last executing test programs: 1m5.524435203s ago: executing program 4 (id=400): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000ffffffffffffff8000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0) 55.676408359s ago: executing program 4 (id=400): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000ffffffffffffff8000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0) 40.718236507s ago: executing program 4 (id=400): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000ffffffffffffff8000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0) 28.437380415s ago: executing program 4 (id=400): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000ffffffffffffff8000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0) 12.140070029s ago: executing program 4 (id=400): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000ffffffffffffff8000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0) 4.105079589s ago: executing program 1 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf4}]}]}, 0x28}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x78, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x79, 0x7, 0xb2d}, {0x7, 0x1, 0xce, 0xffff}, {0x1, 0x7, 0xf8, 0x85}]}}}]}}, {{0x8, 0x1, r9}, {0x4}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.724493443s ago: executing program 1 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) unshare(0x8020480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) unshare(0x22020600) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x40047452, 0x0) pwritev(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYRES32=r1], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_emit_ethernet(0xa2, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6d9ccfe1006c11fffc010000000000000000fe8000000000000000000000000000aa01000006000000004e214e23006490780200000000000000020000007fbe0c3069d619f5f96822e8da60d2b4f50297ebbf1e1988179ddef3b7fe51bce8570542bbb6fb11bce5e0178cb67cbfbb396a61d8fe497d2a9955c0c8f9428f24bb0de580a1b2aa7143a439"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c", 0x82}], 0x1}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000003c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000009c000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000004000c000900030073797a300000000060000480080002401f3366750800024052c65bc6080002404a471795140003007465616d5f736c6176655f310000000014000300626f6e645f736c6176655f31000800024021", @ANYRES16=r4], 0xe4}}, 0x4040004) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000400000000000000000000000dd5e7f0274c4a870d18262b0d57b6c3b0b2e64622799cd6855b4bffaed157273f74e01eb5a09294423edb3bbb05d3f1bbbeab3657fcbb12f8d554fcda0d4500fee2345fac0b00380dd5d09e41dc6231c87364f2da7067995f42192ca4a7521226c96f3af1bfd0910068e447b88ff9596d906101162346e48310af91d14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ff9222173cf2d82300000f00000008002c03000000000000000000000b7c98eff6088c6debaa0d994fce083c812fb7dc741d0de1355bd41f164d1fa05d8a06caa8ce3dfea3d5d2fca1bda637daccd1d81e", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) 3.66756632s ago: executing program 4 (id=400): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000ffffffffffffff8000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00"], 0xe0}}, 0x0) 2.2641269s ago: executing program 1 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 2.26382968s ago: executing program 2 (id=1642): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0xa, 0xfffffffd}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r1, 0x0) close(0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c792bd22555161b0010095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000300000000000000000080000000000040e197084a096de427f4c803bf7134533f8a8c4b550cadccaddcf5fd365135a6e99dc0118f204d7a66e35d859523afb3fbca8956ed708d1a47ffdb0594d523f2bbdd6439cecdffdbfe7ea02aa0fde4e5d865030ae782c00146778b2b428128f84fcb1bd05ccc7e2d47136a34a2d7c584e8f640e6328570c511ce62cdd58e8ef8c07ca2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000008000200850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0xa, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r3, 0x58, &(0x7f0000000780)}, 0x10) 2.004423987s ago: executing program 0 (id=1645): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04003ee0b4528c95a02997b85f1a0000000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {0x0, 0x31fb}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x51, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001f591ddbb6f6fbee37ff00040000000000fc84c41d3555", @ANYRES32=0x0, @ANYBLOB="04000000000000002c0012800b00010067726574617000001c0002800600180000000000060003000000000006000e00000000000500100007000000"], 0x54}}, 0x4040014) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003040000000000000000000004007b96f5fb4609733113b7d391f4dd060e76108dc116b217379d8ea7fa126cfec9f79a9fa68db3a151816ee9e5613d823a25d1a6bed14621d92241ae93b00e541cdb2b0e04df147cc01e425237152dccb94ef875d524e0b8db1ae6f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000000000005000a00f7000000"], 0x44}}, 0x0) unshare(0x48000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 1.984644082s ago: executing program 2 (id=1647): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x40000000015, 0x5, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0xff, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x53f, 0x7, {0x3}}, {0x8, 0x7, {0x2, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x80006}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x2, {0x2, 0x9}}, {0x400, 0x101, {0x3, 0x9c22}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x2081, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.943508366s ago: executing program 1 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280100001d0a1ffeffff000000000000010000000900010073797a30000000000c000b400000000000010000e8000980e4000280140001800800015200000080080001400000000114000180080001400000000008000140020010001c000180080001400000000508000140000000040800014000000008440001800800014000000101080001400000008008000140000000070800014000001000080001400000000408000140000000020800014000000b9b0800014000000004440001800800014000000006080001408000000108000140000003ff0800014000000001080001400000000908000140000000090800014000000008080001400000000814000180080001400000010008000140000000710c0010"], 0x150}}, 0x0) 1.793347664s ago: executing program 1 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf4}]}]}, 0x28}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.679518236s ago: executing program 3 (id=1650): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000700000040000000090000002a000100", @ANYRES32, @ANYBLOB="c50c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000020000000e000000000000000000ab2f49534dc00000", @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x800) 1.614046009s ago: executing program 3 (id=1651): socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/90}, {&(0x7f00000001c0)=""/254}], 0x12) socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 711.37116ms ago: executing program 2 (id=1652): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) unshare(0x8020480) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) unshare(0x22020600) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x40047452, 0x0) pwritev(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYRES32=r1], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_emit_ethernet(0xa2, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6d9ccfe1006c11fffc010000000000000000fe8000000000000000000000000000aa01000006000000004e214e23006490780200000000000000020000007fbe0c3069d619f5f96822e8da60d2b4f50297ebbf1e1988179ddef3b7fe51bce8570542bbb6fb11bce5e0178cb67cbfbb396a61d8fe497d2a9955c0c8f9428f24bb0de580a1b2aa7143a439"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c", 0x82}], 0x1}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000003c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000009c000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000004000c000900030073797a300000000060000480080002401f3366750800024052c65bc6080002404a471795140003007465616d5f736c6176655f310000000014000300626f6e645f736c6176655f31000800024021", @ANYRES16=r4], 0xe4}}, 0x4040004) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000400000000000000000000000dd5e7f0274c4a870d18262b0d57b6c3b0b2e64622799cd6855b4bffaed157273f74e01eb5a09294423edb3bbb05d3f1bbbeab3657fcbb12f8d554fcda0d4500fee2345fac0b00380dd5d09e41dc6231c87364f2da7067995f42192ca4a7521226c96f3af1bfd0910068e447b88ff9596d906101162346e48310af91d14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ff9222173cf2d82300000f00000008002c03000000000000000000000b7c98eff6088c6debaa0d994fce083c812fb7dc741d0de1355bd41f164d1fa05d8a06caa8ce3dfea3d5d2fca1bda637daccd1d81e", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) 644.665765ms ago: executing program 1 (id=1653): r0 = socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f00000004c0)=0x90) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r2, 0x8000}, {0xffffffffffffffff, 0x1011}, {r3, 0x450}], 0x3, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000280)={[0x9]}, 0x8) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000001940)=[@rights={{0x10}}], 0x10, 0x20000040}, 0xc000) 573.079076ms ago: executing program 3 (id=1654): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001bc0), 0x2, 0x0) 527.811755ms ago: executing program 0 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000300)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 397.092491ms ago: executing program 0 (id=1656): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e008d2a0000000000f400000a00f4"], 0x1c}}, 0x0) 396.464142ms ago: executing program 3 (id=1657): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{0x0, 0x2, 0x4}, {}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7ff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c010) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 360.262667ms ago: executing program 2 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x4fc, 0x8, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x4}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 300.594018ms ago: executing program 0 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 249.687193ms ago: executing program 3 (id=1660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000045d09500040000000000"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 239.516967ms ago: executing program 0 (id=1661): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000280), 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000700000040000000090000002a000100", @ANYRES32, @ANYBLOB="c50c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000020000000e000000000000000000ab2f49534dc00000", @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x800) 182.04697ms ago: executing program 2 (id=1662): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x40000000015, 0x5, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0xff, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x53f, 0x7, {0x3}}, {0x8, 0x7, {0x2, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x80006}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x2, {0x2, 0x9}}, {0x400, 0x101, {0x3, 0x9c22}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x2081, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 116.003401ms ago: executing program 3 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf4}]}]}, 0x28}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}], @IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x270, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x10, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0xe0, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0xa4, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x4}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @private2}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}]}]}]}, 0x270}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 99.107499ms ago: executing program 0 (id=1664): socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/90}, {&(0x7f00000001c0)=""/254}], 0x12) socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 0s ago: executing program 2 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04003ee0b4528c95a02997b85f1a0000000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {0x0, 0x31fb}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x51, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001f591ddbb6f6fbee37ff00040000000000fc84c41d3555", @ANYRES32=0x0, @ANYBLOB="04000000000000002c0012800b00010067726574617000001c0002800600180000000000060003000000000006000e00000000000500100007000000"], 0x54}}, 0x4040014) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003040000000000000000000004007b96f5fb4609733113b7d391f4dd060e76108dc116b217379d8ea7fa126cfec9f79a9fa68db3a151816ee9e5613d823a25d1a6bed14621d92241ae93b00e541cdb2b0e04df147cc01e425237152dccb94ef875d524e0b8db1ae6f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000000000005000a00f7000000"], 0x44}}, 0x0) unshare(0x48000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) kernel console output (not intermixed with test programs): , 0] type 2 family 0 port 6081 - 0 [ 121.715005][ T8169] x_tables: unsorted underflow at hook 4 [ 121.717329][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.742738][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 121.749748][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 121.775692][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.786045][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.795918][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.915670][ T8179] netlink: 'syz.3.782': attribute type 4 has an invalid length. [ 121.982992][ T7389] bridge_slave_1: left allmulticast mode [ 121.988686][ T7389] bridge_slave_1: left promiscuous mode [ 122.008224][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.035625][ T7389] bridge_slave_0: left allmulticast mode [ 122.055900][ T7389] bridge_slave_0: left promiscuous mode [ 122.083270][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.549252][ T7389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.561572][ T7389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.573906][ T7389] bond0 (unregistering): Released all slaves [ 122.585479][ T8177] netlink: 'syz.3.782': attribute type 4 has an invalid length. [ 122.608477][ T8202] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 122.719574][ T8208] dccp_invalid_packet: P.Data Offset(4) too small [ 122.772763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 122.779754][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 122.798935][ T8212] xt_cgroup: invalid path, errno=-2 [ 122.804578][ T8208] bond0: Unable to set up delay as MII monitoring is disabled [ 123.060681][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 123.096995][ T7389] hsr_slave_0: left promiscuous mode [ 123.109418][ T7389] hsr_slave_1: left promiscuous mode [ 123.121508][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.138827][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.166562][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.183879][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.212269][ T7389] veth1_macvtap: left promiscuous mode [ 123.218343][ T7389] veth0_macvtap: left promiscuous mode [ 123.224188][ T7389] veth1_vlan: left promiscuous mode [ 123.229957][ T7389] veth0_vlan: left promiscuous mode [ 123.338292][ T8241] sctp: [Deprecated]: syz.3.799 (pid 8241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.338292][ T8241] Use struct sctp_sack_info instead [ 123.621614][ T7389] team0 (unregistering): Port device team_slave_1 removed [ 123.665349][ T7389] team0 (unregistering): Port device team_slave_0 removed [ 123.894739][ T5852] Bluetooth: hci2: command tx timeout [ 124.001083][ T8232] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 124.117322][ T8250] xt_cgroup: invalid path, errno=-2 [ 124.253791][ T8259] netlink: 'syz.3.805': attribute type 23 has an invalid length. [ 124.267318][ T8259] netlink: 'syz.3.805': attribute type 11 has an invalid length. [ 124.295348][ T8259] __nla_validate_parse: 4 callbacks suppressed [ 124.295368][ T8259] netlink: 224 bytes leftover after parsing attributes in process `syz.3.805'. [ 124.370267][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.378832][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.386424][ T8168] bridge_slave_0: entered allmulticast mode [ 124.393586][ T8168] bridge_slave_0: entered promiscuous mode [ 124.406587][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.418373][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.427980][ T8168] bridge_slave_1: entered allmulticast mode [ 124.439574][ T8168] bridge_slave_1: entered promiscuous mode [ 