last executing test programs: 8.518461537s ago: executing program 4 (id=4483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000001740), &(0x7f0000001a40)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000980)="575703f3efb3a7f0f4176cdaeb6bcf411562a0a342701124a4b66496a3c4dfac22f3d8054985c5aef40b490eb269ec0033e4b6fd7f32d8a8930b715ac0ac861b7e7126c84ffcd2ae0a1310c429b1845418d46cfa6c4095fd685e2c7a911d7a78c81ddae4a70843822ce4c4e95ed1d0ad67bd7c9a4cf4ec7284e95bb6201924f8cb", 0x81}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x0) write(r4, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x48844) 5.646146379s ago: executing program 1 (id=4496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000531f0095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r3, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x4000000) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 3.194131258s ago: executing program 4 (id=4498): r0 = epoll_create1(0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0xfc, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req={0x0, 0x9, 0x9, 0x400}, 0x10) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) close(r4) shutdown(r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c70000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) 2.655435027s ago: executing program 1 (id=4499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001cc0)={@val={0x0, 0x88ff}, @void, @eth={@multicast, @remote, @void, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x3, 0x6, "0ca036", 0x8, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1}}}}}}}}, 0x42) 2.439842563s ago: executing program 0 (id=4502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x101}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x40}}, 0x0) 2.066647426s ago: executing program 4 (id=4503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r3, 0x6}, 0x8) bind$phonet(r1, &(0x7f00000003c0)={0x23, 0x1, 0x8b, 0x1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r4}, 0x38) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r5, 0x107, 0x2, 0x0, &(0x7f0000000100)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r8}, 0xc) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @dev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r10, 0x29, 0x9, 0xc0, 0xfffffffd, 0x32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x10, 0x2, 0x3ff}}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)="af", 0x0, 0x2, r4}, 0x38) r11 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x40) 1.391384358s ago: executing program 2 (id=4504): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x40}}, 0x0) (async) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) 1.390146629s ago: executing program 0 (id=4505): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x700, 0xfffffffe, 0xffffffff}}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000280)=0x1c20, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)='Z', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0xfa0}}], 0x18}}], 0x1, 0x20020000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000040)) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000540)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0xcf, 0x2, "71b32cccbfc685553f44aea390ae73b22ddfce3bf6e2c8e79510888057430231078a047338debc93cf598224b4be27887843e81ce2cff4afdde6aeb7c1c193", 0x16}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000005c0)="b32e283e6a12a008a551543eef362b44770e4dd7bf6317ebd34e966ff12565582046b10d33251a0f8cdb2fcddff372d61ed5c63e7f972b479f78263e826acc972a97701663cf90416bff9f2d828ee71f8faeb49d8e523c52ab8ce6c8f82958f0ab86851fcdd7d0ce5022353fba1456a90c7b7ca9dfff32", 0x77}, {&(0x7f0000000640)="9f4459d626b78d313ea46ab70684df8cc3d5357a0cff8bb56b1844f58586b14b7c583f4d1e8d4717bdf29d98d8a054d4dfffa1358f80041434ef2f3436b7991a6290dff425e1cd762873953af5d4ba66b5f31fe0a542e1b138157b9853fa335e040b59d0120f051295614152b5c14c6365f8dc44339c3c40dd0b9081371e70ad37ac2f157ddcf2128e6cd4c063368bff1d423e9d401ab2091acb13800676ef360a9e8a034bad8c052af84e69956a7bdd8a31c75ad72d340974d4ace52c8e", 0xbe}, {&(0x7f0000000700)="7dcc89dd98bd4bc1a6d3c9f21bddb76cd129c8881ae334f2e8aa32fd5a0ad64d8f65086a3cfc062cbdcbf3fb4c9c7fe16f4faa1ed583b2f93ba8a5e4873f356dd633964896bd6b8d9e67b523dde6bdd290331a3ecc5aecbfc2c13f78ac2d446987aaafd546e3f3ac0112ffafc4dbdc191af02a121f97ff4df9ab8ddc048cf072726d5a3fade3603c88e19f8057c70cde3b460cd7874245", 0x97}, {&(0x7f00000007c0)="a51aab5d2a7dbd63722f30ecf3741b4e4ad6ab6957a3646ad62a794a6442d1ba2de3671cc86457dbf52b5c83ca12999fa539d631e69905216c54e80a8c4f5763457390024ac6a3987ee2efbe42b78d7d", 0x50}, {&(0x7f0000000840)="b2e619d2852013d32ee4492d2a55f399ddb4bc46c496b45951e8c89b5d242815aa9b488c2daa6f8b4f7f0c5566d0e87a79e31171ad233f3b490b735cfb4b3aa2ab5e143cc6914ce14b49deec20e2dfce9a32eed395b5033f1c34c02c61c3b471636f024dcaa66c676c83aa0d3592fcc3560cfc55fb00b26864cb0322915281e3abcc71eb1691ce65f498913a534f525b50c1a51243481bbea51c1e1ad17b5c2c26c22f2c86c3044c295f0a1c8714ead116675138116dc465b981eadbb85629fa3820ffb3377072bbe6580cb811d3d087f7e5afe2b2", 0xd5}, {&(0x7f0000000940)="900756e06a93ce373cfcc8068d6b763071b8b942ced55dd2f1947679f9464e225f3300e592581a2ef7b83de6833dc0c3a0f6573326d13a9233b6f272a3982f19e6c3458b7fdf1740fd42ac998af833f09a2ef4591c944398c2e24877a1aa86629ddeece115ca0673799626500eee3ef244", 0x71}, {&(0x7f00000009c0)="dc01c12ad8b6fd9f40113ed9e775422c55b54d5aac2464b52d6ce2374990096c118d516de9faedcfd6a73f2ab22e2a7dd627add97ac2de251d831a959d56b3ae548eac8bb9f85cd7f480cecb6c21555c2d4f9beeda3131f4bc621e9e719e58c7bfb6039c61939963c3ce5ac1b7b6fd71d1aaf1d08ee9f8855350391f527843ac1a3102573ea1", 0x86}, {&(0x7f0000000a80)="0db656ae92591eb8c097ab641000a00dc5a8fb71dd01026e46975a27af6e3660cc185990ae419be14f2d25ded0cfbd86d0cd9167d035508aac0478597475a158b36eadb71412a57dfc7da3ead61a5d49cd11797e289500b863473409629a888eb655", 0x62}, {&(0x7f0000000b00)="c893fe556b747e5ce769e4f69391efed364f27895a09be4039becef1ddfc34fbf155c73cd67311f28982bf54e56cbd31a36d82494f2a0e686b284ce2c53420112b66903aa2fc0831861a7a46338fa9bf84904dbea127bd8c348b495dbf64a111b2aef98f3158e9ce35236840611a154a0e753f0c1d3621c905c6aabfa13ad331cbb98a7427670b64e1630a2f35c74461c33203cd6e47dd8a3ef48505b99dea559bd5fe9b15ae24af8dbf3c30", 0xac}, {&(0x7f0000000bc0)="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", 0x1000}], 0xa, &(0x7f0000001c80)=[{0xd0, 0x6, 0x2, "142945237a593116750d64de8c590dd03fdd2e02f16efab7d1d5d56aa802cedea2a600918ee2132b4f40869e528eb2f7fe6ec70c996702160d9aa10c57b3118d0b4f84aa6407e24f1ec11ea6bf670d5acaaf6ba114d1d97deade1e228f1ced87f5a38efff66792e001abcdc91fa87d851a026f7b3aa8a4c161537a51391a845482b84ccc1bf35d0f86bf583536b88ea097dfd264fed310175325e85e35b34c45bc88a0aab4b2bfe0ab2f97a69ee10f164969a275b0668a1d52d6aaf972d41f04"}, {0x88, 0x84, 0x7, "28ed74388e96efc599584e5a9a6aaa5620f06b4ad323da8b7dc20f10c3b22fe8ab8260bcfab710bcbd5f6c46a9d98bc7a2ab6d0f93bc71076c70fb32e08a73fd549736ebb6f1a3935ac0fda9b1d742bf1327e0053202720e0a6700389a48197cf91be16275aa03f5eeceabd5dfa40bced451afc40a230278"}, {0xf8, 0x3a, 0x41, "484bce3afd1f8185dad6426e49412a47827a93f004bf1a05e4bfbfed9e94ec7bdf3719ea094f0c2fa3508d398eb45c13e8f86b7ee8f9c392eb478b0369f7b70021fc945b537b5f87377d4c855c47974c95255067b72af688225af3131e476fb94e34c95e307a80dc9d45311afd903b9ef03821382f05c34afefb95ecb1198dcd0dc0f25119bc5fc8748cb284ea640557cad014d24d60ef737ad8646d3226d84f39c7fcad086fd8de13b69df825dcc274da6bda718ae5b2e1e01ad60468d4861b61ad78433956f7bd93692dcbbc1374ed573ec8d0f20f037f7d115d1e10e7c93826c85b80dd"}], 0x250}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff960f}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x522, 0xa6, &(0x7f0000000200)=""/166, 0x41100, 0x50, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0xffff, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x4, 0xa, 0x6}], 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@RTM_GETMDB={0x18, 0x56, 0x30a, 0x70bd2c, 0x25dfdbfe, {0x7, r7}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8845}, 0x4000000) 1.328748847s ago: executing program 3 (id=4506): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001000000120000", @ANYRES32=0x0], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340)="4e1711f12009f62924befccf8176013c27c56f04ac111c294d6ec5440874e7e9251ae85c95da5d7b75528d79fcac82c252bc1fb01b2e3adfdb308bc32562587f8b4edd41203d6fc3e9587cfd75f6ebfe73910fb1e1339bdbe9a469", 0x80000002, r1}, 0x38) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) 1.286093956s ago: executing program 4 (id=4507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000140)="12fe7667a2563fc9827e7d45325ff43a57f3c7f5fc87300f4762f63db2c3dba50fb3fcab713caa0ac6654b836dfaa740b6773e3aeb912af4d467b491f34253348dd770f8b86b0f55578d84a66fa9461f8780c5f8e68e9fc3c600ab1eca427ad463baefb0319f11716f499df442f4f80e0131b77f2f9ecdea0c3bbafc4994df385863a7762821fb9e35574ff3f0629ad19408a175afade71ae7d5c938431be3ae4ea7ec3f5ed057240e15f8fbd919eae5dd009d85c9f3605e753cc1d7b58b6b6075e1ed63de860c369fc05b7e250fab3ed93bc40d52d6ff1ad19a26a2a7b1f490c92f767364d5", 0xe6}, {&(0x7f0000000240)="895094fbec51a40808d6021298ee6251611754a90fe66af766a3ae05a7fc73653c4a64260952c2bc8f457154e7f0c5fb25d65635d5151635b59f3b982f495a662fce797071566f9c6aea6ac8a25f500077aee1e437faca10f489997006efed8fec0bfc36cb212daf49258c8672edef656b7294e32591974db7667a4baf3101ec4867ffa15fef922ee66c6586ca29f3675d9925109747c6b5912b5d4979e43bc489e089e1bcf8c166b320aa136766780ed0b0c1626a7e4df2a191b1f0814e151f82a0d89421154dabf9dd63b75750fbed23fce9db629ee790c9a3a8", 0xdb}, {&(0x7f0000000040)="b613599e86a480b81c7dc92a9f127769f502c6726c7330537c3943751f97ac21bda0b96bedb72d7d3183d3b472855de7ce6f8a3bd0a06106aae49b293a26588fbb7431daf3250d240158fcb3914a18f5855c38579b92190904cee692a5e94ff86a1597840f5203021462c2c6677ee2", 0x6f}, {&(0x7f0000000340)="db0697835df65477d598cf1c47ee669d424746637969dbe2c8f61a930ca613028188a319c5b1342b26b1c8e2c53c706ee2b0a4f4d760e88b14ad62017bbf7964e2851ac27c04fe462a91dda130d4ef58b2e1061fb7d7fd3ef4cb16ef736eb9a3791bd3cc34f08598d7acd91523bcbd059376206aa88905ceb89a774090451515cba16b1a0ff578089baa0e02c9c9c0448a173fddd370a0194849d247d5f27bf2cd56e71a83b8117f243f53c10d169e4c51b963cf0d01e784dbb825cd7fc7099369f1ae099bdcccd970121343dd82f6e3678514ea8b47e3aa8121f32d", 0xdc}, {&(0x7f0000000440)="f735098f7e916e99e3455f9218564f9546b7b67daa3d58e33f92f3e57be86ac9043c392cc04694cc43d8352a3c912af8662c6f0183d501ff5d4ed7ab670aaa3fc7b496f15549e360418576fbc2907f0c4f4de6aead6b886dc3709805afd38b37964538e67a09ee959e2a5045914ad525a8325bf58b19eba169309559800181d4670694c53e1a82e8f2c78d3c1ddf61fda6af75519eed62a0cfbe64324c0313212877275a45fc40d7bd3432e5277292315d7dcb43ca09a1245e740030d92bbc301ddeaf27d6259a263244a5924c2b11b605d25738a413441fc4a0cf53ba2786246efc131bce4d5bf489168ca9a71c95e78c334285cf1ee888c5b6d3ca6a93d86f19e05160768873d7ad4d2a29fb9c3dca5e96bbae1037adeb620ee57209814c515bb9242aadfeba9226b5b28b929ca60b826f29f15a3e78179ff74bbb87235f9a82a1fc1063897fe69a8688fd03f6c51e71a2a8bbfe794b3c5df416c114b715dc44a7e878c8b770565355158155a73ea1ce1b548ae97d1e51586492cf27ae27b101afc9df53826d63760200b1a16e671e16af4df73fa8f564b0e8e22148c3f2647f2e528f1750218ec7808647f888748103d81c1c32a6e4ccec6a963361e6ebf614e3978dc0cf08e84ff052a261ad1b15e3ffe5cfdfae22d91afe5b9506bae5b43020a6236d9598ddf6707ae47677e48bb7e51c7ec4575329ac248dcc3aec31abb22d9e5c94c596f0236fc5d69334541cfa311f2e34e7298c20f62071feed182f97b57ed631c9482c10a262a67f1f1f98a3151df337afe63f6ddfdb7f0a59a53975741e328c360a5188b20b8e980a1a430208b5e79baa6d2967bc79b684bafbbd547b32274d6d132e81bc872e18634d5c93fb2493b6219ab0e8473b9169c07143dd084714d17e49612a8d8fce6052a68dde71b14db45481cab14dad67bc4cae2fd3ada0a340220936e926e4a5b1c8d042b165dd00fb9fbde5ff5f86361a84bf0bc63cbf9626203c82f73cb0287e360b94296fd822a7ac707119e449d2a3e282831c77c523e9619614a1a83b797568b78b63a5714510cf36689b5ba2c6e88a980d03df3f627a052f105dde09b43fcc1e8f287d71696636e9f56524a09e02506471fba959f654ce0d5bd1c6896c9d0fa41d02eeed22ea76e80ccddff51cce05448e95b731eb4092a37055fa89839c9f40316cb7faee5074bed0075b7d75227179332353692c700e821a7791e57552c2855a531029425efa58763d662e90af64b5a916b825d29270b3c1659bd2cd2e10cbf4b306f9a1534995e859754917f2c0ed292fdb8115d6333b1c51394bb15e826a20d27c699f1d8c5f662b00e8f95dc7a515e99adea5b76bf6113a14e1dbde59258e261bc6a814447294e7890cd7d6a5e80c44f24f2ba4140fe7741996eb410a0199326a6e04ccdfc647fd83c9843d67cc36bab6358896325dfde921a29b4e5d0c9ce620fc71095fd11b7bf4126a9b2ac33272bf0b31386f1f38e5b7c6014c1d654771e07939a476a7285a2d5b902782c4d43da9125ab88353df7d47c46c94b291fc73b235f54393bb4f94e3c7c370cd4bf25f0b148fb3e765e240cd3210a9768e736443829d13999ba2119803e4626bf11c0fd1e75b0ba72769189f0daeb0cffc59be33ab5d8179af20a1411add26d4494168d13986d75e9b1e9b6403e1210c04ef32e4c21dbf445da2d8cbefcf6c5a40bf9b04a4b60c30bae023b22e005caa2438110e2d94c7521bdf5876a64b9c4f9d02976d3098265da59c2177586d2a7d33c67df53f038026dfc03521815237ef3ad546d20daf27d515af6de2297a4c0daa7d9c97b7302853175c5d6f58bd1f0e68d3d9a5b7229245e2c8582b1c90a1a6bfeca24be1b2dea9e0381c2f8a69e4cea182be3603639a3a8b48d095a6d0f8de0d287aafef2329eeebef3a1f0dadf72dc095dcb314b0fa72a4192e9e9806908e5d7370d1747bc69cdccb06e06b34610ee8891dbe39d66b21f56c689a05a0f40788f40bfcf4d1d1f4b4f5480ebcdbb4f55d9210ef1eecef25e9051b2ac5b77d6606b6f962bf89fb952ea37918da26539b4027439b10322c425ed534be404292f1b493cfc44602b165a7f8465243de6412533af136e0c0057a13817a2b43d45b67435009910f83e2bc46ff116b8e4a2d18a762a1ff0a1637bb4231fa80d3dfd5a20f0c51af722a3b863b41af55db8642f22394187a3d6e9b1e6452713e4b3616449d8eee9f4ecb6604d9ca516403f33589b304dff17786c7ed915551b31acb74e568d3ec2d3bcf42618188cc9a19e338c415c7dfb038855687ecd511ddbb5c0a03caa6b5d8241d0fcc8d1f0e4009333153c0cf327b03adeae5d5c282cde1b752c755596996f7dd4d134a4f99c42a2c22b8dcc69e1e56ad5425d3313c0c7b508e46f1d14445e5617fab747ee8e2ed3584c85965c10df2737160776f70ac29839ce10ea46bc63824cbc7e5706d37a2a3ad830ec365b61f52aad9cec0975301f4ad616b126d9c936139b59bb5c2950969a8a4a9ac224217e6e17ddae163154cb0563107d946631cca5b955e1bfce950403a1561aa11f5667e5bf6665ef4de563830662b34a2460f04c0b7febdc81789e785b44734fc1e3874290ca0fb41a9d12e71694f31fa1ff5f8aca7aec676d20551baafbaafa6f9dd62a55810ef6bf51566f0e242b15f96e060d96de44944699ada6a72d6a34b6dfab762f194e54a2bd1aad9f140631b132ee157cb1df2f10c37c586f34914906dfa9118d85c1be53f95230b30e156758d41809c40140e514aba737d4edbce8458f5e0d424c5a31c80e87dc3e23cc9373689b8104d2b7e4fdbe08a92856a2b63a49ca446c1334d0b73d796ab36781ac05987f1465ece17ce542eb5e90bf37b028c88838623bab6df874c87d0ae5aa20fe2cc127c102054fa3d3ba04b97594b745795490dba6a92d93c2ce231eea8306f57f817e402eeadb137bcba4a84a11c6a8206147fd43878e80bece44fc90551c50ba21a316f0bb166d0f4ff4619cbf03005362cb4efd8a8474ab2daf3cabc0c5e182419e9e09ac045467b575814765a2c9d057c7f3dc05588909fb11f0801c5439a3861bb3cbce64a4e1f07348df51f54929af5cfe8206fa50cd7ababeec73542cb3d3df29a6128b5ff22cde720f7c006ad139708881525eb0ca7c47648f491a6a97605ac6143d3e325b319d184b26e453ae4739de510ae4b31933351e8dfd4c25a82e9b89011cd12369ff94f87fd16381707dc17198f0b244aa4bcfbdbdd38c1e8ee082efba1a298ccbdd15029141cb001563e73f47f910123c1d8815a3cc511ad7c6110f22ad8ca7ce0da6640b20ee68faaa2f0b2c28601b22c6a1bb6970eb8fee440c91a89fb0df2759489f8752894dcf283980c516ec7b3814b314df311544dcf91c2120bd492988aecf05574cd02c4977f104f3f8e9e9b7eacbe834819a03ba1c6337dfb896d11772465663cfee37b0f626e5b38fd901c7c907083beef3f498b469d7eaf9742ab5e925b669d6d2f202ee295038acc1ecb6513b02ad15756e70eec05ecd2598f85e612364deb40ffa160d9f741478efeb4d08d0a11e7cd82741c3b3ebbd802bb82f719269afc6f41bcec9bc214abf60ca759aa2930de73a47a98a31c2c27e055debd220bd7a96290b7c8c22cf49fbe22814a81b38cf34b5339b9668c9f73cf6ce2ae535dec859f69ae52c2234440354ba1128b10df5a73686e81f000bfc991da306715750f319a9b41816b6383d169835a794543e49b840b61ee6e94b9614cac0353cce28b996769ea97dc4b2ca5e411bf7bbcda9985e425fbdc7c82fefdf0c65b56c9315f9fb39ba750219a6cf6e3955af6c6ee6ab80109859640d1790d9ece851bc2aa3b74eff475763f367527f6e1f486525c1773fc86543917c330c4d0129a22be272785fdf45c648d29c5425bea2e37061a38122eda38031c15b32891dc1dbb041b00313c601c6aeb235e2b7d0e932ea208edd03f3b7ef9de36233c61f62f7541ca21f0e420b712a02b315213ecfca2346a0069500b07bc752470c782e3d69b1b0665fa398537ad574c9c4dbf00ff15ff3b3cc048f9ec970a533411526beb9b61120ef6938a6f4a980a90caeddc7fed63f05247f3828a4ab06605266a36402bc96f57004c86619f6163144a626f6ddbd5261e50aa15e64ba7cf75056f61f199e2fc8da76c74cf9ecd2f4485fea2f2c5727fc96e58b17fe7193b246704d60aee80bf63934cdefb092f4d23e8d5524fd04d109d4dc93dc40738524149b98e6be076a7d1e576c11ed4496602be636b9147e142704025399622980b244faf6d61539c6d5636f6a9e99a71774eb0b9ad58ae2c88d9ef7085eb630769d2f66d296c258a09a65b005f69618fe2c0ef5a2c5b43256c9c7947cc2fa3178cfe8be198d30ed981554168f16ce1b3b76bfec637b364a62ced327cada172eb13249e0841f7193b9a38ac0104e5885a1eff2b1efac595c591f0819a0d221266c4327020cb9aa2f83b9ab4d8aa4b4c77a406c349ec80c1de5562a254863fc72b00d6e3b7441ec139c1acbdba5867a86fec0fab5011737ca9c156000fdaf5bf9f8cf8d6602e0a083b81b1630a9a33ea4b9d0d8eeb5e4f5031645be89eadcd6a9ee8af6f94d8a51cb3d8a905b6b3d4a15365f7265b780927bb0f2cb60a719d9b564864f385bec15a7940e123dbcd89b7bd040208e409632841072558407c402a6bea85ec7e3ec91a5867fdc9e4e6fc2a997c91c9d761afbe81a17ca3e255988024c0a69002f54f1a6b4cf19a6da330bdcdddce59750fd0d9281193841ba1f488f766dffcdbe4f3b880a65e2a9299178d964a3ea2ac9b709a22296b77e780fec4be7d5a60214e6f0660e782d5a1511fc33e9717455d1d6ece0cf8a5eac0e066c170e76c88a720879cc844509c288b339613c74e95e3b75a1dfc7681f4b6a6f072fca3fe61173cacd58fb7b7ea8b7e248ec92f57e6b3df1b6df98ec9a4e694e4e35151c377c42b8919bf8965a86eff4c2eceb23312df02b37a42d128541a9dff7c70c86a67874c12ec2349b6982ad90f6bca9bcd6296788433d942ae3ad45bb4a3f3e16c06dfeef8e4e8a59a71363b856f788fd35a3ecd0e162bf6b4c607a9ee347ddbc64a58424225655386f2650129e2e7277f0afc933c305cdb8d17d403c5c8c8f12c7ec6d6626c467f488a2e053b6500451799aa33921f405996cfb07efc1ff76840accb19c1faa4c9856cd651e28ea67e6db58d7d919572fd60caa2d1f5374f3c23f8de302c475062390edb2dc11978dce632c05b842dc8b577cd49cafd1faa386657d7dbd196b8352283f99b2f4a90fbcf1c5cdcd27267803952f7ad918a53fb9f78b24d8113a99343a24e31e15c8857140c6444ed686f222cb92eaec7772fa495eb57fdc3ed3cef8fe2ad82456e698074bb79fbc9bcad7a49c6721f99aff8c2712e91a081bfb58aa6b8d407460040007057642f3f2a48438e381e03a6245827fe6832e4eac2eed4fb6b7adb4a4199750221c3626afe3592099164039c7f2a4b1b04c8beedb5703efe69e45dba82cdcafa10882affa4746bd788066e30a750863196d7734eeb873d237bb6aca9969c8832180e7ad8439c206c68c16fd1074e4d0f70abdc98fce26498ce6dd28ec2151e969807ae0a5559e4e655afd0b6b88058d9c116b41304d427e00a666158936ae8da13f24876f3c023ac0a04f860edc8eb5cf06acbe33259e955daa31770cf226a41fd95211c8e0c4e7e0382b4f25143f4e0bc2cebe0b5adbfbe5544", 