last executing test programs: 1m13.234504183s ago: executing program 1 (id=2975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000a80)="d5", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) unshare(0x60020c80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}]}, &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* rwO'], 0xa) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1m13.092903199s ago: executing program 1 (id=2978): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="0e9600", 'ip_vti0\x00'}}, 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r4, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, [0x3, 0x2, 0x2, 0xffffffffffffffd0, 0xb62b, 0x1, 0x1e, 0x9, 0x0, 0xec, 0x8, 0xbe1b, 0x80000001, 0x10001, 0x557]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xc25}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000080000000760000002000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0xb4, 0x0, @void, @value}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x4, 0xfffffffc}, 0x20) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x400000000000270, 0x0) 1m2.925034585s ago: executing program 1 (id=2978): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="0e9600", 'ip_vti0\x00'}}, 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r4, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, [0x3, 0x2, 0x2, 0xffffffffffffffd0, 0xb62b, 0x1, 0x1e, 0x9, 0x0, 0xec, 0x8, 0xbe1b, 0x80000001, 0x10001, 0x557]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xc25}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000080000000760000002000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0xb4, 0x0, @void, @value}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x4, 0xfffffffc}, 0x20) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x400000000000270, 0x0) 44.926599395s ago: executing program 1 (id=2978): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="0e9600", 'ip_vti0\x00'}}, 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r4, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, [0x3, 0x2, 0x2, 0xffffffffffffffd0, 0xb62b, 0x1, 0x1e, 0x9, 0x0, 0xec, 0x8, 0xbe1b, 0x80000001, 0x10001, 0x557]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xc25}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000080000000760000002000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0xb4, 0x0, @void, @value}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x4, 0xfffffffc}, 0x20) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x400000000000270, 0x0) 27.055843275s ago: executing program 1 (id=2978): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="0e9600", 'ip_vti0\x00'}}, 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r4, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, [0x3, 0x2, 0x2, 0xffffffffffffffd0, 0xb62b, 0x1, 0x1e, 0x9, 0x0, 0xec, 0x8, 0xbe1b, 0x80000001, 0x10001, 0x557]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xc25}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000080000000760000002000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0xb4, 0x0, @void, @value}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x4, 0xfffffffc}, 0x20) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x400000000000270, 0x0) 14.35988211s ago: executing program 1 (id=2978): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="0e9600", 'ip_vti0\x00'}}, 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x0, 0x3}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r4, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}, [0x3, 0x2, 0x2, 0xffffffffffffffd0, 0xb62b, 0x1, 0x1e, 0x9, 0x0, 0xec, 0x8, 0xbe1b, 0x80000001, 0x10001, 0x557]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xc25}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000080000000760000002000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0xb4, 0x0, @void, @value}, 0x28) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x4, 0xfffffffc}, 0x20) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x400000000000270, 0x0) 3.577515797s ago: executing program 3 (id=3401): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @bcast, @bcast, @netrom, @default, @null, @bcast, @rose]}, &(0x7f0000000080)=0x48, 0x242a76bbac6588c7) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) getpid() r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@RTM_GETNSID={0x44, 0x5a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_FD={0x8, 0x3, r8}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_FD={0x8, 0x3, r10}]}, 0x44}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbd}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r11, 0x0) connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc) 3.489567924s ago: executing program 2 (id=3402): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x3, 0x85) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r3, 0x7}, &(0x7f0000000140)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x5dc, 0x0, 0x414d6714bf78e135}, 0x9c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in=@empty, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1-ce)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) 3.385554889s ago: executing program 2 (id=3405): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9}]}, 0x10) sendto$inet6(r0, &(0x7f0000000140)="07bbb6fc589670767109b8385b3521d86179dca7fb4618a80c47321a00e222f8ce746007f93318018345d5f345fc234ab5d94f99bb707e9ab73931d6885c9ed0b60a8164e5df4c32afcb3400d4afb7151bbe310f6f613155", 0x58, 0x20044040, &(0x7f0000000080)={0xa, 0x4e20, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.226562732s ago: executing program 3 (id=3408): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x68fc79d152df5935, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x2c}}, 0x24008080) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x214, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x738}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0c5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x866}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1c1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x11}, 0x4030) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000005c0), &(0x7f0000000600)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffffffbd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x7cfa, 0x10}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x19, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x1, 0x3, 0x1, 0x9, 0x5, 0xffffffffffffffff, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @exit]}, &(0x7f0000000800)='syzkaller\x00', 0x5, 0xfe, &(0x7f0000000840)=""/254, 0x41100, 0x8, '\x00', r6, 0x0, r0, 0x8, &(0x7f00000009c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0xa, 0x29, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r0, r7, r0, r0, r0, r0], &(0x7f0000000ac0)=[{0x2, 0x3, 0xc, 0xa}], 0x10, 0x6, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000bc0)={'hsr0\x00', {0x2, 0x0, @broadcast}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='jbd2_run_stats\x00', r0, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000d00)={0x0, 0x6f, "d6c0f12b88f85e39b007bed739c116d313b60c62d0dcbc770eb7aadacc48af8e73e2711e837b7017977fad59b4d8be80262ee8e7d565267c2205d67c05a11ba1540e317c1f45c62ee5b766a4de33386ca9272d01036fdf529ed38339a99f2b8b27ee9e6b26a63e5c421bfc6f6e3292"}, &(0x7f0000000d80)=0x77) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000dc0)=@sack_info={r10, 0x509, 0xad2c}, &(0x7f0000000e00)=0xc) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000e80)={'sit0\x00', &(0x7f0000000e40)={@dev={0xfe, 0x80, '\x00', 0x27}, @dev={0xac, 0x14, 0x14, 0x19}, 0x8, 0x7}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000ec0)={{0x2, 0x4e20, @private=0xa010102}, {0x6, @local}, 0x4, {0x2, 0x4e20, @empty}, 'vlan1\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x12006}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_LABELS_MASK={0x18, 0x17, [0xfe14, 0x5e3c, 0x4, 0x100, 0x5]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELRULE={0x130, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x80, 0x7, 0x1, 0x0, "8518e3864921a6d21c00fbbcb3fb436d4396f7fde53d7af2eec1997f975c583158bfad155153b3d127390cb38b299cb1ab0c5f141f99396c31d66310ce9d8e1e3db6c52af8a7f1463a9a411cfd1852b16825a292aa7c262a60dda7f3d5336811f3b9bc03a920acab57b728af2c8a68822be0f943bfe0afbc4d444dd3"}, @NFTA_RULE_USERDATA={0x22, 0x7, 0x1, 0x0, "f96e71fc6bafac1e4323ad8594d599c1086f1fe8f6b87cb5830cc01d6536"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x5b, 0x7, 0x1, 0x0, "d89b0b4f02987afe60626b50112c546c62c9c49e1784b6353bc5371fb7e59830bebceebcc66890e07de9c59be00ef41b19b437e067335576e68a457ab33ea63ab24618afb60587f3fd1b7d3e62bfc81d198f37de36ee99"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x178}, 0x1, 0x0, 0x0, 0x20000050}, 0x4004004) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000012c0)={r8, 0x0, 0x2, 0x9}) sendmsg$NFT_MSG_GETSET(r11, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, 0xa, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001400)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001600)={r12, 0x2}) connect$inet(r11, &(0x7f0000002600)={0x2, 0x4e23, @multicast1}, 0x10) 3.113451579s ago: executing program 2 (id=3409): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESOCT=r1], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast1, @in6=@private2}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0xf, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.11284615s ago: executing program 0 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="bf07000000000000631177000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x8, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0x7, 0x1, {{0x38, 0x4, 0x1, 0x28, 0xe0, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x13, 0xc4, [@broadcast, @multicast1, @empty, @multicast2]}, @lsrr={0x83, 0x23, 0x7a, [@broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, @empty, @empty, @local, @remote]}, @timestamp_addr={0x44, 0x3c, 0x5f, 0x1, 0x6, [{@multicast1}, {@empty, 0x4}, {@multicast1, 0x5}, {@multicast2, 0xffff}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}]}, @timestamp={0x44, 0x24, 0xd9, 0x0, 0x2, [0x91c, 0x1, 0x400, 0x0, 0x0, 0x5, 0x4, 0x4]}, @timestamp_addr={0x44, 0x34, 0xa0, 0x1, 0x9, [{@local, 0xfffffffb}, {@broadcast, 0x4}, {@remote, 0x2}, {@multicast1, 0xa58}, {@remote, 0x5d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x13b}]}]}}}}}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x13, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @alu={0x4, 0x0, 0x6, 0x7, 0x3, 0x2, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x49, '\x00', r2, @fallback=0x2e, r3, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x4, &(0x7f00000003c0)=[r4, r5, 0x1, r0, r6, r7], &(0x7f0000000400)=[{0x4, 0x5, 0xd, 0x9}, {0x2, 0x9, 0xd, 0x2}, {0x4, 0x3, 0xf, 0x3}, {0x1, 0x5, 0x2, 0xc}], 0x10, 0x4, @void, @value}, 0x94) 3.032925283s ago: executing program 3 (id=3411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x36, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) sendfile(r1, r0, 0x0, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x11c}}, 0x0) unshare(0x400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5821, @any, 0x9, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802, @void, @value}, 0x94) 2.929534736s ago: executing program 0 (id=3413): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x19) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x8}, {0xa, 0x7}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c004}, 0x480d1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000800)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x1, 0x89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 2.929157131s ago: executing program 2 (id=3414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 2.771016358s ago: executing program 2 (id=3415): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffffc}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002b00019324689dcf4a4d48e706"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) 2.720611751s ago: executing program 3 (id=3416): unshare(0x62040200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xf000}, @val={0x2, 0x0, 0x8, 0x8, 0x5, 0x1}, @eth={@remote, @multicast, @void, {@llc={0x4, {@llc={0xe, 0xdc, "c8", "9d9ec48acc4690e5bd93fd43d9cba1d93277998f9cb08b2128e8201ce944af6b230cc35f460799426a3de0497ea0f7aab96c738c17a6e50039e78b6a88dfc8773630cde4bb40923c66b3b6ac2375c486d6ca86ba5f1c9b33365d79121dee766f4d80d917c9a397397c0342b25abd4811ec9cae5633b9f2603ff265e207c80db6b14a12b339bec5deed8041f33cffe6faa6c5601901c8d1767bdc6ffc9e71d3a5e8b5826b75b87d19cf70395facb5a9f70ec9c9158f6fa10995b3343d51f4e1cf928aeae85b012bf42bc0a9df63000bc437"}}}}}}, 0xf0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x7e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01b268b23c19739b52457001007003000040005546c825a6b32ee5307f00302e3000000000000000000000000000000000000000491909e32041ee626bc8d61910a28af6f90f68437da34390270afc29d8380d3a5ed522711ddc83fa88af09587ea27f2cc9c0b8604b719a55de65e5"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x53c, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1dd1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff0ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x966}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x23c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "faf6f35339b74d84d405be1987bab559bceee63cff637d4d32fd8a800f14b3"}}, @TIPC_NLA_NODE_ID={0xf1, 0x3, "ae8712207ca0a67557f97a4853494432b5b739ab7e861a501dc67393bb27ab5a125cda831ae6d091621ab09194315906331c91db6a996d8a148e8cb91d1d4b11138dfd953bc3a3ba4c4696b1917e7d25d47282411974c8e4acacc8f6b122a4d44165691e4b2e744b461ed8a6add7c5b06d87df83dd86f0483279a162d1136a976c29f6c3a0411e855ee55d64f993629bcd0ff1ab50009bfdfb6094a4e4a25bd2491cff4f7f7525d41babb6669932d3402aa46de121a8220ff7bed152c626ecfd4949dd69e7d205003fdefce7dfdbead2b5f4ad66c294eeb89b21423249a52f5c0495f70078b60759edf8a650aa"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xd9, 0x3, "478ffc29ff83da6facc2cd9a6ba269c7129f565e1862889d988b6145197c705a153acf88956b9f1c39e30277c1274888b0a8e0d0cd567aa70c402fb4078741f46373539c88386671156c123246d5171f1927060f9a21c3ada8d20480f5faef903afa69afb55aeaf13dea25ced4ce01b379492995b6e03c0d01e3b0720b21c03c8e7fb1be2f625826d74455dfb011e52dfddfa1422cf27a80543ad4fc7b8f054268177cc420b68e983459b6480e94f7f5bbc01f15ea526f139a7173914b8488b244399a57edb838d0baedd717267a6edb7a9dad0538"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffe00}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x53c}, 0x1, 0x0, 0x0, 0x4044}, 0x20040001) 2.463937368s ago: executing program 0 (id=3418): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @empty}, {0x304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x40, @private=0xa010102}}) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000140)=0xc4, 0x4) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000240000000000119078000000000000000000004e20001090780200000000000000b10ae6c71fc3425e800d586bd9c9454a3917935373c83a3d75b84d35d06bc84c16b1088556be2c5b2dfee9d303a153555afb047bc5fa6208fd7b4f362230d1968be80d6d471dd3480aeaba30f829c134bb984447d6e2d5b8fdc7ca2dd260a7ce0a180bb41d5ee8626ea5561a1c34f5b559f112d3ee8d7707e4776e5df1b68ca44cde7863d34539c71fb8e6fd2856faea04ac232e18dd4fafeb61385eeb2648af434f3fc50697776f005ae20e95245c"], 0x0) 2.301381976s ago: executing program 4 (id=3419): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x8044, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000514030027bd7000fedbdf25080021"], 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x44000001) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x8, 0xdd, 0x0, 0x16, 0x20, 0x7e, 0x5, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005f40)=""/217, 0xd9}], 0x1, &(0x7f0000006140)=""/229, 0xe5}, 0xf47b}], 0x1, 0x1020, 0x0) 2.076287282s ago: executing program 4 (id=3420): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @remote, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x10d, 0xa, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @rand_addr=0x64010102}}, 0x0, 0x0, 0x0, 0x3, 0x5a1}, 0x9c) sendto$inet(r3, &(0x7f0000000540)='0', 0x1, 0x0, &(0x7f0000000580)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000005c0)={r5, 0xfffe, 0x1, "5ad54aa7a6367c2b3cba10f153206567fa47cff277988e2c9edf8f8ae2cbcc2856a98b8cb83c1a3f7a6b4a55cefba0b301abe047dfa23e63ae8d495d88c90dd6c043dc85a0a6f0ac7483edf3ed315435cb386ebab24043045dfa607a4a26ba1cb233a778a14bec9fbfd146f4267f0d2c0776b04ee2"}, 0x670e12533cf2a65b) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0x80000000000000a, 0x2, 0x0) unshare(0x22020600) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r10, 0x0, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100000}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000380)=0x7, &(0x7f00000003c0)=0x4) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) 1.461340024s ago: executing program 0 (id=3421): r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x20000007) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0xd}, {0x1, 0xa}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002380)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x2}, {0x3, 0x0, 0x1}}}, @TCF_EM_CANID={0x53, 0x2, 0x0, 0x0, {{0x4dc4, 0x7, 0x41}, {{0x2, 0x1, 0x1}, {0x1, 0x1}}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xcc, r11, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10084}, 0x20008080) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = socket(0x10, 0x3, 0x0) r14 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r16 = accept4(r0, 0x0, &(0x7f0000000540), 0x0) sendmsg$alg(r16, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="53ea2a9f80445e438e69aea040c47190f9eb45323bfd8a2e1d17515665a321f3838ecde99df5d1429960387ad9c438f8c61f56b13ffdafc769f480178fde0f1ae2961edcdf3858112c937d2e0e05a9fb606a8c851a1358fe9e46d4e383e152d48ef29af382ea748f79dbe0d9b3cf135173feaba29e7340", 0x77}, {&(0x7f0000000600)="ea0fc3e18290ac4af2777f765f932e4c3133ad18c85adb49e62c4d77c8c5befb1a9dfd237f17c242738d2b1bbae4195a6ad4008a580bbfbffab6d3ce2f5b158f134f770f5358163d34caea9640af8f636cbfe5dd0a2e1b", 0x57}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3f, "ecc8857b3a304881176e02883cb909a958ab5d73d4eb4eb4e379694d0f44158a597a8f81d155bd1681b9d0aa631478f4c19d48959f11f0cf3e2be8cb935f43"}, @iv={0xa0, 0x117, 0x2, 0x88, "c55ff30e120eeee8a3e1331957eecc321fdaf586a15d10857f5bcb6101f4a3805aa6b06cc7f797562dd9cb4676573f4251d3e8d23d54d97dee460339112d39566dd5f5fc81e393508204e6004f00d3b16bed0464755b94189927808b30d1659ea67f1604a08ee979789fc92237a45b16992d5ef5b52ca8bfbaafdda12fea9902fa1222e0ae9bc9a4"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xfffffffe}, @op={0x18, 0x117, 0x3, 0x1}], 0x170, 0x20000000}, 0x895) sendmsg$nl_route_sched(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000500)={@loopback, 0x5, r15}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000200000032000000140004006e6963766630000032ea0a1900000000000297bf887c24aa31bcbed54294ea0b4fa3cce5750000000000ec28d119ec2e8e663088d36e6d9ac786874c96f0f0a74deb47e81a22a1cebb98a41eb6a622bb2a48b39b8cde2462aed507f5378ec5429a6082dfc396"], 0x48}}, 0x54) 1.102972518s ago: executing program 0 (id=3422): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x43, 0xfffffffffffffffe}, 0x1d) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001900010003000000fcff0a0080000003000000000000080010000200000008001700ff030000"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32=0xffffffffffffffff], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063011000000000006700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket$can_bcm(0x1d, 0x2, 0x2) close(r3) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540100001900010000000000000000001d010000080005000480000015000400010000800202000031171e44b2b50e8f040000001e0106"], 0x154}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r9) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0a3e75d2e750dc57ffc55af0902f37601e39f4c2fd1aac2fde7cc63a76680103f5a420c13d34e6eb823ecb59d1783915cd193bf2eb83163198bb9bd93cd8dc71cfdb9ccc1bb731e27666da994c12793040d4dcf004bcd1922a6bf8", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES8=r7, @ANYRES64=0x0, @ANYBLOB='\x00n\x00\x00\x00'], 0x48}}, 0x24040890) close(r8) r12 = socket(0xa, 0x2, 0x0) connect$unix(r12, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r13 = socket(0x10, 0x2, 0x0) r14 = socket(0x25, 0x3, 0x5ec0) sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', r11, 0x4, 0x0, 0x4, 0x1, 0x78, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8, 0x4, 0x10000}}) 916.117758ms ago: executing program 4 (id=3423): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x1, 0xd4, 0x2]}, &(0x7f0000000140)=0x44) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r2, 0xfffff801) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000000)={@local, r3}, 0x14) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061183800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 681.567634ms ago: executing program 4 (id=3424): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbbbbbbbbbb81004c000800450000b8"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @local, 0x985}, 0x1c) 560.187062ms ago: executing program 0 (id=3425): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0ce3cfa96a5bebd7001bb0e671d07b89b2120c000dc4cecbcff892745b21debea8d82e09cc4c722aa55e01d09f8a073a1e9ce4a249c68fb406320109f3d50c4d704936280d528a5901146018fbcc7f78cb69588c0ce08791533df2d4d543dd20abdd9af4a029585cc7", @ANYRES32=0x0, @ANYRESOCT=0x0], 0x20}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001000010000103000000000000000063747228646573335f65646529"], 0x100}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400010400010000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400010020010000000000000000000000000001140006000700000007000000020000000b000000"], 0x40}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000000200025bd7000ffdbdf250900020073797a310000000008004100727865001400330076657468315f746f5f62726964676500090002e6460073797a3200000000080041007278650014003300766c616e3100"/98], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private0, 0xa}) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000019"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xfd, 0x7, 0x7ff, 0x76, @mcast1, @mcast2, 0x10, 0x0, 0x680, 0x4}}) r9 = epoll_create(0x3ff) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r10, &(0x7f0000000280)={0x20002000}) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 497.437977ms ago: executing program 4 (id=3426): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) close(0x3) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1ff) close(r3) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) close(r4) socket$netlink(0x10, 0x3, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) (async) close(r6) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000001b00)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001b80)=0x108) (async, rerun: 32) syz_emit_ethernet(0x62, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x2, 0x7, 0xffffffffffffffff}, @window={0x3, 0x3, 0x81}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="000000380200000000000000000000000000f6e6acf7201ada0f65eed80000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@private, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@empty, r9}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@nested={0x5, 0xd, 0x0, 0x1, [@generic="14"]}]}, 0x18}], 0x1}, 0x0) 325.429002ms ago: executing program 3 (id=3427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000550011022abd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="170002"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000200)={{r4}, 0x8, 0x3, 0x9c62}) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000240)={0x5, 0x8, 0x1, 0x81, @vifc_lcl_ifindex=r1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_STAB={0x4}]}, 0x3c}}, 0x4000010) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) read(r9, &(0x7f00000000c0)=""/138, 0x8a) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x4, 0x4, 0x3, 0x2}, {0xc8a, 0x82, 0xc8, 0x7f}]}, 0x10) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'bond_slave_1\x00', 0x1000}) 282.75839ms ago: executing program 2 (id=3428): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x5, 0x400}, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x7) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', r2, 0x0, 0x20, 0x8, 0x3ff, {{0xf, 0x4, 0x0, 0x2b, 0x3c, 0x66, 0x0, 0x0, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@noop, @noop, @timestamp_addr={0x44, 0x14, 0x6c, 0x1, 0x1, [{@private=0xa010102}, {@private=0xa010100, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x7}]}, @ra={0x94, 0x4}]}}}}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast1, 0x7, 0x3}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000300)={'bridge_slave_1\x00', 0x8}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'veth0_to_bond\x00', &(0x7f0000000340)=@ethtool_eee={0x45, 0x10, 0x1, 0xffffffff, 0x4, 0xd, 0xa3b, 0xe, [0xfffffff7, 0xffffffff]}}) socketpair(0x1f, 0x1, 0xb82d, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000540)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000580)=0x28) syz_emit_ethernet(0x1e, &(0x7f00000005c0)={@local, @broadcast, @void, {@can={0xc, {{0x0, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "0b0c2b20b809c0aa"}}}}, &(0x7f0000000600)={0x1, 0x1, [0xc76, 0xe2a, 0x867, 0xccf]}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000640)={@mcast2, 0x8, 0x1, 0x2, 0x2, 0x7, 0x6}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000680)={'tunl0\x00', r2, 0x700, 0x700, 0x2, 0x9, {{0x6, 0x4, 0x0, 0x28, 0x18, 0x64, 0x0, 0x1, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x401, 0x0, r1, 0x300, '\x00', r3, r6, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x12, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x0, 0xc, 0x9, 0x7, 0x10, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}]}, &(0x7f0000000840)='syzkaller\x00', 0xa4fb, 0x28, &(0x7f0000000880)=""/40, 0x41000, 0x49, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x8, 0xfff, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[r1], &(0x7f0000000980)=[{0x2, 0x3, 0x3, 0xc}, {0x4, 0x1, 0xc, 0x2}, {0x3, 0x5, 0x1, 0x11468475c963bf4d}, {0x4, 0x3, 0x10, 0x1}, {0x3, 0x1, 0xc, 0x3}, {0x4, 0x5, 0x1, 0x9}, {0x2, 0x2, 0x2}], 0x10, 0x8, @void, @value}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000ac0)={0x9, 0xffffffffffffffff, 0x4, 0x8, 0x4, 0x8}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x15c, r12, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r12, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4094}, 0x81) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r14, 0x118, 0x0, &(0x7f0000000ec0)=0x2, 0x4) socket$l2tp6(0xa, 0x2, 0x73) 113.140418ms ago: executing program 3 (id=3429): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xb8, &(0x7f00000003c0)=""/184, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcb, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8000, r0}, 0x18) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) (async) sendmmsg$inet(r7, &(0x7f00000002c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r9, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x7, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0x8, 0x4, 0x9, 0x80, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0x800, 0xe4, &(0x7f0000000140)=""/228, 0x41000, 0x48, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x3, 0x80000001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r4, r5, r6, r8, 0xffffffffffffffff, r9], &(0x7f0000000580)=[{0x3, 0x3, 0xe, 0x3}, {0x3, 0x1, 0x3, 0x5}, {0x1, 0x1, 0x2, 0x4}], 0x10, 0x7ff, @void, @value}, 0x94) 0s ago: executing program 4 (id=3430): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x5, 0x1000}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback={0xfec0ffffffffffff}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a315000000000000000012000000880403006d3d36824fa399c64ef4b97c65483fff02a039c4787afb41482fc52c7089ac452bcaee92ca4cbd9c44e62088a83f0034f03d216c0759f3773054490501861679658f02e5ef3e1edef5484b88da9475d7c9a5d1a9da6299bdf4fe94f29d1c74793cf61c161fd6958e803440716c86f22cbb3eda86a71ba354eaef7e74e065f8b10c0071e1192a4574719ba8f4246ad2131045d6f192c42774eff611b85161085897e8ce2d94badee352ece23e9280dd4529bcff3a01de7f9651439626ef2a817157ca37e1fc5a8805fd32822caa1bf69df1fb", @ANYRES32=r5, @ANYBLOB="0500e400000000000600120000000000"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): [ 289.984584][T14901] netlink: 'syz.2.2573': attribute type 13 has an invalid length. [ 290.568123][T14940] __nla_validate_parse: 8 callbacks suppressed [ 290.568145][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2583'. [ 290.795806][T14953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2587'. [ 290.819112][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.979088][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.434515][T14980] syzkaller0: entered allmulticast mode [ 291.788359][T14998] batadv0: entered promiscuous mode [ 291.811869][T14995] batadv0: left promiscuous mode [ 291.860934][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.019058][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 292.027360][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'. [ 292.061884][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'. [ 292.109817][T15010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2602'. [ 292.139788][T15010] xfrm0: entered allmulticast mode [ 292.149484][T15010] xfrm0: entered promiscuous mode [ 292.254014][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 292.525575][T15032] syz.3.2610 uses old SIOCAX25GETINFO [ 292.725469][T15042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2612'. [ 292.899101][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.923728][T15046] team0: Device vlan2 failed to change mtu [ 292.980955][T15047] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2613'. [ 293.069097][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 293.215424][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'. [ 293.246006][T15062] netlink: 'syz.2.2616': attribute type 7 has an invalid length. [ 293.472292][T15076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2622'. [ 293.528629][T15078] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 293.644869][T15089] xt_connbytes: Forcing CT accounting to be enabled [ 293.900375][T15106] netlink: 'syz.4.2630': attribute type 10 has an invalid length. [ 293.913284][T15106] team0: Device ipvlan1 is of different type [ 293.939094][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.099511][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.483100][T15143] netlink: 'syz.2.2641': attribute type 4 has an invalid length. [ 294.494776][T15143] netlink: 'syz.2.2641': attribute type 4 has an invalid length. [ 294.508335][T15144] netlink: 'syz.1.2640': attribute type 3 has an invalid length. [ 294.828122][T15162] bond5: entered promiscuous mode [ 294.835117][T15162] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.979187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.139822][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.224624][T15162] bond5 (unregistering): Released all slaves [ 295.420223][T15186] netlink: 'syz.2.2653': attribute type 10 has an invalid length. [ 295.460017][T15186] team0: Device veth0_macvtap is of different type [ 295.618236][T15204] pim6reg: entered allmulticast mode [ 295.627312][T15202] pim6reg: left allmulticast mode [ 295.724001][T15212] __nla_validate_parse: 7 callbacks suppressed [ 295.724022][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 295.741749][T15211] veth0_to_team: entered promiscuous mode [ 295.747808][T15211] veth0_to_team: entered allmulticast mode [ 295.758821][T15213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 296.019130][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.067752][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'. [ 296.179134][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 296.766617][T15278] lo speed is unknown, defaulting to 1000 [ 296.931159][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 296.961630][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 297.012736][T15300] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2688'. [ 297.059158][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.537128][T15317] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2694'. [ 297.547259][T15317] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2694'. [ 297.578839][T15278] netlink: 'syz.0.2681': attribute type 16 has an invalid length. [ 297.604107][T15278] geneve0: entered promiscuous mode [ 297.609735][ T5900] IPVS: starting estimator thread 0... [ 297.624644][T15278] geneve0: entered allmulticast mode [ 297.682152][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2696'. [ 297.709658][T15321] IPVS: using max 18 ests per chain, 43200 per kthread [ 298.099154][ C1] net_ratelimit: 1 callbacks suppressed [ 298.099178][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.225675][T15343] netlink: 5392 bytes leftover after parsing attributes in process `syz.0.2699'. [ 298.269070][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 298.294657][T12770] IPVS: stop unused estimator thread 0... [ 298.454755][T15356] netlink: 'syz.0.2703': attribute type 10 has an invalid length. [ 298.470242][T15356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.508426][T15362] netlink: 'syz.0.2703': attribute type 10 has an invalid length. [ 298.601363][T15362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.040470][T15389] netlink: 'syz.3.2710': attribute type 2 has an invalid length. [ 299.139120][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.203483][T15397] unsupported nlmsg_type 40 [ 299.582346][T15423] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 299.646364][T15423] vlan4: entered allmulticast mode [ 299.684871][T15423] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 299.741660][T15423] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 299.915482][T15443] x_tables: duplicate underflow at hook 3 [ 299.942729][T15444] netlink: 'syz.2.2725': attribute type 5 has an invalid length. [ 300.163278][T15452] netlink: 'syz.1.2727': attribute type 1 has an invalid length. [ 300.179083][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.179881][T15452] netlink: 'syz.1.2727': attribute type 14 has an invalid length. [ 300.405708][T15456] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (64) [ 301.219125][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.387669][T15488] __nla_validate_parse: 18 callbacks suppressed [ 301.387694][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2737'. [ 301.421435][T15488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2737'. [ 301.778197][T15504] netlink: 'syz.1.2742': attribute type 10 has an invalid length. [ 301.801005][T15504] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 301.844567][T15504] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 