124.501945][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.528706][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.604261][ T8168] team0: Port device team_slave_0 added [ 124.633355][ T8168] team0: Port device team_slave_1 added [ 124.673172][ T8271] netlink: 'syz.1.809': attribute type 4 has an invalid length. [ 124.687949][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.699403][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.725647][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.737446][ T8271] netlink: 'syz.1.809': attribute type 4 has an invalid length. [ 124.749810][ T8271] netlink: 52 bytes leftover after parsing attributes in process `syz.1.809'. [ 124.759623][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.767728][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.798266][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.822877][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.809'. [ 124.852662][ C1] net_ratelimit: 2 callbacks suppressed [ 124.852680][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.865239][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.876459][ T8168] hsr_slave_0: entered promiscuous mode [ 124.886926][ T8168] hsr_slave_1: entered promiscuous mode [ 124.893730][ T8168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.901484][ T8168] Cannot create hsr debugfs directory [ 125.086168][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 125.104750][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 125.167643][ T8282] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 125.271547][ T8284] netlink: 'syz.0.813': attribute type 5 has an invalid length. [ 125.407909][ T8289] sctp: [Deprecated]: syz.0.815 (pid 8289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.407909][ T8289] Use struct sctp_sack_info instead [ 125.436254][ T8291] netlink: 168 bytes leftover after parsing attributes in process `syz.2.816'. [ 125.522504][ T8293] Cannot find add_set index 0 as target [ 125.698762][ T8168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 125.710803][ T8168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 125.722670][ T8168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.742757][ T8299] netlink: 'syz.0.820': attribute type 4 has an invalid length. [ 125.760218][ T8168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.779889][ T8299] netlink: 'syz.0.820': attribute type 4 has an invalid length. [ 125.797351][ T8299] netlink: 52 bytes leftover after parsing attributes in process `syz.0.820'. [ 125.808748][ T8299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'. [ 125.893706][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.900738][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.974027][ T5852] Bluetooth: hci2: command tx timeout [ 126.123987][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.825'. [ 126.140269][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.163929][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.187524][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.194730][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.226341][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.233512][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.316976][ T8318] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 126.332766][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.343832][ T8318] vlan3: entered allmulticast mode [ 126.349233][ T8318] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 126.392038][ T8318] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 126.421097][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.828'. [ 126.590778][ T8334] sctp: [Deprecated]: syz.3.831 (pid 8334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.590778][ T8334] Use struct sctp_sack_info instead [ 126.644550][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.883237][ T8348] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 126.891348][ T8348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.932665][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.939754][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.955452][ T8168] veth0_vlan: entered promiscuous mode [ 126.969294][ T8168] veth1_vlan: entered promiscuous mode [ 127.011770][ T8168] veth0_macvtap: entered promiscuous mode [ 127.033934][ T8168] veth1_macvtap: entered promiscuous mode [ 127.071459][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.083818][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.108132][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.125427][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.138849][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.149676][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.160746][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.178190][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.207436][ T8354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.268610][ T8168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.296857][ T8168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.311930][ T8168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.320712][ T8168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.346446][ T8361] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 127.482131][ T7385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.490535][ T7385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.548118][ T8168] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 127.558256][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.578121][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.587552][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.887123][ T8386] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 127.887200][ T8395] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 127.982750][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 128.055681][ T8400] xt_cgroup: invalid path, errno=-2 [ 128.333118][ T8422] netlink: 'syz.0.864': attribute type 23 has an invalid length. [ 128.341503][ T8422] netlink: 'syz.0.864': attribute type 11 has an invalid length. [ 128.875472][ T8455] xt_cgroup: invalid path, errno=-2 [ 128.940018][ T8408] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 129.000877][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.645654][ T8465] SET target dimension over the limit! [ 129.770595][ T8472] __nla_validate_parse: 10 callbacks suppressed [ 129.770614][ T8472] netlink: 168 bytes leftover after parsing attributes in process `syz.0.880'. [ 129.888680][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.903058][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.910857][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.929067][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.937729][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.948596][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.965519][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.966312][ T8483] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.884'. [ 130.032728][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 130.052671][ C1] net_ratelimit: 3 callbacks suppressed [ 130.052688][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 130.065252][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 130.079214][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 130.080227][ T8488] xt_cgroup: invalid path, errno=-2 [ 130.133864][ T5852] Bluetooth: hci0: command 0x0401 tx timeout [ 130.169939][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.333323][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.519798][ T8508] netlink: 168 bytes leftover after parsing attributes in process `syz.3.894'. [ 130.621539][ T35] bridge_slave_1: left allmulticast mode [ 130.627639][ T35] bridge_slave_1: left promiscuous mode [ 130.633467][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.657842][ T35] bridge_slave_0: left allmulticast mode [ 130.672685][ T35] bridge_slave_0: left promiscuous mode [ 130.678418][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.700167][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 131.076658][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.088830][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.097472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.097521][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.117981][ T35] bond0 (unregistering): Released all slaves [ 131.166572][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 131.199608][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 131.313051][ T8544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.906'. [ 131.389327][ T8547] netlink: 'syz.1.907': attribute type 5 has an invalid length. [ 131.457406][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 131.546081][ T8557] netlink: 168 bytes leftover after parsing attributes in process `syz.3.912'. [ 131.756515][ T35] hsr_slave_0: left promiscuous mode [ 131.787709][ T35] hsr_slave_1: left promiscuous mode [ 131.829022][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.838432][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.851570][ T8577] sctp: [Deprecated]: syz.1.920 (pid 8577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.851570][ T8577] Use struct sctp_sack_info instead [ 131.856232][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.901115][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.954018][ T35] veth1_macvtap: left promiscuous mode [ 131.968146][ T35] veth0_macvtap: left promiscuous mode [ 131.975232][ T35] veth1_vlan: left promiscuous mode [ 131.980658][ T35] veth0_vlan: left promiscuous mode [ 132.052790][ T5852] Bluetooth: hci2: command tx timeout [ 132.142690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 132.149759][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 132.398519][ T35] team0 (unregistering): Port device team_slave_1 removed [ 132.437046][ T35] team0 (unregistering): Port device team_slave_0 removed [ 132.787008][ T8575] netlink: 'syz.2.918': attribute type 3 has an invalid length. [ 132.921027][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.937572][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.975935][ T8477] bridge_slave_0: entered allmulticast mode [ 132.997174][ T8477] bridge_slave_0: entered promiscuous mode [ 133.023666][ T8602] netlink: 'syz.2.924': attribute type 6 has an invalid length. [ 133.049241][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.065860][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.088359][ T8477] bridge_slave_1: entered allmulticast mode [ 133.108576][ T8477] bridge_slave_1: entered promiscuous mode [ 133.172649][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 133.179669][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 133.261395][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.324591][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.535380][ T8477] team0: Port device team_slave_0 added [ 133.557474][ T8477] team0: Port device team_slave_1 added [ 133.653418][ T8637] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 133.713051][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.744157][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.821186][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.868985][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.882744][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.930376][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.957265][ T8647] FAULT_INJECTION: forcing a failure. [ 133.957265][ T8647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.972855][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.0.941 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 133.983484][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.993568][ T8647] Call Trace: [ 133.996864][ T8647] [ 133.999815][ T8647] dump_stack_lvl+0x241/0x360 [ 134.004524][ T8647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.009754][ T8647] ? __pfx__printk+0x10/0x10 [ 134.014377][ T8647] ? __pfx_lock_release+0x10/0x10 [ 134.019452][ T8647] should_fail_ex+0x3b0/0x4e0 [ 134.024156][ T8647] _copy_from_user+0x2f/0xe0 [ 134.028789][ T8647] copy_from_sockptr_offset+0x6b/0xb0 [ 134.034190][ T8647] do_ipt_set_ctl+0xbdd/0x1250 [ 134.038986][ T8647] ? __pfx___might_resched+0x10/0x10 [ 134.044473][ T8647] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 134.049696][ T8647] ? __pfx_lock_release+0x10/0x10 [ 134.054759][ T8647] ? __mutex_unlock_slowpath+0x21d/0x750 [ 134.060427][ T8647] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 134.065828][ T8647] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.071844][ T8647] ? __pfx___mutex_lock+0x10/0x10 [ 134.076903][ T8647] nf_setsockopt+0x295/0x2c0 [ 134.081523][ T8647] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 134.087435][ T8647] smc_setsockopt+0x275/0xe50 [ 134.092562][ T8647] ? __pfx_smc_setsockopt+0x10/0x10 [ 134.097764][ T8647] ? aa_sock_opt_perm+0x79/0x120 [ 134.102702][ T8647] ? __pfx_smc_setsockopt+0x10/0x10 [ 134.107898][ T8647] do_sock_setsockopt+0x3af/0x720 [ 134.112928][ T8647] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 134.118472][ T8647] ? __fget_files+0x29/0x470 [ 134.123063][ T8647] ? __fget_files+0x3f3/0x470 [ 134.127738][ T8647] ? __fget_files+0x29/0x470 [ 134.132328][ T8647] __sys_setsockopt+0x1a2/0x250 [ 134.137180][ T8647] __x64_sys_setsockopt+0xb5/0xd0 [ 134.142205][ T8647] do_syscall_64+0xf3/0x230 [ 134.146708][ T8647] ? clear_bhb_loop+0x35/0x90 [ 134.151390][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.157279][ T8647] RIP: 0033:0x7ff1ce97e719 [ 134.161689][ T8647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.181291][ T8647] RSP: 002b:00007ff1cf826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.189705][ T8647] RAX: ffffffffffffffda RBX: 00007ff1ceb35f80 RCX: 00007ff1ce97e719 [ 134.197676][ T8647] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000007 [ 134.205646][ T8647] RBP: 00007ff1cf826090 R08: 0000000000001378 R09: 0000000000000000 [ 134.213610][ T8647] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000001 [ 134.221575][ T8647] R13: 0000000000000000 R14: 00007ff1ceb35f80 R15: 00007ffdfc5ad1a8 [ 134.229557][ T8647] [ 134.232712][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 134.250751][ T5852] Bluetooth: hci2: command tx timeout [ 134.426538][ T8644] bond0 (unregistering): Released all slaves [ 134.572321][ T8477] hsr_slave_0: entered promiscuous mode [ 134.601623][ T8477] hsr_slave_1: entered promiscuous mode [ 134.619733][ T8477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.631516][ T8477] Cannot create hsr debugfs directory [ 135.160544][ T8682] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 135.174378][ T8682] __nla_validate_parse: 6 callbacks suppressed [ 135.174395][ T8682] netlink: 17 bytes leftover after parsing attributes in process `syz.1.952'. [ 135.243849][ T8691] xt_CT: No such helper "netbios-ns" [ 135.252697][ C1] net_ratelimit: 1 callbacks suppressed [ 135.252714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 135.265253][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 135.316380][ T8477] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.383826][ T8477] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.398875][ T8477] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.425630][ T8477] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.656794][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.696777][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.750431][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.757627][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.802239][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.809427][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.886375][ T8709] sctp: [Deprecated]: syz.2.962 (pid 8709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.886375][ T8709] Use struct sctp_sack_info instead [ 135.955034][ T8477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.965897][ T8477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.285693][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.292658][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 136.297024][ T5152] Bluetooth: hci2: command tx timeout [ 136.299579][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 136.341409][ T8725] netlink: 'syz.0.965': attribute type 10 has an invalid length. [ 136.356831][ T8725] team0: Device ipvlan1 failed to register rx_handler [ 136.400338][ T8726] netlink: 168 bytes leftover after parsing attributes in process `syz.2.966'. [ 136.801239][ T8477] veth0_vlan: entered promiscuous mode [ 136.862377][ T8477] veth1_vlan: entered promiscuous mode [ 136.960853][ T8477] veth0_macvtap: entered promiscuous mode [ 136.995196][ T8477] veth1_macvtap: entered promiscuous mode [ 