last executing test programs: 2.73351093s ago: executing program 1 (id=3490): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.514056942s ago: executing program 3 (id=3493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x5, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}]}]}]}, 0x64}}, 0x0) recvmmsg(r3, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x400003c1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xb, '\x00', 0x0, r7, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(r10, 0x8b0f, &(0x7f0000000000)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4000000, [{0x0, 0x1, 0x101}]}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x4c) 2.313305008s ago: executing program 1 (id=3497): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000340)={0x0, 'netdevsim0\x00', {0x1}, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000008b66877634ae00"/33, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.065660447s ago: executing program 3 (id=3498): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280200018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = accept(r0, &(0x7f0000000040)=@in={0x2, 0x0, @local}, &(0x7f00000000c0)=0x80) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x224, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xf0, 0x8, "e2fe00c3f9ac990940bb1e497872a2d1229cbac77157aeb77807a2b84229edc4e0c46520d974a3309a93424a87093442761c07c23b2d767fd61337904783e4abdfc32bc91e123706ea83dc2dfbd496f8273e1aaa5541f301816865a64d6cc37cbc4f0832e66fda5f557cd1530713137f63b20ea0ec252bb3776622fb61f67f3a951f45ed63496dc3bbac035896fa8809b5677a0f6a1f5f0346c363c72613cc7fa870335bed5bcd564dbeda5367a4a4231c88fce65d177decf5f233b514d02de73978b4d34761fcfa82f94799c453833fdcd587c8b2fcfadd126427dcc71ef85cd42f16f95738a1c9fd12c7fb"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xf4, 0x8, "b5a753f4b084accc4d3aa0f6ec512d697a247d0661a7be176e9dcb766012ce6cfb28b28181f480606e768621b4175f890e2123a16692366ca9b640b1c99545f11425f2481b73493ff80678bb37c8d59ef47b90ab30ec5c981970e983d3584610717d5dbb38aebeacb4485227a08afb98e31edf735cfa1895ca88f5c82e4a9947b401d2d48cb528aefc199ff2d1eb530e0318bf07644a53044fe71b61a850b618afc41007012e356200bfa088653fc791b8984568a8c4a4b6759074fcee7a23ca3bf682a84f1c84e9d0c094a4220dcf687218774a602b1a5d81c219c50216f08b90d14bbf27d97878ed0ade98dea8bf14"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x224}, 0x1, 0x0, 0x0, 0x50}, 0x20004050) 1.832729914s ago: executing program 1 (id=3499): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x14, 0x4, 0x8200) (async) r1 = socket(0x14, 0x4, 0x8200) getsockopt$inet_buf(r1, 0x0, 0x28, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x261) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x20, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) unshare(0x20000400) (async) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xe800, 0x0}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e0001000000000000000000000000000000001bc3108ab52be4905d9a7f011c1f891b0b481bbf68e07c00"/87, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000203000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004800040063686163686132300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/316], 0x184}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e0001000000000000000000000000000000001bc3108ab52be4905d9a7f011c1f891b0b481bbf68e07c00"/87, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000203000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004800040063686163686132300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/316], 0x184}}, 0x0) 1.675558876s ago: executing program 3 (id=3501): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffff9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073118c00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="08001a"], 0x44}}, 0x0) 1.579214767s ago: executing program 1 (id=3503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e25, @local}, 0x10) 1.357687302s ago: executing program 2 (id=3507): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.350339406s ago: executing program 3 (id=3508): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) (async) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r0, 0x100) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x88}, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x88}, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x28) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000015c0)=@int=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000180100696e030000000000002020207b1af8ff00000000bfa10000000000000701e2fff70000b7030000f400000885000000a08e000095000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.14589069s ago: executing program 4 (id=3510): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@broadcast, 0xffffaa7e}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x7, 0xc, "0990ec742f779f8fa6a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000400c) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}}, 0x4044) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x280, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0xc}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b284ffcb1783bacbfb2c88bfa0f3c5b0425d2b2660dc364c"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "205b49abd17a5479197dccf6dfb8edff86c54af3de66e9e0"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5d876492a0f9a8b6390bdb5fac45c6bebea759df787fe6b5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d37dc001a0d1e835042db9935463979c6962daefafc326a8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e088d22764d26e06cea6e80c705242626c89692aa2dd8f72"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "00d280f7d7ce941fd62bac3084031d2e6f2ed6da7c6b46cc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "05c1fd94a1a14daae928d0059f408f4c336a27aa4d4340fd"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c28ef495a1e1c9477197df5c07705b3c4e50aedd1bcce68"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d87408c1ae01c421699d1efcae971e9500bc111b39a75ed"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "281d480527b522f07bdb3387855303d8191b00675b12bfd0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "11569a2c22dacaedaf1829c78f0038841e5582aba52258b1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "795c66ace22ea9c0da1eb77cd233a3e4a4c18b5a65284161"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x280}, 0x1, 0x0, 0x0, 0xc042}, 0xc040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xc8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000200)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x401}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="0810028100000000ff020000000000000000000000000001fc020450dacffd6dad06000800000000fc000000000000000000000000000001fe880000000000000000000000000101000000000000000000000000000000f5af2c62f8f20e296e47ce2582d99701fe800000000000000000dac4f950a5ac4f762e37a70eb31af10000000000bbfe880000000000000000000000000001fe"], 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.058832547s ago: executing program 0 (id=3511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd73, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x343, 0x5}}], 0x48}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000140)="7dc2e680324657974ae97d33eb7ee1e28833e720a3f913aa9be285dd7ac9b944aa23f8df67883c2dbc33eb6411e18aa7d9f410ef1af28483ab18009905603d8a6243b7ca8bdb5beb1240e265a7c7b80c142e58f58e6f8c204e1d4b6cc0aa1cd3572ad91c4215a0d8409740950c656d529db9dc8cda52dd993813f2fb871b81ecb83e43934cb9f644e69dc3d87a4a3a1966d71b0cc0c0793c66e0329cd9c8910deb50bd29d0c6a8", &(0x7f0000000500)=""/4096, &(0x7f0000000200)="26300db1e39461751193d0a6d3e36e9b2d6948344d4971c5ae76482a55f20bfb9b958bc8a32b36c159c7a29b537d2904151561bb106ca8c2f86c55848dc23a9316f3936c875dd451699406d1b00f52ce5ae2dcc1bf4f420c6f2959fc2e89a873374c908f8e46cd15bef78c22bc072db0fa33415a440efb8576d30ed5e696f24ed096def377124a06070b5a2d29bd98d8ad7e6d029b6cf5c93b3a6dcc093354b44229", &(0x7f00000002c0)="2556cfa225c240a07c58b0706b3b17b881994f6f25fc2f9e903913018b6d46908f41d117d81b70d001b9eaa425d9aec5d46f2d8763325a6ff6746e1502a9782231d159b7872835994959753537af341e3a1f2fae123004ce66d60834b451b6ded4ca2732693bc86d559943159b391a3caaf48183cd8633123917620edadfe661b368a494540da7ac030a1ab7459e09d9acaffe3b412de5bb0b9757a220648f2cd0cd4c243015ca0eea9231fcacf258c4428e77585f7c62d768d9602b014d68b6ba46c04341693a1cd1a8cbf062cb3f82c051190b673a1163b491e2b44fcb7b5ca72c2d053feeb27f3d61e14ac8696c98ed", 0x80000000, r2, 0x4}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000001580)={&(0x7f0000001540)=""/33, 0x2000, 0x0, 0xd50f, 0x1}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001500)=0xf09b1912840e30f6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.050670568s ago: executing program 2 (id=3512): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x401) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a47172db9bc43c51", "9cc2ffc1bc4ac3ce0cc69c111aaca00a", "06fdd694", "5fa58553c47d9c0b"}, 0x28) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) close(r2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000f40)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r5, 0x0, 0x0, 0x80, &(0x7f0000001080)=@phonet={0x23, 0x1, 0x20, 0x6}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f00000000c0)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ppoll(&(0x7f0000000000)=[{r0, 0x24}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) close(r7) 925.058903ms ago: executing program 0 (id=3513): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ab0000006d0000000000000018000000ffff00000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 924.548034ms ago: executing program 4 (id=3514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x10, 0x1412, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x240481c4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a3100180000080041007369770014"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x122, 0x200, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe8, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_TID_CONFIG={0xc0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xac}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x4) tee(r0, r0, 0x40556bea000, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}}, 0x8004) 856.167445ms ago: executing program 0 (id=3515): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 796.73313ms ago: executing program 2 (id=3516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000d08000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000020850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0xf580000, 0xfff, 0x1000}) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x0, 'freezer'}]}, 0x9) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r8, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @loopback}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000900000018120000", @ANYRES32=r7, @ANYBLOB="00007f4227000000b703000000000000850000000c000000b700000000000000852000000400000085200000020000009500"/69], &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x10, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r7], &(0x7f00000004c0)=[{0x1, 0x3, 0xe, 0x5}, {0x2, 0x3, 0x1, 0x2}, {0x0, 0x3, 0xe, 0xa}, {0x4, 0x1, 0x0, 0x1}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='ext4_fc_replay_scan\x00', r9, 0x0, 0xa}, 0x18) 720.969103ms ago: executing program 4 (id=3517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r2}, 0x18) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, 0x0, 0x0, 0x8000) close(r5) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_emit_ethernet(0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc002d0600fe800029f43441a0bb000000000000000000000000aafe8000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06e2d4c3d90000"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000c005}, 0xc0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/200, 0xc8, 0x1, &(0x7f0000000080)=""/68, 0x44}, &(0x7f0000000240)=0x40) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, 0x0, 0x0) 716.830311ms ago: executing program 0 (id=3518): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xc72, 0x800, 0x0, 0x10000, 0xfffffffffffffff8]}, &(0x7f0000000080)=0x78) write(r0, &(0x7f00000000c0)="7bf3e066f4b04e8ef3caa44d1285e01aaf4f1e2fe34b691d6cb3e7294c4694e9ea83049d76748acda0863a3845ac8dae5c396e52cb725b247b3579fac1bfd5c689c431fdf92d037f3ab98f0d7b471d1c2ee38c2f2b324104565f58d51e53bcf48dc591faff290c605a906084a7c201819e014483df8e5af5f2851086ead2f25f921aca999c997c8f29f751349c4eceef91716f3d8e65ef6351f3b04ad4437dca4a9497ae595d0bec8434a8", 0xab) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x6, [@datasec={0x9, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x0, 0x4c}, {0x1, 0x6, 0x6}, {0x4, 0x3}, {0x5, 0x8, 0x4}, {0x2, 0x8, 0x1}, {0x3, 0x0, 0x7ff}, {0xfffffffe, 0x1, 0x9}], "2d288a"}]}, {0x0, [0x5f, 0x61, 0x61, 0x2e]}}, &(0x7f0000000240)=""/163, 0x82, 0xa3, 0x1, 0x6, 0x0, @void, @value}, 0x28) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000340)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1c8, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3a3d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x7}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000800)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/250, 0xfa}, {&(0x7f00000009c0)=""/48, 0x30}], 0x3, &(0x7f0000000a40)=""/243, 0xf3}, 0x7}], 0x1, 0x2100, &(0x7f0000000b80)={0x0, 0x3938700}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001080)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000000c40)={0x3ec, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x31, 0x3, "1dbbee6ccae48fa3420336339af2e33f8031fc482b6b9d8b3c19a4465f90f8eb1f706b6c83404318917fb17c54"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x2e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x354c}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xd9^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '#]@\\%&+},\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x65c2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37de}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf57}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x830}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&%.\xb6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca07}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@#,,&[&)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*@{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x66, 0x3, "9f5d8c0d8373786bcbb38c99c35925a9696ae3812a8bf4375b4b247e791d6c5d8e6b9a02a181c77de594b91b898312d839767a524f5b0660cb8fcc6c484f6642b06e5046090aa2548476f55c104be530adbd63f775917564261a5ca1573c06bfb269"}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x10}, 0x4001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{0x1, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={r6, 0xffffffffffffffff}, 0x4) r8 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_tracing={0x1a, 0x17, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3366}, {}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x4, 0x0, 0x7, 0x50}, @exit, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001440)='GPL\x00', 0xed13, 0x1000, &(0x7f0000001480)=""/4096, 0x41100, 0x0, '\x00', r2, 0x18, r1, 0x8, &(0x7f0000002480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0x1, 0x1, 0x7ff}, 0x10, 0x1c713, 0xffffffffffffffff, 0x2, &(0x7f0000002500)=[r7, r6, r7, r6, r7], &(0x7f0000002540)=[{0x4, 0x2, 0x4, 0x9}, {0x3, 0x3, 0xc, 0xb}], 0x10, 0x542d48bc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002840)={r11, 0x0, 0x36, 0x35, &(0x7f0000002640)="9d36b81731c588c4c4cc90f51c2dea3e435d8d31a0fdb02e9c47f6c9a46bb05fc000fcc6f2d3dfc26fa46b3b8e94ac6d57bd56c92b83", &(0x7f0000002680)=""/53, 0xe65d, 0x0, 0x43, 0xff, &(0x7f00000026c0)="d5b2f2405667c4f560aace92f6dd2ab1aa59271581f54b4ab14b46be3fea0feec8ffeacba13ec5f9861412d9b3714211317914ca3f4e6eea32ba7decfa7b150d4bd921", &(0x7f0000002740)="8c13ad357cabc190deb18677cd279b1aa1ab290310521a8554f6512cd6264082ee7612d0e1402ce14656d4c6f9633bcc4fec8da30d774d9e78fcaf5f6edccf8871ff52720c3ece9f7554d63cb3304b46f60b9abd9dffec89f18f7f2b6776ab805371b018bcfc5f5bc2c1876d3b6044cab81da4823d72facfe936d114b34f48ddd0f3cbbe6e37ab6c34b56395d7521ec2108c4879169eaf68987329c52e370a31b36d2b418cc7a282a14dc042fff07e361045e909b2361d16b8d84945465e16628b876924486eda5dbf7eff2d2e6e6909d3838f58e4217dd3f9b16d7be524261aecf9971996b645a2b6c872e81753301c1af1710e5c96a7f634c2529fb204cf", 0x0, 0x0, 0x101}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=@mpls_newroute={0x28, 0x18, 0x200, 0x70bd26, 0x25dfdbfd, {0x1c, 0x14, 0x80, 0x4a, 0x0, 0x2, 0xc8, 0x1, 0x1d00}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x21, 0x4, r2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) accept4(r0, &(0x7f00000029c0)=@nfc_llcp, &(0x7f0000002a40)=0x80, 0x80000) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r9) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x34, r13, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x44800) socket$packet(0x11, 0x3, 0x300) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002bc0)={0x1d, r2}, 0x10) 633.560016ms ago: executing program 1 (id=3519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000004900008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 559.06131ms ago: executing program 2 (id=3520): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220310218000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000005000006bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 457.078654ms ago: executing program 0 (id=3521): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="87cec2ee6b825dc9127534ded1fea6bb55cb6e15798a61b85f72b68e21e23c85f239995ea8380033e40d9e93fa4edf5e1ff0e5f96d9ccc3597930899732ede2825c97019780e78bee2e2d82ff91508429e0b475fd71920b3b5ab3d106af3fe5c697af3098a704d6b538cacfa1a696a81bf1a1c0d124598091ec96abd2e4568e12bfe2e80d611428c5fd56ac955d30ad773685ebb9644c62cd31a63992140511a04d4568d1ba2093770d0e95ebeb54aeac2ccd6bc5bad3a5b32103f9e84d9757c37f6c2093282", 0xc6}], 0x1}, 0x5) 445.784837ms ago: executing program 1 (id=3522): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x24008085}, 0x40008040) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 400.320646ms ago: executing program 2 (id=3523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xb8000000, 0x71, 0x10, 0xb7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x44}}, 0x1) 399.391654ms ago: executing program 3 (id=3524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x40080c0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @dstopts={0x6c}]}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000009580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x10, 0x6, 0x8}, {0x10, 0x0, 0x492}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008140)=[{0x10, 0x3a, 0x4}, {0x10, 0x1, 0x3}], 0x20}}], 0x2, 0x40840) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x10000, @private0, 0x2}, @in6={0xa, 0x4e23, 0x8, @remote, 0x3}, @in6={0xa, 0x4e23, 0x1bc9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'erspan0\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) write$tun(r6, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c0000f5000000967075b1e800000000000000000000006000000000393a00ff020000000000000000000000000001fe88000000000000000000000000000101069078090000006894000016493a00fe8800000a0000000000000000000001fe800000000000000000000000000017c60c4cc5"], 0x73) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/227, 0xe3, 0x1, &(0x7f0000000100)=""/247, 0xf7}, &(0x7f0000000240)=0x40) 261.092332ms ago: executing program 4 (id=3525): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xc}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @float={0xd, 0x0, 0x0, 0x10, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @fwd={0x8}, @const={0x9, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xe, 0x3}]}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x30, 0x5f, 0x0]}}, &(0x7f00000001c0)=""/74, 0x79, 0x4a, 0x0, 0x14000, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/200, 0xc8, 0x0, &(0x7f0000000480)=""/128, 0x80}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7521}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000600)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[r0, r0, r0], &(0x7f00000016c0)=[{0x3, 0x4, 0xa, 0x6}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000017c0)={&(0x7f0000000540)='bcache_read\x00', r3, 0x0, 0x1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x17, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x1e, 0x1, 0x0, r0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x5a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 252.624133ms ago: executing program 0 (id=3526): unshare(0x26020480) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}], 0x2) socket$unix(0x1, 0x2, 0x0) socket(0xf, 0x3, 0x10001) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000810001180090001006c61737400000000400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000003"], 0xe4}}, 0x0) 207.579631ms ago: executing program 2 (id=3527): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x370, 0xffffff80, 0x178, 0x370, 0x178, 0x4d0, 0x230, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x370, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0xfd}, {0x6}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x19f1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}]}}, @common=@unspec=@cluster={{0x30}, {0xfffffffd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xffff, 0x3, 0x9, '\x00', 'syz0\x00', {0x7}}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [0x0, 0xffffffff], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [0x0, 0x0, 0xff000000], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x401, 0x2, 0x200, 0x7, 0x30}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x370, 0xffffff80, 0x178, 0x370, 0x178, 0x4d0, 0x230, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x370, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0xfd}, {0x6}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x19f1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}]}}, @common=@unspec=@cluster={{0x30}, {0xfffffffd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xffff, 0x3, 0x9, '\x00', 'syz0\x00', {0x7}}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [0x0, 0xffffffff], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [0x0, 0x0, 0xff000000], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x401, 0x2, 0x200, 0x7, 0x30}) (async) 180.471704ms ago: executing program 4 (id=3528): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730132000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 835.305µs ago: executing program 3 (id=3529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x13, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x1, 0x2, 0x1, 0x1, 0x5, 0xffffffffffffffaa, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1c, &(0x7f0000000180)=""/28, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x7, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x1, 0x1, 0xe, 0x4}, {0x5, 0x2, 0x6, 0x8}, {0x3, 0x3, 0x3, 0x2}, {0x3, 0x4, 0xd, 0x9}, {0x0, 0x1, 0x10, 0x5}, {0x3, 0x3}, {0x1, 0x2, 0x1, 0xc}], 0x10, 0x8, @void, @value}, 0x94) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r7, r6, 0x3, 0x2000, 0x0, @value=r8}, 0x20) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0xfffffffd, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x3c}, 0x1, 0x0, 0x0, 0xd37697ff2c0d3c1b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x80, 0x0, {0x81, 0x80, 0x80}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 0s ago: executing program 4 (id=3530): r0 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000004200010a04000000ffffffff0b0004"], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0xd0) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000540)={0x47fd, 0x2f03, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000027de14c98f97b3a1000c000000000000000071120c0000000700ba7926b515b716d7fefa50b6d4b88799345b3c829aae8d234e6aa317f84e6a8508691a28da679358203ec8ae94d20d101acad3734259038f0920cd6c07bf1ead2454b47007227d2353de987ea5fd27f30d0d9c9009b953eeb1525cff03000028d6eefef069e7deef77ebd800c899ab4d978359f09132606365d4a954a47306b868849a295569e6729fc5fe3dd03f59b5cc022089950d4d4eb3dbf0624d"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) unshare(0x22020600) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): 232106][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2601'. [ 322.618361][T14762] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 322.793981][T14773] netlink: 'syz.4.2611': attribute type 5 has an invalid length. [ 322.808729][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2611'. [ 322.822884][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 322.909817][T14776] SET target dimension over the limit! [ 323.029618][T14773] lo speed is unknown, defaulting to 1000 [ 323.167351][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.649472][T14803] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 323.681336][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 323.806542][T14810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2623'. [ 323.807308][T14814] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2622'. [ 324.169614][T14828] netlink: 'syz.1.2626': attribute type 1 has an invalid length. [ 324.207299][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 324.459857][T14835] x_tables: duplicate underflow at hook 2 [ 324.581440][T14828] bond5: entered promiscuous mode [ 324.621929][T14828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.728991][T14830] bond5: (slave bridge3): making interface the new active one [ 324.736601][T14830] bridge3: entered promiscuous mode [ 324.784319][T14830] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 324.820673][T14845] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 324.845813][T14841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.257255][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 325.295671][T14874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2642'. [ 325.472159][T14883] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 325.613134][T14886] lo: left promiscuous mode [ 325.632374][T14886] tunl0: left promiscuous mode [ 325.652123][T14886] gre0: left promiscuous mode [ 325.672481][T14886] gretap0: left promiscuous mode [ 325.700506][T14886] erspan0: left promiscuous mode [ 325.718736][T14886] ip_vti0: left promiscuous mode [ 325.723943][T14886] sit0: left promiscuous mode [ 325.753824][T14886] ip6tnl0: left promiscuous mode [ 325.772082][T14886] ip6gre0: left promiscuous mode [ 325.777491][T14886] ip6gretap0: left promiscuous mode [ 325.783225][T14886] bond0: left promiscuous mode [ 325.789555][T14886] dummy0: left promiscuous mode [ 325.795061][T14886] nlmon0: left promiscuous mode [ 325.800701][T14886] caif0: left promiscuous mode [ 325.805847][T14886] batadv0: left promiscuous mode [ 325.811452][T14886] veth0: left promiscuous mode [ 325.817253][T14886] veth1: left promiscuous mode [ 325.828587][T14886] wg0: left promiscuous mode [ 325.836410][T14886] wg1: left promiscuous mode [ 325.841728][T14886] wg2: left promiscuous mode [ 325.851925][T14886] veth0_to_bridge: left promiscuous mode [ 325.858279][T14886] bridge_slave_0: left promiscuous mode [ 325.864323][T14886] veth1_to_bridge: left promiscuous mode [ 325.870382][T14886] bridge_slave_1: left promiscuous mode [ 325.876242][T14886] veth0_to_bond: left promiscuous mode [ 325.882115][T14886] bond_slave_0: left promiscuous mode [ 325.888351][T14886] veth1_to_bond: left promiscuous mode [ 325.895707][T14886] bond_slave_1: left promiscuous mode [ 325.906100][T14886] veth0_to_team: left promiscuous mode [ 325.911916][T14886] team_slave_0: left promiscuous mode [ 325.917659][T14886] veth1_to_team: left promiscuous mode [ 325.923476][T14886] team_slave_1: left promiscuous mode [ 325.929497][T14886] veth0_to_batadv: left promiscuous mode [ 325.935365][T14886] batadv_slave_0: left promiscuous mode [ 325.941155][T14886] veth1_to_batadv: left promiscuous mode [ 325.947134][T14886] batadv_slave_1: left promiscuous mode [ 325.952921][T14886] xfrm0: left promiscuous mode [ 325.957992][T14886] veth0_to_hsr: left promiscuous mode [ 325.963807][T14886] veth1_to_hsr: left promiscuous mode [ 325.970192][T14886] hsr0: left promiscuous mode [ 325.975111][T14886] veth1_virt_wifi: left promiscuous mode [ 325.984735][T14886] veth0_virt_wifi: left promiscuous mode [ 325.990629][T14886] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 325.998498][T14886] macvtap0: left promiscuous mode [ 326.003837][T14886] macsec0: left promiscuous mode [ 326.009005][T14886] geneve0: left promiscuous mode [ 326.014090][T14886] geneve1: left promiscuous mode [ 326.019408][T14886] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 326.026417][T14886] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 326.034207][T14886] gre1: left promiscuous mode [ 326.039728][T14886] macvlan2: left promiscuous mode [ 326.072552][T14886] netdevsim netdevsim4 eth0: left promiscuous mode [ 326.080004][T14886] netdevsim netdevsim4 eth1: left promiscuous mode [ 326.091541][T14886] netdevsim netdevsim4 eth2: left promiscuous mode [ 326.101873][T14886] netdevsim netdevsim4 eth3: left promiscuous mode [ 326.110174][T14886] bond1: left promiscuous mode [ 326.115255][T14886] syztnl1: left promiscuous mode [ 326.120698][T14886] syztnl0: left promiscuous mode [ 326.125799][T14886] sit1: left promiscuous mode [ 326.131003][T14886] geneve2: left promiscuous mode [ 326.136406][T14886] bond2: left promiscuous mode [ 326.141876][T14886] gretap1: left promiscuous mode [ 326.147232][T14886] bond3: left promiscuous mode [ 326.152129][T14886] geneve3: left promiscuous mode [ 326.158044][T14886] sit2: left promiscuous mode [ 326.162894][T14886] erspan1: left promiscuous mode [ 326.168385][T14886] ip6tnl1: left promiscuous mode [ 326.173639][T14886] mac80211_hwsim hwsim18 wlan2: left promiscuous mode [ 326.180985][T14886] team0.2: left promiscuous mode [ 326.185987][T14886] team0: left promiscuous mode [ 326.191244][T14886] ip6gre1: left promiscuous mode [ 326.196322][T14886] bridge1: left promiscuous mode [ 326.201579][T14886] bridge2: left promiscuous mode [ 326.209311][T14902] bond0: option mode: unable to set because the bond device has slaves [ 326.287182][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.319245][T14900] lo speed is unknown, defaulting to 1000 [ 326.342250][T14913] netlink: 'syz.3.2654': attribute type 33 has an invalid length. [ 326.357419][T14913] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2654'. [ 326.624904][T14932] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 327.069959][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 327.070963][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2667'. [ 327.110667][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2667'. [ 327.327159][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 327.625814][T14972] lo speed is unknown, defaulting to 1000 [ 328.228540][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 328.367145][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 328.547113][T15000] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 328.969537][T15015] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 328.978987][T15015] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2681'. [ 329.108892][T15015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.407259][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.690036][T15027] lo speed is unknown, defaulting to 1000 [ 330.219921][T15044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.447229][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 330.701941][T15052] netlink: 'syz.2.2693': attribute type 10 has an invalid length. [ 331.320250][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 331.487162][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.612863][T15085] lo speed is unknown, defaulting to 1000 [ 331.631036][T15087] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2701'. [ 331.650772][T15087] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 331.898917][T15096] lo speed is unknown, defaulting to 1000 [ 331.939060][T15101] lo speed is unknown, defaulting to 1000 [ 332.016461][T15105] lo speed is unknown, defaulting to 1000 [ 332.085053][T15111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2704'. [ 332.527402][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 333.567142][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.361382][T15131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 334.462501][T15135] netlink: 'syz.4.2711': attribute type 10 has an invalid length. [ 334.505291][T15135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.522917][T15135] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 334.607105][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.423544][T15156] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.647183][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 335.997002][T15160] tun0: tun_chr_ioctl cmd 1074025677 [ 336.002537][T15160] tun0: linktype set to 773 [ 336.227938][T15177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2720'. [ 336.244259][T15177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.502412][T15186] openvswitch: netlink: Tunnel attr 16 has unexpected len 1 expected 0 [ 336.599053][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'. [ 336.675683][T15195] netlink: 'syz.0.2729': attribute type 29 has an invalid length. [ 336.697092][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 336.721686][T15199] netlink: 'syz.1.2727': attribute type 1 has an invalid length. [ 336.807441][T15195] netlink: 'syz.0.2729': attribute type 29 has an invalid length. [ 337.227978][T15204] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 337.236084][T15204] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2730'. [ 337.352363][T15214] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2732'. [ 337.393727][T15214] team0: Mode changed to "loadbalance" [ 337.413220][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 337.738769][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 338.093903][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 338.125610][T15232] geneve1: entered promiscuous mode [ 338.134591][T15232] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 338.156128][T15226] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 338.215618][T15226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.415172][T15238] netlink: 'syz.4.2741': attribute type 1 has an invalid length. [ 338.585274][T15245] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 338.594281][T15245] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2744'. [ 338.625116][T15245] team0: entered promiscuous mode [ 338.652881][T15245] bridge0: port 1(team0) entered blocking state [ 338.668406][T15245] bridge0: port 1(team0) entered disabled state [ 338.695245][T15245] team0: entered allmulticast mode [ 338.766281][T15254] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 338.777098][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 338.796285][T15254] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2747'. [ 338.909274][T15272] netlink: 'syz.3.2752': attribute type 1 has an invalid length. [ 338.917404][T15272] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2752'. [ 338.993811][T15278] ..