301.874759][T15507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 301.893589][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 301.907863][T15507] netlink: 1497 bytes leftover after parsing attributes in process `syz.3.2745'. [ 302.214786][T15525] vlan0: entered allmulticast mode [ 302.220589][T15525] macvtap0: entered allmulticast mode [ 302.245633][T15525] macvtap0: left allmulticast mode [ 302.254143][T15520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2746'. [ 302.259124][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.387276][T15532] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 302.411964][T15532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2751'. [ 302.422733][T15534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2752'. [ 302.964340][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2763'. [ 302.985302][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2763'. [ 303.009968][T15567] tipc: Enabling of bearer rejected, already enabled [ 303.085525][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'. [ 303.088648][T15578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.299122][ C1] net_ratelimit: 2 callbacks suppressed [ 303.299144][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.900821][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.911655][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.925217][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.939284][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.953299][ T5850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.964913][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.112285][T15621] lo speed is unknown, defaulting to 1000 [ 304.339220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.605966][T15616] lo speed is unknown, defaulting to 1000 [ 305.046239][T15616] chnl_net:caif_netlink_parms(): no params data found [ 305.117849][T15616] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.125724][T15616] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.133161][T15616] bridge_slave_0: entered allmulticast mode [ 305.160692][T15616] bridge_slave_0: entered promiscuous mode [ 305.184721][T15616] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.204463][T15616] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.221996][T15616] bridge_slave_1: entered allmulticast mode [ 305.233968][T15653] netlink: 'syz.4.2781': attribute type 10 has an invalid length. [ 305.243920][T15616] bridge_slave_1: entered promiscuous mode [ 305.256429][T15653] hsr0: left promiscuous mode [ 305.262984][T15653] hsr0: entered promiscuous mode [ 305.345955][T15616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.358440][T15616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.379115][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.437267][T15616] team0: Port device team_slave_0 added [ 305.446167][T15616] team0: Port device team_slave_1 added [ 305.491736][T15616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.503451][T15616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.530871][T15616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.544504][T15616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.552460][T15616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.587608][T15616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.646544][T15616] hsr_slave_0: entered promiscuous mode [ 305.654089][T15616] hsr_slave_1: entered promiscuous mode [ 305.661398][T15616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.669923][T15616] Cannot create hsr debugfs directory [ 305.929713][T15616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.044254][T15616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.099275][ T5850] Bluetooth: hci5: command tx timeout [ 306.171540][T15616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.323511][T15616] bond0: (slave netdevsim0): Releasing backup interface [ 306.352687][T15616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.419098][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.754954][T15616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.787821][T15616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.867443][T15616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.913965][T15616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.457536][T15616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.459151][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.504045][T15616] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.536332][T15706] openvswitch: netlink: Key type 30 is not supported [ 307.557837][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.566375][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.585716][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.592944][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.742646][T15616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.783778][T15708] lo speed is unknown, defaulting to 1000 [ 308.040077][T15723] __nla_validate_parse: 4 callbacks suppressed [ 308.040101][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'. [ 308.072436][T15616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.091107][T15723] netlink: 'syz.0.2798': attribute type 1 has an invalid length. [ 308.188536][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 308.192882][ T5853] Bluetooth: hci5: command tx timeout [ 308.283721][T15717] syz_tun: entered promiscuous mode [ 308.299719][T15717] macsec1: entered promiscuous mode [ 308.332198][T15616] veth0_vlan: entered promiscuous mode [ 308.416059][T15727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'. [ 308.499209][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.499872][T15616] veth1_vlan: entered promiscuous mode [ 308.550412][T15616] veth0_macvtap: entered promiscuous mode [ 308.562430][T15616] veth1_macvtap: entered promiscuous mode [ 308.580735][T15616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.592127][T15616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.603506][T15616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.612432][T15616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.621347][T15616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.630495][T15616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.065579][T15616] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 309.129483][T15616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.178085][T12770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.198114][T12770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.317976][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.346846][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.539261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.553909][T15755] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2807'. [ 309.710209][T15768] : renamed from ipvlan1 [ 309.724086][T15768] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2810'. [ 309.817672][T15774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2811'. [ 310.111639][T15793] netlink: 'syz.1.2815': attribute type 5 has an invalid length. [ 310.256408][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 310.269181][ T5853] Bluetooth: hci5: command tx timeout [ 310.297576][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 310.313756][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 310.361053][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'. [ 310.536262][T15814] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20004 [ 310.579176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.687897][T15817] netlink: 'syz.1.2823': attribute type 9 has an invalid length. [ 310.698044][T15817] macvlan1: entered promiscuous mode [ 310.755731][T15828] lo speed is unknown, defaulting to 1000 [ 310.829249][ T30] audit: type=1107 audit(1731619662.234:3): pid=15827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='½z²DõèJÁÞH0]n^sÜÒÿl¹þãeàÀ»“ëQ8Ç…†*¸,ý^ ñœûäáXeÖ@,kz²ïéYñ®±_$®néwƒ¬¥S›1­*jÇH•ï#3úV²úª©(w…BpG(*¡òˆ°~]G¦‡%§s‰1µ¦í|²a§UÕ@Ç`}‘¨'<³’í²Ç®)Õ~¼ÙØöC+|×ÂA8´W§>nÚuåO{“Ä-q_;ëOÛw(¿Õ6‡òØk;¬ÎÆ]‰ ìt„I÷f/Yú†MËÈÁñ¬å[§[àÞ íO;Ç¢n¸í³lC„{6ŠâVpƒdoTÓ²ÐTÂTan"úFݾ[x‚j¶ÍüGïÊ›ÈDÍw&Æç>׺d{Ḋµ¶¶šFࢿت¶Í§M×'Yb±äŽøXiñâ–º}t  ßñ³!d/7–$ó}2Vu»u²ˆ)—q¦Þz¿y¬¨’E…åbgñ-¡½ŠÔ½Šš-Œ/o :5±²$SF¤„5Z^ÍFdHaµÂf÷Qèá–!28$Cœ7·kEÀÇšŠ~[/”…1/`ºN+¹0¡þ0bp•¹Õ;#É̘ÓÆ{‚2Lrùóñ' [ 311.151031][T15834] netlink: 'syz.0.2828': attribute type 21 has an invalid length. [ 311.169606][T15835] netlink: 'syz.0.2828': attribute type 21 has an invalid length. [ 311.619117][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.906861][T15866] lo speed is unknown, defaulting to 1000 [ 312.026333][T15875] FAULT_INJECTION: forcing a failure. [ 312.026333][T15875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.074392][T15875] CPU: 1 UID: 0 PID: 15875 Comm: syz.0.2840 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 312.085249][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 312.095365][T15875] Call Trace: [ 312.098685][T15875] [ 312.101656][T15875] dump_stack_lvl+0x241/0x360 [ 312.106389][T15875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.111638][T15875] ? __pfx__printk+0x10/0x10 [ 312.116277][T15875] ? __pfx_lock_release+0x10/0x10 [ 312.121370][T15875] should_fail_ex+0x3b0/0x4e0 [ 312.126103][T15875] _copy_from_user+0x2f/0xc0 [ 312.130778][T15875] __sys_bpf+0x1a4/0x810 [ 312.135078][T15875] ? __pfx___sys_bpf+0x10/0x10 [ 312.139908][T15875] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.145956][T15875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.152361][T15875] ? do_syscall_64+0x100/0x230 [ 312.157187][T15875] __x64_sys_bpf+0x7c/0x90 [ 312.161659][T15875] do_syscall_64+0xf3/0x230 [ 312.166222][T15875] ? clear_bhb_loop+0x35/0x90 [ 312.170966][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.176930][T15875] RIP: 0033:0x7f2248f7e719 [ 312.181403][T15875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.201042][T15875] RSP: 002b:00007f2249ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.209493][T15875] RAX: ffffffffffffffda RBX: 00007f2249135f80 RCX: 00007f2248f7e719 [ 312.217480][T15875] RDX: 0000000000000094 RSI: 00000000200003c0 RDI: 0000000000000005 [ 312.225466][T15875] RBP: 00007f2249ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.233489][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.241481][T15875] R13: 0000000000000001 R14: 00007f2249135f80 R15: 00007fff1b1d98b8 [ 312.249572][T15875] [ 312.341333][ T5850] Bluetooth: hci5: command tx timeout [ 312.659076][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.730497][ T30] audit: type=1107 audit(1731619664.144:4): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#{\¾Iíã3_f9Õ`ÿy<¨vïãE<æ|$¬GN„ÔWe*ĸfzÞ/ϳPÆA' [ 313.138751][T15924] FAULT_INJECTION: forcing a failure. [ 313.138751][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 313.155479][T15924] CPU: 0 UID: 0 PID: 15924 Comm: syz.4.2852 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 313.166323][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 313.176414][T15924] Call Trace: [ 313.179762][T15924] [ 313.182712][T15924] dump_stack_lvl+0x241/0x360 [ 313.187422][T15924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.192647][T15924] ? __pfx__printk+0x10/0x10 [ 313.197267][T15924] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 313.203192][T15924] ? __pfx___might_resched+0x10/0x10 [ 313.209124][T15924] should_fail_ex+0x3b0/0x4e0 [ 313.213831][T15924] should_failslab+0xac/0x100 [ 313.218530][T15924] __kmalloc_cache_node_noprof+0x74/0x300 [ 313.224664][T15924] ? __get_vm_area_node+0x113/0x270 [ 313.230437][T15924] __get_vm_area_node+0x113/0x270 [ 313.235496][T15924] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 313.241420][T15924] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.247006][T15924] ? mark_lock+0x9a/0x360 [ 313.251380][T15924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.257769][T15924] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.263343][T15924] __vmalloc_noprof+0x79/0x90 [ 313.268056][T15924] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.273628][T15924] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.279027][T15924] ? bpf_prog_alloc+0x28/0x1b0 [ 313.284181][T15924] bpf_prog_alloc+0x3a/0x1b0 [ 313.288802][T15924] bpf_prog_load+0x7f7/0x20f0 [ 313.293521][T15924] ? __pfx_bpf_prog_load+0x10/0x10 [ 313.298650][T15924] ? __pfx___might_resched+0x10/0x10 [ 313.303991][T15924] ? __might_fault+0xc6/0x120 [ 313.308755][T15924] __sys_bpf+0x4ee/0x810 [ 313.313037][T15924] ? __pfx___sys_bpf+0x10/0x10 [ 313.317838][T15924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.324030][T15924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.330394][T15924] ? do_syscall_64+0x100/0x230 [ 313.335187][T15924] __x64_sys_bpf+0x7c/0x90 [ 313.339626][T15924] do_syscall_64+0xf3/0x230 [ 313.344171][T15924] ? clear_bhb_loop+0x35/0x90 [ 313.348871][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.354791][T15924] RIP: 0033:0x7f0f2897e719 [ 313.359222][T15924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.379067][T15924] RSP: 002b:00007f0f296f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.387520][T15924] RAX: ffffffffffffffda RBX: 00007f0f28b35f80 RCX: 00007f0f2897e719 [ 313.395694][T15924] RDX: 0000000000000094 RSI: 00000000200003c0 RDI: 0000000000000005 [ 313.403738][T15924] RBP: 00007f0f296f1090 R08: 0000000000000000 R09: 0000000000000000 [ 313.411762][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.419929][T15924] R13: 0000000000000001 R14: 00007f0f28b35f80 R15: 00007ffee9c55668 [ 313.427938][T15924] [ 313.451317][T15924] syz.4.2852: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.474913][T15924] CPU: 0 UID: 0 PID: 15924 Comm: syz.4.2852 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 313.485774][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 313.495916][T15924] Call Trace: [ 313.499226][T15924] [ 313.502202][T15924] dump_stack_lvl+0x241/0x360 [ 313.506965][T15924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.512286][T15924] ? __pfx__printk+0x10/0x10 [ 313.516950][T15924] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 313.523404][T15924] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 313.529972][T15924] warn_alloc+0x278/0x410 [ 313.534367][T15924] ? __pfx_warn_alloc+0x10/0x10 [ 313.539261][T15924] ? __get_vm_area_node+0x113/0x270 [ 313.544638][T15924] ? __get_vm_area_node+0x261/0x270 [ 313.549883][T15924] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 313.555816][T15924] ? mark_lock+0x9a/0x360 [ 313.560231][T15924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.566862][T15924] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.572474][T15924] __vmalloc_noprof+0x79/0x90 [ 313.577199][T15924] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.582816][T15924] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 313.588238][T15924] ? bpf_prog_alloc+0x28/0x1b0 [ 313.593050][T15924] bpf_prog_alloc+0x3a/0x1b0 [ 313.597699][T15924] bpf_prog_load+0x7f7/0x20f0 [ 313.602461][T15924] ? __pfx_bpf_prog_load+0x10/0x10 [ 313.607602][T15924] ? __pfx___might_resched+0x10/0x10 [ 313.613051][T15924] ? __might_fault+0xc6/0x120 [ 313.617948][T15924] __sys_bpf+0x4ee/0x810 [ 313.622490][T15924] ? __pfx___sys_bpf+0x10/0x10 [ 313.627297][T15924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.633347][T15924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.639741][T15924] ? do_syscall_64+0x100/0x230 [ 313.644556][T15924] __x64_sys_bpf+0x7c/0x90 [ 313.649031][T15924] do_syscall_64+0xf3/0x230 [ 313.653615][T15924] ? clear_bhb_loop+0x35/0x90 [ 313.658331][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.664271][T15924] RIP: 0033:0x7f0f2897e719 [ 313.668745][T15924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.688757][T15924] RSP: 002b:00007f0f296f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.697326][T15924] RAX: ffffffffffffffda RBX: 00007f0f28b35f80 RCX: 00007f0f2897e719 [ 313.699097][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.705321][T15924] RDX: 0000000000000094 RSI: 00000000200003c0 RDI: 0000000000000005 [ 313.705342][T15924] RBP: 00007f0f296f1090 R08: 0000000000000000 R09: 0000000000000000 [ 313.705359][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.705375][T15924] R13: 0000000000000001 R14: 00007f0f28b35f80 R15: 00007ffee9c55668 [ 313.745444][T15924] [ 313.826241][T15924] Mem-Info: [ 313.835641][T15924] active_anon:6593 inactive_anon:0 isolated_anon:0 [ 313.835641][T15924] active_file:1573 inactive_file:38324 isolated_file:0 [ 313.835641][T15924] unevictable:768 dirty:190 writeback:0 [ 313.835641][T15924] slab_reclaimable:10875 slab_unreclaimable:110462 [ 313.835641][T15924] mapped:21892 shmem:1426 pagetables:642 [ 313.835641][T15924] sec_pagetables:0 bounce:0 [ 313.835641][T15924] kernel_misc_reclaimable:0 [ 313.835641][T15924] free:1335005 free_pcp:661 free_cma:0 [ 313.948155][T15936] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 313.962295][T15924] Node 0 active_anon:26072kB inactive_anon:0kB active_file:6292kB inactive_file:153220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87568kB dirty:760kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12276kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no [ 314.007995][T15938] netlink: 'syz.3.2854': attribute type 29 has an invalid length. [ 314.027684][T15936] __nla_validate_parse: 37 callbacks suppressed [ 314.027711][T15936] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2854'. [ 314.051950][T15924] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 314.102262][T15924] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.163539][T15924] lowmem_reserve[]: 