137.054340][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.078937][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.096448][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.126744][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.165915][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.186638][ T8477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.199441][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.226195][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.268580][ T8477] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.308672][ T8477] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.318481][ T8477] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.332668][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.334283][ T8477] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.339621][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.425591][ T8758] netlink: 168 bytes leftover after parsing attributes in process `syz.2.977'. [ 137.561026][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.583574][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.627724][ T8477] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 137.653607][ T8477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.685273][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.703706][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.845484][ T8768] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:16 [ 138.372664][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.379666][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 138.443432][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 138.463017][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 138.726019][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.121066][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.336992][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.412719][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.419714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 139.452554][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.579160][ T8802] SET target dimension over the limit! [ 139.767482][ T35] bridge_slave_1: left allmulticast mode [ 139.792698][ T35] bridge_slave_1: left promiscuous mode [ 139.798459][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.844205][ T35] bridge_slave_0: left allmulticast mode [ 139.849904][ T35] bridge_slave_0: left promiscuous mode [ 139.872808][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.995612][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.005437][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.023074][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.037900][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.045853][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.054146][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.174094][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 140.222766][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 140.240642][ T8824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1003'. [ 140.284267][ T5852] block nbd5: Receive control failed (result -107) [ 140.332723][ T8824] nbd5: detected capacity change from 0 to 256 [ 140.452707][ C1] net_ratelimit: 1 callbacks suppressed [ 140.452725][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 140.465294][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 140.549400][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 140.566854][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 141.034436][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.050053][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.062917][ T35] bond0 (unregistering): Released all slaves [ 141.492661][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.499652][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 141.521231][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 141.614171][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 141.638673][ T35] hsr_slave_0: left promiscuous mode [ 141.682992][ T35] hsr_slave_1: left promiscuous mode [ 141.690274][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.698509][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.712050][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.731389][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.755951][ T35] veth1_macvtap: left promiscuous mode [ 141.761555][ T35] veth0_macvtap: left promiscuous mode [ 141.767897][ T35] veth1_vlan: left promiscuous mode [ 141.773430][ T35] veth0_vlan: left promiscuous mode [ 141.825890][ T8884] sctp: [Deprecated]: syz.0.1024 (pid 8884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.825890][ T8884] Use struct sctp_sack_info instead [ 142.146754][ T5852] Bluetooth: hci2: command tx timeout [ 142.207975][ T35] team0 (unregistering): Port device team_slave_1 removed [ 142.246127][ T35] team0 (unregistering): Port device team_slave_0 removed [ 142.532735][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.539771][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.678363][ T8888] netlink: 'syz.3.1026': attribute type 23 has an invalid length. [ 142.687028][ T8888] netlink: 'syz.3.1026': attribute type 11 has an invalid length. [ 142.695938][ T8888] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1026'. [ 143.574692][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 143.581699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.188266][ T8900] netlink: 'syz.1.1027': attribute type 4 has an invalid length. [ 144.209158][ T8904] netlink: 'syz.1.1027': attribute type 4 has an invalid length. [ 144.222052][ T8905] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1027'. [ 144.231458][ T5852] Bluetooth: hci2: command tx timeout [ 144.237393][ T8906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1027'. [ 144.293144][ T8819] chnl_net:caif_netlink_parms(): no params data found [ 144.524153][ T8923] Cannot find del_set index 1 as target [ 144.612680][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.619632][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.666457][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.689893][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.707628][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 144.727172][ T8819] bridge_slave_0: entered allmulticast mode [ 144.748451][ T8819] bridge_slave_0: entered promiscuous mode [ 144.802202][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.811214][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.819132][ T8819] bridge_slave_1: entered allmulticast mode [ 144.828473][ T8819] bridge_slave_1: entered promiscuous mode [ 144.906510][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.928918][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.981712][ T8819] team0: Port device team_slave_0 added [ 144.990222][ T8819] team0: Port device team_slave_1 added [ 145.066295][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.089669][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.131771][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.155752][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.169950][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.209269][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.274542][ T8946] __nla_validate_parse: 2 callbacks suppressed [ 145.274561][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 145.341426][ T8819] hsr_slave_0: entered promiscuous mode [ 145.358664][ T8819] hsr_slave_1: entered promiscuous mode [ 145.367192][ T8819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.382731][ T8819] Cannot create hsr debugfs directory [ 145.397478][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 145.419689][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 145.459769][ T8964] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 145.593931][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 145.644741][ T8971] netlink: 'syz.0.1048': attribute type 4 has an invalid length. [ 145.652676][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.659648][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 145.674468][ T8964] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1048'. [ 145.698932][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1048'. [ 145.721089][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 145.772745][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 145.782356][ T8979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1052'. [ 145.805047][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 145.865632][ T5852] block nbd6: Receive control failed (result -107) [ 145.893120][ T8979] nbd6: detected capacity change from 0 to 256 [ 146.303292][ T5852] Bluetooth: hci2: command tx timeout [ 146.429464][ T8819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.448782][ T8819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.469321][ T8819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.480733][ T8819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.618673][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.692663][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.699638][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.712116][ T8819] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.742442][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.749603][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.811163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.818374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.299428][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.732709][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.739734][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 147.781576][ T8819] veth0_vlan: entered promiscuous mode [ 147.844890][ T8819] veth1_vlan: entered promiscuous mode [ 147.910310][ T9067] netlink: 'syz.1.1082': attribute type 4 has an invalid length. [ 147.932458][ T9067] netlink: 'syz.1.1082': attribute type 4 has an invalid length. [ 147.953437][ T9066] sctp: [Deprecated]: syz.0.1081 (pid 9066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.953437][ T9066] Use struct sctp_sack_info instead [ 147.978411][ T9068] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 148.000477][ T8819] veth0_macvtap: entered promiscuous mode [ 148.061509][ T9068] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 148.085809][ T8819] veth1_macvtap: entered promiscuous mode [ 148.189673][ T9073] FAULT_INJECTION: forcing a failure. [ 148.189673][ T9073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.215332][ T9073] CPU: 0 UID: 0 PID: 9073 Comm: syz.0.1084 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 148.226052][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.236110][ T9073] Call Trace: [ 148.239388][ T9073] [ 148.242317][ T9073] dump_stack_lvl+0x241/0x360 [ 148.247007][ T9073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.252207][ T9073] ? __pfx__printk+0x10/0x10 [ 148.256807][ T9073] ? snprintf+0xda/0x120 [ 148.261050][ T9073] should_fail_ex+0x3b0/0x4e0 [ 148.265727][ T9073] _copy_to_user+0x2f/0xb0 [ 148.270147][ T9073] simple_read_from_buffer+0xca/0x150 [ 148.275523][ T9073] proc_fail_nth_read+0x1e9/0x250 [ 148.280552][ T9073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.286110][ T9073] ? rw_verify_area+0x55e/0x6f0 [ 148.290963][ T9073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.296516][ T9073] vfs_read+0x201/0xbc0 [ 148.300674][ T9073] ? __pfx_lock_release+0x10/0x10 [ 148.305714][ T9073] ? __pfx_vfs_read+0x10/0x10 [ 148.310398][ T9073] ? __fget_files+0x3f3/0x470 [ 148.315079][ T9073] ? fdget_pos+0x24e/0x320 [ 148.319498][ T9073] ksys_read+0x183/0x2b0 [ 148.323746][ T9073] ? __pfx_ksys_read+0x10/0x10 [ 148.328507][ T9073] ? do_syscall_64+0x100/0x230 [ 148.333277][ T9073] ? do_syscall_64+0xb6/0x230 [ 148.337957][ T9073] do_syscall_64+0xf3/0x230 [ 148.342459][ T9073] ? clear_bhb_loop+0x35/0x90 [ 148.347140][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.353033][ T9073] RIP: 0033:0x7ff1ce97d15c [ 148.357446][ T9073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 148.377049][ T9073] RSP: 002b:00007ff1cf826030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.385820][ T9073] RAX: ffffffffffffffda RBX: 00007ff1ceb35f80 RCX: 00007ff1ce97d15c [ 148.393793][ T9073] RDX: 000000000000000f RSI: 00007ff1cf8260a0 RDI: 0000000000000004 [ 148.401762][ T9073] RBP: 00007ff1cf826090 R08: 0000000000000000 R09: 0000000000000000 [ 148.409733][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.417704][ T9073] R13: 0000000000000000 R14: 00007ff1ceb35f80 R15: 00007ffdfc5ad1a8 [ 148.425698][ T9073] [ 148.431274][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.452447][ T5852] Bluetooth: hci2: command tx timeout [ 148.502607][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.529633][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.547773][ T9077] dccp_invalid_packet: P.Data Offset(4) too small [ 148.678690][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.692729][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.702682][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.713171][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.729810][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.772718][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 148.779775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 148.919231][ T9082] netlink: 'syz.1.1088': attribute type 5 has an invalid length. [ 148.958953][ T8819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.969114][ T8819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.982954][ T8819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.991686][ T8819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.010571][ T9086] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 149.188491][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.206513][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.342942][ T8819] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 149.352894][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.369549][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.394379][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.527967][ T9100] sctp: [Deprecated]: syz.1.1094 (pid 9100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.527967][ T9100] Use struct sctp_sack_info instead [ 149.575148][ T9104] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 149.717751][ T9106] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 150.117552][ T9120] team0: Mode changed to "loadbalance" [ 150.206248][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.430191][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.538041][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.617182][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.742370][ T35] bridge_slave_1: left allmulticast mode [ 150.766618][ T35] bridge_slave_1: left promiscuous mode [ 150.772384][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.790699][ T35] bridge_slave_0: left allmulticast mode [ 150.823242][ T35] bridge_slave_0: left promiscuous mode [ 150.829026][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.852748][ C1] net_ratelimit: 2 callbacks suppressed [ 150.852765][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 150.865358][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.184490][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.202731][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.219905][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.260724][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.299954][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.308083][ T9141] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 151.326370][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.599078][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.612231][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.625043][ T35] bond0 (unregistering): Released all slaves [ 151.892677][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.899661][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 151.974053][ T5152] Bluetooth: hci4: command tx timeout [ 151.991411][ T9148] __nla_validate_parse: 11 callbacks suppressed [ 151.991430][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 152.073047][ T9162] sctp: [Deprecated]: syz.1.1109 (pid 9162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.073047][ T9162] Use struct sctp_sack_info instead [ 152.158369][ T9168] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1112'. [ 152.198218][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 152.283400][ T35] hsr_slave_0: left promiscuous mode [ 152.305415][ T35] hsr_slave_1: left promiscuous mode [ 152.314659][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.322286][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.330574][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.338765][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.417436][ T35] veth1_macvtap: left promiscuous mode [ 152.427159][ T9171] SET target dimension over the limit! [ 152.431420][ T35] veth0_macvtap: left promiscuous mode [ 152.440591][ T35] veth1_vlan: left promiscuous mode [ 152.452205][ T35] veth0_vlan: left promiscuous mode [ 152.932728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 152.939720][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 152.992026][ T35] team0 (unregistering): Port device team_slave_1 removed [ 153.045086][ T9198] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.059498][ T35] team0 (unregistering): Port device team_slave_0 removed [ 153.412319][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 153.419616][ T5152] Bluetooth: hci2: command tx timeout [ 153.471211][ T9188] netlink: 'syz.0.1118': attribute type 4 has an invalid length. [ 153.494868][ T9193] netlink: 'syz.0.1118': attribute type 4 has an invalid length. [ 153.506566][ T9195] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1118'. [ 153.516687][ T9197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1118'. [ 153.690442][ T9211] FAULT_INJECTION: forcing a failure. [ 153.690442][ T9211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.704204][ T9211] CPU: 0 UID: 0 PID: 9211 Comm: syz.1.1123 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 153.714907][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.724968][ T9211] Call Trace: [ 153.728251][ T9211] [ 153.731172][ T9211] dump_stack_lvl+0x241/0x360 [ 153.735846][ T9211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.741042][ T9211] ? __pfx__printk+0x10/0x10 [ 153.745640][ T9211] ? __pfx_lock_release+0x10/0x10 [ 153.750698][ T9211] should_fail_ex+0x3b0/0x4e0 [ 153.755371][ T9211] _copy_from_user+0x2f/0xe0 [ 153.759959][ T9211] copy_msghdr_from_user+0xae/0x680 [ 153.765166][ T9211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 153.770988][ T9211] __sys_sendmsg+0x22d/0x380 [ 153.775598][ T9211] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.780705][ T9211] ? __pfx_vfs_write+0x10/0x10 [ 153.785502][ T9211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.791843][ T9211] ? do_syscall_64+0x100/0x230 [ 153.796602][ T9211] ? do_syscall_64+0xb6/0x230 [ 153.801273][ T9211] do_syscall_64+0xf3/0x230 [ 153.805784][ T9211] ? clear_bhb_loop+0x35/0x90 [ 153.810479][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.816368][ T9211] RIP: 0033:0x7f6780d7e719 [ 153.820773][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.840377][ T9211] RSP: 002b:00007f6781abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.848803][ T9211] RAX: ffffffffffffffda RBX: 00007f6780f35f80 RCX: 00007f6780d7e719 [ 153.856789][ T9211] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 153.864764][ T9211] RBP: 00007f6781abd090 R08: 0000000000000000 R09: 0000000000000000 [ 153.872745][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.880709][ T9211] R13: 0000000000000000 R14: 00007f6780f35f80 R15: 00007ffcceb6a8c8 [ 153.888689][ T9211] [ 153.910908][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.918283][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.933153][ T9138] bridge_slave_0: entered allmulticast mode [ 153.941289][ T9138] bridge_slave_0: entered promiscuous mode [ 153.964906][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.972456][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.979580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.979635][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.995101][ T9138] bridge_slave_1: entered allmulticast mode [ 154.008953][ T9138] bridge_slave_1: entered promiscuous mode [ 154.106447][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.141391][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.224042][ T9138] team0: Port device team_slave_0 added [ 154.232221][ T9138] team0: Port device team_slave_1 added [ 154.297541][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.304956][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.331012][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.348249][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.359450][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.386873][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.505275][ T9138] hsr_slave_0: entered promiscuous mode [ 154.528402][ T9138] hsr_slave_1: entered promiscuous mode [ 154.547316][ T9138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.562822][ T9138] Cannot create hsr debugfs directory [ 154.574431][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 154.584105][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 155.215377][ T9138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.262129][ T9138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.494901][ T5152] Bluetooth: hci2: command tx timeout [ 156.054637][ C1] net_ratelimit: 2 callbacks suppressed [ 156.054658][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 156.067252][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 156.141902][ T9272] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1145'. [ 156.263439][ T9276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1147'. [ 156.728198][ T9138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.739725][ T9138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.749798][ T9280] tipc: Enabling of bearer rejected, failed to enable media [ 156.881365][ T9285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1151'. [ 157.092675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 157.095746][ T9138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.099635][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 157.145080][ T9138] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.269990][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.277173][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.351234][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.358422][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.425051][ T9316] dvmrp8: entered allmulticast mode [ 157.432955][ T9316] dvmrp8: left allmulticast mode [ 157.465877][ T9318] __nla_validate_parse: 1 callbacks suppressed [ 157.465896][ T9318] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1163'. [ 157.519734][ T9138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.544198][ T9138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.573078][ T5152] Bluetooth: hci2: command tx timeout [ 157.866667][ T9138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.026390][ T9359] Cannot find add_set index 0 as target [ 158.032209][ T9354] netlink: 'syz.2.1177': attribute type 16 has an invalid length. [ 158.132658][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.139639][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 158.163244][ T9370] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1181'. [ 158.373883][ T9138] veth0_vlan: entered promiscuous mode [ 158.405526][ T9138] veth1_vlan: entered promiscuous mode [ 158.435045][ T9387] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 158.482774][ T9387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1186'. [ 158.504800][ T9138] veth0_macvtap: entered promiscuous mode [ 158.512512][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 158.535150][ T9138] veth1_macvtap: entered promiscuous mode [ 158.575870][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.628868][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.643813][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.667284][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.679475][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.699578][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.716675][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.729293][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.769010][ T9138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.787892][ T9138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.797826][ T9409] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1194'. [ 158.806916][ T9138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.830506][ T9138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.860246][ T9413] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 159.016207][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.039088][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.061137][ T9138] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 159.076586][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.100776][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.110048][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 159.121439][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.135179][ T9425] bond0: (slave macvlan5): Opening slave failed [ 159.172844][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 159.179845][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 159.229507][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 159.308405][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.352816][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.371176][ T9434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1204'. [ 159.424970][ T5152] block nbd7: Receive control failed (result -107) [ 159.482913][ T9434] nbd7: detected capacity change from 0 to 256 [ 159.672433][ T9452] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 159.803190][ T9461] Cannot find add_set index 0 as target [ 159.879469][ T7385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.101479][ T7385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.307077][ T7385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.446143][ T7385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.566934][ T7385] bridge_slave_1: left allmulticast mode [ 160.572776][ T7385] bridge_slave_1: left promiscuous mode [ 160.578443][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.588052][ T7385] bridge_slave_0: left allmulticast mode [ 160.593980][ T7385] bridge_slave_0: left promiscuous mode [ 160.599612][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.036605][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.061853][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.075334][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.099840][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.119465][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.132210][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.179074][ T7385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.191096][ T7385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.201728][ T7385] bond0 (unregistering): Released all slaves [ 161.222843][ T9486] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 161.252663][ C1] net_ratelimit: 2 callbacks suppressed [ 161.252681][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.265311][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.315568][ T9486] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 161.443466][ T9497] syz_tun: entered promiscuous mode [ 161.449374][ T9497] macsec1: entered promiscuous mode [ 161.457949][ T9497] syz_tun: left promiscuous mode [ 161.600210][ T7385] hsr_slave_0: left promiscuous mode [ 161.608506][ T7385] hsr_slave_1: left promiscuous mode [ 161.621047][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.636891][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.649405][ T9508] xt_NFQUEUE: number of total queues is 0 [ 161.668457][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.676633][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.714609][ T7385] veth1_macvtap: left promiscuous mode [ 161.720245][ T7385] veth0_macvtap: left promiscuous mode [ 161.733906][ T7385] veth1_vlan: left promiscuous mode [ 161.739237][ T7385] veth0_vlan: left promiscuous mode [ 162.125432][ T7385] team0 (unregistering): Port device team_slave_1 removed [ 162.166530][ T7385] team0 (unregistering): Port device team_slave_0 removed [ 162.292669][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.299763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 162.640690][ T9483] chnl_net:caif_netlink_parms(): no params data found [ 162.831798][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.852542][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.870133][ T9483] bridge_slave_0: entered allmulticast mode [ 162.880102][ T9483] bridge_slave_0: entered promiscuous mode [ 163.176463][ T5152] Bluetooth: hci2: command tx timeout [ 163.335743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 163.342749][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.326535][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.336349][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.343680][ T9483] bridge_slave_1: entered allmulticast mode [ 164.350449][ T9483] bridge_slave_1: entered promiscuous mode [ 164.372685][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.379664][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.404962][ T9550] netlink: 'syz.0.1245': attribute type 21 has an invalid length. [ 164.414541][ T9550] __nla_validate_parse: 9 callbacks suppressed [ 164.414559][ T9550] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1245'. [ 164.470545][ T9553] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1246'. [ 164.500285][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.529903][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.637676][ T9483] team0: Port device team_slave_0 added [ 164.679367][ T9559] team0: Port device wg2 removed [ 164.710766][ T9559] vlan2: left allmulticast mode [ 164.721383][ T9559] erspan0: left allmulticast mode [ 164.729332][ T9559] vlan2: left promiscuous mode [ 164.739158][ T9559] erspan0: left promiscuous mode [ 164.744538][ T9559] bridge0: port 1(vlan2) entered disabled state [ 164.778777][ T9483] team0: Port device team_slave_1 added [ 164.864439][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 164.911290][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.921967][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.953334][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.987618][ T9578] sctp: [Deprecated]: syz.2.1258 (pid 9578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.987618][ T9578] Use struct sctp_sack_info instead [ 165.005524][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.022022][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.053914][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.240593][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1261'. [ 165.256848][ T5152] Bluetooth: hci2: command tx timeout [ 165.271051][ T9483] hsr_slave_0: entered promiscuous mode [ 165.278379][ T9483] hsr_slave_1: entered promiscuous mode [ 165.284538][ T9483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.292160][ T9483] Cannot create hsr debugfs directory [ 165.412728][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 165.419741][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.455387][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.462355][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.981292][ T9606] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 167.028823][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 167.209714][ T9621] xt_CT: No such helper "netbios-ns" [ 167.304464][ T9483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.324765][ T9483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.333551][ T5152] Bluetooth: hci2: command tx timeout [ 167.359534][ T9483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.399296][ T9483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.459183][ T9635] dccp_invalid_packet: P.Data Offset(4) too small [ 167.492669][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.499678][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 167.507812][ T9638] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1281'. [ 167.719127][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 168.022870][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 168.533448][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 168.540384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.022673][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1285'. [ 169.268280][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.284233][ T9659] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 169.322294][ T9667] sctp: [Deprecated]: syz.1.1291 (pid 9667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.322294][ T9667] Use struct sctp_sack_info instead [ 169.328395][ T9483] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.354268][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 169.398078][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.405260][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.420397][ T5152] Bluetooth: hci2: command