0x1000}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000008d080000711209000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) shutdown(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket(0x2, 0x6, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000001500)="750b0500", 0x4) getsockopt$bt_hci(r2, 0x84, 0x75, 0x0, &(0x7f0000001080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x59fca5d33f4a62c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x4d014) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd00"/20, @ANYRES32=r7], 0x20}}, 0x400c004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000014c0)={'pim6reg0\x00', 0x1a003}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f0000000100)=0x4000200, 0x4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 1.190598014s ago: executing program 2 (id=4508): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x228, 0x11, 0x148, 0x0, 0x0, 0x328, 0x2a8, 0x2a8, 0x328, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg0\x00', {0x8, 0x7, 0x9, 0x7, 0xffffffff, 0x800000, 0x35dcba25, 0x78}, {0x7fffffff}}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7}}, @common=@unspec=@quota={{0x38}, {0xfffffffd, 0x0, 0x0, {0x4}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0xc3, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) 1.188295945s ago: executing program 0 (id=4509): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000007680)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000009640)=[@in={0x2, 0x4e21, @remote}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000009640)=[@in={0x2, 0x4e21, @remote}], 0x10) 1.091347751s ago: executing program 1 (id=4510): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xfffffe3b, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.005425562s ago: executing program 3 (id=4511): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000001000850000003100000095"], &(0x7f0000000600)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 960.928024ms ago: executing program 1 (id=4512): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r5, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x4}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "383f1607880da9a9b07be116b3da337d1794b49d44074dd8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2c28b4d5dab7592e766cc904c530536b7a74d1968dc79807"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8b4e177df41bc11203e92f0b32bc41e6b7e02f9344871aef"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9c1c06bd52fe4becb4c9dbcbb8af451be4087aafdd0dd8a4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$tipc(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="f0eef5a380d10a65a994c7fc5363ea2f1de959a123bab4a8656b4fcd3279a20b9d536b28585097f4cb3a113939c000c2eb44001a44aaae17d7e6ef4b19b06df6e113e6feb73fe04826409a2b264c0fc17e737252035185eccddd415a402e3021ded0f655cad0cca5d70f492de26dbe9dda3bc2e836176a0f4a306b1d32544fd34df6d9b2c054ad1a68bbd4bc0e4252d4a99e4fde55e4a4e57a2ebf0069bc262c0f9c57ce1e2cb5098a478c9171017f5301018a794778e98645d2ec9e403527a73e0365078c55b2b6fcf558be", 0xcc}, {&(0x7f0000000600)="78b24fb00ca055d3daa566c03bac3f833beddbd64974c5a96abc84d91ea5ed0103fa8cf7949510440fc92c5a3127ca69b67a8fe6f2245a85ab6fca496a0302c1ee7ecd7ee850b418", 0x48}, {&(0x7f0000000680)="62db1fbc2143ed37e418fb3f2a5364d33b056f7101a1d638c597a0b9bde1bd6064d79ff09f23d54e9c1d367d6dff7467c9985faf97a140e3b522bd9a01769a6d8074e3295e6c6a4773468794d104f2794cbf57475b51f06ca22a5da22247ac73091e53a8e2b4e1f10c34e4e557d391b03ce9dc013f1f6087b7b4880ff42c9727c79b1bd3afb06a591aa9ffee94c2c5243fb638a9d32eb4", 0x97}, {&(0x7f0000000740)="7f", 0x1}], 0x4, &(0x7f00000007c0)="647a09a906b61c97084f62422cbbb03ca4e006557dc819de459f461ae728dedfb1cb337606b7bee57c53763cf3c04e4e76fd4d024547f4a509943c24fe50f7813979f5dfb8f0ea3206beb4d67cc7253e5d70e14c169251c60b47e404c1768b68c2c99557b7cb9dba377dc40335bc92c672a53b8062b67309ed29244cfc4a367974a55f1b1da6e091b9c4937b3baf7f128704c5031fb797b2f81ae44e5764abced558c2830c7b8890358736f4c8ffab0a6169d3d8ce587c56c3e89601", 0xbc, 0x80}, 0x4880) r7 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ac0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000001bc0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001c00)={0x0, 0x0, 0x0}, &(0x7f0000001c40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c80)={0x0}, &(0x7f0000001cc0)=0xc) r11 = getuid() r12 = accept(r0, &(0x7f0000002100)=@phonet, &(0x7f0000002180)=0x80) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000021c0)=0x0) r14 = getuid() r15 = getgid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002500)=0x0) r17 = getuid() r18 = getgid() r19 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002540)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000002640)=0xe8) r21 = getgid() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002680)=0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000026c0)=0x0) sendmmsg$unix(r3, &(0x7f0000002f00)=[{{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000940)="6d3153eee72b952d24ddac1dfb84da62a0067f80e569cab2feab72", 0x1b}, {&(0x7f0000000980)="3ee4da05925c7767a390585af1857aad3c06e1a8c2135ba550160fb7f85f9bc702919ab36dd975c9db605d345aa95ae1d83b7c0e76660a29725791fdd8b268d907db3e0dcbeaf65e0cf1ecbd80062dc0030df72bfbb11673bed1552c13d33ab6777381c081761e9f307eec6a431d1ad70f61f986ad517b039ea34edf369deaf56606ba52924a4c1d21a16d894e5aa4c04a78ab6cb92c906cd6322799ea3e3ed302d376183f5bc445fbfa560e1ed7eb0cdf94426d3d8990f91246b43bdce4d62c90a109aa47b6f13b9a29316af334b538d6544de6954b337e77401c95fe42ce4c92719683195c0532ec3704e8694308f5dff288eda6361746970075972434b2cc89cddcecc6d6c741baba1ea1d5d0b3f494ea58e424e505591c8581658fd66ad280cdb71e919e149ac4b19dc66c806f90f499b8624e89ad257945ba77de5a97eea39e60bbc4af10dd582675d7fe574c75a5c340b81774f0ad7ba4fa3b20c233e9713fb1d831512edf8c9c17f4722dbb639456244cf3f77dd55e16fa40e08011da255ed8f6d4b096c2f843ade21c5b9b3bece83f344872033d0854a72c3d25d66be589d61c4e054222be9d3d6e7eefffb55f6b9540ad971390e2b532d3d3210da79ea507e7a9beeb466d1b33dd5f28e120620915ae0a63d4971c2be3f6fe6e7064b7e8db52ac986beb162a39367a4d9a32f86146ef459c6881ba7c6d8c1f5d0b08a0ea54f2c17e0570c3edc35e2e2571ef03f810236b00d01a3a6016b29d50c549e116a804270339702715668db66f6967003a4db4742be80cbbf7f8233460e9c7ab61ca0b5036b442539d226795dadf725043a4df3baa18da9057d2e7e7d1a48b5a80c9d2158edb943dd3feecc19a706ff052e873eb8cf77ff59c540f540ef5bdf42f09922669c05835bb4a54e93b61ea16a26c4e5ddeda081a894086958434a3162bf50a1e3fd00f2ff41127326be5da78ddb4d1cd647900f413c95041b8a57728e02c17b6cb36440ece2076f1edf91c09972bb43924c189eabbfa6a7b4a1d48271d5ca8f95680f53989b43151a22ebadd6355947e3c05411e3dc32475b9219d066f79854b0ae2637b108b8b630a6aeb9de357927b517817b77728a042055201910ca357d95c3b6b446cca09e752899b9e2efd3e505b81b0b143ab65cf85bcfcd897be67107a5dd444bfe062673d56c8b9344f7042677d4c42c835469b47a768402c306bb603ebd395aef8a8b89ac53876b264edb71ae8f819bf388ec32b6df03ca7717a110026bc309363c18fc49fea56ad91581cd38f399eef3329ae81290588765d31fd6dbc332f8f603fdde1fada6757e40d7f0fec4cb32a3032ea6655561929b5e623fc44069d0b083c7efc1c3acd4d2d1f0e34a1955a090f01f602c81f7be18eff65cfe7bacd989e16c517860a306751a41afc948849e0b5f257280d1444b37fa39ac05fc4df5cab4213756e80089caf261c5f9ac419ade45ead71b20890a4cb01506698e532eb5488c82425b50ba7baadbbadf457972762c87857b741847a81a9d7bb4797daea7a26b26ab7b55d1e86040479fb1850b24bffbf7345f7b30d2610ef48d8403a0626646c0d37aa60504f9b6b871e2633ac6096f97de4a74f1eb78cf1f18a0f0e804deffd2d936d2b8a5be5a6f90ce2b329b79821798b4b4c21b9e18fd016e2d7c156c8048df47a492d5699db15474c8a02774810826c555a3029f99c5aa32a1fb216f1cd5ad545a9029ca1721a7b3aa2f21a5d4a74b91069d7df5389ce8cd650a55df83c58ecdec1e82febde40d802430e1e349bfaba9c35