0 2463 2464 0 0 [ 314.171775][T15924] Node 0 DMA32 free:1414624kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:26032kB inactive_anon:0kB active_file:6392kB inactive_file:152652kB unevictable:1536kB writepending:756kB present:3129332kB managed:2550488kB mlocked:0kB bounce:0kB free_pcp:2648kB local_pcp:976kB free_cma:0kB [ 314.210656][T15924] lowmem_reserve[]: 0 0 0 0 0 [ 314.216137][T15924] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 314.252420][T15924] lowmem_reserve[]: 0 0 0 0 0 [ 314.257802][T15924] Node 1 Normal free:3909736kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.302616][T15924] lowmem_reserve[]: 0 0 0 0 0 [ 314.307696][T15924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.323595][T15924] Node 0 DMA32: 121*4kB (ME) 201*8kB (UME) 206*16kB (UME) 673*32kB (UME) 149*64kB (UME) 357*128kB (UME) 202*256kB (UME) 62*512kB (UME) 70*1024kB (UME) 11*2048kB (UME) 282*4096kB (UM) = 1414892kB [ 314.345385][T15924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 314.357813][T15924] Node 1 Normal: 222*4kB (UME) 64*8kB (UME) 43*16kB (UME) 204*32kB (UME) 81*64kB (UME) 31*128kB (UE) 17*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909736kB [ 314.377562][T15924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.388759][T15924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.398520][T15924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.411160][T15924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.421934][ T5850] Bluetooth: hci5: command 0x0407 tx timeout [ 314.429978][T15924] 41350 total pagecache pages [ 314.435642][T15924] 0 pages in swap cache [ 314.441200][T15924] Free swap = 124736kB [ 314.445525][T15924] Total swap = 124996kB [ 314.450411][T15924] 2097051 pages RAM [ 314.454435][T15924] 0 pages HighMem/MovableOnly [ 314.459755][T15924] 427643 pages reserved [ 314.464299][T15924] 0 pages cma reserved [ 314.514452][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 314.527985][T15952] tls_set_device_offload: netdev not found [ 314.610002][T15953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2860'. [ 314.739075][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.804052][T15966] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2865'. [ 314.888818][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 315.490734][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 315.528741][T15996] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 315.725265][T15998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 315.779082][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.872030][T16005] rdma_rxe: rxe_newlink: failed to add lo [ 315.948411][T16005] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2878'. [ 315.970986][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 316.240421][T16023] IPv6: Can't replace route, no match found [ 316.432596][T16037] pim6reg: entered allmulticast mode [ 316.449866][T16037] pim6reg: left allmulticast mode [ 316.502990][ T5853] Bluetooth: hci5: command 0x0407 tx timeout [ 316.707882][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2886'. [ 316.819185][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.068832][T16071] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.077931][T16071] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.086903][T16071] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.096734][T16071] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.225600][T16082] bond0: (slave dummy0): Releasing backup interface [ 317.237893][T16084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2898'. [ 317.244361][T16082] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 317.297767][T16082] dummy0: left promiscuous mode [ 317.330618][T16082] macvlan1: left allmulticast mode [ 317.335911][T16082] veth1_vlan: left allmulticast mode [ 317.351260][T16082] bridge3: port 1(macvlan1) entered disabled state [ 317.370474][T16082] bond0: (slave netdevsim0): Releasing backup interface [ 317.386355][T16082] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 317.860999][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.683228][T16111] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 318.790188][T16123] xt_CT: No such helper "snmp" [ 318.899099][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.391542][T16169] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 319.495750][T16169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.648308][T16165] bond4: (slave ip6gretap4): making interface the new active one [ 319.680651][T16165] bond4: (slave ip6gretap4): Enslaving as an active interface with an up link [ 319.805417][T16178] syzkaller0: entered promiscuous mode [ 319.814033][T16178] syzkaller0: entered allmulticast mode [ 319.823400][T16184] netlink: 'syz.3.2920': attribute type 11 has an invalid length. [ 319.843931][T16184] __nla_validate_parse: 2 callbacks suppressed [ 319.843955][T16184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2920'. [ 319.878371][T16187] netlink: 'syz.1.2921': attribute type 14 has an invalid length. [ 319.881542][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 319.911047][T16188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2920'. [ 319.939313][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.980733][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.390932][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.421865][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.430933][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.457804][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.490488][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.506862][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.021264][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.059175][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.410927][T16209] netlink: 'syz.0.2927': attribute type 10 has an invalid length. [ 323.506118][T16223] lo speed is unknown, defaulting to 1000 [ 323.536420][T16228] tipc: Enabling of bearer rejected, already enabled [ 323.643207][ T5853] Bluetooth: hci2: command tx timeout [ 323.854989][T16232] netlink: 'syz.0.2934': attribute type 21 has an invalid length. [ 323.914783][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 323.935566][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2939'. [ 324.012309][T16252] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 324.039684][T16252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.056392][T16252] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 324.067819][T16252] macvlan2: entered allmulticast mode [ 324.082710][T16258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2940'. [ 324.083312][T16252] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 324.099956][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.148283][T16223] chnl_net:caif_netlink_parms(): no params data found [ 324.458354][T16223] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.481347][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.490791][T16223] bridge_slave_0: entered allmulticast mode [ 324.498788][T16223] bridge_slave_0: entered promiscuous mode [ 324.531258][T16223] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.541259][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.548582][T16223] bridge_slave_1: entered allmulticast mode [ 324.567691][T16223] bridge_slave_1: entered promiscuous mode [ 324.715769][T16223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.735394][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'. [ 324.762002][T16289] bridge9: entered allmulticast mode [ 324.787141][T16223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.954421][T16223] team0: Port device team_slave_0 added [ 324.975495][T16223] team0: Port device team_slave_1 added [ 324.992270][T16304] netlink: 'syz.4.2951': attribute type 298 has an invalid length. [ 325.078775][T16305] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2950'. [ 325.122083][T16223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.139140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.148961][T16223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.231335][T16223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.268769][T16223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.283898][T16223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.323221][T16319] x_tables: duplicate underflow at hook 1 [ 325.349162][T16223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.478768][T16223] hsr_slave_0: entered promiscuous mode [ 325.487666][T16223] hsr_slave_1: entered promiscuous mode [ 325.509771][T16223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.531271][T16223] Cannot create hsr debugfs directory [ 325.701717][ T5853] Bluetooth: hci2: command tx timeout [ 325.792615][T16336] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2960'. [ 325.976979][T16223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.999079][T16223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.023753][T16223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48887 - 0 [ 326.049552][T16223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 58348 - 0 [ 326.179717][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.187260][T16223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.222800][T16223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.259580][T16223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48887 - 0 [ 326.299188][T16223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 58348 - 0 [ 326.335554][T16345] netlink: 'syz.2.2963': attribute type 5 has an invalid length. [ 326.389430][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 326.461138][T16223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.483265][T16223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.509562][T16223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48887 - 0 [ 326.528524][T16223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 58348 - 0 [ 326.798330][T16223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.804489][T16364] sctp: [Deprecated]: syz.1.2970 (pid 16364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.804489][T16364] Use struct sctp_sack_info instead [ 326.819042][T16223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.838004][T16364] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 326.839266][T16223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48887 - 0 [ 326.856406][T16223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 58348 - 0 [ 326.904208][T16359] vlan4: entered promiscuous mode [ 326.918444][T16359] vlan4: entered allmulticast mode [ 326.925431][T16359] hsr_slave_1: entered allmulticast mode [ 327.109293][T16223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.142825][T16223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.176464][T16366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 327.197954][T16223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.208334][T16223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.219375][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.294453][T16375] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2971'. [ 327.375383][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 327.392222][T16379] gre1: entered promiscuous mode [ 327.405281][T16223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.464916][T16223] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.513223][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.520551][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.547159][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.554377][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.739323][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 327.780206][ T5853] Bluetooth: hci2: command tx timeout [ 328.056850][T16223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.259155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.273667][T16223] veth0_vlan: entered promiscuous mode [ 328.300654][T16403] IPv6: addrconf: prefix option has invalid lifetime [ 328.341790][T16223] veth1_vlan: entered promiscuous mode [ 328.356806][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.378380][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.385489][T16223] veth0_macvtap: entered promiscuous mode [ 328.390452][T16223] veth1_macvtap: entered promiscuous mode [ 328.397599][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.428687][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.446249][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.448551][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.470005][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 328.508674][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.538592][T16223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.573414][T16223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.612212][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.650515][T16223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.729977][T16406] lo speed is unknown, defaulting to 1000 [ 328.787431][T16223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.829007][T16223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.837793][T16223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.879716][T16223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.024700][T16223] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 329.041375][T16223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.121374][T12770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.146215][T12770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.188442][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 329.293483][T12776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.299126][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.325827][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 329.346191][T12776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.850764][T16466] mac80211_hwsim hwsim5 wlan1: Master is either lo or non-ether device [ 329.869857][ T5853] Bluetooth: hci2: command tx timeout [ 329.930390][T16406] chnl_net:caif_netlink_parms(): no params data found [ 330.088225][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2996'. [ 330.216997][T16406] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.235387][T16406] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.249674][T16406] bridge_slave_0: entered allmulticast mode [ 330.267228][T16406] bridge_slave_0: entered promiscuous mode [ 330.285476][T16406] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.294213][T16406] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.304358][T16406] bridge_slave_1: entered allmulticast mode [ 330.312567][T16406] bridge_slave_1: entered promiscuous mode [ 330.339138][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.643066][T16501] dvmrp5: entered allmulticast mode [ 330.660350][ T5853] Bluetooth: hci0: command tx timeout [ 330.738109][T16505] dvmrp5: left allmulticast mode [ 330.797324][T16406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.824045][T16406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.226620][T16406] team0: Port device team_slave_0 added [ 331.275295][T16406] team0: Port device team_slave_1 added [ 331.379058][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.408698][T16406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.427686][T16406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.472851][T16406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.488765][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 331.520581][T16406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.567586][T16406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.660674][T16406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.731181][T16553] lo speed is unknown, defaulting to 1000 [ 331.743321][T16559] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 331.998620][T16406] hsr_slave_0: entered promiscuous mode [ 332.016520][T16406] hsr_slave_1: entered promiscuous mode [ 332.047005][T16406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.063910][T16574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 332.064861][T16406] Cannot create hsr debugfs directory [ 332.101306][T16576] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3012'. [ 332.419113][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.741520][ T5853] Bluetooth: hci0: command tx timeout [ 332.981809][T16600] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3018'. [ 333.014749][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3018'. [ 333.216686][T16608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3020'. [ 333.341847][T16608] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 333.414045][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 333.459087][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.464522][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 333.501717][T16406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.619937][T16406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.755610][T16613] lo speed is unknown, defaulting to 1000 [ 333.756583][T16406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.787959][T16406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.947155][T16406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.965738][T16406] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.977240][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.984487][T12770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.032880][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.040177][T12770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.105482][T16406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.116103][T16406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.280504][T16641] netlink: 