tx timeout [ 169.430311][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 169.485890][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.493074][ T7382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.572670][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.579667][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.652444][ T9679] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 169.706804][ T9682] netlink: 'syz.2.1299': attribute type 11 has an invalid length. [ 169.713526][ T9679] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 169.730336][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 169.772813][ T9687] bond0: (slave macvlan5): Opening slave failed [ 169.798434][ T9679] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1298'. [ 169.814662][ T9679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1298'. [ 169.869080][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.161576][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 170.203071][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 170.218747][ T9704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1305'. [ 170.267408][ T5152] block nbd8: Receive control failed (result -107) [ 170.302979][ T9704] nbd8: detected capacity change from 0 to 256 [ 170.740125][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 171.086726][ T9720] sctp: [Deprecated]: syz.1.1310 (pid 9720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.086726][ T9720] Use struct sctp_sack_info instead [ 171.652678][ C1] net_ratelimit: 2 callbacks suppressed [ 171.652700][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.665330][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 171.935617][ T9483] veth0_vlan: entered promiscuous mode [ 171.948753][ T9483] veth1_vlan: entered promiscuous mode [ 172.032604][ T9483] veth0_macvtap: entered promiscuous mode [ 172.093332][ T9483] veth1_macvtap: entered promiscuous mode [ 172.113860][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.124562][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.135953][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.151447][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.168029][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.179276][ T9483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.190585][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.202003][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.218540][ T9741] netlink: 'syz.2.1316': attribute type 4 has an invalid length. [ 172.269182][ T9483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.272404][ T9752] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1319'. [ 172.281958][ T9483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.322242][ T9483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.333996][ T9483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.371091][ T9748] netlink: 'syz.2.1316': attribute type 4 has an invalid length. [ 172.395252][ T9741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1316'. [ 172.540632][ T9760] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 172.569531][ T7391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.586819][ T7391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.619080][ T9483] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 172.642673][ T9483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.661759][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.672092][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.692888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 172.699853][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 172.844179][ T9777] sctp: [Deprecated]: syz.1.1325 (pid 9777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.844179][ T9777] Use struct sctp_sack_info instead [ 173.732729][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 173.739694][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.619187][ T9811] __nla_validate_parse: 2 callbacks suppressed [ 174.619205][ T9811] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 174.679395][ T9810] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 174.703515][ T9810] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 174.748150][ T9811] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 174.772662][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.779679][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 174.896170][ T1154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.479816][ T1154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.536696][ T1154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.587200][ T1154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.812698][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 175.896195][ T1154] bridge_slave_1: left allmulticast mode [ 175.911151][ T1154] bridge_slave_1: left promiscuous mode [ 175.917186][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.934004][ T1154] bridge_slave_0: left allmulticast mode [ 175.947133][ T1154] bridge_slave_0: left promiscuous mode [ 175.957910][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.138223][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.148588][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.163881][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.173968][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.181788][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 176.192471][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.423120][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.435804][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.447140][ T1154] bond0 (unregistering): Released all slaves [ 176.459338][ T9828] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1343'. [ 176.612541][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1347'. [ 176.750127][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 176.856266][ C1] net_ratelimit: 2 callbacks suppressed [ 176.856282][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 176.868891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 176.968042][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 177.082288][ T1154] hsr_slave_0: left promiscuous mode [ 177.104434][ T1154] hsr_slave_1: left promiscuous mode [ 177.125361][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.138341][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.151598][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.168609][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.228921][ T1154] veth1_macvtap: left promiscuous mode [ 177.243702][ T1154] veth0_macvtap: left promiscuous mode [ 177.253196][ T1154] veth1_vlan: left promiscuous mode [ 177.258540][ T1154] veth0_vlan: left promiscuous mode [ 177.765929][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 177.802321][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 177.893671][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 177.900636][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.256189][ T9880] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1355'. [ 178.296328][ T5152] Bluetooth: hci2: command tx timeout [ 178.321069][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.354334][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.361957][ T9839] bridge_slave_0: entered allmulticast mode [ 178.369451][ T9839] bridge_slave_0: entered promiscuous mode [ 178.419289][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.437859][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.458751][ T9839] bridge_slave_1: entered allmulticast mode [ 178.478907][ T9839] bridge_slave_1: entered promiscuous mode [ 178.497160][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'. [ 178.532789][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 178.546802][ T9893] netlink: 'syz.2.1359': attribute type 2 has an invalid length. [ 178.627131][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.652307][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.747199][ T9839] team0: Port device team_slave_0 added [ 178.766780][ T9839] team0: Port device team_slave_1 added [ 178.868200][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.890561][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.932688][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.939667][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.974163][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.991446][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.000494][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.037062][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.100743][ T9839] hsr_slave_0: entered promiscuous mode [ 179.115724][ T9839] hsr_slave_1: entered promiscuous mode [ 179.125815][ T9839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.134217][ T9839] Cannot create hsr debugfs directory [ 179.976332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 179.983300][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.372918][ T55] Bluetooth: hci2: command tx timeout [ 180.779016][ T9934] syzkaller1: entered promiscuous mode [ 180.789705][ T9934] syzkaller1: entered allmulticast mode [ 181.012656][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.019629][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 181.096164][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 181.101383][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 181.102229][ T55] Bluetooth: hci0: command 0x0401 tx timeout [ 181.194780][ T9963] __nla_validate_parse: 4 callbacks suppressed [ 181.194800][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 181.219876][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 181.261370][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 181.444662][ T9839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.447585][ T9981] sctp: [Deprecated]: syz.0.1386 (pid 9981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.447585][ T9981] Use struct sctp_sack_info instead [ 181.470708][ T9839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.483089][ T9839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.500714][ T9839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.055027][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.061971][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.452856][ T5852] Bluetooth: hci2: command tx timeout [ 183.092661][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.099671][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.170404][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.223808][T10002] netlink: 'syz.0.1395': attribute type 1 has an invalid length. [ 183.262941][T10002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.284805][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.321617][T10012] xt_cgroup: invalid path, errno=-2 [ 183.339480][T10008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.347406][T10008] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 183.366301][T10008] bond1: (slave vti0): Error -95 calling set_mac_address [ 183.406614][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.413795][ T7391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.445654][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.452823][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.525071][T10019] sctp: [Deprecated]: syz.1.1401 (pid 10019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.525071][T10019] Use struct sctp_sack_info instead [ 183.803932][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.850933][T10041] netlink: 'syz.0.1406': attribute type 4 has an invalid length. [ 183.891109][T10041] netlink: 'syz.0.1406': attribute type 4 has an invalid length. [ 183.911128][T10041] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1406'. [ 183.922410][T10041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1406'. [ 184.011155][T10048] team0: Mode changed to "loadbalance" [ 184.087274][ T9839] veth0_vlan: entered promiscuous mode [ 184.100189][ T9839] veth1_vlan: entered promiscuous mode [ 184.137450][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 184.144488][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 184.400816][T10065] xt_cgroup: invalid path, errno=-2 [ 184.533013][ T5852] Bluetooth: hci2: command tx timeout [ 185.174940][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.181883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 185.856034][ T9839] veth0_macvtap: entered promiscuous mode [ 185.884936][ T9839] veth1_macvtap: entered promiscuous mode [ 185.978991][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.990276][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.003534][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.080635][T10085] netlink: 'syz.1.1420': attribute type 4 has an invalid length. [ 186.119723][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.133743][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.145313][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.171108][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.185468][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.195840][ T9839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.204968][ T9839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.212674][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.214304][ T9839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.220649][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 186.229373][ T9839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.250197][T10090] netlink: 'syz.1.1420': attribute type 4 has an invalid length. [ 186.268758][T10099] tap0: tun_chr_ioctl cmd 1074025681 [ 186.279569][T10085] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1420'. [ 186.325072][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1420'. [ 186.388628][T10104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1427'. [ 186.438008][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.455173][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.501309][ T9839] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 186.512198][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.536743][T10109] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 186.558931][T10109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.566895][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.575245][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.612815][ T5852] Bluetooth: hci2: command tx timeout [ 186.659820][T10109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.667388][T10109] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 186.683487][T10109] bond2: (slave vti0): Error -95 calling set_mac_address [ 186.698451][T10113] team0: Unable to change to the same mode the team is in [ 186.708392][T10116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1431'. [ 187.252681][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.259717][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 188.295498][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 188.302515][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 188.544725][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.568993][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.583452][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.607007][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.616641][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.624978][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.625185][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 188.742297][T10139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1439'. [ 188.768737][T10142] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1440'. [ 188.864365][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 188.888604][ T7382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.967687][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 188.990658][T10155] team0: Unable to change to the same mode the team is in [ 189.111942][T10163] SET target dimension over the limit! [ 189.121983][ T7382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.180541][T10168] netlink: 'syz.1.1448': attribute type 4 has an invalid length. [ 189.209185][T10168] netlink: 'syz.1.1448': attribute type 4 has an invalid length. [ 189.234649][T10170] sctp: [Deprecated]: syz.3.1449 (pid 10170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.234649][T10170] Use struct sctp_sack_info instead [ 189.282216][ T7382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.302244][T10168] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1448'. [ 189.327924][T10136] chnl_net:caif_netlink_parms(): no params data found [ 189.334885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.334962][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 189.413730][ T7382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.747017][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.758124][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.766563][T10136] bridge_slave_0: entered allmulticast mode [ 189.777590][T10136] bridge_slave_0: entered promiscuous mode [ 189.786045][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.800634][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.809297][T10136] bridge_slave_1: entered allmulticast mode [ 189.830965][T10136] bridge_slave_1: entered promiscuous mode [ 190.372677][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.379708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.775008][ T5845] Bluetooth: hci2: command tx timeout [ 191.287047][T10190] __nla_validate_parse: 3 callbacks suppressed [ 191.287066][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1454'. [ 191.321979][T10194] netlink: 'syz.1.1452': attribute type 4 has an invalid length. [ 191.372633][T10197] netlink: 'syz.1.1452': attribute type 4 has an invalid length. [ 191.386056][T10198] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1452'. [ 191.412775][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.413176][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1452'. [ 191.419758][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.491105][T10136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.523666][T10136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.534094][ T7382] bridge_slave_1: left allmulticast mode [ 191.539779][ T7382] bridge_slave_1: left promiscuous mode [ 191.545662][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.566461][ T7382] bridge_slave_0: left allmulticast mode [ 191.572137][ T7382] bridge_slave_0: left promiscuous mode [ 191.605119][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.698293][T10220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1464'. [ 191.996945][ T7382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.008341][ T7382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.019197][ T7382] bond0 (unregistering): Released all slaves [ 192.061032][T10226] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 192.114173][T10228] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 192.151307][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 192.162868][T10229] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1463'. [ 192.220630][T10136] team0: Port device team_slave_0 added [ 192.227385][T10215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1463'. [ 192.283151][T10136] team0: Port device team_slave_1 added [ 192.289116][T10235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1468'. [ 192.357777][T10136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.371577][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.399915][T10136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.419310][T10136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.434099][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.460181][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.460251][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.484007][T10136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.854899][ T5845] Bluetooth: hci2: command tx timeout [ 193.492686][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 193.499722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.086514][ T7382] hsr_slave_0: left promiscuous mode [ 194.095676][ T7382] hsr_slave_1: left promiscuous mode [ 194.101485][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.109275][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.120308][ T7382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.127900][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.147451][ T7382] veth1_macvtap: left promiscuous mode [ 194.153049][ T7382] veth0_macvtap: left promiscuous mode [ 194.158622][ T7382] veth1_vlan: left promiscuous mode [ 194.164027][ T7382] veth0_vlan: left promiscuous mode [ 194.533359][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.540340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 194.550316][ T7382] team0 (unregistering): Port device team_slave_1 removed [ 194.588130][ T7382] team0 (unregistering): Port device team_slave_0 removed [ 194.917625][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 194.926648][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1472'. [ 194.933376][ T5845] Bluetooth: hci2: command tx timeout [ 194.953243][T10136] hsr_slave_0: entered promiscuous mode [ 194.961731][T10136] hsr_slave_1: entered promiscuous mode [ 194.978274][T10136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.987276][T10136] Cannot create hsr debugfs directory [ 195.572683][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.579681][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 195.714254][T10275] netlink: 'syz.2.1482': attribute type 4 has an invalid length. [ 195.777219][T10275] netlink: 'syz.2.1482': attribute type 4 has an invalid length. [ 196.612699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 196.619768][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.012995][ T5845] Bluetooth: hci2: command tx timeout [ 197.156215][T10275] __nla_validate_parse: 1 callbacks suppressed [ 197.156237][T10275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1482'. [ 197.175566][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1482'. [ 197.276198][T10288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1484'. [ 197.291316][T10289] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1486'. [ 197.312247][T10136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.353037][T10136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.383744][T10136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.410266][T10136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.527404][T10136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.586654][T10136] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.603594][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 197.652697][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.659706][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 197.694120][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.701330][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.749795][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.756969][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.766592][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 197.793792][T10307] 8021q: VLANs not supported on hsr0 [ 197.810011][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 197.827924][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 198.147510][T10312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1496'. [ 198.609357][T10321] Cannot find del_set index 1 as target [ 198.692691][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 198.699705][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 198.731315][T10326] sock: sock_set_timeout: `syz.2.1499' (pid 10326) tries to set negative timeout [ 199.733269][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.740272][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.472396][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1497'. [ 200.496349][T10136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.698171][T10346] FAULT_INJECTION: forcing a failure. [ 200.698171][T10346] name failslab, interval 1, probability 0, space 0, times 0 [ 200.739303][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.1.1506 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 200.750121][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.760203][T10346] Call Trace: [ 200.763514][T10346] [ 200.766465][T10346] dump_stack_lvl+0x241/0x360 [ 200.771185][T10346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.776428][T10346] ? __pfx__printk+0x10/0x10 [ 200.781054][T10346] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 200.784137][T10136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.786525][T10346] ? __pfx___might_resched+0x10/0x10 [ 200.786558][T10346] should_fail_ex+0x3b0/0x4e0 [ 200.786583][T10346] should_failslab+0xac/0x100 [ 200.807948][T10346] ? __scm_send+0x5d3/0x1410 [ 200.812570][T10346] __kmalloc_cache_noprof+0x6c/0x2c0 [ 200.817892][T10346] __scm_send+0x5d3/0x1410 [ 200.822355][T10346] unix_dgram_sendmsg+0x1c9/0x1f80 [ 200.827509][T10346] ? aa_sk_perm+0x96d/0xab0 [ 200.832043][T10346] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 200.837631][T10346] ? aa_sock_msg_perm+0x91/0x160 [ 200.842599][T10346] ? unix_seqpacket_sendmsg+0x110/0x1e0 [ 200.848181][T10346] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 200.854101][T10346] __sock_sendmsg+0x221/0x270 [ 200.858807][T10346] ____sys_sendmsg+0x52a/0x7e0 [ 200.863618][T10346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.868946][T10346] __sys_sendmmsg+0x3ab/0x730 [ 200.873654][T10346] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.878889][T10346] ? __pfx_lock_release+0x10/0x10 [ 200.883945][T10346] ? kstrtouint_from_user+0x128/0x190 [ 200.888374][T10353] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 200.889343][T10346] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 200.902973][T10346] ? ksys_write+0x229/0x2b0 [ 200.907497][T10346] ? __pfx_lock_release+0x10/0x10 [ 200.912557][T10346] ? vfs_write+0x7bf/0xc90 [ 200.916992][T10346] ? kmem_cache_free+0x1a2/0x420 [ 200.921955][T10346] ? __mutex_unlock_slowpath+0x21d/0x750 [ 200.927623][T10346] ? __fget_files+0x3f3/0x470 [ 200.932333][T10346] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.938343][T10346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.944699][T10346] ? do_syscall_64+0x100/0x230 [ 200.949488][T10346] __x64_sys_sendmmsg+0xa0/0xb0 [ 200.954365][T10346] do_syscall_64+0xf3/0x230 [ 200.958899][T10346] ? clear_bhb_loop+0x35/0x90 [ 200.963604][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.969523][T10346] RIP: 0033:0x7f6780d7e719 [ 200.973955][T10346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.985953][T10357] FAULT_INJECTION: forcing a failure. [ 200.985953][T10357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.993737][T10346] RSP: 002b:00007f6781abd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.993763][T10346] RAX: ffffffffffffffda RBX: 00007f6780f35f80 RCX: 00007f6780d7e719 [ 200.993778][T10346] RDX: 0000000000000001 RSI: 0000000020000980 RDI: 0000000000000003 [ 200.993791][T10346] RBP: 00007f6781abd090 R08: 0000000000000000 R09: 0000000000000000 [ 200.993803][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.993813][T10346] R13: 0000000000000000 R14: 00007f6780f35f80 R15: 00007ffcceb6a8c8 [ 200.993841][T10346] [ 200.994237][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.047795][T10357] CPU: 0 UID: 0 PID: 10357 Comm: syz.0.1507 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 201.055715][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.058612][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.093108][T10357] Call Trace: [ 201.096390][T10357] [ 201.099320][T10357] dump_stack_lvl+0x241/0x360 [ 201.104014][T10357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.109219][T10357] ? __pfx__printk+0x10/0x10 [ 201.113820][T10357] ? snprintf+0xda/0x120 [ 201.118064][T10357] should_fail_ex+0x3b0/0x4e0 [ 201.122742][T10357] _copy_to_user+0x2f/0xb0 [ 201.127166][T10357] simple_read_from_buffer+0xca/0x150 [ 201.132545][T10357] proc_fail_nth_read+0x1e9/0x250 [ 201.137580][T10357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.143127][T10357] ? rw_verify_area+0x55e/0x6f0 [ 201.147981][T10357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.153531][T10357] vfs_read+0x201/0xbc0 [ 201.157694][T10357] ? __pfx_lock_release+0x10/0x10 [ 201.162732][T10357] ? __pfx_vfs_read+0x10/0x10 [ 201.167427][T10357] ? __fget_files+0x3f3/0x470 [ 201.172109][T10357] ? fdget_pos+0x24e/0x320 [ 201.176530][T10357] ksys_read+0x183/0x2b0 [ 201.180770][T10357] ? __pfx_ksys_read+0x10/0x10 [ 201.185533][T10357] ? do_syscall_64+0x100/0x230 [ 201.190301][T10357] ? do_syscall_64+0xb6/0x230 [ 201.194979][T10357] do_syscall_64+0xf3/0x230 [ 201.199483][T10357] ? clear_bhb_loop+0x35/0x90 [ 201.204165][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.210178][T10357] RIP: 0033:0x7ff1ce97d15c [ 201.214592][T10357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 201.234199][T10357] RSP: 002b:00007ff1cf826030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.242618][T10357] RAX: ffffffffffffffda RBX: 00007ff1ceb35f80 RCX: 00007ff1ce97d15c [ 201.250589][T10357] RDX: 000000000000000f RSI: 00007ff1cf8260a0 RDI: 0000000000000004 [ 201.258560][T10357] RBP: 00007ff1cf826090 R08: 0000000000000000 R09: 0000000000000000 [ 201.266528][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.274497][T10357] R13: 0000000000000000 R14: 00007ff1ceb35f80 R15: 00007ffdfc5ad1a8 [ 201.282476][T10357] [ 201.360501][T10353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.386662][T10356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.393893][T10356] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 201.405150][T10356] bond3: (slave vti0): Error -95 calling set_mac_address [ 201.423090][T10358] netlink: 'syz.3.1509': attribute type 25 has an invalid length. [ 201.432551][T10358] netlink: 'syz.3.1509': attribute type 7 has an invalid length. [ 201.497195][T10371] netlink: 'syz.1.1512': attribute type 4 has an invalid length. [ 201.529757][T10371] netlink: 'syz.1.1512': attribute type 4 has an invalid length. [ 201.733572][T10136] veth0_vlan: entered promiscuous mode [ 201.745485][T10136] veth1_vlan: entered promiscuous mode [ 201.760776][T10382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 201.790386][T10136] veth0_macvtap: entered promiscuous mode [ 201.905179][T10136] veth1_macvtap: entered promiscuous mode [ 201.966623][T10136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.999241][T10136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.026205][T10136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.059810][T10136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.077738][T10136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.084849][T10389] sctp: [Deprecated]: syz.0.1519 (pid 10389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.084849][T10389] Use struct sctp_sack_info instead [ 202.098000][T10136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.151988][T10136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.168563][T10136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.192947][T10136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.202444][T10136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.212891][T10136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.221667][T10136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.258418][T10409] netlink: 'syz.2.1526': attribute type 23 has an invalid length. [ 202.282741][T10409] netlink: 'syz.2.1526': attribute type 11 has an invalid length. [ 202.299367][T10409] __nla_validate_parse: 6 callbacks suppressed [ 202.299388][T10409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1526'. [ 202.435068][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.454124][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.483675][T10416] netlink: 'syz.3.1528': attribute type 4 has an invalid length. [ 202.540675][T10416] netlink: 'syz.3.1528': attribute type 4 has an invalid length. [ 202.560669][T10136] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 202.570981][T10136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.587397][T10416] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1528'. [ 202.621039][ T7391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.631804][T10416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1528'. [ 202.652437][ T7391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.887214][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 203.040713][T10452] sctp: [Deprecated]: syz.3.1539 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.040713][T10452] Use struct sctp_sack_info instead [ 203.048190][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 203.092780][ C1] net_ratelimit: 2 callbacks suppressed [ 203.092799][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.172665][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.323540][T10461] FAULT_INJECTION: forcing a failure. [ 203.323540][T10461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.358720][T10461] CPU: 0 UID: 0 PID: 10461 Comm: syz.1.1542 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 203.369537][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.379611][T10461] Call Trace: [ 203.382904][T10461] [ 203.385847][T10461] dump_stack_lvl+0x241/0x360 [ 203.390557][T10461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.395780][T10461] ? __pfx__printk+0x10/0x10 [ 203.400394][T10461] ? __pfx_lock_release+0x10/0x10 [ 203.405441][T10461] ? validate_chain+0x11e/0x5920 [ 203.410395][T10461] should_fail_ex+0x3b0/0x4e0 [ 203.415087][T10461] _copy_from_user+0x2f/0xe0 [ 203.419681][T10461] do_sys_poll+0x249/0x1600 [ 203.424224][T10461] ? __lock_acquire+0x1384/0x2050 [ 203.429257][T10461] ? __pfx_do_sys_poll+0x10/0x10 [ 203.434191][T10461] ? mark_lock+0x9a/0x360 [ 203.438560][T10461] ? rcu_read_lock_any_held+0xb7/0x160 [ 203.444020][T10461] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 203.449908][T10461] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 203.455566][T10461] ? __pfx_set_user_sigmask+0x10/0x10 [ 203.460946][T10461] __se_sys_ppoll+0x2a0/0x330 [ 203.465627][T10461] ? __pfx___se_sys_ppoll+0x10/0x10 [ 203.470819][T10461] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.477146][T10461] ? do_syscall_64+0x100/0x230 [ 203.481913][T10461] ? __x64_sys_ppoll+0x20/0xc0 [ 203.486676][T10461] do_syscall_64+0xf3/0x230 [ 203.491179][T10461] ? clear_bhb_loop+0x35/0x90 [ 203.495859][T10461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.501755][T10461] RIP: 0033:0x7f6780d7e719 [ 203.506166][T10461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.525774][T10461] RSP: 002b:00007f6781abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 203.534187][T10461] RAX: ffffffffffffffda RBX: 00007f6780f35f80 RCX: 00007f6780d7e719 [ 203.542158][T10461] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00000000200000c0 [ 203.550125][T10461] RBP: 00007f6781abd090 R08: 0000000000000000 R09: 0000000000000000 [ 203.558093][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.566058][T10461] R13: 0000000000000000 R14: 00007f6780f35f80 R15: 00007ffcceb6a8c8 [ 203.574037][T10461] [ 203.755688][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.109273][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.132671][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.212710][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.257915][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.296730][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.369820][ T35] bridge_slave_1: left allmulticast mode [ 204.376451][ T35] bridge_slave_1: left promiscuous mode [ 204.383398][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.393443][ T35] bridge_slave_0: left allmulticast mode [ 204.399104][ T35] bridge_slave_0: left promiscuous mode [ 204.404792][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.686848][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.699858][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.711058][ T35] bond0 (unregistering): Released all slaves [ 204.812380][T10472] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 204.851451][T10474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1548'. [ 204.882789][T10472] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 204.946279][T10485] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 205.039091][T10472] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1546'. [ 205.075890][T10482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1546'. [ 205.110575][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 205.172699][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.237992][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.252788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.275420][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.290888][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.310868][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.315891][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 205.331613][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.339742][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.366144][T10499] sctp: [Deprecated]: syz.1.1555 (pid 10499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.366144][T10499] Use struct sctp_sack_info instead [ 205.541388][ T35] hsr_slave_0: left promiscuous mode [ 205.549405][ T35] hsr_slave_1: left promiscuous mode [ 205.562240][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.570456][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.583394][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.590996][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.639819][ T35] veth1_macvtap: left promiscuous mode [ 205.646055][ T35] veth0_macvtap: left promiscuous mode [ 205.652595][ T35] veth1_vlan: left promiscuous mode [ 205.674361][ T35] veth0_vlan: left promiscuous mode [ 206.122403][ T35] team0 (unregistering): Port device team_slave_1 removed [ 206.159673][ T35] team0 (unregistering): Port device team_slave_0 removed [ 206.212664][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 206.295473][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 206.596493][T10494] chnl_net:caif_netlink_parms(): no params data found [ 206.802805][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.819839][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.829518][T10494] bridge_slave_0: entered allmulticast mode [ 206.840731][T10494] bridge_slave_0: entered promiscuous mode [ 206.854892][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.862216][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.875902][T10494] bridge_slave_1: entered allmulticast mode [ 206.883794][T10494] bridge_slave_1: entered promiscuous mode [ 206.979398][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.016729][T10559] set match dimension is over the limit! [ 207.030756][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.058365][T10555] validate_nla: 2 callbacks suppressed [ 207.058384][T10555] netlink: 'syz.1.1567': attribute type 4 has an invalid length. [ 207.113925][T10494] team0: Port device team_slave_0 added [ 207.121103][T10549] netlink: 'syz.1.1567': attribute type 4 has an invalid length. [ 207.163049][T10494] team0: Port device team_slave_1 added [ 207.218967][T10559] pim6reg: entered allmulticast mode [ 207.252713][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 207.274594][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.281581][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.309208][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.329268][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.336718][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.369086][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.397754][T10567] __nla_validate_parse: 8 callbacks suppressed [ 207.397774][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 207.413502][ T5852] Bluetooth: hci2: command tx timeout [ 207.443515][T10559] pim6reg: left allmulticast mode [ 207.649627][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1577'. [ 207.683489][T10494] hsr_slave_0: entered promiscuous mode [ 207.704232][T10494] hsr_slave_1: entered promiscuous mode [ 207.715204][T10494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.733004][T10494] Cannot create hsr debugfs directory [ 208.038521][T10581] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1579'. [ 208.185065][T10585] SET target dimension over the limit! [ 208.292910][ C1] net_ratelimit: 1 callbacks suppressed [ 208.292930][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.326638][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 208.372660][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.441344][T10494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.483923][T10494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.503952][T10494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.535895][T10494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.748033][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.767018][T10602] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 208.803796][T10605] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 208.809280][T10608] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1591'. [ 208.840663][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.861748][T10605] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 208.907503][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.914720][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.935377][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1590'. [ 208.983337][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1590'. [ 208.994443][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.001598][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.159624][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'. [ 209.332708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.412688][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.428678][T10638] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 209.477139][T10638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.490187][T10642] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1603'. [ 209.499898][ T5852] Bluetooth: hci2: command tx timeout [ 209.567207][T10631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.584909][T10631] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 209.598064][T10631] bond4: (slave vti0): Error -95 calling set_mac_address [ 209.633354][T10638] netlink: 'syz.3.1601': attribute type 25 has an invalid length. [ 209.641298][T10638] netlink: 'syz.3.1601': attribute type 7 has an invalid length. [ 209.677109][T10494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.005578][T10494] veth0_vlan: entered promiscuous mode [ 210.019218][T10664] netlink: 'syz.1.1610': attribute type 4 has an invalid length. [ 210.040840][T10664] netlink: 'syz.1.1610': attribute type 4 has an invalid length. [ 210.083568][T10664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1610'. [ 210.120804][T10494] veth1_vlan: entered promiscuous mode [ 210.265244][T10494] veth0_macvtap: entered promiscuous mode [ 210.287122][T10494] veth1_macvtap: entered promiscuous mode [ 210.357442][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.369331][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.372689][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.381203][T10494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.421437][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.452680][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.455959][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.474407][T10494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.502849][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.545510][T10494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.568081][T10494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.580285][T10494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.602779][T10494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.613015][T10494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.634594][T10690] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 210.685974][T10690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.720580][T10691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.730030][T10691] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 210.741437][T10691] bond2: (slave vti0): Error -95 calling set_mac_address [ 210.869913][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.884878][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.926976][T10494] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan0 [ 210.951635][T10494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.981015][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.991009][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.412703][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.492716][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.530086][T10727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.572137][T10727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.579357][T10727] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 211.590865][T10727] bond2: (slave vti0): Error -95 calling set_mac_address [ 211.866360][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.309778][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.452654][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.566372][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.698724][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.771680][ T11] bridge_slave_1: left allmulticast mode [ 212.777612][ T11] bridge_slave_1: left promiscuous mode [ 212.783664][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.792244][ T11] bridge_slave_0: left allmulticast mode [ 212.798073][ T11] bridge_slave_0: left promiscuous mode [ 212.804118][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.076514][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.088489][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.099790][ T11] bond0 (unregistering): Released all slaves [ 213.292891][T10758] __nla_validate_parse: 10 callbacks suppressed [ 213.292911][T10758] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1640'. [ 213.492676][ C1] net_ratelimit: 1 callbacks suppressed [ 213.492695][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.570441][T10771] validate_nla: 3 callbacks suppressed [ 213.570460][T10771] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 213.572770][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.583143][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 213.603707][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.618239][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.628842][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.637932][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.684604][ T5152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.693607][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.707295][ T11] hsr_slave_0: left promiscuous mode [ 213.716679][ T11] hsr_slave_1: left promiscuous mode [ 213.731068][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.750298][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.763367][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.784438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.786018][T10785] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1650'. [ 213.819148][ T11] veth1_macvtap: left promiscuous mode [ 213.824847][ T11] veth0_macvtap: left promiscuous mode [ 213.830444][ T11] veth1_vlan: left promiscuous mode [ 213.836424][ T11] veth0_vlan: left promiscuous mode [ 214.266079][ T11] team0 (unregistering): Port device team_slave_1 removed [ 214.301959][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.533254][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.612982][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 214.658232][T10769] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 214.669607][T10771] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1645'. [ 214.690383][T10786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1645'. [ 214.700532][T10779] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 214.709356][T10779] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 214.912440][T10803] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1654'. [ 214.960637][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 215.068537][T10772] chnl_net:caif_netlink_parms(): no params data found [ 215.164191][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 215.229395][T10772] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.249620][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.258554][T10823] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1661'. [ 215.263140][T10772] bridge_slave_0: entered allmulticast mode [ 215.293878][T10772] bridge_slave_0: entered promiscuous mode [ 215.307453][T10772] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.323615][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.330950][T10772] bridge_slave_1: entered allmulticast mode [ 215.337095][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 215.345990][T10772] bridge_slave_1: entered promiscuous mode [ 215.410284][T10772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.420732][T10831] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 215.458504][T10831] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.471797][T10772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.492841][ T30] INFO: task udevd:5838 blocked for more than 143 seconds. [ 215.497420][T10835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.500060][ T30] Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 215.500077][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.500089][ T30] task:udevd state:D stack:21464 pid:5838 tgid:5838 ppid:1 flags:0x00000002 [ 215.511638][T10835] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 215.522666][ T30] Call Trace: [ 215.528372][T10835] bond5: (slave vti0): Error -95 calling set_mac_address [ 215.535631][ T30] [ 215.557407][ T30] __schedule+0x18af/0x4bd0 [ 215.562074][ T30] ? __pfx___schedule+0x10/0x10 [ 215.566968][ T30] ? __blk_flush_plug+0x449/0x500 [ 