267270e4eb0cc37c5b08e85e3c0285f1f9854d0813c153d7a8adedfbb8ec976034b366f253a4a9933923d54ca78ebba0bc59042612f082a12d55d0d3e66c4dd36850b4043ba32de14c59b46aa71294a4d90effe6dcfd65d59e0eefdfd407be24d7a4d20ee6dc7729db3daf092a5ee3da0ba0a261685f8fb763a66969bf0fc9b704a829f8a7f26292fdb647e8821882d64d5d07e772a13b53b9e51d74b9296c05e9f16c6003ce51a2938b1ed57842457f9b92fc490c1d58ab0d08f210abf534a779980d9dc7e8ddfa83aa2fe2d6bae307be1ee1148453bdea5840da1d3a4b12ec1a7caea199d7accd05b3aa21ea5e10bdfb30fb2719082bc684cf0c7a665e75541e1a2d589a730891a44efc1596d421f41933f17fd037c0edad8ef24eb3931cafa7dfa9494c195f5fe0e42be917f2bae48d54c19a93e8feb2a23a1ad814c6099d2fbcbed40eccbe1a40441be759f19cb4240d6ab198c3ed0d963fb0dc78bb5648247ca9c045a0dcc281e021644d54105ad4fdc131a9aaf6250d3aeb21bb33ee87a50cf009f94e927b0cec6f8d8f741a7171b263d6ecff8a8af5c62e9f9fc39cfc57f634c32f0a7c26cddf98872c6e878b8bedf5e55c1c1f03ed934b911b6ff553a6ab8244224c585ed17174ff47565685f7140494bced1c8a5b19a4acc77d0a02be4b0fd29e94613e37473e07b0a8779c480022a8ae7b8ad6859ed524ac35aa3176ddbfcc3dfbe0ec1d4cd39a6fe0a7a2abb8f543a0e7fd0a08ed5e7e82eb2e521d13d04c23fa5772049e5b4d24f83d1e4c4851c3c587bb517a3d2ea0a3275c92c3e1de90276a39a4109a7773c5f387f2cc1a9afeac1010cc3874e015a1f626c22795f156bd5c4048157f9deddefead4fce7184bc819978846f6edbda51e4b5440e3bf015d5523d2f49e38693af77d3abe1a93202f97cf0bfd1dcc056f9dc4782c126b79e7a19e1d6e3a931d6b13468760b56dc11c195e01b34bdbf6d8fea935e2f5dfcdbc2d345fa419d9c75efff4900f3480deaa3b204bc053bda340f110d5b2e200cac871f801940a20226c54953575fc6338274dae81b2455bbf7311cad608db5612676ff1d1e61a3734d66f2b445c37227cbea95a7edf4105c7f90a488203bb856bd2c7ee280b438d0353965f3ed70ff27549fe1e5afb3dfbb959836e5589bfae9eb9b7155c105255e19feb3e558c2bf08f7995231bd731d15ddd13a48a60cfa733572b4a2b41a348a76e9c3ea40f61815c18e7d4aedd708cd5181faad552e77bbd1d5e1f858699b58f2cd0cc84399cfd584fdd404df6a63bb9a59b9140367a07e40ceb7973004ecc4194795916c902cd75062672677159386a992077d8cf2b41722b19d5761fb56220cc19f44685cf18fa586b8f853342dbe58a8de86ef0ce3510639362d10a975c86aa929827f0e91f7f8ac11a976e06f42a1ea6246ab4d9389628df000b6fbbddce866b9a7394e839bbd4395020bb1ad358fbc5b455af145b7491743f4785f690fa4d5e7297f353f4c12ab48083d9a58e497b24367b23880d1c5e9011f1df7f1e66b3e0fd22e58bda297662547da5fda490b4ea8e55c36828c46f3793f4e0a47b784bd78ddf35f023d131d6fbfaaa279b30c6218150853c66539bce5f04f8c3255f249be19f99d803b805891327395973bfb192a9e8c247760fdef3778147ae1d7808ee0abe11d029f2a51de84d0a4e40166106e58b801818295aca3b03cf6b38164a73f574bfe777199bb2a22c7cfd73173f076e452a34d0664f7c3e84136bbc06ecf7c8967983fe64a8329f6feed69cbc147f1ac43a5c53072128de88d201145f3d652d852012aa44af76d0b3573ba2a6cd2fa17d7974b5e5d91889043a94e22248e065b38a3fe305bfc1cfffab43a9e1fb5e24257a041ecd4312c6248e09c7fa9e1069ac7786b0246a0d11c4372b3e91888eb7060e3bae418968444a97dd328affd03eea9ce5d4d76dc9a67345e66c64828469918abb5bf6991fff073e272aeec72550686077b1b041aa295a32e47c8ee282f17b4f4876bd6f2ad533798f4b03aafff83614b2d6ff94f20f4ec318fbea9bbd687b7db903811dff3939f052e5beb29faaf4fd117431013f7918745c404025f559486c2ba48467ab4828b6328c9ff7fb9b97d2279d10438fca352a5f2561927e37ff107177fb4021a59faeab1831357d85d3c6f7d1593d93904fe21a6bad7fb53dfcb07194d56e84fce078c95c6eb0b176274c826f0e4168adcc57068a6cb0315f5681bf40569912a2ca96f7ca44748376250e9983a98e5dba242b7223d6a0b28b1e85a01ce9037a18717004f9b50d12f24bfe37f7727ae9990f656b263e40b425edfef86a765b9d013c69e6e0a9c2f52c5ce58f8c86ab2993c8accc709602fda073f06d94005053abf8c9415b306fefb5d6f72961ed2fb3a88b212e100ffe3955bb9e3d77363728f6fff34e9147c2298c9e6b919a455809e9d3518b83bbd043f0302153650fff603461dba9ab64ec1784f3206fd3aa1d8ad2718239f23e3291e46def58376c03bb1111d347d72e4fad2c49df3a641d09387ebfedfec189381b0915fbef212c2368976fbb1a20b6217539ede4278b209800b179edebd09b762ef6a06c1ce8be8a8fecc128030d675488d7d8ea7023f889388281a133a3eeb38f57a07161a0a4d25ce68c253fc1614bde47ab313fe4cc6fd43d6fbd22abb6d4ae806bc0a42dc09b03edc394479d7f1eb667b01de1fe1a481b9cac7003c8dc07f72a9661044ccfa9614e11c264c71ea67caa17fab0920e1d6227e31407e2d3bf26f5b412a56afb55740e305863b91fe02d13e2a17314e4ffedac3ce65fb313cc3bbb0749c78833554701280a7c7a5ae120ac50b7d313b6ba18ba774658288df7dd82d43b972d32d4f2be5bf0dd4d9d3e2ac7f910b657cc6e1309e43adf3262dba818a9f2e2cb821c32726f02d3ad8418e30ff6377010226b9c811bbc0b6a46ab7acd961988bbf2dbd03977ac6a8bc89711b6d8d7f92d2c3e44b517104d64afe58c77e85a527b642a3ec8213cc964e96c49632ea842bade3862acc89690ed412679caf82cc60543515cb4a62909816c785ac5dcfe2fb26f3938c034da1ea45db07e0cf97f5e38972ceae633a44a583d6f7e1c393fe4bddb2d63957993f64b67c1218b3fc81799957825e397e81dccefe6b172e3ec0a27e5e4ee7363ab8e91f9c4160b12eb0be96082011a0613c7097618f888a086d64e335ce91fadf48b127d5891a4acce5be3640a561183c8a188986dadb489fd9d845cf67d7def7a10dd4bc693d6663697fc8ef55502fd22cc17049c6836843b9d28138c0615c3fa968f8dc8192331599c701f929ffe5cb55770465e306dee05ed32d97dae51bba19ea8ce6a7b7fa6310f5530e75f56986ef77ba45d01c65722ce7f84ac98eeb6200e42acf4655f6f0dc97ede46dfc267d2c7470eb65067bf2fa7f69d4402d6a29209a5078b6efb31e9e6de3cff25f9f847e78608d68846e7699346c1cfaf7c976758291bccc72e8d9ad099802803efcaa96557873618dcbc6face3f979a595a0ba93d4918e772d339809dab2f9c2b207ab490db0b03bc618f4d916318c1ebd9a19eca3016d338ef9a4d3a5f7a4ab0ae202bb99b8f9f2b9af5d605a00d63239258bab7547cf6351d72f6898e9c0f4bdd6432320bd68ea8677d94b8cfc6c9181e95ce5efe330476f804bc3c07d6a9d2e204064e170be7469db147d432a284d0744a4ede57823e1049975332017cc3bfa4288ff3be6e93274905c88cbb343f1438167a16a574c65abc939ee408bc71ef7f189dd826b90046b86df2dfbda6ac7fb7e734d0df28973e68137ebaac27d8d7a730d1dd23c294247c32b17131c81b44d1a35ac876b855e609139e50760f097d0b950cc3185553fe5c6d045bed1f2d4cc865b96a67e010100f97274f035562e5bceaa4c004cfc54441b634a7913ebba079c265f96be2ebd253", 0x1000}, {&(0x7f0000001980)="0431c725251d4621a128f796ccede62aec35b3a14aee84e236aea752271b6e705c236c9ca2143488b5bf932474dd1474e7dd834686964e52ce4c373fd6183c2bc0f0d86a7a5b0565bf8dbc8f7f65699f71d668a3b22ab52e23a025311382707e15d7039d0cfe63d865315e86b0237098016853a1b7453663af27acf98ab385917c10856ee765d8ea5f6bf82f9e7565201cc81ece2e288195b5a74b345c5234f3d8e7a6924a0d5e3936c22f751fc6e7ab52860cf392c11a5dc4cb798e878c27047fa7bd84cac01b150d47d5ba5935fa969a409ef4e00b7a", 0xd7}], 0x3, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x90, 0x4000080}}, {{&(0x7f0000001dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001e40)}, {&(0x7f0000001e80)="45b11c21b5d8cc57f2c2945019e339bebbf69b44d6", 0x15}, {&(0x7f0000001ec0)="a2924df81903520c2f1e0d7de3a0f093a664b7e119c298eddad33bffc5b952ed0c4f9e81c5c2b9fc1b2afde0baa8b7ccdf3bab145156e092c76ffe7fc0b17edbba6f6ee63c02effc7d3326a85db82d316bf84e73d5e49e5ab93c15044aabdd66a84c0a4170ed036adc38b14d0c554e67e1741d939c0cfe5f2482662634920b49a35cef42fbadd00aa701cf523ac75f7429939910f68cfece5dd10449c019006416f2db955ae434f8159eab2b506c77e780dc580d1b94dcb8573bc7543c468e717da62cb34a2c4630afa400091a8364daf361569d", 0xd4}, {&(0x7f0000001fc0)="5e694d2b88639a39c6ce016b57223c3e99fac51a407150e719fb839c7e0bfa517bb7fdf75385650079507d7619e195f4bf2da35b732f362b82044008b31836cc70da5e", 0x43}, {&(0x7f0000002040)="99473cc802b6ecd4f1aa3f7f25e09a38fc7c81", 0x13}], 0x5, &(0x7f0000002200)=[@rights={{0x18, 0x1, 0x1, [r1, r12]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0x58, 0x1000}}, {{&(0x7f0000002280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002300)="bebeeafcaaf109a94eded1d4cdbf18e55c1875ee7e9a17980a4dcad6528eae22e1babc264097162b861d2df66614dfcb752e2b0ed9205e0585f5ecf368adb53a30f08cd0f8c5ac4f95f42a497c400c05acbde76f95c0a3d08ec89ce26f38da1d6331581f4a4d9a0d73389bba200ffc6771ac94be28b3353524afa6dd536a4e625a5dbecc50f47150f9719e0f6e532c8f770ccfa0f00bd665f4efb7e1b6528fb994b1d606d91fa29be7e40cbf6ccfe372", 0xb0}, {&(0x7f00000023c0)="2340d084be3c323c4a16fe02198de983f7a8808e8513912c1be38b914caf34ccd0defa12f0488b59a5978ca6570bb9c939526b9621e111d3857e11eb292cc1ebfa27574aa0f2a30de2752e7db2af93adfcf4247d5989e17085b346cbb8e96f0cf751f859eb1e6c726ee1cb1f3c67c33fa98189e4bbf4fa8fc68423995623b00df7eea00b40be1f2d248265e23c9c7a78eb28da8474f8618b46d79ca5cbd8db1bdc3c6fad2c2bed0145dd58f96441741223b624312076bb7be60eb5688ac1633b73a3af278d6ec9d695de646d66b49c35f759617a04379006c81a", 0xda}], 0x2, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r0, r2, r2, r3, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23}}}], 0xb0, 0x40}}, {{&(0x7f00000027c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002980)=[{&(0x7f0000002840)="a173dff415a9c112ef7f4c78d151c875eeb4107053d61315df77aab833f2a0b16a65b2b6a2f1be31fc67d1727a8b2398dffd3ad3af6575fb624f3985ad5fbcc98dc93b3d1525b81f5d0ff214c5064fbf6ebf41ac7eaae7a7114246e7203f334ddc628ea29b6ffd6df9376f0d71fbce7615bad82b5d2bf3fc0031fb", 