@ÿ: renamed from bond_slave_0 [ 339.006653][T15279] netlink: 'syz.2.2751': attribute type 1 has an invalid length. [ 339.119560][T15272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.221219][T15288] tipc: Enabled bearer , priority 1 [ 339.225213][T15290] FAULT_INJECTION: forcing a failure. [ 339.225213][T15290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.260280][T15290] CPU: 1 UID: 0 PID: 15290 Comm: syz.2.2757 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 339.260312][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 339.260323][T15290] Call Trace: [ 339.260330][T15290] [ 339.260340][T15290] dump_stack_lvl+0x189/0x250 [ 339.260372][T15290] ? __lock_acquire+0xaac/0xd20 [ 339.260402][T15290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.260430][T15290] ? __pfx__printk+0x10/0x10 [ 339.260450][T15290] ? __might_fault+0xb0/0x130 [ 339.260488][T15290] should_fail_ex+0x414/0x560 [ 339.260525][T15290] _copy_from_user+0x2d/0xb0 [ 339.260553][T15290] __sys_bpf+0x1ed/0x860 [ 339.260579][T15290] ? __pfx___sys_bpf+0x10/0x10 [ 339.260618][T15290] ? ksys_write+0x1f0/0x250 [ 339.260638][T15290] ? rcu_is_watching+0x15/0xb0 [ 339.260680][T15290] __x64_sys_bpf+0x7c/0x90 [ 339.260703][T15290] do_syscall_64+0xf6/0x210 [ 339.260734][T15290] ? clear_bhb_loop+0x45/0xa0 [ 339.260759][T15290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.260777][T15290] RIP: 0033:0x7ffa9658e969 [ 339.260794][T15290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.260811][T15290] RSP: 002b:00007ffa973e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.260832][T15290] RAX: ffffffffffffffda RBX: 00007ffa967b5fa0 RCX: 00007ffa9658e969 [ 339.260846][T15290] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 339.260859][T15290] RBP: 00007ffa973e6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.260871][T15290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.260882][T15290] R13: 0000000000000000 R14: 00007ffa967b5fa0 R15: 00007ffcba4a6248 [ 339.260914][T15290] [ 339.527048][T15300] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2758'. [ 339.546603][T15299] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2760'. [ 339.582725][T15302] validate_nla: 2 callbacks suppressed [ 339.582747][T15302] netlink: 'syz.2.2761': attribute type 9 has an invalid length. [ 339.636397][T15302] syzkaller0: entered promiscuous mode [ 339.642239][T15302] syzkaller0: entered allmulticast mode [ 339.807128][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.862127][T15312] lo speed is unknown, defaulting to 1000 [ 339.935953][T15318] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 340.139578][T15325] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 340.558014][T15335] FAULT_INJECTION: forcing a failure. [ 340.558014][T15335] name failslab, interval 1, probability 0, space 0, times 0 [ 340.619867][T15335] CPU: 1 UID: 0 PID: 15335 Comm: syz.0.2772 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 340.619899][T15335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 340.619911][T15335] Call Trace: [ 340.619919][T15335] [ 340.619928][T15335] dump_stack_lvl+0x189/0x250 [ 340.619967][T15335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.619997][T15335] ? __pfx__printk+0x10/0x10 [ 340.620023][T15335] ? __pfx___might_resched+0x10/0x10 [ 340.620040][T15335] ? fs_reclaim_acquire+0x7d/0x100 [ 340.620075][T15335] should_fail_ex+0x414/0x560 [ 340.620112][T15335] should_failslab+0xa8/0x100 [ 340.620140][T15335] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 340.620167][T15335] ? __get_vm_area_node+0x131/0x2d0 [ 340.620208][T15335] __get_vm_area_node+0x131/0x2d0 [ 340.620239][T15335] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 340.620268][T15335] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.620320][T15335] ? aa_get_newest_label+0xf7/0x5d0 [ 340.620344][T15335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.620372][T15335] ? _parse_integer_limit+0x1ae/0x1f0 [ 340.620396][T15335] ? rcu_is_watching+0x15/0xb0 [ 340.620428][T15335] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.620452][T15335] __vmalloc_noprof+0x7a/0x90 [ 340.620478][T15335] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.620505][T15335] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.620536][T15335] bpf_prog_alloc+0x3c/0x1a0 [ 340.620565][T15335] bpf_prog_load+0x735/0x1930 [ 340.620598][T15335] ? __lock_acquire+0xaac/0xd20 [ 340.620627][T15335] ? __pfx_bpf_prog_load+0x10/0x10 [ 340.620678][T15335] ? bpf_lsm_bpf+0x9/0x20 [ 340.620702][T15335] ? security_bpf+0x7e/0x300 [ 340.620724][T15335] __sys_bpf+0x5f1/0x860 [ 340.620750][T15335] ? __pfx___sys_bpf+0x10/0x10 [ 340.620788][T15335] ? ksys_write+0x1f0/0x250 [ 340.620824][T15335] __x64_sys_bpf+0x7c/0x90 [ 340.620846][T15335] do_syscall_64+0xf6/0x210 [ 340.620878][T15335] ? clear_bhb_loop+0x45/0xa0 [ 340.620906][T15335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.620925][T15335] RIP: 0033:0x7ff2fbf8e969 [ 340.620942][T15335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.620959][T15335] RSP: 002b:00007ff2fce9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.620980][T15335] RAX: ffffffffffffffda RBX: 00007ff2fc1b5fa0 RCX: 00007ff2fbf8e969 [ 340.620994][T15335] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 340.621007][T15335] RBP: 00007ff2fce9a090 R08: 0000000000000000 R09: 0000000000000000 [ 340.621019][T15335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.621030][T15335] R13: 0000000000000000 R14: 00007ff2fc1b5fa0 R15: 00007ffcc82f9f98 [ 340.621061][T15335] [ 340.626861][T15335] syz.0.2772: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 340.898263][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 340.971496][T15335] ,cpuset=/,mems_allowed=0-1 [ 340.976638][T15335] CPU: 0 UID: 0 PID: 15335 Comm: syz.0.2772 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 340.976666][T15335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 340.976678][T15335] Call Trace: [ 340.976688][T15335] [ 340.976697][T15335] dump_stack_lvl+0x189/0x250 [ 340.976732][T15335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.976759][T15335] ? __pfx__printk+0x10/0x10 [ 340.976777][T15335] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.976807][T15335] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.976840][T15335] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 340.976905][T15335] warn_alloc+0x214/0x310 [ 340.976941][T15335] ? __pfx_warn_alloc+0x10/0x10 [ 340.976977][T15335] ? __get_vm_area_node+0x27f/0x2d0 [ 340.977009][T15335] __vmalloc_node_range_noprof+0x316/0x12c0 [ 340.977059][T15335] ? aa_get_newest_label+0xf7/0x5d0 [ 340.977082][T15335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.977108][T15335] ? _parse_integer_limit+0x1ae/0x1f0 [ 340.977131][T15335] ? rcu_is_watching+0x15/0xb0 [ 340.977160][T15335] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.977183][T15335] __vmalloc_noprof+0x7a/0x90 [ 340.977207][T15335] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.977232][T15335] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 340.977261][T15335] bpf_prog_alloc+0x3c/0x1a0 [ 340.977288][T15335] bpf_prog_load+0x735/0x1930 [ 340.977320][T15335] ? __lock_acquire+0xaac/0xd20 [ 340.977348][T15335] ? __pfx_bpf_prog_load+0x10/0x10 [ 340.977396][T15335] ? bpf_lsm_bpf+0x9/0x20 [ 340.977418][T15335] ? security_bpf+0x7e/0x300 [ 340.977439][T15335] __sys_bpf+0x5f1/0x860 [ 340.977464][T15335] ? __pfx___sys_bpf+0x10/0x10 [ 340.977500][T15335] ? ksys_write+0x1f0/0x250 [ 340.977532][T15335] __x64_sys_bpf+0x7c/0x90 [ 340.977552][T15335] do_syscall_64+0xf6/0x210 [ 340.977581][T15335] ? clear_bhb_loop+0x45/0xa0 [ 340.977612][T15335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.977630][T15335] RIP: 0033:0x7ff2fbf8e969 [ 340.977647][T15335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.977663][T15335] RSP: 002b:00007ff2fce9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.977683][T15335] RAX: ffffffffffffffda RBX: 00007ff2fc1b5fa0 RCX: 00007ff2fbf8e969 [ 340.977697][T15335] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 340.977709][T15335] RBP: 00007ff2fce9a090 R08: 0000000000000000 R09: 0000000000000000 [ 340.977721][T15335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.977732][T15335] R13: 0000000000000000 R14: 00007ff2fc1b5fa0 R15: 00007ffcc82f9f98 [ 340.977762][T15335] [ 341.264918][T15335] Mem-Info: [ 341.268363][T15335] active_anon:8563 inactive_anon:0 isolated_anon:0 [ 341.268363][T15335] active_file:2129 inactive_file:38416 isolated_file:0 [ 341.268363][T15335] unevictable:768 dirty:177 writeback:0 [ 341.268363][T15335] slab_reclaimable:11263 slab_unreclaimable:113517 [ 341.268363][T15335] mapped:31979 shmem:4316 pagetables:710 [ 341.268363][T15335] sec_pagetables:0 bounce:0 [ 341.268363][T15335] kernel_misc_reclaimable:0 [ 341.268363][T15335] free:1319517 free_pcp:4045 free_cma:0 [ 341.317751][T15335] Node 0 active_anon:34252kB inactive_anon:0kB active_file:8516kB inactive_file:153592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127916kB dirty:704kB writeback:0kB shmem:15728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15728kB pagetables:2840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.356106][T15335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.394450][T15335] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.394615][T15340] set match dimension is over the limit! [ 341.422473][T15335] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 341.434067][T15335] Node 0 DMA32 free:1354128kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:34244kB inactive_anon:0kB active_file:8516kB inactive_file:153500kB unevictable:1536kB writepending:704kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:14084kB local_pcp:792kB free_cma:0kB [ 341.531526][T15335] lowmem_reserve[]: 0 0 0 0 0 [ 341.536336][T15335] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 341.568407][T15335] lowmem_reserve[]: 0 0 0 0 0 [ 341.573556][T15335] Node 1 Normal free:3910984kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.621502][T15340] netlink: 'syz.1.2774': attribute type 303 has an invalid length. [ 341.666155][T15340] __nla_validate_parse: 9 callbacks suppressed [ 341.666176][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 341.673169][T15354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2777'. [ 341.696608][T15335] lowmem_reserve[]: 0 0 0 0 0 [ 341.712779][T15340] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 341.716845][T15354] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 341.731535][T15335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 341.760196][T15340] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 341.769538][T15335] Node 0 DMA32: 501*4kB (UE) 533*8kB (UE) 125*16kB (UE) 1030*32kB (UME) 416*64kB (UME) 206*128kB (UME) 50*256kB (UME) 20*512kB (UM) 9*1024kB (UM) 10*2048kB (UM) 294*4096kB (UM) = 1351180kB [ 341.812749][T15335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 341.825253][T15335] Node 1 Normal: 286*4kB (UM) 56*8kB (UME) 39*16kB (UME) 203*32kB (UME) 101*64kB (UME) 32*128kB (UME) 14*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3910984kB [ 341.844425][T15335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.855883][T15335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.867431][T15335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.899953][T15335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.917073][T15335] 44461 total pagecache pages [ 341.922213][T15335] 0 pages in swap cache [ 341.961540][T15335] Free swap = 124996kB [ 341.967120][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.972183][T15335] Total swap = 124996kB [ 341.983158][T15335] 2097051 pages RAM [ 342.004850][T15335] 0 pages HighMem/MovableOnly [ 342.020831][T15335] 424374 pages reserved [ 342.029537][T15335] 0 pages cma reserved [ 342.123476][T15359] netlink: 'syz.3.2778': attribute type 16 has an invalid length. [ 342.132080][T15359] netlink: 'syz.3.2778': attribute type 17 has an invalid length. [ 342.164489][T15359] erspan0: left promiscuous mode [ 342.226789][ T5830] Bluetooth: hci0: command tx timeout [ 342.266446][T15359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.282320][T15359] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.299756][T15359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.353313][T15372] syzkaller0: left promiscuous mode [ 342.358840][T15372] syzkaller0: left allmulticast mode [ 342.895289][T15389] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2787'. [ 342.905582][T15389] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2787'. [ 342.998934][T15392] xt_l2tp: v2 doesn't support IP mode [ 343.017329][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 343.907050][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2789'. [ 344.023118][T15397] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 344.057091][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.717996][T15417] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 344.725796][T15417] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2794'. [ 344.805134][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2795'. [ 344.871269][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2795'. [ 345.062316][T15437] xt_hashlimit: size too large, truncated to 1048576 [ 345.087093][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 345.316000][T15449] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 345.810832][T15456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2804'. [ 345.852633][T15456] netlink: 'syz.4.2804': attribute type 1 has an invalid length. [ 346.033697][T15465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2805'. [ 346.127166][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 346.204699][T15479] netlink: 'syz.1.2810': attribute type 1 has an invalid length. [ 346.232512][T15477] lo speed is unknown, defaulting to 1000 [ 347.167311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.200776][T15520] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 347.308919][T15524] netlink: 'syz.3.2827': attribute type 1 has an invalid length. [ 347.316991][T15524] __nla_validate_parse: 4 callbacks suppressed [ 347.317007][T15524] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2827'. [ 347.466780][T15524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.917179][T15534] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 348.086059][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.096152][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.107438][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.116246][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.124593][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.207257][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.278532][T15554] netlink: 'syz.2.2835': attribute type 3 has an invalid length. [ 348.298727][T15548] lo speed is unknown, defaulting to 1000 [ 348.333369][T15553] gretap1: entered promiscuous mode [ 348.341234][T15541] lo speed is unknown, defaulting to 1000 [ 348.421511][T15558] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 348.561328][T15564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2841'. [ 348.738186][T15569] netlink: 'syz.0.2843': attribute type 1 has an invalid length. [ 348.762007][T15569] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2843'. [ 348.790860][T15571] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2843'. [ 349.218849][T15577] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 349.232260][T15577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2845'. [ 349.247238][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 349.482160][T15583] FAULT_INJECTION: forcing a failure. [ 349.482160][T15583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.495842][T15583] CPU: 0 UID: 0 PID: 15583 Comm: syz.1.2846 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 349.495870][T15583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 349.495883][T15583] Call Trace: [ 349.495891][T15583] [ 349.495900][T15583] dump_stack_lvl+0x189/0x250 [ 349.495936][T15583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.495964][T15583] ? __pfx__printk+0x10/0x10 [ 349.495995][T15583] should_fail_ex+0x414/0x560 [ 349.496032][T15583] _copy_to_user+0x31/0xb0 [ 349.496060][T15583] simple_read_from_buffer+0xe1/0x170 [ 349.496088][T15583] proc_fail_nth_read+0x1df/0x250 [ 349.496118][T15583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.496173][T15583] ? rw_verify_area+0x258/0x650 [ 349.496192][T15583] ? aa_sk_perm+0x81e/0x950 [ 