215.572677][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.580597][ T30] ? __pfx_lock_release+0x10/0x10 [ 215.585779][ T30] ? __asan_memset+0x23/0x50 [ 215.590371][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 215.596953][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.603390][ T30] ? schedule+0x90/0x320 [ 215.607660][ T30] schedule+0x14b/0x320 [ 215.612197][ T30] schedule_timeout+0x1be/0x310 [ 215.617121][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 215.622516][ T30] ? __pfx_process_timeout+0x10/0x10 [ 215.627988][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 215.633527][ T30] nbd_queue_rq+0x7d9/0x2f30 [ 215.638166][ T30] ? validate_chain+0x11e/0x5920 [ 215.643176][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 215.648221][ T30] ? __lock_acquire+0x1384/0x2050 [ 215.653320][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.660235][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.666471][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 215.672280][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 215.677379][ T30] ? sbitmap_get+0x289/0x3f0 [ 215.681971][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 215.688000][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 215.693936][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 215.702094][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 215.710044][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 215.717412][ T30] ? __pfx___might_resched+0x10/0x10 [ 215.728111][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 215.734258][ T5852] Bluetooth: hci2: command tx timeout [ 215.740595][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 215.745987][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 215.751120][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 215.756506][ T30] blk_mq_flush_plug_list+0x1127/0x1890 [ 215.762087][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 215.768071][ T30] ? blk_mq_submit_bio+0x132f/0x2500 [ 215.773502][ T30] __blk_flush_plug+0x420/0x500 [ 215.778404][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 215.783907][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 215.789266][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 215.794544][ T30] __submit_bio+0x422/0x560 [ 215.799571][ T30] ? __pfx___submit_bio+0x10/0x10 [ 215.804729][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 215.810995][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 215.818136][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 215.823942][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 215.830044][ T30] ? __pfx___might_resched+0x10/0x10 [ 215.835393][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 215.841599][ T30] block_read_full_folio+0x93b/0xcd0 [ 215.847108][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 215.852510][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 215.859225][ T30] ? folio_add_lru+0x28f/0x870 [ 215.865520][ T30] filemap_read_folio+0x14b/0x630 [ 215.870745][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 215.876524][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 215.882123][ T30] do_read_cache_folio+0x3f5/0x850 [ 215.887397][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 215.893309][ T30] read_part_sector+0xb3/0x330 [ 215.898118][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 215.903790][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 215.908582][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 215.914174][ T30] ? snprintf+0xda/0x120 [ 215.918430][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 215.924137][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 215.928752][ T30] ? vsnprintf+0x184/0x1da0 [ 215.933749][ T30] ? __pfx_snprintf+0x10/0x10 [ 215.938567][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 215.943428][ T30] bdev_disk_changed+0x72c/0x13f0 [ 215.948495][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 215.954132][ T30] ? wait_on_inode+0xc1/0x230 [ 215.958835][ T30] blkdev_get_whole+0x2d2/0x450 [ 215.963763][ T30] bdev_open+0x2d4/0xc50 [ 215.968027][ T30] blkdev_open+0x3d9/0x560 [ 215.972442][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 215.977878][ T30] do_dentry_open+0x978/0x1460 [ 215.982726][ T30] vfs_open+0x3e/0x330 [ 215.986826][ T30] path_openat+0x2c84/0x3590 [ 215.991487][ T30] ? __pfx_path_openat+0x10/0x10 [ 215.996613][ T30] do_filp_open+0x235/0x490 [ 216.001154][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 216.006826][ T30] ? _raw_spin_unlock+0x28/0x50 [ 216.011705][ T30] ? alloc_fd+0x5a1/0x640 [ 216.016096][ T30] do_sys_openat2+0x13e/0x1d0 [ 216.020791][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.026022][ T30] __x64_sys_openat+0x247/0x2a0 [ 216.030887][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 216.036350][ T30] ? do_syscall_64+0x100/0x230 [ 216.041120][ T30] ? do_syscall_64+0xb6/0x230 [ 216.045846][ T30] do_syscall_64+0xf3/0x230 [ 216.050386][ T30] ? clear_bhb_loop+0x35/0x90 [ 216.055832][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.061736][ T30] RIP: 0033:0x7f5ab5f169a4 [ 216.066319][ T30] RSP: 002b:00007ffc59be9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.074819][ T30] RAX: ffffffffffffffda RBX: 00005647202fe500 RCX: 00007f5ab5f169a4 [ 216.082926][ T30] RDX: 00000000000a0800 RSI: 000056472030be00 RDI: 00000000ffffff9c [ 216.090893][ T30] RBP: 000056472030be00 R08: 0000000000000001 R09: 7fffffffffffffff [ 216.098939][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 216.107644][ T30] R13: 000056472030f9e0 R14: 0000000000000001 R15: 00005647202fe910 [ 216.115692][ T30] [ 216.118849][ T30] [ 216.118849][ T30] Showing all locks held in the system: [ 216.127377][ T30] 2 locks held by rcu_tasks_trace/15: [ 216.133927][ T30] #0: ffffffff8e9383f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xaed/0xe10 [ 216.148907][ T30] #1: ffff8880b863ead8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 216.159981][ T30] 1 lock held by khungtaskd/30: [ 216.165173][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 216.175448][ T30] 2 locks held by getty/5606: [ 216.180148][ T30] #0: ffff8880310040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 216.190004][ T30] #1: ffffc900032232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 216.200176][ T30] 3 locks held by udevd/5838: [ 216.204872][ T30] #0: ffff888025d774c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc50 [ 216.214930][ T30] #1: ffff888024af4b10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 216.228359][ T30] #2: ffff888025e20180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfe/0x2f30 [ 216.238034][ T30] 3 locks held by udevd/5856: [ 216.244719][ T30] #0: ffff888025dcb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc50 [ 216.254130][ T30] #1: ffff888025681090 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 216.263872][ T30] #2: ffff888025e68180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfe/0x2f30 [ 216.273016][ T30] 3 locks held by kworker/1:4/5889: [ 216.278372][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 216.289497][ T30] #1: ffffc90004267d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 216.300606][ T30] #2: ffffffff8e93d280 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 216.311007][ T30] 3 locks held by kworker/u8:8/7382: [ 216.316345][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 216.328084][ T30] #1: ffffc900034dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 216.339077][ T30] #2: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 216.348107][ T30] 1 lock held by syz-executor/10772: [ 216.353459][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.363313][ T30] 1 lock held by syz.3.1663/10831: [ 216.368431][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.377885][ T30] 3 locks held by syz.3.1663/10835: [ 216.383151][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.392788][ T30] #1: ffffffff901ed278 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 216.402337][ T30] #2: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 216.413898][ T30] 2 locks held by syz.0.1664/10830: [ 216.419111][ T30] #0: ffff88807a300208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 216.429393][ T30] #1: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 216.440356][ T30] 1 lock held by syz.2.1665/10836: [ 216.446095][ T30] #0: ffff888078092c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 216.456353][ T30] 1 lock held by syz.2.1665/10837: [ 216.461453][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.470876][ T30] 2 locks held by syz.2.1665/10838: [ 216.476134][ T30] #0: ffff8880613196c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 216.486590][ T30] #1: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 216.495412][ T30] 1 lock held by syz.2.1665/10840: [ 216.500511][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.510031][ T30] 1 lock held by syz.2.1665/10841: [ 216.515810][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.525312][ T30] 1 lock held by syz.2.1665/10842: [ 216.530437][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e8/0x3640 [ 216.540089][ T30] 1 lock held by syz.2.1665/10843: [ 216.545403][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.554886][ T30] 1 lock held by syz.2.1665/10844: [ 216.559984][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.569645][ T30] 1 lock held by syz.2.1665/10845: [ 216.574839][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 216.584315][ T30] 2 locks held by syz.2.1665/10846: [ 216.589508][ T30] #0: ffffffff8fcc7550 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 216.598986][ T30] #1: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 216.609040][ T30] 1 lock held by syz.2.1665/10847: [ 216.614227][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.621713][ T30] #0: ffffffff8fcd4068 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 216.630604][ T30] [ 216.633231][ T30] ============================================= [ 216.633231][ T30] [ 216.641665][ T30] NMI backtrace for cpu 1 [ 216.646011][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 216.656509][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.666557][ T30] Call Trace: [ 216.669831][ T30] [ 216.672759][ T30] dump_stack_lvl+0x241/0x360 [ 216.677446][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.682641][ T30] ? __pfx__printk+0x10/0x10 [ 216.687231][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 216.692163][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 216.697615][ T30] ? _printk+0xd5/0x120 [ 216.701767][ T30] ? __pfx__printk+0x10/0x10 [ 216.706356][ T30] ? __wake_up_klogd+0xcc/0x110 [ 216.711203][ T30] ? __pfx__printk+0x10/0x10 [ 216.715787][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 216.720809][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 216.726785][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 216.732760][ T30] watchdog+0xff4/0x1040 [ 216.736999][ T30] ? watchdog+0x1ea/0x1040 [ 216.741411][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.746088][ T30] kthread+0x2f0/0x390 [ 216.750147][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.754818][ T30] ? __pfx_kthread+0x10/0x10 [ 216.759398][ T30] ret_from_fork+0x4b/0x80 [ 216.763817][ T30] ? __pfx_kthread+0x10/0x10 [ 216.768397][ T30] ret_from_fork_asm+0x1a/0x30 [ 216.773169][ T30] [ 216.776380][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.783943][ T30] Sending NMI from CPU 1 to CPUs 0: [ 216.789723][ C0] NMI backtrace for cpu 0 [ 216.789736][ C0] CPU: 0 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 216.789756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.789767][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 216.789798][ C0] RIP: 0010:curve25519_arch+0x2338/0x5710 [ 216.789822][ C0] Code: f6 c7 48 0f af c2 49 01 c0 66 4c 0f 38 f6 cf 4d 89 4c 24 28 66 4c 0f 38 f6 d7 4d 89 54 24 30 66 4c 0f 38 f6 df 4d 89 5c 24 38 <48> c7 c0 00 00 00 00 48 0f 42 c2 49 01 c0 4d 89 44 24 20 48 8b 7c [ 216.789837][ C0] RSP: 0018:ffffc90004a071c0 EFLAGS: 00000286 [ 216.789852][ C0] RAX: 0000000000000390 RBX: 0000000000000000 RCX: ffffc90004a072e0 [ 216.789864][ C0] RDX: 0000000000000026 RSI: ffffc90004a07440 RDI: 0000000000000000 [ 216.789875][ C0] RBP: ffffc90004a07590 R08: acd92a0a1170dfd4 R09: fcb255181ccd6a71 [ 216.789888][ C0] R10: f1c555d4ad86e55d R11: 12720f4c1338aaad R12: ffffc90004a07440 [ 216.789901][ C0] R13: 0000000000000023 R14: f0be4932a8102d73 R15: ffffc90004a073e0 [ 216.789913][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 216.789927][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.789940][ C0] CR2: 000000110c3b63ce CR3: 000000000e734000 CR4: 00000000003526f0 [ 216.789955][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.789965][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.789976][ C0] Call Trace: [ 216.789982][ C0] [ 216.789989][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 216.790008][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 216.790034][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 216.790051][ C0] ? nmi_handle+0x2a/0x5a0 [ 216.790076][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 216.790098][ C0] ? nmi_handle+0x14f/0x5a0 [ 216.790114][ C0] ? nmi_handle+0x2a/0x5a0 [ 216.790131][ C0] ? curve25519_arch+0x2338/0x5710 [ 216.790152][ C0] ? default_do_nmi+0x63/0x160 [ 216.790171][ C0] ? exc_nmi+0x123/0x1f0 [ 216.790188][ C0] ? end_repeat_nmi+0xf/0x53 [ 216.790217][ C0] ? curve25519_arch+0x2338/0x5710 [ 216.790239][ C0] ? curve25519_arch+0x2338/0x5710 [ 216.790261][ C0] ? curve25519_arch+0x2338/0x5710 [ 216.790282][ C0] [ 216.790288][ C0] [ 216.790294][ C0] ? __pfx_encode_point+0x10/0x10 [ 216.790326][ C0] ? __pfx_curve25519_arch+0x10/0x10 [ 216.790372][ C0] ? __asan_memset+0x23/0x50 [ 216.790387][ C0] ? message_ephemeral+0x354/0x4f0 [ 216.790409][ C0] mix_dh+0xc5/0x2e0 [ 216.790430][ C0] ? __pfx_mix_dh+0x10/0x10 [ 216.790458][ C0] ? __asan_memset+0x23/0x50 [ 216.790472][ C0] ? blake2s_final+0xea/0x190 [ 216.790492][ C0] ? __crypto_memneq+0x2e8/0x400 [ 216.790513][ C0] wg_noise_handshake_create_initiation+0x4ac/0xf30 [ 216.790536][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 216.790565][ C0] ? mark_lock+0x9a/0x360 [ 216.790582][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.790607][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.790639][ C0] ? __lock_acquire+0x1384/0x2050 [ 216.790668][ C0] ? ktime_get_coarse_with_offset+0x143/0x190 [ 216.790696][ C0] wg_packet_handshake_send_worker+0x15b/0x330 [ 216.790721][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 216.790757][ C0] ? process_scheduled_works+0x976/0x1850 [ 216.790780][ C0] process_scheduled_works+0xa63/0x1850 [ 216.790815][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.790841][ C0] ? assign_work+0x364/0x3d0 [ 216.790865][ C0] worker_thread+0x870/0xd30 [ 216.790891][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 216.790915][ C0] ? __kthread_parkme+0x169/0x1d0 [ 216.790940][ C0] ? __pfx_worker_thread+0x10/0x10 [ 216.790962][ C0] kthread+0x2f0/0x390 [ 216.790976][ C0] ? __pfx_worker_thread+0x10/0x10 [ 216.790998][ C0] ? __pfx_kthread+0x10/0x10 [ 216.791014][ C0] ret_from_fork+0x4b/0x80 [ 216.791036][ C0] ? __pfx_kthread+0x10/0x10 [ 216.791051][ C0] ret_from_fork_asm+0x1a/0x30 [ 216.791082][ C0] [ 216.799564][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 216.799579][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 216.799602][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.799613][ T30] Call Trace: [ 216.799620][ T30] [ 216.799629][ T30] dump_stack_lvl+0x241/0x360 [ 216.799660][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.799685][ T30] ? __pfx__printk+0x10/0x10 [ 216.799706][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.799738][ T30] ? vscnprintf+0x5d/0x90 [ 216.799759][ T30] panic+0x349/0x880 [ 216.799784][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 216.799805][ T30] ? __pfx_panic+0x10/0x10 [ 216.799825][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 216.799846][ T30] ? __irq_work_queue_local+0x137/0x410 [ 216.799870][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 216.799889][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 216.799908][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 216.799930][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 216.799952][ T30] watchdog+0x1033/0x1040 [ 216.799976][ T30] ? watchdog+0x1ea/0x1040 [ 216.800002][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.800024][ T30] kthread+0x2f0/0x390 [ 216.800042][ T30] ? __pfx_watchdog+0x10/0x10 [ 216.800063][ T30] ? __pfx_kthread+0x10/0x10 [ 216.800080][ T30] ret_from_fork+0x4b/0x80 [ 216.800104][ T30] ? __pfx_kthread+0x10/0x10 [ 216.800122][ T30] ret_from_fork_asm+0x1a/0x30 [ 216.800157][ T30] [ 217.335425][ T30] Kernel Offset: disabled [ 217.339737][ T30] Rebooting in 86400 seconds..