0x7b}, {&(0x7f00000028c0)="317b3770d084494f534ec5891845aa28c872934f1ab797fb08dd997bc3f3c4a15a49f584b9478f5bc38e03e6ae25ebc52e87f3934ab7e38033a03c1492d915746c37d495ba29be273137677d6aa39a2432a519bc60e319a289b035fd0715f20e13fbfb5275771c16fa99cdd9c043a28dfacb5d0cccd4e99c2b5f61856a5a0b1c9ba40f56908305a2f5b2916343bdc5e37a06f0b497951946c938ce6a665a2e3adc89d82928b41f7a6482df", 0xab}], 0x2}}, {{&(0x7f00000029c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002a40)="ec047ed44b0d7d2c570bbed2499252f942447c444938ed1f412f9a4c9b8a66a769bfd7c3abaf94c57eb22051c397a966", 0x30}], 0x1, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c}}], 0x58, 0x90}}, {{&(0x7f0000002c80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002d00)="59812567e71c5ec91f9d01af5332", 0xe}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="52445664d582387a5f39db180685210862a5326efa29101e9ff2b8454b85ed35f9ae74c27f1cef1a4471a6bdd0b20eff541321209261344672bee35809f8e5bd18e234eaf0ad3b1ad6df79bb874db260c0041854c535313a41619a2fbf12676af321f23cead8b825328ac236f1475e0a1f6c2632c65a80f4609c378ed0eabaf552c190448f9519ba5138c1952a935472ef122ccceafe3a80abfaec60e7b15b4444faea14842c1bf72107cba2a84a062041a1cd1318c8f0697b252758ef", 0xbd}, {&(0x7f0000002e40)}], 0x4, &(0x7f0000002ec0)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0xc0c0}}], 0x6, 0x20000000) 959.671852ms ago: executing program 0 (id=4513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {0x6}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb, 0xc}}]}, 0x3c}}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x14, r1, 0x1, 0xfffffffe}, 0x14}}, 0x480c0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x7, 0x4) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, 0x0, 0x11e) 843.277281ms ago: executing program 3 (id=4514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x4044004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000001340)={0x18}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12d8, 0xffffffff, 0x98, 0x11a8, 0x98, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1110, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1338) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='snd_soc_jack_notify\x00', r2, 0x0, 0x6d05}, 0x18) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00632018000000", @ANYRES32, @ANYBLOB="0000000000200000b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x130, 0x268, 0x300, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0x0, {0x9401}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @loopback, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0xb2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xe800, 0xba, 0x10000, 'snmp\x00', 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) 686.486355ms ago: executing program 1 (id=4515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x123243, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000380)=0x4) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x28) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0008000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r13}, 0x10) r15 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r15, r14, 0x0, 0x7, &(0x7f0000000400)='\x86group\x00'}, 0x30) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) 671.014028ms ago: executing program 2 (id=4516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}, 0x1, 0xf5ffffffffffffff}, 0x0) 624.58041ms ago: executing program 3 (id=4517): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x220, 0x220, 0x220, 0x330, 0x220, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=r0, @ANYBLOB="00000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x4044001}, 0x4044090) 499.213669ms ago: executing program 0 (id=4518): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03090000020000000000070000000900010073797a30000000001c000000090a010400000000000000000a0000000800034000000010140000001000010000000000000000000a84000a"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r0, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x1, 0x6, 0x3, 0x3, 0xfffffffffffffee6, 0xffffffffffffffff}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xbe, &(0x7f00000002c0)=""/190, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x3, 0x1, 0x5, 0xb}, {0x2, 0x4, 0x2, 0x6}, {0x5, 0x4, 0xd, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b71d9b10489917e30900000009", 0x0, 0xf9e, 0x0, 0x51, 0x0, 0x0, 0x0, 0x5, 0x9, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 471.732275ms ago: executing program 3 (id=4519): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x20, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffff8, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x37}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl(r0, 0x4, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x30, 0x1, 0x2, 0xfffffffe}]}, 0x10) 435.243908ms ago: executing program 2 (id=4520): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100"], 0x90}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40800) syz_emit_ethernet(0x87, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c2000003ffffffffffff0800450000790064000000019078ac1e0001ac1414aa050390780a010101471d000300680101086c000864010101e0000002014414e67000009fb3000000400008000000000009071b6aac1414bbffffffffffffffff0000000000000000ac1e0001070f1164010102ac14141800000000830374940401000000402bebb6535144fd6eec3ce4958cb948e30ce0"], 0x0) 378.873125ms ago: executing program 4 (id=4521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c000000000095", @ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32=r0, @ANYBLOB="080001"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000480)=""/216, &(0x7f0000000580)=0xd8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000600), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_PBSS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48881) 239.275455ms ago: executing program 3 (id=4522): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x3bc0, 0x4) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [r4, r3, 0xffffffffffffffff]}}], 0x20, 0x40001}}], 0x2, 0x44000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)="21da5c3720ef8f03398e6683d390b0a99f2eb06bd267038f595589b9195be8d7b3ceb52cb7c531d909a653ebfdc317d4", 0x30}, {&(0x7f0000000180)="ca4bac74b05fba4afb62b91ffe9882c977c78015d0", 0x15}, {&(0x7f0000000300)="eb35e2de18cb4dfccefac8c2cbe2c954865dfbdeb1635bd5461e32038d58a261d7e7856819108d1f7909a88eb787427b3a79b09cb930fcbf1a19332e935c4ec50995200abffdf34194aec79473ca8c28fa4cf9b183fa5729823d144629d59a9bf9989b4e980f147d0ea2905518970ab9f0822ccc2da25eb519bc9eb0af490a43f792874c95dc81d1debf37e668d2", 0x8e}, {&(0x7f0000000200)="ffb5b1e78b2fa2ff4d387a52fd78ec2d289cae169bddfc793a31497641dd853db256ce5308bd4e2706271424fe3a1bebfe036a70b052b94d7071c8bdd0", 0x3d}, {&(0x7f0000000400)="7e423aa74c03f896ae2a26da47980506581969fe1548fdfe9829372200a6e48d58dbdb4c80ca264d60d2f7a9f407f74195affcc97e83a6b8c3118e4b7c3fc16d45e4c4f656f583d5d4d18e480fc6d22da11f78b2a0e9728f37d0127b7cc9c353d654e28ed271cc7406b26b26a6a9d6173fd5b6fa23fb2576b865128c9c3dfd54af3d606ec21afffcce4d4e7111f7f2799c475db1bdeacf036c50cbf1eb96b1b4283704689a549329f84c4f15f2cc3c37e6cc2d3cdc65ee9da7df1932a4e88668c9123a57bb", 0xc5}, {&(0x7f0000000580)="d8760489348469aaf996847b4cc2f3278aec5bf3629a0a5a1e93150ed351ee0e7c0871fd0f900814f402d18712d0bc6d70cc99688c110e79132dd7a26513ca32ecfe94b42e551413b13721647a22261c0386dca05f8eaa1f", 0x58}], 0x6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000280)={r9, 0x11, 0x6}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 215.611139ms ago: executing program 2 (id=4523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r2, 0x2000000, 0x20, 0x0, &(0x7f0000000800)="1343065cd378c6040000007e0add00ffff1fc42f302c0e8b18e9128e0ccc1283", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x9, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @struct={0x3, 0x4, 0x0, 0x4, 0x0, 0x2, [{0xd, 0x1, 0x6d8}, {0x3, 0x5, 0x80000001}, {0x5, 0x1, 0x401}, {0x7, 0x4, 0xfffffffc}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0x10}, @var={0xb, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000900)=""/4096, 0x9d, 0x1000, 0x1, 0x1, 0x10000, @value}, 0x28) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001a00)={r4, r8}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f00000007c0)={0x2c, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280100005800a00040200000000000000000a000400aa"], 