'syz.3.3027': attribute type 10 has an invalid length. [ 334.300257][T16641] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.307874][T16641] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.323314][T16641] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.330618][T16641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.338191][T16641] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.345460][T16641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.359933][T16641] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 334.499200][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.647016][T16406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.775483][T16406] veth0_vlan: entered promiscuous mode [ 334.820126][ T5853] Bluetooth: hci0: command tx timeout [ 334.829473][T16406] veth1_vlan: entered promiscuous mode [ 334.862634][T16406] veth0_macvtap: entered promiscuous mode [ 334.872471][T16406] veth1_macvtap: entered promiscuous mode [ 334.957890][T16406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.000117][T16406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.039493][T16406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.069931][T16406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.108881][T16406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.159393][T16406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.220693][T16406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.257786][T16406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.318510][T16406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.350716][T16406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.400834][T16406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.438247][T16406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.499428][T16406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.537711][T16406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.539158][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.661869][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 335.737391][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3040'. [ 335.782651][T16689] team0: Port device team_slave_0 removed [ 335.844725][T16689] team0: Port device team_slave_1 removed [ 335.886797][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3042'. [ 335.948046][T16689] team0: Port device veth0_to_hsr removed [ 336.108175][T16689] team0: Port device vlan2 removed [ 336.159322][T16689] team0: Port device bridge5 removed [ 336.193464][T16689] bond0: (slave bridge6): Releasing active interface [ 336.230411][T16689] xfrm0: left allmulticast mode [ 336.235515][T16689] xfrm0: left promiscuous mode [ 336.297253][T16689] team0: Port device vlan4 removed [ 336.344506][T16689] bond4: (slave ip6gretap4): Releasing active interface [ 336.492024][T16693] lo speed is unknown, defaulting to 1000 [ 336.579233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.587366][T16406] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 336.614212][T16406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.656551][T12759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.704106][T12759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.785809][T12775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.799518][T12775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.858175][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 336.874519][T16695] lo speed is unknown, defaulting to 1000 [ 336.899768][ T5853] Bluetooth: hci0: command tx timeout [ 337.198608][T16729] macsec1: entered promiscuous mode [ 337.204334][T16729] macsec1: entered allmulticast mode [ 337.248543][T16726] team0: No ports can be present during mode change [ 337.619095][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.652413][T16735] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 338.089892][ T1155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.322528][ T1155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.577433][ T1155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.643638][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.655389][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.659191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.666112][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.681674][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.689651][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.741204][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.904391][ T1155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.958736][T16777] ip6gretap1: entered promiscuous mode [ 338.991395][T16777] ip6gretap1: entered allmulticast mode [ 339.072955][T16767] lo speed is unknown, defaulting to 1000 [ 339.102431][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 339.597948][T16781] lo speed is unknown, defaulting to 1000 [ 339.699106][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.768820][ T1155] bridge_slave_1: left allmulticast mode [ 339.776047][ T1155] bridge_slave_1: left promiscuous mode [ 339.786541][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.930878][ T1155] bridge_slave_0: left allmulticast mode [ 339.936687][ T1155] bridge_slave_0: left promiscuous mode [ 339.952992][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.678430][T16809] netlink: 'syz.4.3066': attribute type 10 has an invalid length. [ 340.739199][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.819607][ T5850] Bluetooth: hci0: command tx timeout [ 341.112037][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.164881][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.188007][ T1155] bond0 (unregistering): Released all slaves [ 341.397638][T16809] team0: Device wlan1 is of different type [ 341.785131][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.819132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.906993][ T5850] Bluetooth: hci0: command tx timeout [ 343.859127][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.618518][T16832] netlink: 'syz.3.3073': attribute type 3 has an invalid length. [ 344.627203][T16832] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3073'. [ 344.638210][T16767] chnl_net:caif_netlink_parms(): no params data found [ 344.899171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.979971][ T5850] Bluetooth: hci0: command tx timeout [ 345.195180][T16861] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 345.398482][ T1155] hsr_slave_0: left promiscuous mode [ 345.423996][ T1155] hsr_slave_1: left promiscuous mode [ 345.438536][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.451008][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.462122][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.470816][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.489650][T16875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.515661][ T1155] veth1_macvtap: left promiscuous mode [ 345.523025][ T1155] veth0_macvtap: left promiscuous mode [ 345.530725][ T1155] veth1_vlan: left promiscuous mode [ 345.536878][ T1155] veth0_vlan: left promiscuous mode [ 345.942157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.265464][T16869] delete_channel: no stack [ 346.429249][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 346.493219][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 346.987467][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.067635][ T5850] Bluetooth: hci0: command tx timeout [ 347.345825][T16767] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.370666][T16767] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.387141][T16767] bridge_slave_0: entered allmulticast mode [ 347.400954][T16767] bridge_slave_0: entered promiscuous mode [ 347.424977][T16767] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.444536][T16767] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.470077][T16767] bridge_slave_1: entered allmulticast mode [ 347.478525][T16767] bridge_slave_1: entered promiscuous mode [ 347.502689][T16878] veth0_vlan: left promiscuous mode [ 347.683362][T16767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.722978][T16767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.754678][T16884] lo speed is unknown, defaulting to 1000 [ 347.770302][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'. [ 347.983830][T16767] team0: Port device team_slave_0 added [ 348.003778][T16891] veth0_macvtap: mtu less than device minimum [ 348.019069][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.053767][T16767] team0: Port device team_slave_1 added [ 348.311256][T16899] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.370640][T16899] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.386049][T16767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.394181][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.425260][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3092'. [ 348.426508][T16767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.481189][T16899] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.545767][T16910] team_slave_0: entered promiscuous mode [ 348.552778][T16910] team_slave_1: entered promiscuous mode [ 348.561580][T16910] macvtap1: entered promiscuous mode [ 348.567111][T16910] team0: entered promiscuous mode [ 348.573620][T16910] macvtap1: entered allmulticast mode [ 348.580139][T16910] team0: entered allmulticast mode [ 348.585311][T16910] team_slave_0: entered allmulticast mode [ 348.591751][T16910] team_slave_1: entered allmulticast mode [ 348.598472][T16910] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 348.608754][T16767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.620855][T16767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.648666][T16767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.735082][T16899] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.846329][T16899] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.961666][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3095'. [ 349.059138][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.218111][T16767] hsr_slave_0: entered promiscuous mode [ 349.240330][T16767] hsr_slave_1: entered promiscuous mode [ 349.253821][T16767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.271752][T16767] Cannot create hsr debugfs directory [ 349.315363][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'. [ 349.844196][T16950] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 350.099192][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.212295][T16964] veth3: entered promiscuous mode [ 350.560229][T16972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3108'. [ 350.702059][T16767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.753137][T16767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.793344][T16767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.850685][T16767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.010061][T16983] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3110'. [ 351.117269][T16767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.138004][T16985] xt_recent: Unsupported userspace flags (00000042) [ 351.139161][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.159862][T16981] ebtables: ebtables: counters copy to user failed while replacing table [ 351.205956][T16767] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.254288][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.261637][T12757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.292647][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.300033][T12757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.363771][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3112'. [ 351.389845][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3112'. [ 351.431052][T16767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.442227][T16767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.500199][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3112'. [ 351.802144][T16998] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 351.840160][T16998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 351.918335][T16767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.057034][T17001] No such timeout policy "syz1" [ 352.115787][T16767] veth0_vlan: entered promiscuous mode [ 352.144305][T16767] veth1_vlan: entered promiscuous mode [ 352.179104][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.268141][T16767] veth0_macvtap: entered promiscuous mode [ 352.343034][T16767] veth1_macvtap: entered promiscuous mode [ 352.468874][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.523969][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.630688][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.643755][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.656481][T16767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.687251][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.700600][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.712550][T16767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.724577][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.771983][T16767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.818537][T16767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.869938][T16767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.878759][T16767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.949963][T16767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.024637][T17027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3123'. [ 353.060622][T17028] netlink: 'syz.2.3121': attribute type 2 has an invalid length. [ 353.126180][T17028] Xÿ: entered promiscuous mode [ 353.219182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.396956][T16767] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 353.417887][T16767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.445708][T12759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.456113][T12759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.515030][T17047] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3126'. [ 353.553979][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.574872][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.823498][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3130'. [ 353.943867][T17060] macvlan1: entered promiscuous mode [ 353.947654][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 353.987243][T17060] macvlan1: entered allmulticast mode [ 353.999578][T17060] veth1_vlan: entered allmulticast mode [ 354.020054][T17060] team0: Port device macvlan1 added [ 354.136618][T17070] Cannot find add_set index 832 as target [ 354.259145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.369364][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 354.393807][T17079] bridge_slave_1: left allmulticast mode [ 354.404145][T17079] bridge_slave_1: left promiscuous mode [ 354.410261][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.421912][T17089] netlink: 'syz.4.3141': attribute type 8 has an invalid length. [ 354.435042][T17079] bridge_slave_0: left allmulticast mode [ 354.441991][T17079] bridge_slave_0: left promiscuous mode [ 354.449975][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.494354][T17093] ipt_rpfilter: unknown options [ 354.516828][T17093] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 354.708609][T17102] netlink: 'syz.3.3143': attribute type 8 has an invalid length. [ 355.106406][T17126] Cannot find add_set index 3 as target [ 355.121624][T17118] lo speed is unknown, defaulting to 1000 [ 355.299167][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.053822][T17157] netlink: 'syz.3.3160': attribute type 10 has an invalid length. [ 356.187963][T12770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.314036][T17157] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 356.339131][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.351125][T17157] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 356.700780][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.701922][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.712927][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.725227][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.736502][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.746111][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.756635][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.765452][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.766291][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.774652][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.788857][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.799819][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.867731][T12770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.939342][T17167] lo speed is unknown, defaulting to 1000 [ 357.116872][T12770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.161483][T17163] lo speed is unknown, defaulting to 1000 [ 357.285815][T12770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.310727][T17180] __nla_validate_parse: 4 callbacks suppressed [ 357.310750][T17180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3166'. [ 357.379133][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.665447][T12770] bridge_slave_1: left allmulticast mode [ 357.675478][T12770] bridge_slave_1: left promiscuous