349.496209][T15583] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.496239][T15583] vfs_read+0x1fd/0x980 [ 349.496260][T15583] ? __pfx_aa_sk_perm+0x10/0x10 [ 349.496285][T15583] ? __pfx_vfs_read+0x10/0x10 [ 349.496304][T15583] ? rfcomm_sock_connect+0x8b/0x610 [ 349.496326][T15583] ? bpf_lsm_socket_connect+0x9/0x20 [ 349.496360][T15583] ? __sys_connect+0x339/0x440 [ 349.496383][T15583] ? do_sys_openat2+0x154/0x1c0 [ 349.496412][T15583] ? __pfx___sys_connect+0x10/0x10 [ 349.496449][T15583] ksys_read+0x145/0x250 [ 349.496475][T15583] ? __pfx_ksys_read+0x10/0x10 [ 349.496501][T15583] ? do_syscall_64+0xba/0x210 [ 349.496535][T15583] do_syscall_64+0xf6/0x210 [ 349.496566][T15583] ? clear_bhb_loop+0x45/0xa0 [ 349.496591][T15583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.496611][T15583] RIP: 0033:0x7f2991b8d37c [ 349.496628][T15583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 349.496645][T15583] RSP: 002b:00007f29929e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.496666][T15583] RAX: ffffffffffffffda RBX: 00007f2991db5fa0 RCX: 00007f2991b8d37c [ 349.496680][T15583] RDX: 000000000000000f RSI: 00007f29929e80a0 RDI: 0000000000000003 [ 349.496693][T15583] RBP: 00007f29929e8090 R08: 0000000000000000 R09: 0000000000000000 [ 349.496705][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.496720][T15583] R13: 0000000000000000 R14: 00007f2991db5fa0 R15: 00007ffe5b7511d8 [ 349.496752][T15583] [ 350.145733][T15541] chnl_net:caif_netlink_parms(): no params data found [ 350.207172][ T5830] Bluetooth: hci5: command tx timeout [ 350.244767][T15592] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.297332][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.681158][T15541] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.694633][T15541] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.706372][T15541] bridge_slave_0: entered allmulticast mode [ 350.719035][T15541] bridge_slave_0: entered promiscuous mode [ 350.728060][T15541] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.735815][T15541] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.743434][T15541] bridge_slave_1: entered allmulticast mode [ 350.751754][T15541] bridge_slave_1: entered promiscuous mode [ 350.806089][T15615] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2856'. [ 350.890957][T15541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.924715][T15541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.035455][T15541] team0: Port device team_slave_0 added [ 351.050024][T15541] team0: Port device team_slave_1 added [ 351.061094][T15627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2861'. [ 351.185868][T15541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.203380][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.263012][T15541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.318005][T15541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.327253][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.335319][T15541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.404334][T15541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.445916][T15642] netlink: 'syz.3.2864': attribute type 1 has an invalid length. [ 351.474399][T15642] netlink: 'syz.3.2864': attribute type 3 has an invalid length. [ 351.489350][T15644] FAULT_INJECTION: forcing a failure. [ 351.489350][T15644] name failslab, interval 1, probability 0, space 0, times 0 [ 351.527166][T15644] CPU: 1 UID: 0 PID: 15644 Comm: syz.0.2865 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 351.527198][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 351.527211][T15644] Call Trace: [ 351.527219][T15644] [ 351.527228][T15644] dump_stack_lvl+0x189/0x250 [ 351.527265][T15644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.527294][T15644] ? __pfx__printk+0x10/0x10 [ 351.527319][T15644] ? __pfx___might_resched+0x10/0x10 [ 351.527337][T15644] ? fs_reclaim_acquire+0x7d/0x100 [ 351.527371][T15644] should_fail_ex+0x414/0x560 [ 351.527408][T15644] should_failslab+0xa8/0x100 [ 351.527436][T15644] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 351.527463][T15644] ? __get_vm_area_node+0x131/0x2d0 [ 351.527494][T15644] __get_vm_area_node+0x131/0x2d0 [ 351.527525][T15644] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 351.527555][T15644] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.527604][T15644] ? aa_get_newest_label+0xf7/0x5d0 [ 351.527628][T15644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.527657][T15644] ? _parse_integer_limit+0x1ae/0x1f0 [ 351.527681][T15644] ? rcu_is_watching+0x15/0xb0 [ 351.527712][T15644] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.527738][T15644] __vmalloc_noprof+0x7a/0x90 [ 351.527764][T15644] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.527790][T15644] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.527822][T15644] bpf_prog_alloc+0x3c/0x1a0 [ 351.527851][T15644] bpf_prog_load+0x735/0x1930 [ 351.527885][T15644] ? __lock_acquire+0xaac/0xd20 [ 351.527914][T15644] ? __pfx_bpf_prog_load+0x10/0x10 [ 351.527965][T15644] ? bpf_lsm_bpf+0x9/0x20 [ 351.527987][T15644] ? security_bpf+0x7e/0x300 [ 351.528008][T15644] __sys_bpf+0x5f1/0x860 [ 351.528041][T15644] ? __pfx___sys_bpf+0x10/0x10 [ 351.528080][T15644] ? ksys_write+0x1f0/0x250 [ 351.528116][T15644] __x64_sys_bpf+0x7c/0x90 [ 351.528139][T15644] do_syscall_64+0xf6/0x210 [ 351.528171][T15644] ? clear_bhb_loop+0x45/0xa0 [ 351.528196][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.528215][T15644] RIP: 0033:0x7ff2fbf8e969 [ 351.528233][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.528250][T15644] RSP: 002b:00007ff2fce9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.528271][T15644] RAX: ffffffffffffffda RBX: 00007ff2fc1b5fa0 RCX: 00007ff2fbf8e969 [ 351.528286][T15644] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 351.528298][T15644] RBP: 00007ff2fce9a090 R08: 0000000000000000 R09: 0000000000000000 [ 351.528310][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.528322][T15644] R13: 0000000000000001 R14: 00007ff2fc1b5fa0 R15: 00007ffcc82f9f98 [ 351.528354][T15644] [ 351.528364][T15644] syz.0.2865: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 351.557071][T15642] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2864'. [ 351.564722][T15644] ,cpuset=/,mems_allowed=0-1 [ 351.842941][T15644] CPU: 1 UID: 0 PID: 15644 Comm: syz.0.2865 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 351.842969][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 351.842982][T15644] Call Trace: [ 351.842998][T15644] [ 351.843006][T15644] dump_stack_lvl+0x189/0x250 [ 351.843040][T15644] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 351.843067][T15644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.843096][T15644] ? __pfx__printk+0x10/0x10 [ 351.843116][T15644] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.843149][T15644] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 351.843190][T15644] warn_alloc+0x214/0x310 [ 351.843225][T15644] ? __pfx_warn_alloc+0x10/0x10 [ 351.843265][T15644] ? __get_vm_area_node+0x27f/0x2d0 [ 351.843299][T15644] __vmalloc_node_range_noprof+0x316/0x12c0 [ 351.843352][T15644] ? aa_get_newest_label+0xf7/0x5d0 [ 351.843376][T15644] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.843404][T15644] ? _parse_integer_limit+0x1ae/0x1f0 [ 351.843428][T15644] ? rcu_is_watching+0x15/0xb0 [ 351.843460][T15644] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.843486][T15644] __vmalloc_noprof+0x7a/0x90 [ 351.843513][T15644] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.843539][T15644] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 351.843569][T15644] bpf_prog_alloc+0x3c/0x1a0 [ 351.843597][T15644] bpf_prog_load+0x735/0x1930 [ 351.843630][T15644] ? __lock_acquire+0xaac/0xd20 [ 351.843658][T15644] ? __pfx_bpf_prog_load+0x10/0x10 [ 351.843706][T15644] ? bpf_lsm_bpf+0x9/0x20 [ 351.843731][T15644] ? security_bpf+0x7e/0x300 [ 351.843752][T15644] __sys_bpf+0x5f1/0x860 [ 351.843778][T15644] ? __pfx___sys_bpf+0x10/0x10 [ 351.843816][T15644] ? ksys_write+0x1f0/0x250 [ 351.843852][T15644] __x64_sys_bpf+0x7c/0x90 [ 351.843874][T15644] do_syscall_64+0xf6/0x210 [ 351.843904][T15644] ? clear_bhb_loop+0x45/0xa0 [ 351.843927][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.843944][T15644] RIP: 0033:0x7ff2fbf8e969 [ 351.843961][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.843977][T15644] RSP: 002b:00007ff2fce9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.844007][T15644] RAX: ffffffffffffffda RBX: 00007ff2fc1b5fa0 RCX: 00007ff2fbf8e969 [ 351.844021][T15644] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 351.844033][T15644] RBP: 00007ff2fce9a090 R08: 0000000000000000 R09: 0000000000000000 [ 351.844045][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.844057][T15644] R13: 0000000000000001 R14: 00007ff2fc1b5fa0 R15: 00007ffcc82f9f98 [ 351.844088][T15644] [ 351.844212][T15644] Mem-Info: [ 351.888241][T15541] hsr_slave_0: entered promiscuous mode [ 351.890103][T15644] active_anon:5687 inactive_anon:0 isolated_anon:0 [ 351.890103][T15644] active_file:2129 inactive_file:38421 isolated_file:0 [ 351.890103][T15644] unevictable:768 dirty:250 writeback:0 [ 351.890103][T15644] slab_reclaimable:11085 slab_unreclaimable:120831 [ 351.890103][T15644] mapped:29088 shmem:1446 pagetables:761 [ 351.890103][T15644] sec_pagetables:0 bounce:0 [ 351.890103][T15644] kernel_misc_reclaimable:0 [ 351.890103][T15644] free:1318006 free_pcp:640 free_cma:0 [ 351.949345][T15541] hsr_slave_1: entered promiscuous mode [ 351.951550][T15644] Node 0 active_anon:22748kB inactive_anon:0kB active_file:8516kB inactive_file:153612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116452kB dirty:1000kB writeback:0kB shmem:4248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15956kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.015793][T15541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.015864][T15541] Cannot create hsr debugfs directory [ 352.080370][T15644] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 352.287212][ T5830] Bluetooth: hci5: command tx timeout [ 352.294984][T15644] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 352.355119][T15644] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 352.367422][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.374496][T15644] Node 0 DMA32 free:1349196kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:22620kB inactive_anon:0kB active_file:8516kB inactive_file:153528kB unevictable:1536kB writepending:1080kB present:3129332kB managed:2564076kB mlocked:0kB bounce:0kB free_pcp:1336kB local_pcp:904kB free_cma:0kB [ 352.442936][T15644] lowmem_reserve[]: 0 0 0 0 0 [ 352.454884][T15644] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 352.482084][T15644] lowmem_reserve[]: 0 0 0 0 0 [ 352.488119][T15644] Node 1 Normal free:3910428kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 352.520020][T15644] lowmem_reserve[]: 0 0 0 0 0 [ 352.525048][T15644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 352.538686][T15644] Node 0 DMA32: 1584*4kB (UME) 1005*8kB (UME) 673*16kB (UME) 1968*32kB (UME) 525*64kB (UME) 82*128kB (UME) 24*256kB (UME) 13*512kB (M) 2*1024kB (M) 5*2048kB (M) 291*4096kB (UM) = 1349240kB [ 352.563814][T15644] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 352.575968][T15644] Node 1 Normal: 160*4kB (UM) 56*8kB (UME) 39*16kB (UME) 203*32kB (UME) 101*64kB (UME) 32*128kB (UME) 14*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3910480kB [ 352.595483][T15644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.605239][T15644] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.616841][T15644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.626647][T15644] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 352.653023][T15644] 41998 total pagecache pages [ 352.662676][T15644] 0 pages in swap cache [ 352.669352][T15644] Free swap = 124996kB [ 352.673556][T15644] Total swap = 124996kB [ 352.677859][T15644] 2097051 pages RAM [ 352.681971][T15644] 0 pages HighMem/MovableOnly [ 352.686703][T15644] 424374 pages reserved [ 352.692537][T15644] 0 pages cma reserved [ 352.989811][T15694] lo speed is unknown, defaulting to 1000 [ 353.145809][T15699] xt_ecn: cannot match TCP bits for non-tcp packets [ 353.214140][T15699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 353.370547][T15710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.407219][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 353.422987][T15712] netlink: 'syz.0.2883': attribute type 4 has an invalid length. [ 353.434733][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 353.935102][T15727] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2887'. [ 353.987484][T15727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.994183][T15541] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.054571][T15541] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.094270][T15541] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.133959][T15541] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.360500][T15747] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2891'. [ 354.368266][ T5830] Bluetooth: hci5: command tx timeout [ 354.442199][T15750] tipc: Can't bind to reserved service type 0 [ 354.457438][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 354.492685][T15541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.564668][T15541] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.592490][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.600219][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.623473][T15756] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 354.644562][T15757] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 354.662711][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.670040][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.072645][T15772] Bluetooth: MGMT ver 1.23 [ 355.434924][T15541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.491157][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 355.566015][T15779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2900'. [ 356.115162][T15792] netlink: 'syz.1.2903': attribute type 178 has an invalid length. [ 356.473521][ T5830] Bluetooth: hci5: command tx timeout [ 356.503268][T15792] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2903'. [ 356.537087][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 356.549937][T15792] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 356.774218][T15541] veth0_vlan: entered promiscuous mode [ 356.863870][T15541] veth1_vlan: entered promiscuous mode [ 357.206108][T15813] x_tables: duplicate underflow at hook 3 [ 357.250368][T15541] veth0_macvtap: entered promiscuous mode [ 357.427191][T15541] veth1_macvtap: entered promiscuous mode [ 357.567295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 357.631627][T15541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.802467][T15541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.855813][T15541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.895101][T15541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.926463][T15541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.943859][T15541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.086190][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 358.429326][T15848] netlink: 'syz.1.2920': attribute type 13 has an invalid length. [ 358.509532][T15848] netlink: 'syz.1.2920': attribute type 17 has an invalid length. [ 358.607190][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 358.861552][T15848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.225484][ T9606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.287872][ T9606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.647498][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 359.704137][ T9609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.722618][T15859] lo speed is unknown, defaulting to 1000 [ 359.773817][ T9609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.481322][T15894] bridge_slave_0: left allmulticast mode [ 360.549783][T15894] bridge_slave_0: left promiscuous mode [ 360.613097][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.697084][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 360.723409][T15894] bridge_slave_1: left allmulticast mode [ 360.795139][T15894] bridge_slave_1: left promiscuous mode [ 360.824695][T15894] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.956798][T15894] bond0: (slave bond_slave_0): Releasing backup interface [ 361.017313][T15906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.168555][T15894] bond0: (slave bond_slave_1): Releasing backup interface [ 361.352046][T15894] team0: Port device team_slave_0 removed [ 361.516730][T15894] team0: Port device team_slave_1 removed [ 361.568546][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.576049][T15894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.653593][T15894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.697826][T15894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.727076][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 361.831538][T15911] syzkaller0: entered promiscuous mode [ 361.866915][ C0] sched: DL replenish lagged too much [ 361.879618][T15911] syzkaller0: entered allmulticast mode [ 362.004530][T15896] team0: Mode changed to "loadbalance" [ 362.374674][ T5831] syz_tun (unregistering): left