0x50}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010900000000000000000218800000045be3"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES64=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r13}, &(0x7f0000000080), &(0x7f0000000340)=r15}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000380)="cdf04ffc19a346f8429bf46e0aa315b3111bc13bbc2c00461075e9ae7a853bba4461c5fb3f010f96f294d7a483516bd637bf7f1117bb340c51d4b7c4665fb8d7c906", &(0x7f0000000400)=""/160, &(0x7f00000004c0)="3621d988f1c839de3904060edb5a5c09593f02faf8ed7bd623059409dd250ec820896203ecd161bc18108d839488c11ee6f2a7d8b14e9f63fd14f217b524d5b784dbc49434108622ade5e40f8a9ed391503186b63b3dc7eef3bc0bf563f0dd01348a3757575b7e5646fe9d885c9394e66ffbcdf31f737bff759f12284f64b4532cb1a05375d30449a9a2f2c071cf2a17bef8a6e07d7edaab0fe485d2a74b9eb7e3ef9088746dda819b0f1d073060733fa592dfc59dfdcfba14e568102ab57e3921dc6944070de411a2cc48", &(0x7f00000005c0)="d1f8c0172efc19ecee94fe49685b94aecc74ea9ac7770bab7892f157303a19693d005cb220219496cc7ebc09c2977206fce3a6232290da4bbb3bee35af2aa0dabc39d7f84dbc4809123bb1c20e3219966762b1df64ca36f97aa811721115cb151bede99d510976e0834b94f9925c706e9de82f54633dfd04740378889c4627ba1f6548ced904e90694eab6da40887432d7b837", 0x7, r13}, 0x38) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="e7075d866889d067e7ac4dc905e64a433205ef8f3ba0343d323847859943dc49f38bd60cc1116b772f361f7fea47f5b607557c38b554f609b7e768f0c82cdf40188688389e6b1575050fb1da7a292c", @ANYRESDEC=r12, @ANYRES64=r11, @ANYRES32=r10, @ANYBLOB="08009e00c1300000"], 0x24}, 0x1, 0x0, 0x0, 0xd0090}, 0x9590f6cc3ea35512) 173.485975ms ago: executing program 0 (id=4524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r1, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0xc014) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000500)=""/92, 0x5c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x44, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0xfffffffffffffda0, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x80) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x15}}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x6, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002"], 0x7c}}, 0x10000000) 135.083294ms ago: executing program 1 (id=4525): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000dd897b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0xa, 0x3, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 43.345439ms ago: executing program 4 (id=4526): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r6, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x4, @empty, 0x2}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) 0s ago: executing program 2 (id=4527): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003d00070100000000000000c7047c000004f8ffff0f00018008001600e0"], 0x2c}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x38}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="01c20607144257e803c3febea3bd8ae08ee91a853fd5c141476938933e31e70b6467ae0d55b9a7a305724cb3adf67f1b5537a797bb6d5eed212b29b6e50137dbfbf0acf114e74157eaa1ec215b436e303c934ec4ad7aea9a49a29807ae95d13ad1e418a15f113b4dfd9743a4b668aeb7cd9d6cad827f8748afefe4a99f582aed8836a32aae9e40913423f55377495ce6699593abb31e1c82fe869e24054705769b808fc598ab04383bd7d480ca9295a40029b183e284a80d8c2e780113f74859c26c62ae67cf23", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf25870000000c009900f9ffffff0300000006004800220000000a000600ffffffffffff0000060048001c00000043002a00dd3a7bcaff9c752822bbfa73f86ca2e13d43c22fbc954875df1b9a71f0070d4fac9102b87b16ef0b04c1403292880512641ca100baa9445ba80a576b2a"], 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x10) shutdown(r3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000040000000000000700000000000000000000000b010000000000000000000003000000100400000003000000f7ffffff000000005f0000000000000000000000000000000000da0df9feed4c296bc2088546334a7f136ba7df6dffc3e7f8b918204dcc6059e36c35b1b20fadc624e0f1bdc0b97719eefe708887337bcbd6dc87f49b2f4af57b59089551368638aec4019aa5ded6ceabc0783d565229174a0e2b3b16"], 0x0, 0x5a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00'/11, @ANYRES32=r2, @ANYBLOB="0000000000000000440012800b000100697036746e6c000034000280050004000300000014000200fe8000000000000000000000000000aa050009002900000008000100", @ANYRES32=r2, @ANYBLOB="0400130008000a00", @ANYRES32=r2, @ANYBLOB], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): ave_0 [ 463.257719][T15532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.297241][T15532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.357025][T15742] lo speed is unknown, defaulting to 1000 [ 463.358694][T15532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.389963][T15532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.410555][T15532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.428014][T15532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.439333][T15752] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3166'. [ 463.464741][T15532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.479735][T15532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.479920][T15748] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3166'. [ 463.491610][T15532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.521768][T15532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.536825][T15532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.539695][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.551183][T15532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.562095][T15532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.633471][T15752] gretap0: entered promiscuous mode [ 463.847459][ T8534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.867246][ T8534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.965569][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.006369][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.120879][T15767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3169'. [ 464.154207][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 464.185910][T15768] FAULT_INJECTION: forcing a failure. [ 464.185910][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 464.198862][T15768] CPU: 0 UID: 0 PID: 15768 Comm: syz.2.3172 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 464.198888][T15768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.198901][T15768] Call Trace: [ 464.198908][T15768] [ 464.198916][T15768] dump_stack_lvl+0x241/0x360 [ 464.198947][T15768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.198971][T15768] ? __pfx__printk+0x10/0x10 [ 464.199006][T15768] should_fail_ex+0x40a/0x550 [ 464.199044][T15768] should_failslab+0xac/0x100 [ 464.199073][T15768] ? skb_clone+0x20c/0x390 [ 464.199098][T15768] kmem_cache_alloc_noprof+0x70/0x380 [ 464.199133][T15768] skb_clone+0x20c/0x390 [ 464.199163][T15768] packet_rcv+0x633/0x14b0 [ 464.199198][T15768] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 464.199240][T15768] __netif_receive_skb_core+0x36fd/0x4540 [ 464.199275][T15768] ? unwind_next_frame+0x18e6/0x22d0 [ 464.199320][T15768] ? 0xffffffffa00006d0 [ 464.199337][T15768] ? 0xffffffffa00006d0 [ 464.199354][T15768] ? is_bpf_text_address+0x285/0x2a0 [ 464.199383][T15768] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 464.199420][T15768] ? unwind_get_return_address+0x4d/0x90 [ 464.199453][T15768] ? arch_stack_walk+0xfd/0x150 [ 464.199478][T15768] ? mark_lock+0x9a/0x360 [ 464.199504][T15768] ? __lock_acquire+0x1397/0x2100 [ 464.199559][T15768] __netif_receive_skb_list_core+0x2b1/0x980 [ 464.199590][T15768] ? kasan_save_track+0x51/0x80 [ 464.199627][T15768] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 464.199675][T15768] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 464.199706][T15768] netif_receive_skb_list_internal+0xa51/0xe30 [ 464.199743][T15768] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 464.199773][T15768] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 464.199804][T15768] ? __pfx_eth_type_trans+0x10/0x10 [ 464.199827][T15768] ? __phys_addr+0xba/0x170 [ 464.199846][T15768] ? build_skb_around+0x111/0x260 [ 464.199872][T15768] ? __xdp_build_skb_from_frame+0x340/0x720 [ 464.199904][T15768] netif_receive_skb_list+0x55/0x4b0 [ 464.199937][T15768] bpf_test_run_xdp_live+0x1bd4/0x2220 [ 464.199970][T15768] ? __pfx_lock_release+0x10/0x10 [ 464.200041][T15768] ? bpf_test_run_xdp_live+0x5d6/0x2220 [ 464.200078][T15768] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 464.200108][T15768] ? synchronize_rcu+0x11b/0x360 [ 464.200133][T15768] ? __pfx_synchronize_rcu+0x10/0x10 [ 464.200182][T15768] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 464.200235][T15768] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 464.200288][T15768] ? _copy_from_user+0x95/0xb0 [ 464.200319][T15768] ? bpf_test_init+0x137/0x160 [ 464.200348][T15768] ? xdp_convert_md_to_buff+0x5b/0x330 [ 464.200383][T15768] bpf_prog_test_run_xdp+0x805/0x11e0 [ 464.200430][T15768] ? __pfx_lock_release+0x10/0x10 [ 464.200472][T15768] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 