mode [ 357.681747][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.707701][T12770] bridge_slave_0: left allmulticast mode [ 357.714756][T12770] bridge_slave_0: left promiscuous mode [ 357.721902][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.423715][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.446394][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 358.467845][T17217] netlink: 'syz.3.3172': attribute type 30 has an invalid length. [ 358.488165][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3172'. [ 358.507176][T12770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.521999][T12770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.534676][T12770] bond0 (unregistering): Released all slaves [ 358.613069][T17195] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 358.633964][T17195] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 358.819735][ T5859] Bluetooth: hci0: command tx timeout [ 358.841533][T17223] netlink: 'syz.0.3173': attribute type 21 has an invalid length. [ 358.859834][T17223] netlink: 'syz.0.3173': attribute type 1 has an invalid length. [ 358.900457][ T5859] Bluetooth: hci3: command tx timeout [ 358.910228][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3174'. [ 358.925074][T17223] netlink: 'syz.0.3173': attribute type 298 has an invalid length. [ 358.976431][T17167] chnl_net:caif_netlink_parms(): no params data found [ 359.177652][T17237] openvswitch: netlink: Port 2099045992 exceeds max allowable 65535 [ 359.201014][T17237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3177'. [ 359.232106][T17237] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.459124][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.741868][T17271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3185'. [ 359.760651][T12770] hsr_slave_0: left promiscuous mode [ 359.774975][T12770] hsr_slave_1: left promiscuous mode [ 359.800187][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.817697][T12770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.827672][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 359.843170][T12770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.853567][T12770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.901185][T12770] veth1_macvtap: left promiscuous mode [ 359.907070][T12770] veth0_macvtap: left promiscuous mode [ 359.913213][T12770] veth1_vlan: left promiscuous mode [ 359.918664][T12770] veth0_vlan: left promiscuous mode [ 360.499154][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.705841][T12770] team0 (unregistering): Port device team_slave_1 removed [ 360.813323][T12770] team0 (unregistering): Port device team_slave_0 removed [ 360.893162][T17280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'. [ 360.917937][ T5859] Bluetooth: hci0: command tx timeout [ 360.988410][ T5859] Bluetooth: hci3: command tx timeout [ 361.530485][T17163] chnl_net:caif_netlink_parms(): no params data found [ 361.539156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.582582][T17167] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.600893][T17167] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.617619][T17167] bridge_slave_0: entered allmulticast mode [ 361.652224][T17167] bridge_slave_0: entered promiscuous mode [ 361.680671][T17167] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.687839][T17167] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.712637][T17167] bridge_slave_1: entered allmulticast mode [ 361.741414][T17167] bridge_slave_1: entered promiscuous mode [ 361.790948][T17292] Bluetooth: MGMT ver 1.23 [ 361.896249][T17294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3191'. [ 361.968296][T17167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.125208][T17167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.148461][T17163] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.171143][T17163] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.178831][T17163] bridge_slave_0: entered allmulticast mode [ 362.187371][T17163] bridge_slave_0: entered promiscuous mode [ 362.197406][T17163] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.204719][T17163] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.212898][T17163] bridge_slave_1: entered allmulticast mode [ 362.220924][T17163] bridge_slave_1: entered promiscuous mode [ 362.261520][T17306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3195'. [ 362.338177][T17163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.363868][T17167] team0: Port device team_slave_0 added [ 362.380287][T17163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.406991][T17167] team0: Port device team_slave_1 added [ 362.505794][T17163] team0: Port device team_slave_0 added [ 362.537408][T17167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.545751][T17167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.573931][T17167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.584902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.602786][T17163] team0: Port device team_slave_1 added [ 362.720590][T17167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.737198][T17167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.767544][T17167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.783361][T17163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.792165][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.819902][T17163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.907067][T17163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.925105][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.954286][T17163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.980531][ T5859] Bluetooth: hci0: command tx timeout [ 363.064300][ T5859] Bluetooth: hci3: command tx timeout [ 363.175651][T17348] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 363.190049][T17349] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 363.270013][T17167] hsr_slave_0: entered promiscuous mode [ 363.276865][T17167] hsr_slave_1: entered promiscuous mode [ 363.307268][T17353] Cannot find add_set index 32768 as target [ 363.318801][T17167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.363886][T17167] Cannot create hsr debugfs directory [ 363.496716][T17163] hsr_slave_0: entered promiscuous mode [ 363.538417][T17163] hsr_slave_1: entered promiscuous mode [ 363.557738][T17361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3211'. [ 363.570303][T17163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.583011][T17163] Cannot create hsr debugfs directory [ 363.603250][T17352] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 363.618054][T17352] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 363.626874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.641011][T17352] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 363.803290][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'. [ 364.113459][T17379] lo speed is unknown, defaulting to 1000 [ 364.238098][T17167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.376117][T17167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.415864][T17385] lo speed is unknown, defaulting to 1000 [ 364.488779][T17395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3220'. [ 364.554212][T17167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.659100][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.694954][T17167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.856375][T17405] Unsupported ieee802154 address type: 0 [ 365.059806][ T5859] Bluetooth: hci0: command tx timeout [ 365.150613][ T5859] Bluetooth: hci3: command tx timeout [ 365.286321][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 365.368235][T17417] netlink: 'syz.3.3227': attribute type 4 has an invalid length. [ 365.417332][T17167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.425914][T17422] netlink: 'syz.3.3227': attribute type 4 has an invalid length. [ 365.447803][T17167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.469948][T17424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'. [ 365.500248][T17167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.519767][T17167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.699230][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.759506][T17167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.843676][T17167] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.893586][T17163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.928051][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.935287][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.963511][T17163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.989610][T12763] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.996816][T12763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.037270][T17163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.077420][T17163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.193075][T17446] lo speed is unknown, defaulting to 1000 [ 366.316982][T17444] syzkaller0: entered allmulticast mode [ 366.445427][T17444] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 366.459212][T17444] syzkaller0: Linktype set failed because interface is up [ 366.739447][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.779245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.819449][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.859183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.883847][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 369.921007][T17450] lo speed is unknown, defaulting to 1000 [ 370.172850][T17167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.226557][T17163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.458174][T17163] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.501916][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.509167][T12759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.578531][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.585788][T12757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.773451][T17495] sit0: entered promiscuous mode [ 370.793735][T17495] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 370.804274][T17495] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3245'. [ 370.899264][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.043372][T17167] veth0_vlan: entered promiscuous mode [ 371.124225][T17167] veth1_vlan: entered promiscuous mode [ 371.236548][T17167] veth0_macvtap: entered promiscuous mode [ 371.247706][T17167] veth1_macvtap: entered promiscuous mode [ 371.290281][T17167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.301907][T17167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.313286][T17167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.325362][T17167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.338582][T17167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.363371][T17167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.389704][T17167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.400434][T17167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.411683][T17167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.424398][T17167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.432639][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3248'. [ 371.460218][T17163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.544976][T17167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.561208][T17167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.563433][T17510] tipc: Can't bind to reserved service type 1 [ 371.581705][T17167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.598037][T17167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.633604][T17163] veth0_vlan: entered promiscuous mode [ 371.656838][T17163] veth1_vlan: entered promiscuous mode [ 371.728506][T17512] lo speed is unknown, defaulting to 1000 [ 371.780303][T17163] veth0_macvtap: entered promiscuous mode [ 371.822423][T17163] veth1_macvtap: entered promiscuous mode [ 371.857712][T17167] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 371.900239][T17167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.939193][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.991946][T12759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.002773][T12757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.011660][T12757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.037975][T12759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.134983][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.166808][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.209973][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.268571][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.279603][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.290333][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.313523][T17530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3256'. [ 372.348754][T17163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.393744][T17532] veth0_macvtap: mtu less than device minimum [ 372.566318][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.591119][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.603707][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.616028][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.627039][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.638719][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.674259][T17163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.738005][T17163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.753704][T17163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.763799][T17163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.774549][T17163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.974139][T17163] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 372.984218][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.993272][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.023105][T12776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.032075][T12776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.144907][T12770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.174889][T12770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.366945][ T6929] IPVS: starting estimator thread 0... [ 373.525837][T17557] IPVS: using max 17 ests per chain, 40800 per kthread [ 373.877326][T12757] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.986921][T12757] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.019260][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.488029][T17578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3269'. [ 374.561569][T17578] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3269'. [ 374.586362][T12757] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.694970][T17578] bridge0: entered allmulticast mode [ 374.711101][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.723649][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.733096][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.743151][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.751867][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 374.760004][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.791988][T17595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3273'. [ 374.818638][T17595] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3273'. [ 374.871296][T17590] lo speed is unknown, defaulting to 1000 [ 375.050778][T12757] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.060112][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.142172][T17604] syz.2.3274: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 375.183393][T17604] CPU: 1 UID: 0 PID: 17604 Comm: syz.2.3274 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 375.194291][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 375.204384][T17604] Call Trace: [ 375.207713][T17604] [ 375.210691][T17604] dump_stack_lvl+0x241/0x360 [ 375.215436][T17604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.220696][T17604] ? __pfx__printk+0x10/0x10 [ 375.225355][T17604] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 375.231840][T17604] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 375.238428][T17604] warn_alloc+0x278/0x410 [ 375.242900][T17604] ? __pfx_warn_alloc+0x10/0x10 [ 375.247811][T17604] ? hash_ipport_create+0x801/0x1670 [ 375.253406][T17604] ? __get_vm_area_node+0x23d/0x270 [ 375.258688][T17604] __vmalloc_node_range_noprof+0x691/0x13f0 [ 375.264709][T17604] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 375.270558][T17604] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 375.276983][T17604] ? rcu_is_watching+0x15/0xb0 [ 375.281812][T17604] ? trace_kmalloc+0x1f/0xd0 [ 375.286467][T17604] ? __kmalloc_node_noprof+0x247/0x440 [ 375.291991][T17604] ? __kvmalloc_node_noprof+0x72/0x190 [ 375.297528][T17604] __kvmalloc_node_noprof+0x142/0x190 [ 375.302970][T17604] ? hash_ipport_create+0x801/0x1670 [ 375.308341][T17604] hash_ipport_create+0x801/0x1670 [ 375.313634][T17604] ? __pfx_lock_acquire+0x10/0x10 [ 375.320140][T17604] ? __pfx_hash_ipport_create+0x10/0x10 [ 375.325770][T17604] ? __nla_parse+0x40/0x60 [ 375.330314][T17604] ? __pfx_hash_ipport_create+0x10/0x10 [ 375.335942][T17604] ip_set_create+0xa5c/0x1900 [ 375.340694][T17604] ? ip_set_create+0x45e/0x1900 [ 375.345629][T17604] ? trace_raw_output_contention_end+0xaa/0xd0 [ 375.351853][T17604] ? __pfx_ip_set_create+0x10/0x10 [ 375.357036][T17604] ? trace_contention_end+0x3c/0x120 [ 375.362428][T17604] ? nfnetlink_rcv_msg+0x225/0x1180 [ 375.367710][T17604] nfnetlink_rcv_msg+0xbec/0x1180 [ 375.372819][T17604] ? nfnetlink_rcv_msg+0x225/0x1180 [ 375.378118][T17604] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 375.383680][T17604] ? __netlink_deliver_tap+0x56b/0x7f0 [ 375.389214][T17604] ? netlink_deliver_tap+0x19d/0x1b0 [ 375.394575][T17604] ? netlink_unicast+0x7c4/0x990 [ 375.399566][T17604] ? netlink_sendmsg+0x8e4/0xcb0 [ 375.404573][T17604] ? __sock_sendmsg+0x221/0x270 [ 375.409495][T17604] ? ____sys_sendmsg+0x52a/0x7e0 [ 375.414493][T17604] ? __sys_sendmsg+0x292/0x380 [ 375.419432][T17604] ? do_syscall_64+0xf3/0x230 [ 375.424166][T17604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.430308][T17604] netlink_rcv_skb+0x1e3/0x430 [ 375.435229][T17604] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 375.440758][T17604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.446115][T17604] ? apparmor_capable+0x13b/0x1b0 [ 375.451217][T17604] ? bpf_lsm_capable+0x9/0x10 [ 375.456028][T17604] ? security_capable+0x7e/0x2d0 [ 375.461006][T17604] nfnetlink_rcv+0x297/0x2ab0 [ 375.465747][T17604] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 375.471498][T17604] ? __dev_queue_xmit+0x2f4/0x3f50 [ 375.476734][T17604] ? __dev_queue_xmit+0x1775/0x3f50 [ 375.481960][T17604] ? kasan_save_track+0x51/0x80 [ 375.486839][T17604] ? ____sys_sendmsg+0x52a/0x7e0 [ 375.491823][T17604] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 375.496980][T17604] ? __dev_queue_xmit+0x2f4/0x3f50 [ 375.502395][T17604] ? __pfx___dev_queue_xmit+0x10/0x10 [ 375.507816][T17604] ? ref_tracker_free+0x643/0x7e0 [ 375.512868][T17604] ? __asan_memcpy+0x40/0x70 [ 375.517487][T17604] ? __pfx_ref_tracker_free+0x10/0x10 [ 375.522924][T17604] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.528166][T17604] ? skb_clone+0x240/0x390 [ 375.532650][T17604] ? __pfx_lock_release+0x10/0x10 [ 375.537706][T17604] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 375.543223][T17604] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.548663][T17604] netlink_unicast+0x7f6/0x990 [ 375.553481][T17604] ? __pfx_netlink_unicast+0x10/0x10 [ 375.558839][T17604] ? __virt_addr_valid+0x183/0x530 [ 375.563982][T17604] ? __check_object_size+0x48e/0x900 [ 375.569363][T17604] netlink_sendmsg+0x8e4/0xcb0 [ 375.574168][T17604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.579510][T17604] ? aa_sock_msg_perm+0x91/0x160 [ 375.584592][T17604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.589917][T17604] __sock_sendmsg+0x221/0x270 [ 375.594622][T17604] ____sys_sendmsg+0x52a/0x7e0 [ 375.599454][T17604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.604810][T17604] __sys_sendmsg+0x292/0x380 [ 375.609520][T17604] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.614682][T17604] ? netlink_bind+0xaeb/0xc90 [ 375.619458][T17604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 375.625828][T17604] ? do_syscall_64+0x100/0x230 [ 375.630695][T17604] ? do_syscall_64+0xb6/0x230 [ 375.635428][T17604] do_syscall_64+0xf3/0x230 [ 375.639974][T17604] ? clear_bhb_loop+0x35/0x90 [ 375.644697][T17604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.650612][T17604] RIP: 0033:0x7f27ac77e719 [ 375.655060][T17604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.674694][T17604] RSP: 002b:00007f27ad4e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.683129][T17604] RAX: ffffffffffffffda RBX: 00007f27ac935f80 RCX: 00007f27ac77e719 [ 375.691119][T17604] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 375.699112][T17604] RBP: 00007f27ac7f175e R08: 0000000000000000 R09: 0000000000000000 [ 375.707102][T17604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.715096][T17604] R13: 0000000000000000 R14: 00007f27ac935f80 R15: 00007ffd30296cd8 [ 375.723192][T17604] [ 375.786248][T17604] Mem-Info: [ 375.799952][T17604] active_anon:6426 inactive_anon:0 isolated_anon:0 [ 375.799952][T17604] active_file:1659 inactive_file:38358 isolated_file:0 [ 375.799952][T17604] unevictable:768 dirty:81 writeback:0 [ 375.799952][T17604] slab_reclaimable:11220 slab_unreclaimable:121693 [ 375.799952][T17604] mapped:21909 shmem:1427 pagetables:585 [ 375.799952][T17604] sec_pagetables:0 bounce:0 [ 375.799952][T17604] kernel_misc_reclaimable:0 [ 375.799952][T17604] free:1322111 free_pcp:726 free_cma:0 [ 375.851845][T17604] Node 0 active_anon:25804kB inactive_anon:0kB active_file:6636kB inactive_file:153356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87636kB dirty:324kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13032kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no [ 375.885899][T17604] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 375.917055][T17604] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.946136][T17604] lowmem_reserve[]: 0 2463 2464 0 0 [ 375.952578][T17604] Node 0 DMA32 free:1363120kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:25864kB inactive_anon:0kB active_file:6636kB inactive_file:152788kB unevictable:1536kB writepending:324kB present:3129332kB managed:2550488kB mlocked:0kB bounce:0kB free_pcp:2692kB local_pcp:796kB free_cma:0kB [ 375.983796][T17604] lowmem_reserve[]: 0 0 0 0 0 [ 375.988844][T17604] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:568kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 376.016786][T17604] lowmem_reserve[]: 0 0 0 0 0 [ 376.022172][T17604] Node 1 Normal free:3909768kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 376.053305][T17604] lowmem_reserve[]: 0 0 0 0 0 [ 376.059100][T17604] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 376.072401][T17604] Node 0 DMA32: 25*4kB (UME) 186*8kB (UME) 187*16kB (UME) 132*32kB (UME) 66*64kB (UME) 92*128kB (UME) 194*256kB (UM) 76*512kB (UME) 76*1024kB (UME) 9*2048kB (UME) 282*4096kB (UM) = 1364708kB [ 376.092497][T17604] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 376.099323][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.105120][T17604] Node 1 Normal: 216*4kB (UME) 61*8kB (UME) 44*16kB (UME) 204*32kB (UME) 82*64kB (UME) 31*128kB (UE) 17*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909768kB [ 376.131305][T17604] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.141067][T17604] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.151076][T17604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.161728][T17604] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.171296][T17604] 41444 total pagecache pages [ 376.176177][T17604] 0 pages in swap cache [ 376.181297][T17604] Free swap = 124736kB [ 376.185510][T17604] Total swap = 124996kB [ 376.190116][T17604] 2097051 pages RAM [ 376.193975][T17604] 0 pages HighMem/MovableOnly [ 376.198693][T17604] 427643 pages reserved [ 376.203480][T17604] 0 pages cma reserved [ 376.314489][T17590] chnl_net:caif_netlink_parms(): no params data found [ 376.334903][T12757] bridge_slave_1: left allmulticast mode [ 376.342380][T12757] bridge_slave_1: left promiscuous mode [ 376.350457][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.384900][T12757] bridge_slave_0: left allmulticast mode [ 376.399105][T12757] bridge_slave_0: left promiscuous mode [ 376.404970][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.497279][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 376.578168][T17634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 376.821226][ T5853] Bluetooth: hci0: command tx timeout [ 376.987707][T17638] netlink: 'syz.0.3281': attribute type 1 has an invalid length. [ 377.131382][T12757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.139336][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.162634][T12757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.184754][T12757] bond0 (unregistering): Released all slaves [ 377.340612][T17638] 8021q: adding VLAN 0 to HW filter on device bond13 [ 377.420053][T17643] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 377.451849][T17639] bond13: (slave bridge11): making interface the new active one [ 377.462103][T17639] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 377.484270][T17640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.494757][T17640] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 377.666381][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 377.691720][T17661] netlink: 'syz.2.3286': attribute type 4 has an invalid length. [ 377.743340][T17663] netlink: 'syz.2.3286': attribute type 4 has an invalid length. [ 377.896231][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 378.004707][T17649] lo speed is unknown, defaulting to 1000 [ 378.179160][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.343246][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.368055][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.397047][T17590] bridge_slave_0: entered allmulticast mode [ 378.424166][T17590] bridge_slave_0: entered promiscuous mode [ 378.492209][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.521129][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.528563][T17590] bridge_slave_1: entered allmulticast mode [ 378.561187][T17590] bridge_slave_1: entered promiscuous mode [ 378.599972][T17681] lo speed is unknown, defaulting to 1000 [ 378.769774][T12757] hsr_slave_0: left promiscuous mode [ 378.793257][T12757] hsr_slave_1: left promiscuous mode [ 378.809574][T12757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.823943][T12757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.841594][T12757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.860685][T12757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.896452][T12757] veth1_macvtap: left promiscuous mode [ 378.906641][T12757] veth0_macvtap: left promiscuous mode [ 378.915763][ T5853] Bluetooth: hci0: command tx timeout [ 378.924141][T12757] veth1_vlan: left promiscuous mode [ 378.930514][T12757] veth0_vlan: left promiscuous mode [ 379.219125][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.823701][T12757] team0 (unregistering): Port device team_slave_1 removed [ 379.891478][T12757] team0 (unregistering): Port device team_slave_0 removed [ 380.259161][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.683877][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.787516][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.981564][ T5853] Bluetooth: hci0: command tx timeout [ 381.166767][T17590] team0: Port device team_slave_0 added [ 381.217262][T17700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3297'. [ 381.237196][T17590] team0: Port device team_slave_1 added [ 381.299108][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.357120][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3298'. [ 381.447957][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.481056][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.517203][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.534097][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.543734][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.579336][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.698545][T17590] hsr_slave_0: entered promiscuous mode [ 381.730706][T17590] hsr_slave_1: entered promiscuous mode [ 381.737418][T17590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.746089][T17590] Cannot create hsr debugfs directory [ 381.881727][T17710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3301'. [ 381.950580][T17710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3301'. [ 382.247594][T17731] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3308'. [ 382.258582][T17731] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3308'. [ 382.297308][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3308'. [ 382.339104][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.428368][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.452616][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.454529][T17740] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0xa [ 382.470762][T17737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.487473][T17742] xt_hashlimit: size too large, truncated to 1048576 [ 382.508999][T17737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.721633][T17748] macvtap0: mtu less than device minimum [ 382.887515][T17590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.946267][T17590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.968462][T17590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.981070][T17590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.060640][ T5853] Bluetooth: hci0: command tx timeout [ 383.318762][T17778] vlan2: entered allmulticast mode [ 383.343819][T17778] bridge_slave_0: entered allmulticast mode [ 383.363888][T17778] bridge_slave_0: left allmulticast mode [ 383.379799][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.422950][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.476154][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.511843][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.519258][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.545536][T12773] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.552800][T12773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.594063][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3328'. [ 383.975986][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.062398][T17590] veth0_vlan: entered promiscuous mode [ 384.086826][T17590] veth1_vlan: entered promiscuous mode [ 384.210233][T17590] veth0_macvtap: entered promiscuous mode [ 384.272785][T17590] veth1_macvtap: entered promiscuous mode [ 384.340112][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.368178][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.409328][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.419254][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.449684][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.471148][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.496393][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.517944][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.540539][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.583473][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.599882][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.628976][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.642501][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.653936][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.685814][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 384.702039][T17823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3335'. [ 384.711015][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.742755][T17590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.779193][T17590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.787978][T17590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.831369][T17590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.012979][T17590] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 385.042994][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.098844][T12759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.117410][T12759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.176348][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.190612][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.329638][T17847] sock: sock_set_timeout: `syz.4.3345' (pid 17847) tries to set negative timeout [ 385.337373][T17849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3346'. [ 385.405409][T17849] hsr0: entered promiscuous mode [ 385.441722][T17849] macvlan2: entered allmulticast mode [ 385.447219][T17849] hsr0: entered allmulticast mode [ 385.459158][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.489501][T17849] hsr_slave_0: entered allmulticast mode [ 385.500272][T17853] netlink: 'syz.3.3346': attribute type 10 has an invalid length. [ 385.517368][T17849] hsr_slave_1: entered allmulticast mode [ 385.539522][T17853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3346'. [ 385.554285][T17849] hsr0: left allmulticast mode [ 385.573159][T17849] hsr_slave_0: left allmulticast mode [ 385.579893][T17849] hsr_slave_1: left allmulticast mode [ 385.896778][T17863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.187920][T17887] openvswitch: netlink: EtherType 6 is less than min 600 [ 386.341547][T17893] netem: change failed [ 386.474706][T12759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.499248][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.288552][T12759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.539106][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.668152][T12759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.984477][T12759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.016367][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.035135][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.070123][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.094102][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.103972][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 388.113561][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.385770][T12759] bridge_slave_1: left allmulticast mode [ 388.393653][T12759] bridge_slave_1: left promiscuous mode [ 388.403389][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.451179][T12759] bridge_slave_0: left allmulticast mode [ 388.456907][T12759] bridge_slave_0: left promiscuous mode [ 388.473541][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.579137][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.732806][T17948] __nla_validate_parse: 3 callbacks suppressed [ 388.732828][T17948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3372'. [ 