allmulticast mode [ 362.417931][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.454400][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.464510][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.478886][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.488195][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.534908][T15920] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2936'. [ 362.546034][T15920] netlink: 'syz.4.2936': attribute type 32 has an invalid length. [ 362.562843][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 362.592175][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'. [ 362.606417][T15920] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 362.767227][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 362.929961][T15926] syz_tun: entered promiscuous mode [ 362.952705][T15926] macsec1: entered promiscuous mode [ 362.985371][T15926] syz_tun: left promiscuous mode [ 363.182610][ T9609] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.210230][ T9609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.275659][T15914] lo speed is unknown, defaulting to 1000 [ 363.396425][ T9609] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.462641][ T9609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.663375][ T9609] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.737037][ T9609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.807092][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 364.259327][ T9609] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.327130][ T9609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.469198][T15957] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 364.533421][ T5141] Bluetooth: hci0: command tx timeout [ 364.847075][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 365.280312][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 365.897197][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.613497][ T5141] Bluetooth: hci0: command tx timeout [ 366.927102][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 366.950053][ T9609] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 366.997980][ T9609] bond0 (unregistering): Released all slaves [ 367.026580][ T9609] bond1 (unregistering): Released all slaves [ 367.055190][ T9609] bond2 (unregistering): Released all slaves [ 367.352465][ T9609] bond3 (unregistering): Released all slaves [ 367.650979][ T9609] bond4 (unregistering): Released all slaves [ 367.967077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 368.114022][ T9609] : left promiscuous mode [ 368.383205][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 368.649926][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 368.699484][ T5141] Bluetooth: hci0: command tx timeout [ 369.017411][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 369.129525][T15997] lo speed is unknown, defaulting to 1000 [ 369.135569][ T9609] k›*·]‘: left promiscuous mode [ 369.608912][ T9609] tipc: Disabling bearer [ 369.642428][ T9609] tipc: Disabling bearer [ 369.759247][ T9609] tipc: Left network mode [ 369.786302][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'. [ 369.893794][T16031] netlink: 'syz.1.2964': attribute type 2 has an invalid length. [ 370.047176][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 370.421447][T15914] chnl_net:caif_netlink_parms(): no params data found [ 370.767242][ T5141] Bluetooth: hci0: command tx timeout [ 370.868515][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 371.087236][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 371.095109][T16055] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 371.220839][T16052] netlink: 'syz.0.2969': attribute type 1 has an invalid length. [ 371.269508][T16059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2970'. [ 372.079543][T15914] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.104866][T15914] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.126131][T15914] bridge_slave_0: entered allmulticast mode [ 372.132688][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 372.160667][T15914] bridge_slave_0: entered promiscuous mode [ 372.283920][T15914] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.321432][T15914] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.339012][T15914] bridge_slave_1: entered allmulticast mode [ 372.382286][T15914] bridge_slave_1: entered promiscuous mode [ 372.429927][ T9609] hsr_slave_0: left promiscuous mode [ 372.436221][ T9609] hsr_slave_1: left promiscuous mode [ 372.513537][ T9609] veth1_macvtap: left promiscuous mode [ 372.529797][ T9609] veth0_macvtap: left promiscuous mode [ 372.546013][ T9609] veth1_vlan: left promiscuous mode [ 372.554034][ T9609] veth0_vlan: left promiscuous mode [ 373.124197][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 373.167242][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 373.271216][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 373.632845][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 374.129374][T15914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.169522][T15914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.180805][T16109] lo speed is unknown, defaulting to 1000 [ 374.207492][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.249199][T16113] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2982'. [ 374.286680][T15914] team0: Port device team_slave_0 added [ 374.314253][T15914] team0: Port device team_slave_1 added [ 374.432288][T15914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.448696][T15914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.488411][T15914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.514377][T15914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.546248][T15914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.580788][T15914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.702949][ T9609] IPVS: stop unused estimator thread 0... [ 374.777884][T15914] hsr_slave_0: entered promiscuous mode [ 374.784743][T15914] hsr_slave_1: entered promiscuous mode [ 374.798426][T15914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.806053][T15914] Cannot create hsr debugfs directory [ 374.842800][T16129] netlink: 'syz.3.2986': attribute type 8 has an invalid length. [ 375.131893][T16139] netlink: 'syz.0.2988': attribute type 4 has an invalid length. [ 375.247185][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 375.422352][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 375.461794][T16150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2991'. [ 375.513634][T16149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2992'. [ 375.549451][T16149] netlink: 'syz.4.2992': attribute type 4 has an invalid length. [ 375.558001][T16149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2992'. [ 375.571418][T16149] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 375.732842][T16146] x_tables: duplicate underflow at hook 2 [ 375.843944][T16161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2994'. [ 376.146385][T15914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.214754][T15914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.270462][T15914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.287099][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 376.304718][T15914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.430375][T16155] pim6reg1: entered promiscuous mode [ 376.446300][T16155] pim6reg1: entered allmulticast mode [ 376.592150][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 376.626377][T16180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3001'. [ 376.859710][T16192] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 377.027632][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 377.104069][T15914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.211657][T15914] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.290943][T16204] lo speed is unknown, defaulting to 1000 [ 377.327153][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 377.337536][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.344734][ T9604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.361888][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.369228][ T9604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.027967][T15914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.133038][T15914] veth0_vlan: entered promiscuous mode [ 378.166825][T16225] syz.0.3011 (16225) used obsolete PPPIOCDETACH ioctl [ 378.178685][T15914] veth1_vlan: entered promiscuous mode [ 378.312490][T15914] veth0_macvtap: entered promiscuous mode [ 378.354437][T15914] veth1_macvtap: entered promiscuous mode [ 378.367357][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 378.407009][T15914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.446435][T15914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.463190][T16232] netlink: 'syz.0.3014': attribute type 39 has an invalid length. [ 378.506367][T15914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.522934][T15914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.533059][T15914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.550831][T15914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.766525][T16243] __nla_validate_parse: 4 callbacks suppressed [ 378.766547][T16243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3017'. [ 378.971895][T16246] ip6gre1: entered allmulticast mode [ 379.176436][T16239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3017'. [ 379.254463][ T7952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.278352][ T7952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.407168][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 379.528472][T16262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3022'. [ 379.592635][ T9606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.616024][ T9606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.363469][ T9151] IPVS: starting estimator thread 0... [ 380.371028][T16285] netlink: 476 bytes leftover after parsing attributes in process `syz.2.3029'. [ 380.395330][T16282] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.401680][T16287] sctp: [Deprecated]: syz.4.3030 (pid 16287) Use of int in maxseg socket option. [ 380.401680][T16287] Use struct sctp_assoc_value instead [ 380.447078][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 380.477510][T16286] IPVS: using max 27 ests per chain, 64800 per kthread [ 380.493406][T16285] bond_slave_0: entered promiscuous mode [ 380.560339][T16285] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3029'. [ 380.624714][T16285] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 380.739747][T16290] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3031'. [ 380.780433][T16290] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 380.951053][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.970888][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.987375][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.018848][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.027002][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.064339][T16298] lo speed is unknown, defaulting to 1000 [ 381.145430][T16299] lo speed is unknown, defaulting to 1000 [ 381.497247][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 381.598558][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 381.787993][T16310] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3035'. [ 381.811632][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3035'. [ 382.095778][T16318] x_tables: duplicate underflow at hook 3 [ 382.527148][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.565026][T16340] tipc: Enabling of bearer rejected, failed to enable media [ 382.878022][T16356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3050'. [ 382.916590][T16299] chnl_net:caif_netlink_parms(): no params data found [ 382.997964][T16356] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 383.087567][ T5141] Bluetooth: hci1: command tx timeout [ 383.209209][T16299] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.227654][T16299] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.237098][T16299] bridge_slave_0: entered allmulticast mode [ 383.249252][T16299] bridge_slave_0: entered promiscuous mode [ 383.258708][T16299] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.266023][T16299] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.277424][T16299] bridge_slave_1: entered allmulticast mode [ 383.285470][T16299] bridge_slave_1: entered promiscuous mode [ 383.401626][T16299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.493351][T16299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.567074][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 383.742126][T16299] team0: Port device team_slave_0 added [ 383.812071][T16299] team0: Port device team_slave_1 added [ 383.911524][T16299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.927584][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.992470][T16299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.015467][T16299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.023578][T16299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.025224][T16395] __nla_validate_parse: 2 callbacks suppressed [ 384.025244][T16395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3062'. [ 384.050389][T16299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.158385][T16299] hsr_slave_0: entered promiscuous mode [ 384.175426][T16299] hsr_slave_1: entered promiscuous mode [ 384.185292][T16299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.199917][T16395] netlink: 'syz.1.3062': attribute type 1 has an invalid length. [ 384.213756][T16299] Cannot create hsr debugfs directory [ 384.475273][T16416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3067'. [ 384.607100][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 384.690350][T16299] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.790761][T16299] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.836465][T16424] lo speed is unknown, defaulting to 1000 [ 384.857500][T16432] sctp: [Deprecated]: syz.2.3074 (pid 16432) Use of int in max_burst socket option deprecated. [ 384.857500][T16432] Use struct sctp_assoc_value instead [ 384.863051][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3073'. [ 384.895948][T16299] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.004823][T16299] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.056340][T16435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3075'. [ 385.150467][T16440] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 385.167705][ T5141] Bluetooth: hci1: command tx timeout [ 385.390501][T16299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.425148][T16299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.425658][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 385.456726][T16299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.533596][T16299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.647121][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 385.777544][ T30] audit: type=1800 audit(1746227328.369:6): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3074" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0 [ 386.123293][T16299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.265086][T16299] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.295938][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.303201][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.358485][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.365917][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.687148][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.979200][T16299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.013506][T16299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.169417][T16470] bridge0: port 3(ipvlan2) entered blocking state [ 387.201245][T16470] bridge0: port 3(ipvlan2) entered disabled state [ 387.217903][T16470] ipvlan2: entered allmulticast mode [ 387.233448][T16470] bridge0: entered allmulticast mode [ 387.248076][ T5141] Bluetooth: hci1: command tx timeout [ 387.263258][T16470] ipvlan2: left allmulticast mode [ 387.276561][T16470] bridge0: left allmulticast mode [ 387.367272][T16479] syz_tun: left allmulticast mode [ 387.727499][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 387.807384][T16498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3084'. [ 388.468626][T16484] lo speed is unknown, defaulting to 1000 [ 388.584296][T16299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.767450][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 388.794988][T16299] veth0_vlan: entered promiscuous mode [ 388.820263][T16530] syzkaller0: entered allmulticast mode [ 388.841606][T16299] veth1_vlan: entered promiscuous mode [ 388.890506][T16529] syzkaller0: left allmulticast mode [ 388.960344][T16299] veth0_macvtap: entered promiscuous mode [ 388.977601][T16539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3097'. [ 388.997273][T16539] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3097'. [ 389.011916][T16539] netlink: 'syz.3.3097': attribute type 5 has an invalid length. [ 389.021565][T16299] veth1_macvtap: entered promiscuous mode [ 389.041524][T16539] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3097'. [ 