 507.642856][ T5933] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.648881][ T5933] ? assign_work+0x364/0x3d0 [ 507.653500][ T5933] worker_thread+0x870/0xd30 [ 507.658129][ T5933] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 507.664050][ T5933] ? __kthread_parkme+0x169/0x1d0 [ 507.669100][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 507.674230][ T5933] kthread+0x2f0/0x390 [ 507.678311][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 507.683440][ T5933] ? __pfx_kthread+0x10/0x10 [ 507.688087][ T5933] ret_from_fork+0x4b/0x80 [ 507.692515][ T5933] ? __pfx_kthread+0x10/0x10 [ 507.697117][ T5933] ret_from_fork_asm+0x1a/0x30 [ 507.701913][ T5933] [ 507.704945][ T5933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 507.712266][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 507.722684][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 507.732748][ T5933] Workqueue: events l2cap_chan_timeout [ 507.738231][ T5933] Call Trace: [ 507.741519][ T5933] [ 507.744460][ T5933] dump_stack_lvl+0x241/0x360 [ 507.749156][ T5933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.754368][ T5933] ? __pfx__printk+0x10/0x10 [ 507.758981][ T5933] ? vscnprintf+0x5d/0x90 [ 507.763329][ T5933] panic+0x349/0x880 [ 507.767246][ T5933] ? __warn+0x177/0x4e0 [ 507.771416][ T5933] ? __pfx_panic+0x10/0x10 [ 507.775858][ T5933] ? ret_from_fork_asm+0x1a/0x30 [ 507.780819][ T5933] __warn+0x34b/0x4e0 [ 507.784815][ T5933] ? __queue_work+0xcd3/0xf50 [ 507.789516][ T5933] report_bug+0x2b3/0x500 [ 507.793861][ T5933] ? __queue_work+0xcd3/0xf50 [ 507.798564][ T5933] handle_bug+0x60/0x90 [ 507.802753][ T5933] exc_invalid_op+0x1a/0x50 [ 507.807266][ T5933] asm_exc_invalid_op+0x1a/0x20 [ 507.812123][ T5933] RIP: 0010:__queue_work+0xcd3/0xf50 [ 507.817435][ T5933] Code: ff e8 e1 9a 37 00 90 0f 0b 90 e9 1e fd ff ff e8 d3 9a 37 00 eb 13 e8 cc 9a 37 00 eb 0c e8 c5 9a 37 00 eb 05 e8 be 9a 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 507.837076][ T5933] RSP: 0018:ffffc900045778e8 EFLAGS: 00010093 [ 507.843178][ T5933] RAX: ffffffff815d6822 RBX: ffff88801ac94408 RCX: ffff888024d1bc00 [ 507.851174][ T5933] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 507.859163][ T5933] RBP: 0000000000000020 R08: ffffffff81605549 R09: 0000000000000000 [ 507.867149][ T5933] R10: ffffc900045779c0 R11: fffff520008aef39 R12: ffff8880223a6800 [ 507.875134][ T5933] R13: ffff8880223a69c0 R14: dffffc0000000000 R15: 0000000000000008 [ 507.883130][ T5933] ? kthread_data+0x49/0xd0 [ 507.887668][ T5933] ? __queue_work+0xcd2/0xf50 [ 507.892373][ T5933] ? __queue_work+0xcd2/0xf50 [ 507.897069][ T5933] ? __queue_delayed_work+0x17e/0x250 [ 507.902458][ T5933] queue_delayed_work_on+0x1ca/0x390 [ 507.907781][ T5933] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 507.913634][ T5933] ? do_raw_spin_unlock+0x13c/0x8b0 [ 507.918874][ T5933] ? hci_conn_drop+0x152/0x280 [ 507.923675][ T5933] l2cap_chan_del+0x291/0x5d0 [ 507.928381][ T5933] l2cap_chan_close+0x38b/0x9f0 [ 507.933256][ T5933] ? __pfx_l2cap_chan_close+0x10/0x10 [ 507.938660][ T5933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.945029][ T5933] l2cap_chan_timeout+0x142/0x360 [ 507.950077][ T5933] ? process_scheduled_works+0x976/0x1850 [ 507.955816][ T5933] process_scheduled_works+0xa63/0x1850 [ 507.961412][ T5933] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.967421][ T5933] ? assign_work+0x364/0x3d0 [ 507.972031][ T5933] worker_thread+0x870/0xd30 [ 507.976645][ T5933] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 507.982559][ T5933] ? __kthread_parkme+0x169/0x1d0 [ 507.987630][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 507.992761][ T5933] kthread+0x2f0/0x390 [ 507.996843][ T5933] ? __pfx_worker_thread+0x10/0x10 [ 508.001979][ T5933] ? __pfx_kthread+0x10/0x10 [ 508.006602][ T5933] ret_from_fork+0x4b/0x80 [ 508.011071][ T5933] ? __pfx_kthread+0x10/0x10 [ 508.015686][ T5933] ret_from_fork_asm+0x1a/0x30 [ 508.020479][ T5933] [ 508.023773][ T5933] Kernel Offset: disabled [ 508.028160][ T5933] Rebooting in 86400 seconds..