388.864153][T17951] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 389.311795][T12759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.325890][T12759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.339752][T12759] bond0 (unregistering): Released all slaves [ 389.619090][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.188847][ T5853] Bluetooth: hci0: command tx timeout [ 390.665072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.700434][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.288321][ T5853] Bluetooth: hci0: command tx timeout [ 392.739150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.770998][T17931] lo speed is unknown, defaulting to 1000 [ 393.007142][T17961] xt_bpf: check failed: parse error [ 393.064698][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3375'. [ 393.111659][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3376'. [ 393.137045][T17967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3379'. [ 393.175069][T17967] bond0: option miimon: invalid value (18446744073357230079) [ 393.183056][T17967] bond0: option miimon: allowed values 0 - 2147483647 [ 393.183289][T17963] nftables ruleset with unbound chain [ 393.483020][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 393.609004][T12759] hsr_slave_0: left promiscuous mode [ 393.627221][T12759] hsr_slave_1: left promiscuous mode [ 393.646772][T12759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.654803][T12759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.670909][T12759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.678618][T12759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.755330][T12759] veth1_macvtap: left promiscuous mode [ 393.769089][T12759] veth0_macvtap: left promiscuous mode [ 393.774884][T12759] veth1_vlan: left promiscuous mode [ 393.779189][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.790664][T12759] veth0_vlan: left promiscuous mode [ 394.342618][ T5853] Bluetooth: hci0: command tx timeout [ 394.819156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.973878][T12759] team0 (unregistering): Port device team_slave_1 removed [ 395.055349][T12759] team0 (unregistering): Port device team_slave_0 removed [ 395.753364][T17990] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 395.764498][T17990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.776115][T17990] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 395.784849][T17990] macvlan2: entered allmulticast mode [ 395.791385][T17990] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 395.805336][T17990] mac80211_hwsim hwsim17 wlan0: left promiscuous mode [ 395.859134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.041668][T18001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3388'. [ 396.100458][T18010] netlink: 'syz.2.3390': attribute type 21 has an invalid length. [ 396.111996][T18010] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.141801][T18010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.149201][T18010] IPv6: NLM_F_CREATE should be set when creating new route [ 396.156557][T18010] IPv6: NLM_F_CREATE should be set when creating new route [ 396.164065][T18010] IPv6: NLM_F_CREATE should be set when creating new route [ 396.194773][T17931] chnl_net:caif_netlink_parms(): no params data found [ 396.421413][ T5853] Bluetooth: hci0: command tx timeout [ 396.435175][T18026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3393'. [ 396.480440][T17931] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.488254][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 396.510324][T17931] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.517679][T17931] bridge_slave_0: entered allmulticast mode [ 396.536728][T17931] bridge_slave_0: entered promiscuous mode [ 396.545235][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 396.596404][T17931] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.603714][T17931] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.612074][T17931] bridge_slave_1: entered allmulticast mode [ 396.619448][T17931] bridge_slave_1: entered promiscuous mode [ 396.672756][T17931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.686483][T17931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.746410][T17931] team0: Port device team_slave_0 added [ 396.766904][T17931] team0: Port device team_slave_1 added [ 396.844859][T17931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.868550][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 396.877901][T17931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.877946][T17931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.881520][T17931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.906528][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.991919][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3397'. [ 397.001296][T17931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.052171][T17931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.305228][T17931] hsr_slave_0: entered promiscuous mode [ 397.360372][T17931] hsr_slave_1: entered promiscuous mode [ 397.380284][T17931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.391405][T17931] Cannot create hsr debugfs directory [ 397.400669][T18059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3401'. [ 397.558647][T18068] netlink: 'syz.4.3406': attribute type 4 has an invalid length. [ 397.574293][T18068] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3406'. [ 397.855988][T18089] netlink: 'syz.2.3414': attribute type 11 has an invalid length. [ 397.892253][T18092] Bluetooth: MGMT ver 1.23 [ 397.939136][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.941517][T18088] nicvf0: tun_chr_ioctl cmd 1074025676 [ 397.983582][T18088] nicvf0: owner set to 0 [ 398.251405][T18099] lo speed is unknown, defaulting to 1000 [ 398.486929][T17931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 398.512114][T17931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 398.525286][T17931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 398.556267][T17931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.793898][T17931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.849605][T17931] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.864405][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.871721][T12759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.911747][T18097] lo speed is unknown, defaulting to 1000 [ 398.923817][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.931048][T12759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.979117][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.096945][T18119] veth1_macvtap: left promiscuous mode [ 399.112396][T18119] macsec0: entered promiscuous mode [ 399.148188][T18120] veth1_macvtap: entered promiscuous mode [ 399.161649][T18120] macsec0: left promiscuous mode [ 399.190885][T17931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.312598][T18119] No such timeout policy "syz0" [ 399.801081][T18131] netlink: 'syz.0.3422': attribute type 2 has an invalid length. [ 399.911480][T17931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.020007][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.067902][T17931] veth0_vlan: entered promiscuous mode [ 400.120883][T17931] veth1_vlan: entered promiscuous mode [ 400.215984][T17931] veth0_macvtap: entered promiscuous mode [ 400.235211][T17931] veth1_macvtap: entered promiscuous mode [ 400.252208][T17931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.263162][T17931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.273376][T17931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.284618][T17931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.295470][T17931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.307099][T17931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.321312][T17931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.341936][T18141] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3425'. [ 400.391018][T17931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.402764][T17931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.413668][T17931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.425839][T17931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.436922][T17931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.448324][T17931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.460866][T17931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.473196][T17931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.482719][T17931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.492413][T17931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.501900][T17931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.525106][T18153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 400.545787][T18152] tunl0: entered allmulticast mode [ 400.692129][T18141] ------------[ cut here ]------------ [ 400.698216][T18141] WARNING: CPU: 0 PID: 18141 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 400.711655][T18141] Modules linked in: [ 400.715613][T18141] CPU: 0 UID: 0 PID: 18141 Comm: syz.0.3425 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 400.727987][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 400.738288][T18141] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 400.745521][T18141] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 f6 8a 8d fa eb 05 e8 ef 8a 8d fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 400.766247][T18141] RSP: 0018:ffffc9000353f6b0 EFLAGS: 00010283 [ 400.772925][T18141] RAX: ffffffff87074f71 RBX: 0000000000000000 RCX: 0000000000040000 [ 400.781063][T18141] RDX: ffffc90004821000 RSI: 00000000000061fa RDI: 00000000000061fb [ 400.790127][T18141] RBP: 0000000000000000 R08: ffffffff87074d7d R09: 1ffffffff203acf5 [ 400.798263][T18141] R10: dffffc0000000000 R11: ffffffff8706bdc0 R12: ffff88802832ee32 [ 400.806421][T18141] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888030fe30a0 [ 400.814603][T18141] FS: 00007f2249ca66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 400.825012][T18141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.831736][T18141] CR2: 00007f46a76656c0 CR3: 0000000031386000 CR4: 00000000003526f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.839819][T18141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.847852][T18141] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.856845][T18141] Call Trace: [ 400.860292][T18141] [ 400.863274][T18141] ? __warn+0x168/0x4e0 [ 400.867492][T18141] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 400.873746][T18141] ? report_bug+0x2b3/0x500 [ 400.878335][T18141] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 400.885724][T18141] ? handle_bug+0x60/0x90 [ 400.890352][T18141] ? exc_invalid_op+0x1a/0x50 [ 400.895227][T18141] ? asm_exc_invalid_op+0x1a/0x20 [ 400.900707][T18141] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 400.907210][T18141] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 400.914414][T18141] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 400.920643][T18141] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 400.926795][T18141] ? mac80211_hwsim_add_interface+0x86/0x320 [ 400.932934][T18141] mac80211_hwsim_add_interface+0x9a/0x320 [ 400.938831][T18141] drv_add_interface+0x2f8/0x8e0 [ 400.944920][T18141] ieee80211_do_open+0x73d/0x2430 [ 400.950116][T18141] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 400.956618][T18141] ieee80211_open+0x192/0x200 [ 400.961469][T18141] __dev_open+0x2d3/0x450 [ 400.965911][T18141] ? __pfx___dev_open+0x10/0x10 [ 400.971895][T18141] ? dev_set_rx_mode+0xb8/0x2e0 [ 400.976842][T18141] __dev_change_flags+0x1e2/0x6f0 [ 400.982168][T18141] ? __pfx___dev_change_flags+0x10/0x10 [ 400.987903][T18141] ? apparmor_capable+0x13b/0x1b0 [ 400.993152][T18141] dev_change_flags+0x8b/0x1a0 [ 400.998010][T18141] devinet_ioctl+0xcce/0x1ac0 [ 401.003758][T18141] inet_ioctl+0x3d7/0x4f0 [ 401.008176][T18141] ? __pfx_inet_ioctl+0x10/0x10 [ 401.013204][T18141] ? lockdep_hardirqs_on+0x99/0x150 [ 401.018510][T18141] sock_do_ioctl+0x158/0x460 [ 401.023336][T18141] ? __pfx_sock_do_ioctl+0x10/0x10 [ 401.028535][T18141] sock_ioctl+0x626/0x8e0 [ 401.033930][T18141] ? __pfx_sock_ioctl+0x10/0x10 [ 401.038967][T18141] ? __fget_files+0x29/0x470 [ 401.043638][T18141] ? __fget_files+0x3f3/0x470 [ 401.049022][T18141] ? __pfx_sock_ioctl+0x10/0x10 [ 401.053990][T18141] __se_sys_ioctl+0xf9/0x170 [ 401.058852][T18141] do_syscall_64+0xf3/0x230 [ 401.059240][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.071075][T18141] ? clear_bhb_loop+0x35/0x90 [ 401.075856][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.081886][T18141] RIP: 0033:0x7f2248f7e31b [ 401.086373][T18141] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 401.107248][T18141] RSP: 002b:00007f2249ca4e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.115852][T18141] RAX: ffffffffffffffda RBX: 00007f2249ca4f80 RCX: 00007f2248f7e31b [ 401.124043][T18141] RDX: 00007f2249ca4ee0 RSI: 0000000000008914 RDI: 0000000000000010 [ 401.133190][T18141] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 401.141522][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 401.149679][T18141] R13: 0000000000000048 R14: 00007f2249ca4fa0 R15: 00007f2249ca4ee0 [ 401.157823][T18141] [ 401.161931][T18141] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 401.169702][T18141] CPU: 0 UID: 0 PID: 18141 Comm: syz.0.3425 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 401.180515][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 401.190624][T18141] Call Trace: [ 401.193952][T18141] [ 401.196926][T18141] dump_stack_lvl+0x241/0x360 [ 401.201663][T18141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.206939][T18141] ? __pfx__printk+0x10/0x10 [ 401.211590][T18141] ? _printk+0xd5/0x120 [ 401.215801][T18141] ? __init_begin+0x41000/0x41000 [ 401.220891][T18141] ? vscnprintf+0x5d/0x90 [ 401.225387][T18141] panic+0x349/0x880 [ 401.229336][T18141] ? __warn+0x177/0x4e0 [ 401.233547][T18141] ? __pfx_panic+0x10/0x10 [ 401.238016][T18141] ? show_trace_log_lvl+0x3b2/0x410 [ 401.243299][T18141] __warn+0x34b/0x4e0 [ 401.247337][T18141] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 401.253484][T18141] report_bug+0x2b3/0x500 [ 401.257889][T18141] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 401.264060][T18141] handle_bug+0x60/0x90 [ 401.268373][T18141] exc_invalid_op+0x1a/0x50 [ 401.272951][T18141] asm_exc_invalid_op+0x1a/0x20 [ 401.277871][T18141] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 401.284732][T18141] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 f6 8a 8d fa eb 05 e8 ef 8a 8d fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 401.304437][T18141] RSP: 0018:ffffc9000353f6b0 EFLAGS: 00010283 [ 401.310595][T18141] RAX: ffffffff87074f71 RBX: 0000000000000000 RCX: 0000000000040000 [ 401.318631][T18141] RDX: ffffc90004821000 RSI: 00000000000061fa RDI: 00000000000061fb [ 401.326662][T18141] RBP: 0000000000000000 R08: ffffffff87074d7d R09: 1ffffffff203acf5 [ 401.334703][T18141] R10: dffffc0000000000 R11: ffffffff8706bdc0 R12: ffff88802832ee32 [ 401.342737][T18141] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888030fe30a0 [ 401.350773][T18141] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 401.357265][T18141] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 401.363325][T18141] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 401.369652][T18141] ? mac80211_hwsim_add_interface+0x86/0x320 [ 401.375708][T18141] mac80211_hwsim_add_interface+0x9a/0x320 [ 401.381585][T18141] drv_add_interface+0x2f8/0x8e0 [ 401.386560][T18141] ieee80211_do_open+0x73d/0x2430 [ 401.391701][T18141] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 401.398241][T18141] ieee80211_open+0x192/0x200 [ 401.402984][T18141] __dev_open+0x2d3/0x450 [ 401.407354][T18141] ? __pfx___dev_open+0x10/0x10 [ 401.412230][T18141] ? dev_set_rx_mode+0xb8/0x2e0 [ 401.417205][T18141] __dev_change_flags+0x1e2/0x6f0 [ 401.422267][T18141] ? __pfx___dev_change_flags+0x10/0x10 [ 401.427840][T18141] ? apparmor_capable+0x13b/0x1b0 [ 401.432911][T18141] dev_change_flags+0x8b/0x1a0 [ 401.437763][T18141] devinet_ioctl+0xcce/0x1ac0 [ 401.442498][T18141] inet_ioctl+0x3d7/0x4f0 [ 401.446864][T18141] ? __pfx_inet_ioctl+0x10/0x10 [ 401.451746][T18141] ? lockdep_hardirqs_on+0x99/0x150 [ 401.457020][T18141] sock_do_ioctl+0x158/0x460 [ 401.461641][T18141] ? __pfx_sock_do_ioctl+0x10/0x10 [ 401.466796][T18141] sock_ioctl+0x626/0x8e0 [ 401.471180][T18141] ? __pfx_sock_ioctl+0x10/0x10 [ 401.476057][T18141] ? __fget_files+0x29/0x470 [ 401.480699][T18141] ? __fget_files+0x3f3/0x470 [ 401.485440][T18141] ? __pfx_sock_ioctl+0x10/0x10 [ 401.490369][T18141] __se_sys_ioctl+0xf9/0x170 [ 401.495007][T18141] do_syscall_64+0xf3/0x230 [ 401.499542][T18141] ? clear_bhb_loop+0x35/0x90 [ 401.504252][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.510170][T18141] RIP: 0033:0x7f2248f7e31b [ 401.514605][T18141] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 401.534232][T18141] RSP: 002b:00007f2249ca4e60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.542689][T18141] RAX: ffffffffffffffda RBX: 00007f2249ca4f80 RCX: 00007f2248f7e31b [ 401.550782][T18141] RDX: 00007f2249ca4ee0 RSI: 0000000000008914 RDI: 0000000000000010 [ 401.558898][T18141] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 401.567023][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 401.575118][T18141] R13: 0000000000000048 R14: 00007f2249ca4fa0 R15: 00007f2249ca4ee0 [ 401.583169][T18141] [ 401.586500][T18141] Kernel Offset: disabled [ 401.591293][T18141] Rebooting in 86400 seconds..