389.073929][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.116424][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.139118][T16299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.163146][T16299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.196827][T16299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.241706][T16299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.290412][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3098'. [ 389.295148][T16299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.337327][ T5141] Bluetooth: hci1: command tx timeout [ 389.347584][T16299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.356787][T16299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.359614][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3098'. [ 389.380833][T16299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.413321][T16546] lo speed is unknown, defaulting to 1000 [ 389.792622][T16556] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3101'. [ 389.807111][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 390.149639][ T7955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.177318][ T7955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.350301][ T9604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.377343][ T9604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.848553][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 390.862219][T16583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3109'. [ 391.078622][T16589] netlink: ct family unspecified [ 391.097035][T16589] openvswitch: netlink: Actions may not be safe on all matching packets [ 391.223698][T16589] bridge0: port 3(erspan0) entered blocking state [ 391.230632][T16589] bridge0: port 3(erspan0) entered disabled state [ 391.254283][T16589] erspan0: entered allmulticast mode [ 391.316797][T16589] erspan0: entered promiscuous mode [ 391.338861][T16589] bridge0: port 3(erspan0) entered blocking state [ 391.345438][T16589] bridge0: port 3(erspan0) entered forwarding state [ 391.384861][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3115'. [ 391.864039][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.873814][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.882086][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.889311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 391.902810][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.911860][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.143658][T16624] netlink: 'syz.4.3122': attribute type 10 has an invalid length. [ 392.152518][T16624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3122'. [ 392.165132][T16624] bridge0: port 1(dummy0) entered blocking state [ 392.174094][T16624] bridge0: port 1(dummy0) entered disabled state [ 392.184422][T16624] dummy0: entered allmulticast mode [ 392.193620][T16624] dummy0: entered promiscuous mode [ 392.204512][T16626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3121'. [ 392.211740][T16624] bridge0: port 1(dummy0) entered blocking state [ 392.220414][T16624] bridge0: port 1(dummy0) entered forwarding state [ 392.329800][T16626] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 392.338170][T16626] netlink: 'syz.0.3121': attribute type 2 has an invalid length. [ 392.346018][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'. [ 392.358331][T16606] lo speed is unknown, defaulting to 1000 [ 392.406236][T16615] lo speed is unknown, defaulting to 1000 [ 392.569836][T16638] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 392.598435][T16638] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 392.616539][T16638] netlink: 'syz.2.3127': attribute type 2 has an invalid length. [ 392.631901][T16638] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 392.641520][T16638] netlink: 'syz.2.3127': attribute type 2 has an invalid length. [ 392.927261][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 392.974023][T16645] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 393.156482][T16651] veth3: entered allmulticast mode [ 393.162468][T16651] bridge0: port 4(veth3) entered blocking state [ 393.169375][T16651] bridge0: port 4(veth3) entered disabled state [ 393.178477][T16651] veth3: entered promiscuous mode [ 393.185453][T16651] bridge0: port 4(veth3) entered blocking state [ 393.192053][T16651] bridge0: port 4(veth3) entered forwarding state [ 393.226300][T16653] tipc: Started in network mode [ 393.242195][T16653] tipc: Node identity ac14140f, cluster identity 4711 [ 393.251930][T16653] tipc: New replicast peer: 255.255.255.255 [ 393.268336][T16653] tipc: Enabled bearer , priority 10 [ 393.316609][ T3508] bridge0: port 4(veth3) entered disabled state [ 393.557366][T16606] chnl_net:caif_netlink_parms(): no params data found [ 393.637496][T16667] team0: No ports can be present during mode change [ 393.974829][ T5141] Bluetooth: hci3: command tx timeout [ 393.978223][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 394.013068][T16682] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3141'. [ 394.120612][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3142'. [ 394.177616][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3142'. [ 394.285564][ T5885] tipc: Node number set to 2886997007 [ 394.326310][T16692] netlink: 'syz.3.3143': attribute type 12 has an invalid length. [ 394.438909][T16692] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 394.539048][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.562275][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.571293][T16606] bridge_slave_0: entered allmulticast mode [ 394.589055][T16606] bridge_slave_0: entered promiscuous mode [ 394.629336][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.657165][T16606] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.674775][T16606] bridge_slave_1: entered allmulticast mode [ 394.699002][T16606] bridge_slave_1: entered promiscuous mode [ 394.712477][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 394.787173][T16606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.965489][T16606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.007045][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 395.080750][T16703] lo speed is unknown, defaulting to 1000 [ 395.129375][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3149'. [ 395.139757][T16717] tipc: Started in network mode [ 395.144904][T16717] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 395.154726][T16717] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 395.164659][T16717] tipc: Enabled bearer , priority 10 [ 395.206456][T16606] team0: Port device team_slave_0 added [ 395.241681][T16606] team0: Port device team_slave_1 added [ 395.353787][T16606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.361991][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.405493][T16606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.445845][T16606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.460077][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.516979][T16606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.715734][T16606] hsr_slave_0: entered promiscuous mode [ 395.732936][T16606] hsr_slave_1: entered promiscuous mode [ 395.742735][T16606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.752949][T16606] Cannot create hsr debugfs directory [ 395.803724][T16743] tipc: Enabled bearer , priority 10 [ 396.047087][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 396.064236][ T5830] Bluetooth: hci3: command tx timeout [ 396.228995][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 396.267253][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 396.289505][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 396.316366][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 396.337623][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 396.352611][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 396.590349][T16752] lo speed is unknown, defaulting to 1000 [ 396.683088][T16762] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 396.775998][T16606] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.837517][ T9] tipc: Node number set to 1 [ 396.842506][T16764] FAULT_INJECTION: forcing a failure. [ 396.842506][T16764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.915355][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.3.3163 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 396.915403][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 396.915424][T16764] Call Trace: [ 396.915432][T16764] [ 396.915441][T16764] dump_stack_lvl+0x189/0x250 [ 396.915541][T16764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.915575][T16764] ? __pfx__printk+0x10/0x10 [ 396.915612][T16764] should_fail_ex+0x414/0x560 [ 396.915650][T16764] _copy_from_user+0x2d/0xb0 [ 396.915679][T16764] __copy_msghdr+0x3c5/0x5b0 [ 396.915709][T16764] ___sys_sendmsg+0x1a5/0x2a0 [ 396.915738][T16764] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.915812][T16764] ? __might_fault+0xb0/0x130 [ 396.915843][T16764] __sys_sendmmsg+0x227/0x430 [ 396.915875][T16764] ? __pfx___sys_sendmmsg+0x10/0x10 [ 396.915911][T16764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.915961][T16764] ? ksys_write+0x1f0/0x250 [ 396.915982][T16764] ? rcu_is_watching+0x15/0xb0 [ 396.916022][T16764] __x64_sys_sendmmsg+0xa0/0xc0 [ 396.916051][T16764] do_syscall_64+0xf6/0x210 [ 396.916083][T16764] ? clear_bhb_loop+0x45/0xa0 [ 396.916108][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.916126][T16764] RIP: 0033:0x7fe3d958e969 [ 396.916146][T16764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.916164][T16764] RSP: 002b:00007fe3da480038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 396.916185][T16764] RAX: ffffffffffffffda RBX: 00007fe3d97b5fa0 RCX: 00007fe3d958e969 [ 396.916200][T16764] RDX: 0000000000000002 RSI: 00002000000055c0 RDI: 0000000000000003 [ 396.916221][T16764] RBP: 00007fe3da480090 R08: 0000000000000000 R09: 0000000000000000 [ 396.916233][T16764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.916244][T16764] R13: 0000000000000000 R14: 00007fe3d97b5fa0 R15: 00007ffd37edc8c8 [ 396.916276][T16764] [ 396.951835][T16606] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.092667][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 397.226323][T16774] lo speed is unknown, defaulting to 1000 [ 397.295620][T16606] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.480831][T16606] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.766764][T16606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.981882][T16796] Bluetooth: MGMT ver 1.23 [ 398.003197][T16606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 398.030089][T16606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 398.093003][T16606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.127178][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 398.134412][ T5830] Bluetooth: hci3: command 0x040f tx timeout [ 398.319214][T16799] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 398.574240][T16807] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 398.755845][T16812] bond1: entered promiscuous mode [ 398.763559][T16812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.894781][T16606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.046401][T16606] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.083424][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.090687][ T9606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.167829][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 399.268378][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.275677][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.375441][T16823] FAULT_INJECTION: forcing a failure. [ 399.375441][T16823] name failslab, interval 1, probability 0, space 0, times 0 [ 399.409112][T16823] CPU: 1 UID: 0 PID: 16823 Comm: syz.4.3180 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 399.409144][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 399.409157][T16823] Call Trace: [ 399.409165][T16823] [ 399.409174][T16823] dump_stack_lvl+0x189/0x250 [ 399.409212][T16823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.409242][T16823] ? __pfx__printk+0x10/0x10 [ 399.409273][T16823] ? __pfx___might_resched+0x10/0x10 [ 399.409292][T16823] ? fs_reclaim_acquire+0x7d/0x100 [ 399.409327][T16823] should_fail_ex+0x414/0x560 [ 399.409367][T16823] should_failslab+0xa8/0x100 [ 399.409395][T16823] __kmalloc_noprof+0xcb/0x4f0 [ 399.409419][T16823] ? sock_kmalloc+0xd6/0x160 [ 399.409452][T16823] sock_kmalloc+0xd6/0x160 [ 399.409482][T16823] ____sys_sendmsg+0x1b5/0x830 [ 399.409514][T16823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.409550][T16823] ? import_iovec+0x74/0xa0 [ 399.409581][T16823] ___sys_sendmsg+0x21f/0x2a0 [ 399.409609][T16823] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.409682][T16823] ? __might_fault+0xb0/0x130 [ 399.409723][T16823] __sys_sendmmsg+0x227/0x430 [ 399.409755][T16823] ? __pfx___sys_sendmmsg+0x10/0x10 [ 399.409791][T16823] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.409846][T16823] ? ksys_write+0x1f0/0x250 [ 399.409868][T16823] ? rcu_is_watching+0x15/0xb0 [ 399.409909][T16823] __x64_sys_sendmmsg+0xa0/0xc0 [ 399.409938][T16823] do_syscall_64+0xf6/0x210 [ 399.409969][T16823] ? clear_bhb_loop+0x45/0xa0 [ 399.409994][T16823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.410012][T16823] RIP: 0033:0x7f234378e969 [ 399.410032][T16823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.410047][T16823] RSP: 002b:00007f2344567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 399.410067][T16823] RAX: ffffffffffffffda RBX: 00007f23439b5fa0 RCX: 00007f234378e969 [ 399.410081][T16823] RDX: 0000000000000002 RSI: 00002000000055c0 RDI: 0000000000000003 [ 399.410094][T16823] RBP: 00007f2344567090 R08: 0000000000000000 R09: 0000000000000000 [ 399.410106][T16823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.410118][T16823] R13: 0000000000000000 R14: 00007f23439b5fa0 R15: 00007ffee0dbf388 [ 399.410150][T16823] [ 399.959485][T16827] __nla_validate_parse: 51 callbacks suppressed [ 399.959505][T16827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3183'. [ 400.000880][T16827] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 400.207077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 400.207397][ T5141] Bluetooth: hci3: command 0x040f tx timeout [ 400.301291][T16606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.352706][T16606] veth0_vlan: entered promiscuous mode [ 400.366310][T16606] veth1_vlan: entered promiscuous mode [ 400.456327][T16606] veth0_macvtap: entered promiscuous mode [ 400.489315][T16606] veth1_macvtap: entered promiscuous mode [ 400.517917][T16848] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3188'. [ 400.554117][T16606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.566391][T16848] netlink: 'syz.2.3188': attribute type 3 has an invalid length. [ 400.598967][T16606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.617146][T16606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.637244][T16606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.661692][T16606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.691315][T16606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.747139][T16606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.775806][T16606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.787375][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'. [ 400.796604][T16606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.818766][T16606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.871823][T16606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.907241][T16606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.926332][T16606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.939868][T16606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.972431][T16863] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 401.153355][T16867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3195'. [ 401.179408][T16867] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 401.247099][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 401.323029][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.364987][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.475246][ T9609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.494185][ T9609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.287125][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 402.295451][ T5141] Bluetooth: hci3: command 0x040f tx timeout [ 402.334744][ T30] audit: type=1800 audit(1746227344.929:7): pid=16892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3202" name="memory.events" dev="tmpfs" ino=211 res=0 errno=0 [ 402.440990][T16900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3204'. [ 402.684846][T16910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3207'. [ 402.727662][T16910] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 402.868369][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 403.062174][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 403.298207][T16930] netlink: 'syz.0.3212': attribute type 10 has an invalid length. [ 403.324737][T16930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3212'. [ 403.337059][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 403.375642][T16936] netlink: 'syz.4.3214': attribute type 1 has an invalid length. [ 403.456553][T16936] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 403.531791][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 403.556810][T16930] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 403.573986][T16930] team0: Failed to send options change via netlink (err -105) [ 403.581713][T16930] team0: Port device geneve0 added [ 403.834039][T16947] team0: Device wireguard0 is of different type [ 403.877822][T16949] netlink: 'syz.2.3220': attribute type 1 has an invalid length. [ 404.255047][T16962] lo speed is unknown, defaulting to 1000 [ 404.367060][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 405.407050][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 405.473018][T16993] __nla_validate_parse: 4 callbacks suppressed [ 405.473037][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 405.516656][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 405.577337][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 405.617229][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 405.662419][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 405.864250][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 405.900234][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 406.017196][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 406.030170][T16995] lo speed is unknown, defaulting to 1000 [ 406.099374][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 406.153955][T16990] netlink: 'syz.4.3233': attribute type 1 has an invalid length. [ 406.162404][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.171105][T16990] netlink: 'syz.4.3233': attribute type 2 has an invalid length. [ 406.180577][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.189910][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.199545][T16993] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3235'. [ 406.212876][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.220829][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.379884][T16996] lo speed is unknown, defaulting to 1000 [ 406.447090][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 407.172286][T17015] syzkaller0: entered promiscuous mode [ 407.178121][T17015] syzkaller0: entered allmulticast mode [ 407.220341][T17022] netlink: 'syz.4.3244': attribute type 9 has an invalid length. [ 407.405466][T17022] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 407.422357][T17022] macvlan2: entered allmulticast mode [ 407.428105][T17022] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 407.436691][ T7955] batadv1: left allmulticast mode [ 407.445859][ T7955] batadv1: left promiscuous mode [ 407.456650][ T7955] bridge0: port 2(batadv1) entered disabled state [ 407.469170][ T7955] bridge_slave_0: left allmulticast mode [ 407.476990][ T7955] bridge_slave_0: left promiscuous mode [ 407.483871][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.491265][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 407.629252][ T7955] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 408.182937][ T7955] team0: Port device bond0 removed [ 408.191754][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.204748][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.216160][ T7955] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 408.225824][ T7955] bond0 (unregistering): Released all slaves [ 408.243846][ T7955] bond1 (unregistering): Released all slaves [ 408.262340][ T7955] bond2 (unregistering): Released all slaves [ 408.282207][ T7955] bond3 (unregistering): Released all slaves [ 408.304621][ T5141] Bluetooth: hci2: command tx timeout [ 408.422117][ T7955] bond4 (unregistering): Released all slaves [ 408.537077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 408.547444][ T7955] bond5 (unregistering): Released all slaves [ 408.562674][ T7955] bond6 (unregistering): Released all slaves [ 409.567091][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 410.378525][ T5141] Bluetooth: hci2: command tx timeout [ 410.617083][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 410.706023][ T7955] : left promiscuous mode [ 410.733811][T17053] tipc: Enabling of bearer rejected, already enabled [ 410.796604][T17058] vxcan3: entered allmulticast mode [ 410.834573][T17063] __nla_validate_parse: 58 callbacks suppressed [ 410.834593][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3254'. [ 410.903945][ T7955] tipc: Disabling bearer [ 410.925288][ T7955] tipc: Left network mode [ 410.946446][T17070] netlink: 'syz.1.3256': attribute type 16 has an invalid length. [ 410.955619][T17070] netlink: 'syz.1.3256': attribute type 17 has an invalid length. [ 411.025123][T17071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3256'. [ 411.046431][T17074] sctp: [Deprecated]: syz.4.3259 (pid 17074) Use of int in max_burst socket option deprecated. [ 411.046431][T17074] Use struct sctp_assoc_value instead [ 411.088800][T17070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.176508][T17083] netlink: 'syz.2.3261': attribute type 1 has an invalid length. [ 411.185909][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 411.196337][T17083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3261'. [ 411.252809][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3261'. [ 411.340257][T17083] vlan0: entered promiscuous mode [ 411.400275][T17096] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3264'. [ 411.412714][T17096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3264'. [ 411.431437][T17090] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3263'. [ 411.489768][T17099] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 411.504943][ T5833] IPVS: starting estimator thread 0... [ 411.607218][T17101] IPVS: using max 29 ests per chain, 69600 per kthread [ 411.647076][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 411.814666][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 411.986247][T17119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3269'. [ 412.032786][ T7955] hsr_slave_0: left promiscuous mode [ 412.045134][ T7955] hsr_slave_1: left promiscuous mode [ 412.057543][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.097675][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.374278][T17130] can: request_module (can-proto-3) failed. [ 412.448350][ T5141] Bluetooth: hci2: command tx timeout [ 412.688203][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 412.820483][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 412.903925][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 413.573394][T16996] chnl_net:caif_netlink_parms(): no params data found [ 413.727059][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 413.995976][T16996] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.009477][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.039414][T16996] bridge_slave_0: entered allmulticast mode [ 414.057913][T16996] bridge_slave_0: entered promiscuous mode [ 414.074802][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.090597][T17180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 414.112792][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.123522][T16996] bridge_slave_1: entered allmulticast mode [ 414.158754][T16996] bridge_slave_1: entered promiscuous mode [ 414.320820][T16996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.391803][T16996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.521538][T16996] team0: Port device team_slave_0 added [ 414.531086][ T5141] Bluetooth: hci2: command tx timeout [ 414.554477][T16996] team0: Port device team_slave_1 added [ 414.569300][T17195] smc: net device wg1 applied user defined pnetid S [ 414.643992][T17195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.699458][T16996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.706841][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.756426][T16996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.767496][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 414.821047][T17195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.842000][T16996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.862995][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.869829][T17206] netlink: 'syz.0.3291': attribute type 16 has an invalid length. [ 414.898209][T17206] netlink: 'syz.0.3291': attribute type 3 has an invalid length. [ 414.900239][T16996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.025727][T17195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.074694][T17211] netlink: 'syz.4.3292': attribute type 2 has an invalid length. [ 415.102450][T16996] hsr_slave_0: entered promiscuous mode [ 415.110138][T16996] hsr_slave_1: entered promiscuous mode [ 415.116468][T16996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.124614][T16996] Cannot create hsr debugfs directory [ 415.156483][T17195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.546750][T17195] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.654571][T17195] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.706225][T17195] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.816380][T17195] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.818494][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 415.840120][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.851378][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.862218][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.876980][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.894919][T17240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.906262][T17240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.919168][T17240] batadv_slave_0: entered promiscuous mode [ 415.937570][T17240] batadv_slave_0: left promiscuous mode [ 416.830698][T16996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.847197][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 416.898624][T16996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.948405][T16996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.996577][T16996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 417.113501][T17284] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 417.125633][T17284] netlink: 'syz.0.3315': attribute type 2 has an invalid length. [ 417.156804][T17285] __nla_validate_parse: 10 callbacks suppressed [ 417.156825][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3313'. [ 417.212924][T17282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.268213][T17293] netlink: 212256 bytes leftover after parsing attributes in process `syz.1.3317'. [ 417.294551][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 417.358584][T17282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.514774][T17304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3320'. [ 417.609718][T17309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3320'. [ 417.771445][T17282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.887101][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 417.950109][T17282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.999569][T17319] macsec1: entered promiscuous mode [ 418.006798][T17319] macsec1: entered allmulticast mode [ 418.023986][T17322] syz_tun: entered allmulticast mode [ 418.028347][T17321] netlink: 'syz.0.3325': attribute type 10 has an invalid length. [ 418.050591][T17321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3325'. [ 418.055626][T16996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.105539][T17320] syz_tun: left allmulticast mode [ 418.149599][T16996] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.188357][T17282] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.221390][T17282] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.264534][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.271854][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.320858][T17282] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.336694][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.344021][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.383237][T17282] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.676241][T17343] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.3329'. [ 418.927175][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 418.971577][T16996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.109643][T16996] veth0_vlan: entered promiscuous mode [ 419.195779][T16996] veth1_vlan: entered promiscuous mode [ 419.297453][T17370] veth0_to_bridge: entered promiscuous mode [ 419.334148][T16996] veth0_macvtap: entered promiscuous mode [ 419.367924][T16996] veth1_macvtap: entered promiscuous mode [ 419.397271][T17370] tipc: Enabling of bearer rejected, failed to enable media [ 419.422932][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.444426][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 419.458720][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.496632][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.515818][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 419.522892][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.552791][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.583823][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.619082][T16996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.685329][T17366] veth0_to_bridge: left promiscuous mode [ 419.736000][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.767520][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.787328][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.824111][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.851707][T16996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.872159][T16996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.885796][T16996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.911317][T17393] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 419.936468][T16996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.966557][T16996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.977236][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 419.996292][T16996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.020419][T16996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.046324][T17393] bridge_slave_0: left allmulticast mode [ 420.059755][T17393] bridge_slave_0: left promiscuous mode [ 420.062152][T17400] Cannot find set identified by id 0 to match [ 420.070941][T17393] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.084860][T17401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 420.091807][T17401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 420.105546][T17393] bridge_slave_1: left allmulticast mode [ 420.115696][T17393] bridge_slave_1: left promiscuous mode [ 420.123338][T17393] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.153563][T17393] bond0: (slave bond_slave_0): Releasing backup interface [ 420.175609][T17393] bond0: (slave bond_slave_1): Releasing backup interface [ 420.219361][T17393] team0: Port device team_slave_0 removed [ 420.235612][T17393] team0: Port device team_slave_1 removed [ 420.242400][T17393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.250537][T17393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.260454][T17393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.268496][T17393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.394941][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 420.413989][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 420.434321][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 420.444396][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 420.457998][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 420.469555][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 420.477682][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 420.485119][ T24] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 420.506163][ T24] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 420.745486][T17412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3352'. [ 420.769503][ T9604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.783612][ T9604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.837936][T17419] No such timeout policy "syz0" [ 420.909151][ T9609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.937502][ T9609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.952140][T17419] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 421.007476][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 421.060487][T17425] netlink: 'syz.2.3356': attribute type 11 has an invalid length. [ 421.473635][T17442] Bluetooth: MGMT ver 1.23 [ 421.519501][T17436] lo speed is unknown, defaulting to 1000 [ 422.057248][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 422.723762][T17476] __nla_validate_parse: 3 callbacks suppressed [ 422.723784][T17476] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3371'. [ 423.057476][T17488] pim6reg1: entered promiscuous mode [ 423.062842][T17488] pim6reg1: entered allmulticast mode [ 423.087065][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 423.112380][T17487] vlan0: entered promiscuous mode [ 423.270021][T17501] netlink: 'syz.1.3378': attribute type 11 has an invalid length. [ 423.271095][T17504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3375'. [ 423.493286][T17488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.502698][T17488] team0: Port device bond1 added [ 423.696288][T17518] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3383'. [ 423.893970][T17522] IPVS: persistence engine module ip_vs_pe_ not found [ 423.919218][T17516] lo speed is unknown, defaulting to 1000 [ 424.017177][T17529] netlink: 'syz.2.3384': attribute type 4 has an invalid length. [ 424.102713][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 424.137850][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 424.355446][ T9142] IPVS: starting estimator thread 0... [ 424.362043][T17533] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.410812][T17536] netlink: 'syz.4.3385': attribute type 10 has an invalid length. [ 424.443843][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3385'. [ 424.487296][T17530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3385'. [ 424.501096][T17537] IPVS: using max 32 ests per chain, 76800 per kthread [ 424.767553][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.897896][T17560] macvlan0: entered allmulticast mode [ 424.913247][T17560] bond_slave_0: entered promiscuous mode [ 424.919377][T17560] bond_slave_1: entered promiscuous mode [ 424.944303][T17560] bond0: entered allmulticast mode [ 424.960503][T17560] bond_slave_0: entered allmulticast mode [ 424.980749][T17560] bond_slave_1: entered allmulticast mode [ 425.002596][T17560] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 425.020971][T17560] team0: Port device macvlan0 added [ 425.167198][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 425.239118][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 425.338637][T17571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3396'. [ 425.687125][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 425.761681][T17577] veth3: left promiscuous mode [ 425.768074][T17577] bridge0: port 4(veth3) entered disabled state [ 425.798702][T17577] erspan0: left allmulticast mode [ 425.807215][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.814836][T17577] erspan0: left promiscuous mode [ 425.825373][T17577] bridge0: port 3(erspan0) entered disabled state [ 425.896448][T17577] bridge_slave_1: left allmulticast mode [ 425.904037][T17577] bridge_slave_1: left promiscuous mode [ 425.917260][T17577] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.937813][T17577] bridge_slave_0: left allmulticast mode [ 425.943656][T17577] bridge_slave_0: left promiscuous mode [ 425.953052][T17577] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.127949][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 426.186818][T17592] pim6reg1: entered promiscuous mode [ 426.194587][T17592] pim6reg1: entered allmulticast mode [ 426.207033][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 426.441328][T17603] bridge_slave_0: left allmulticast mode [ 426.454851][T17603] bridge_slave_0: left promiscuous mode [ 426.500325][T17609] netlink: 'syz.4.3406': attribute type 8 has an invalid length. [ 426.506229][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.553941][T17603] bridge_slave_1: left allmulticast mode [ 426.564071][T17603] bridge_slave_1: left promiscuous mode [ 426.581815][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.604807][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3408'. [ 426.659349][T17603] bond0: (slave bond_slave_0): Releasing backup interface [ 426.673762][T17615] sctp: [Deprecated]: syz.0.3407 (pid 17615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.673762][T17615] Use struct sctp_sack_info instead [ 426.712139][T17603] bond0: (slave bond_slave_1): Releasing backup interface [ 426.768375][T17603] team0: Port device team_slave_0 removed [ 426.792254][T17603] team0: Port device team_slave_1 removed [ 426.805726][T17603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.813837][T17603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.822854][T17603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.831343][T17603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.847206][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 427.247464][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 427.441920][T17641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.887184][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.020097][T17670] __nla_validate_parse: 3 callbacks suppressed [ 428.020117][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'. [ 428.162163][T17669] lo speed is unknown, defaulting to 1000 [ 428.253926][T17690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 428.297219][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 428.453756][T17696] sctp: [Deprecated]: syz.0.3431 (pid 17696) Use of int in max_burst socket option deprecated. [ 428.453756][T17696] Use struct sctp_assoc_value instead [ 428.490560][T17697] sctp: [Deprecated]: syz.0.3431 (pid 17697) Use of int in max_burst socket option deprecated. [ 428.490560][T17697] Use struct sctp_assoc_value instead [ 428.927203][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 429.166607][T17729] netlink: 'syz.2.3440': attribute type 4 has an invalid length. [ 429.327091][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 429.390666][T17736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3443'. [ 429.508371][T17738] tipc: Failed to remove unknown binding: 66,1,1/1:3180410411/3180410413 [ 429.598347][T17711] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 429.659834][T17711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.808087][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 429.877654][T17744] bond2: (slave veth5): Enslaving as an active interface with a down link [ 429.928215][T17711] bond2: (slave veth0_to_bond): making interface the new active one [ 429.938019][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 429.948015][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 429.967211][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 429.990484][T17711] veth0_to_bond: entered promiscuous mode [ 429.996704][T17711] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 430.104919][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 430.367365][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 430.407026][ T5141] block nbd0: Receive control failed (result -104) [ 430.682765][T17757] 8021q: adding VLAN 0 to HW filter on device team1 [ 431.007118][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.189930][ T9155] IPVS: starting estimator thread 0... [ 431.278036][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'. [ 431.297967][T17799] IPVS: using max 26 ests per chain, 62400 per kthread [ 431.407361][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 431.635409][T17796] veth3: entered promiscuous mode [ 431.657858][T17808] lo speed is unknown, defaulting to 1000 [ 431.927217][T17826] vlan2: entered allmulticast mode [ 431.932445][T17826] macvtap0: entered allmulticast mode [ 431.967282][T17826] veth0_macvtap: entered allmulticast mode [ 432.047032][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 432.103835][T17833] Bluetooth: MGMT ver 1.23 [ 432.173064][T17832] ip6gre1: entered promiscuous mode [ 432.179553][T17837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3476'. [ 432.389293][T17852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3477'. [ 432.448029][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 432.894043][T17882] xt_hashlimit: size too large, truncated to 1048576 [ 433.089560][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 433.357966][T17894] x_tables: ip_tables: ah match: only valid for protocol 51 [ 433.487053][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 433.742545][T17912] netlink: 'syz.2.3492': attribute type 9 has an invalid length. [ 434.127146][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 434.289214][T17935] __nla_validate_parse: 5 callbacks suppressed [ 434.289235][T17935] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3498'. [ 434.364839][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 434.386075][ T30] audit: type=1800 audit(1746227376.979:8): pid=17928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3495" name="memory.events" dev="tmpfs" ino=677 res=0 errno=0 [ 434.423944][T17939] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3499'. [ 434.433876][T17941] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3499'. [ 434.513497][T17942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 434.527445][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 434.564720][T17942] batman_adv: batadv0: Adding interface: ip6gretap1 [ 434.578554][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 434.588163][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3501'. [ 434.610103][T17942] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.650477][T17942] batman_adv: batadv0: Interface activated: ip6gretap1 [ 434.677834][T17949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.846188][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3506'. [ 434.904711][T17965] sctp: [Deprecated]: syz.3.3508 (pid 17965) Use of int in max_burst socket option deprecated. [ 434.904711][T17965] Use struct sctp_assoc_value instead [ 435.146637][T17976] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 435.167035][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 435.272703][T17982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3514'. [ 435.286157][T17982] netlink: 'syz.4.3514': attribute type 1 has an invalid length. [ 435.414414][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3516'. [ 435.436121][T17987] netlink: 'syz.2.3516': attribute type 4 has an invalid length. [ 435.463136][T17987] netlink: 'syz.2.3516': attribute type 4 has an invalid length. [ 435.534633][T17991] bridge0: port 1(dummy0) entered disabled state [ 435.567158][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 435.683146][T17991] bond0: (slave ip6gretap1): Releasing backup interface [ 436.025578][T18012] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 436.048579][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 436.076269][T18012] ------------[ cut here ]------------ [ 436.081985][T18012] memcpy: detected field-spanning write (size 128) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 436.151298][T18012] WARNING: CPU: 0 PID: 18012 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 436.161655][T18012] Modules linked in: [ 436.165607][T18012] CPU: 0 UID: 0 PID: 18012 Comm: syz.2.3527 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 436.178300][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 436.189880][T18012] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 436.195584][T18012] Code: cc e8 90 51 b2 f7 c6 05 4e c7 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 bd ad 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 5e 51 b2 f7 44 89 e6 48 c7 c7 00 10 [ 436.217347][T18012] RSP: 0018:ffffc90003a4f920 EFLAGS: 00010246 [ 436.224237][T18012] RAX: 4cd45b92d88d8800 RBX: ffff888028890c50 RCX: ffff888047b09e00 [ 436.232425][T18012] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 436.240710][T18012] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 436.249110][T18012] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000080 [ 436.257470][T18012] R13: 1ffff92000749f4e R14: ffffc90003a4fa84 R15: 0000000000000080 [ 436.266099][T18012] FS: 00007fa19446a6c0(0000) GS:ffff8881260c1000(0000) knlGS:0000000000000000 [ 436.275524][T18012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.282502][T18012] CR2: 00007fa194428d58 CR3: 000000007a618000 CR4: 00000000003526f0 [ 436.292812][T18012] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.301820][T18012] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.310220][T18012] Call Trace: [ 436.313722][T18012] [ 436.316692][T18012] ip6_route_info_create+0x5cc/0xa70 [ 436.322092][T18012] ip6_route_add+0x29/0x2f0 [ 436.326644][T18012] ? ipv6_route_ioctl+0x313/0x480 [ 436.331992][T18012] ipv6_route_ioctl+0x35c/0x480 [ 436.337426][T18012] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 436.342893][T18012] inet6_ioctl+0x219/0x280 [ 436.347444][T18012] ? __pfx_inet6_ioctl+0x10/0x10 [ 436.352452][T18012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 436.358565][T18012] ? call_rcu+0x6dd/0x990 [ 436.362954][T18012] sock_do_ioctl+0xd9/0x300 [ 436.367936][T18012] ? __pfx_sock_do_ioctl+0x10/0x10 [ 436.373114][T18012] ? __lock_acquire+0xaac/0xd20 [ 436.378129][T18012] sock_ioctl+0x576/0x790 [ 436.382618][T18012] ? __pfx_sock_ioctl+0x10/0x10 [ 436.387625][T18012] ? __fget_files+0x3a0/0x420 [ 436.393058][T18012] ? __fget_files+0x2a/0x420 [ 436.398602][T18012] ? bpf_lsm_file_ioctl+0x9/0x20 [ 436.403594][T18012] ? __pfx_sock_ioctl+0x10/0x10 [ 436.408582][T18012] __se_sys_ioctl+0xf9/0x170 [ 436.413309][T18012] do_syscall_64+0xf6/0x210 [ 436.417921][T18012] ? clear_bhb_loop+0x45/0xa0 [ 436.422651][T18012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.429009][T18012] RIP: 0033:0x7fa19358e969 [ 436.433550][T18012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.453564][T18012] RSP: 002b:00007fa19446a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.462389][T18012] RAX: ffffffffffffffda RBX: 00007fa1937b5fa0 RCX: 00007fa19358e969 [ 436.470485][T18012] RDX: 0000200000000080 RSI: 000000000000890b RDI: 0000000000000003 [ 436.478634][T18012] RBP: 00007fa193610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 436.486707][T18012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.495905][T18012] R13: 0000000000000000 R14: 00007fa1937b5fa0 R15: 00007fffbd037dd8 [ 436.504545][T18012] [ 436.507735][T18012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 436.515042][T18012] CPU: 0 UID: 0 PID: 18012 Comm: syz.2.3527 Not tainted 6.15.0-rc4-syzkaller-00736-gcb9d6b2c2a60 #0 PREEMPT(full) [ 436.527226][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 436.537318][T18012] Call Trace: [ 436.540621][T18012] [ 436.543564][T18012] dump_stack_lvl+0x99/0x250 [ 436.548173][T18012] ? __asan_memcpy+0x40/0x70 [ 436.552776][T18012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.558076][T18012] ? __pfx__printk+0x10/0x10 [ 436.562682][T18012] panic+0x2db/0x790 [ 436.566594][T18012] ? __pfx_panic+0x10/0x10 [ 436.571031][T18012] ? show_trace_log_lvl+0x4fb/0x550 [ 436.576439][T18012] __warn+0x31b/0x4b0 [ 436.580435][T18012] ? ipv6_addr_prefix+0x124/0x1d0 [ 436.585474][T18012] ? ipv6_addr_prefix+0x124/0x1d0 [ 436.590511][T18012] report_bug+0x2be/0x4f0 [ 436.594874][T18012] ? ipv6_addr_prefix+0x124/0x1d0 [ 436.600027][T18012] ? ipv6_addr_prefix+0x124/0x1d0 [ 436.605069][T18012] ? ipv6_addr_prefix+0x126/0x1d0 [ 436.610108][T18012] handle_bug+0x84/0x160 [ 436.614357][T18012] exc_invalid_op+0x1a/0x50 [ 436.618872][T18012] asm_exc_invalid_op+0x1a/0x20 [ 436.623741][T18012] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 436.629395][T18012] Code: cc e8 90 51 b2 f7 c6 05 4e c7 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 bd ad 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 5e 51 b2 f7 44 89 e6 48 c7 c7 00 10 [ 436.649030][T18012] RSP: 0018:ffffc90003a4f920 EFLAGS: 00010246 [ 436.655248][T18012] RAX: 4cd45b92d88d8800 RBX: ffff888028890c50 RCX: ffff888047b09e00 [ 436.663323][T18012] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 436.671309][T18012] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 436.679376][T18012] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000080 [ 436.687444][T18012] R13: 1ffff92000749f4e R14: ffffc90003a4fa84 R15: 0000000000000080 [ 436.695918][T18012] ip6_route_info_create+0x5cc/0xa70 [ 436.701231][T18012] ip6_route_add+0x29/0x2f0 [ 436.705747][T18012] ? ipv6_route_ioctl+0x313/0x480 [ 436.710798][T18012] ipv6_route_ioctl+0x35c/0x480 [ 436.715762][T18012] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 436.721192][T18012] inet6_ioctl+0x219/0x280 [ 436.725700][T18012] ? __pfx_inet6_ioctl+0x10/0x10 [ 436.730678][T18012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 436.736712][T18012] ? call_rcu+0x6dd/0x990 [ 436.741072][T18012] sock_do_ioctl+0xd9/0x300 [ 436.745703][T18012] ? __pfx_sock_do_ioctl+0x10/0x10 [ 436.750861][T18012] ? __lock_acquire+0xaac/0xd20 [ 436.755749][T18012] sock_ioctl+0x576/0x790 [ 436.760103][T18012] ? __pfx_sock_ioctl+0x10/0x10 [ 436.764970][T18012] ? __fget_files+0x3a0/0x420 [ 436.769679][T18012] ? __fget_files+0x2a/0x420 [ 436.774307][T18012] ? bpf_lsm_file_ioctl+0x9/0x20 [ 436.779279][T18012] ? __pfx_sock_ioctl+0x10/0x10 [ 436.784169][T18012] __se_sys_ioctl+0xf9/0x170 [ 436.788800][T18012] do_syscall_64+0xf6/0x210 [ 436.793332][T18012] ? clear_bhb_loop+0x45/0xa0 [ 436.798019][T18012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.803969][T18012] RIP: 0033:0x7fa19358e969 [ 436.808409][T18012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.828053][T18012] RSP: 002b:00007fa19446a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.836477][T18012] RAX: ffffffffffffffda RBX: 00007fa1937b5fa0 RCX: 00007fa19358e969 [ 436.844457][T18012] RDX: 0000200000000080 RSI: 000000000000890b RDI: 0000000000000003 [ 436.852616][T18012] RBP: 00007fa193610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 436.860708][T18012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.868793][T18012] R13: 0000000000000000 R14: 00007fa1937b5fa0 R15: 00007fffbd037dd8 [ 436.876810][T18012] [ 436.880152][T18012] Kernel Offset: disabled [ 436.884576][T18012] Rebooting in 86400 seconds..