464.200505][T15768] ? __fget_files+0x2a/0x410 [ 464.200541][T15768] ? __fget_files+0x2a/0x410 [ 464.200576][T15768] ? fput+0x21b/0x290 [ 464.200604][T15768] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 464.200638][T15768] bpf_prog_test_run+0x2e4/0x360 [ 464.200673][T15768] __sys_bpf+0x487/0x820 [ 464.200704][T15768] ? __pfx___sys_bpf+0x10/0x10 [ 464.200748][T15768] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.200783][T15768] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.200817][T15768] ? do_syscall_64+0x100/0x230 [ 464.200851][T15768] __x64_sys_bpf+0x7c/0x90 [ 464.200879][T15768] do_syscall_64+0xf3/0x230 [ 464.200906][T15768] ? clear_bhb_loop+0x35/0x90 [ 464.200940][T15768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.200968][T15768] RIP: 0033:0x7fea2398d169 [ 464.200986][T15768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.201003][T15768] RSP: 002b:00007fea24850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.201025][T15768] RAX: ffffffffffffffda RBX: 00007fea23ba5fa0 RCX: 00007fea2398d169 [ 464.201041][T15768] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 464.201054][T15768] RBP: 00007fea24850090 R08: 0000000000000000 R09: 0000000000000000 [ 464.201067][T15768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.201080][T15768] R13: 0000000000000000 R14: 00007fea23ba5fa0 R15: 00007ffeecaca278 [ 464.201112][T15768] [ 464.580594][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.002926][T15779] syzkaller0: entered allmulticast mode [ 465.033534][T15775] syzkaller0 (unregistering): left allmulticast mode [ 465.381649][T15802] FAULT_INJECTION: forcing a failure. [ 465.381649][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.400043][T15802] CPU: 1 UID: 0 PID: 15802 Comm: syz.2.3181 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 465.400072][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.400086][T15802] Call Trace: [ 465.400093][T15802] [ 465.400102][T15802] dump_stack_lvl+0x241/0x360 [ 465.400133][T15802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.400157][T15802] ? __pfx__printk+0x10/0x10 [ 465.400180][T15802] ? __pfx_lock_release+0x10/0x10 [ 465.400220][T15802] should_fail_ex+0x40a/0x550 [ 465.400267][T15802] _copy_from_user+0x2d/0xb0 [ 465.400297][T15802] copy_msghdr_from_user+0xae/0x680 [ 465.400329][T15802] ? __pfx___might_resched+0x10/0x10 [ 465.400361][T15802] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 465.400399][T15802] ? do_recvmmsg+0x44e/0xab0 [ 465.400425][T15802] ? __might_fault+0xaa/0x120 [ 465.400451][T15802] do_recvmmsg+0x3bd/0xab0 [ 465.400488][T15802] ? __pfx_do_recvmmsg+0x10/0x10 [ 465.400537][T15802] ? ksys_write+0x22a/0x2b0 [ 465.400559][T15802] ? __pfx_lock_release+0x10/0x10 [ 465.400597][T15802] ? sb_end_write+0xe9/0x1c0 [ 465.400628][T15802] ? vfs_write+0x7fa/0xd10 [ 465.400654][T15802] ? __mutex_unlock_slowpath+0x227/0x800 [ 465.400690][T15802] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.400717][T15802] ? __fget_files+0x2a/0x410 [ 465.400763][T15802] __x64_sys_recvmmsg+0x199/0x250 [ 465.400792][T15802] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 465.400821][T15802] ? do_syscall_64+0x100/0x230 [ 465.400853][T15802] ? do_syscall_64+0xb6/0x230 [ 465.400884][T15802] do_syscall_64+0xf3/0x230 [ 465.400912][T15802] ? clear_bhb_loop+0x35/0x90 [ 465.400945][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.400973][T15802] RIP: 0033:0x7fea2398d169 [ 465.400991][T15802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.401007][T15802] RSP: 002b:00007fea24850038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 465.401029][T15802] RAX: ffffffffffffffda RBX: 00007fea23ba5fa0 RCX: 00007fea2398d169 [ 465.401044][T15802] RDX: 015cbc1ab4c0933f RSI: 0000400000001980 RDI: 0000000000000003 [ 465.401058][T15802] RBP: 00007fea24850090 R08: 0000000000000000 R09: 0000000000000000 [ 465.401072][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.401084][T15802] R13: 0000000000000000 R14: 00007fea23ba5fa0 R15: 00007ffeecaca278 [ 465.401125][T15802] [ 465.645991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.751697][T15808] syz_tun: entered allmulticast mode [ 465.768629][T15808] FAULT_INJECTION: forcing a failure. [ 465.768629][T15808] name failslab, interval 1, probability 0, space 0, times 0 [ 465.826772][T15808] CPU: 1 UID: 0 PID: 15808 Comm: syz.3.3185 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 465.826802][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.826815][T15808] Call Trace: [ 465.826822][T15808] [ 465.826831][T15808] dump_stack_lvl+0x241/0x360 [ 465.826862][T15808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.826886][T15808] ? __pfx__printk+0x10/0x10 [ 465.826906][T15808] ? validate_chain+0x11e/0x5920 [ 465.826932][T15808] ? sctp_packet_transmit+0xecd/0x2cc0 [ 465.826959][T15808] should_fail_ex+0x40a/0x550 [ 465.827007][T15808] should_failslab+0xac/0x100 [ 465.827036][T15808] kmem_cache_alloc_node_noprof+0x77/0x380 [ 465.827065][T15808] ? __alloc_skb+0x1c3/0x440 [ 465.827092][T15808] __alloc_skb+0x1c3/0x440 [ 465.827110][T15808] ? mark_lock+0x9a/0x360 [ 465.827135][T15808] ? __pfx___alloc_skb+0x10/0x10 [ 465.827167][T15808] _sctp_make_chunk+0x58/0x460 [ 465.827200][T15808] sctp_make_heartbeat+0xc3/0x530 [ 465.827233][T15808] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 465.827266][T15808] ? do_raw_spin_lock+0x14f/0x370 [ 465.827292][T15808] ? __pfx_lock_release+0x10/0x10 [ 465.827330][T15808] sctp_sf_do_prm_requestheartbeat+0x2d/0x280 [ 465.827353][T15808] ? __pfx_sctp_pname+0x10/0x10 [ 465.827378][T15808] sctp_do_sm+0x1f1/0x60c0 [ 465.827411][T15808] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.827445][T15808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.827481][T15808] ? __pfx_sctp_do_sm+0x10/0x10 [ 465.827503][T15808] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 465.827526][T15808] ? lockdep_hardirqs_on+0x99/0x150 [ 465.827594][T15808] ? sctp_transport_hold+0x1f4/0x2e0 [ 465.827634][T15808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.827667][T15808] ? __pfx_sctp_transport_hold+0x10/0x10 [ 465.827695][T15808] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 465.827735][T15808] sctp_apply_peer_addr_params+0xd5/0x1670 [ 465.827775][T15808] sctp_setsockopt_peer_addr_params+0x6ad/0x960 [ 465.827809][T15808] sctp_setsockopt+0x6f1/0x11c0 [ 465.827843][T15808] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 465.827876][T15808] do_sock_setsockopt+0x3af/0x720 [ 465.827907][T15808] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 465.827937][T15808] ? __fget_files+0x395/0x410 [ 465.827973][T15808] ? __fget_files+0x2a/0x410 [ 465.828013][T15808] __x64_sys_setsockopt+0x1ee/0x280 [ 465.828044][T15808] do_syscall_64+0xf3/0x230 [ 465.828072][T15808] ? clear_bhb_loop+0x35/0x90 [ 465.828105][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.828133][T15808] RIP: 0033:0x7f3eb198d169 [ 465.828151][T15808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.828169][T15808] RSP: 002b:00007f3eb27d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 465.828191][T15808] RAX: ffffffffffffffda RBX: 00007f3eb1ba5fa0 RCX: 00007f3eb198d169 [ 465.828206][T15808] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 465.828218][T15808] RBP: 00007f3eb27d2090 R08: 000000000000009c R09: 0000000000000000 [ 465.828232][T15808] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 465.828245][T15808] R13: 0000000000000000 R14: 00007f3eb1ba5fa0 R15: 00007ffde68e7818 [ 465.828276][T15808] [ 466.151692][T15815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3187'. [ 466.161759][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3187'. [ 466.381965][T15824] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3191'. [ 466.558744][T15832] lo speed is unknown, defaulting to 1000 [ 466.659592][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.668731][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'. [ 466.767745][T15840] FAULT_INJECTION: forcing a failure. [ 466.767745][T15840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.781276][T15840] CPU: 1 UID: 0 PID: 15840 Comm: syz.4.3197 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 466.781303][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 466.781315][T15840] Call Trace: [ 466.781322][T15840] [ 466.781331][T15840] dump_stack_lvl+0x241/0x360 [ 466.781362][T15840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.781385][T15840] ? __pfx__printk+0x10/0x10 [ 466.781412][T15840] ? bpf_send_signal_common+0x524/0x6b0 [ 466.781449][T15840] should_fail_ex+0x40a/0x550 [ 466.781486][T15840] strncpy_from_user+0x36/0x270 [ 466.781521][T15840] strncpy_from_user_nofault+0x71/0x140 [ 466.781548][T15840] bpf_probe_read_user_str+0x2a/0x70 [ 466.781571][T15840] ? bpf_trace_run2+0x1fc/0x540 [ 466.781597][T15840] bpf_prog_02a70dbeb5f742df+0x43/0x45 [ 466.781616][T15840] bpf_trace_run2+0x2ec/0x540 [ 466.781649][T15840] ? __pfx_bpf_trace_run2+0x10/0x10 [ 466.781679][T15840] ? do_recvmmsg+0x44e/0xab0 [ 466.781710][T15840] ? do_recvmmsg+0x44e/0xab0 [ 466.781737][T15840] ? do_recvmmsg+0x44e/0xab0 [ 466.781759][T15840] kfree+0x382/0x430 [ 466.781784][T15840] ? __might_fault+0xaa/0x120 [ 466.781811][T15840] do_recvmmsg+0x44e/0xab0 [ 466.781848][T15840] ? __pfx_do_recvmmsg+0x10/0x10 [ 466.781903][T15840] ? ksys_write+0x22a/0x2b0 [ 466.781927][T15840] ? __pfx_lock_release+0x10/0x10 [ 466.781966][T15840] ? sb_end_write+0xe9/0x1c0 [ 466.781996][T15840] ? vfs_write+0x7fa/0xd10 [ 466.782021][T15840] ? __mutex_unlock_slowpath+0x227/0x800 [ 466.782058][T15840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.782085][T15840] ? __fget_files+0x2a/0x410 [ 466.782131][T15840] __x64_sys_recvmmsg+0x199/0x250 [ 466.782161][T15840] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 466.782189][T15840] ? do_syscall_64+0x100/0x230 [ 466.782219][T15840] ? do_syscall_64+0xb6/0x230 [ 466.782249][T15840] do_syscall_64+0xf3/0x230 [ 466.782276][T15840] ? clear_bhb_loop+0x35/0x90 [ 466.782309][T15840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.782336][T15840] RIP: 0033:0x7f25b7d8d169 [ 466.782353][T15840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.782370][T15840] RSP: 002b:00007f25b8bbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 466.782391][T15840] RAX: ffffffffffffffda RBX: 00007f25b7fa5fa0 RCX: 00007f25b7d8d169 [ 466.782406][T15840] RDX: 015cbc1ab4c0933f RSI: 0000400000001980 RDI: 0000000000000003 [ 466.782419][T15840] RBP: 00007f25b8bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 466.782432][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.782443][T15840] R13: 0000000000000000 R14: 00007f25b7fa5fa0 R15: 00007ffd9c64b538 [ 466.782474][T15840] [ 467.242702][T15845] xt_CT: No such helper "snmp" [ 467.461506][T15854] netlink: 'syz.2.3201': attribute type 1 has an invalid length. [ 467.488151][T15845] pimreg: entered allmulticast mode [ 467.493805][T15854] netlink: 'syz.2.3201': attribute type 11 has an invalid length. [ 467.520839][T15854] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3201'. [ 467.699546][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.977330][T15866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 468.611443][T15882] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 468.631609][T15884] FAULT_INJECTION: forcing a failure. [ 468.631609][T15884] name failslab, interval 1, probability 0, space 0, times 0 [ 468.664287][T15882] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 468.669613][T15884] CPU: 0 UID: 0 PID: 15884 Comm: syz.1.3212 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 468.669647][T15884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.669660][T15884] Call Trace: [ 468.669669][T15884] [ 468.669679][T15884] dump_stack_lvl+0x241/0x360 [ 468.669714][T15884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.669740][T15884] ? __pfx__printk+0x10/0x10 [ 468.669759][T15884] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 468.669798][T15884] ? __build_skb_around+0x245/0x3d0 [ 468.669829][T15884] should_fail_ex+0x40a/0x550 [ 468.669869][T15884] should_failslab+0xac/0x100 [ 468.669900][T15884] ? _sctp_make_chunk+0x161/0x460 [ 468.669930][T15884] kmem_cache_alloc_noprof+0x70/0x380 [ 468.669977][T15884] _sctp_make_chunk+0x161/0x460 [ 468.670014][T15884] sctp_make_heartbeat+0xc3/0x530 [ 468.670053][T15884] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 468.670088][T15884] ? do_raw_spin_lock+0x14f/0x370 [ 468.670117][T15884] ? __pfx_lock_release+0x10/0x10 [ 468.670159][T15884] sctp_sf_do_prm_requestheartbeat+0x2d/0x280 [ 468.670184][T15884] ? __pfx_sctp_pname+0x10/0x10 [ 468.670213][T15884] sctp_do_sm+0x1f1/0x60c0 [ 468.670249][T15884] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.670286][T15884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.670325][T15884] ? __pfx_sctp_do_sm+0x10/0x10 [ 468.670349][T15884] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 468.670375][T15884] ? lockdep_hardirqs_on+0x99/0x150 [ 468.670441][T15884] ? sctp_transport_hold+0x1f4/0x2e0 [ 468.670465][T15884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.670500][T15884] ? __pfx_sctp_transport_hold+0x10/0x10 [ 468.670530][T15884] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 468.670572][T15884] sctp_apply_peer_addr_params+0xd5/0x1670 [ 468.670613][T15884] sctp_setsockopt_peer_addr_params+0x6ad/0x960 [ 468.670650][T15884] sctp_setsockopt+0x6f1/0x11c0 [ 468.670686][T15884] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 468.670720][T15884] do_sock_setsockopt+0x3af/0x720 [ 468.670753][T15884] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 468.670784][T15884] ? __fget_files+0x395/0x410 [ 468.670817][T15884] ? __fget_files+0x2a/0x410 [ 468.670858][T15884] __x64_sys_setsockopt+0x1ee/0x280 [ 468.670892][T15884] do_syscall_64+0xf3/0x230 [ 468.670922][T15884] ? clear_bhb_loop+0x35/0x90 [ 468.670963][T15884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.670992][T15884] RIP: 0033:0x7f47bb58d169 [ 468.671013][T15884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.671032][T15884] RSP: 002b:00007f47bc32e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.671056][T15884] RAX: ffffffffffffffda RBX: 00007f47bb7a5fa0 RCX: 00007f47bb58d169 [ 468.671073][T15884] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 468.671087][T15884] RBP: 00007f47bc32e090 R08: 000000000000009c R09: 0000000000000000 [ 468.671101][T15884] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 468.671115][T15884] R13: 0000000000000000 R14: 00007f47bb7a5fa0 R15: 00007fffe6328f38 [ 468.671148][T15884] [ 468.741343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.069148][T15888] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.078255][T15888] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.779704][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.805944][T15899] netlink: 'syz.0.3218': attribute type 10 has an invalid length. [ 469.848416][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3218'. [ 469.924163][T15899] team0: Port device geneve0 added [ 470.310241][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3224'. [ 470.819626][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.138644][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3234'. [ 471.859563][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.150825][T15969] syz.0.3243 (15969) used greatest stack depth: 17552 bytes left [ 472.290339][T15978] FAULT_INJECTION: forcing a failure. [ 472.290339][T15978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.358268][T15978] CPU: 0 UID: 0 PID: 15978 Comm: syz.0.3246 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 472.358301][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.358315][T15978] Call Trace: [ 472.358322][T15978] [ 472.358331][T15978] dump_stack_lvl+0x241/0x360 [ 472.358365][T15978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.358390][T15978] ? __pfx__printk+0x10/0x10 [ 472.358419][T15978] ? snprintf+0xda/0x120 [ 472.358444][T15978] should_fail_ex+0x40a/0x550 [ 472.358484][T15978] _copy_to_user+0x31/0xb0 [ 472.358516][T15978] simple_read_from_buffer+0xca/0x150 [ 472.358549][T15978] proc_fail_nth_read+0x1e9/0x250 [ 472.358583][T15978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.358618][T15978] ? rw_verify_area+0x243/0x630 [ 472.358640][T15978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.358672][T15978] vfs_read+0x1f8/0xb40 [ 472.358697][T15978] ? fdget_pos+0x254/0x320 [ 472.358736][T15978] ? __pfx___mutex_lock+0x10/0x10 [ 472.358765][T15978] ? __pfx_vfs_read+0x10/0x10 [ 472.358792][T15978] ? __fget_files+0x2a/0x410 [ 472.358825][T15978] ? __fget_files+0x395/0x410 [ 472.358855][T15978] ? __fget_files+0x2a/0x410 [ 472.358895][T15978] ksys_read+0x18f/0x2b0 [ 472.358920][T15978] ? __pfx_ksys_read+0x10/0x10 [ 472.358944][T15978] ? do_syscall_64+0x100/0x230 [ 472.358975][T15978] ? do_syscall_64+0xb6/0x230 [ 472.359007][T15978] do_syscall_64+0xf3/0x230 [ 472.359034][T15978] ? clear_bhb_loop+0x35/0x90 [ 472.359068][T15978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.359097][T15978] RIP: 0033:0x7f0800b8bb7c [ 472.359116][T15978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.359133][T15978] RSP: 002b:00007f0801a9a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.359157][T15978] RAX: ffffffffffffffda RBX: 00007f0800da5fa0 RCX: 00007f0800b8bb7c [ 472.359173][T15978] RDX: 000000000000000f RSI: 00007f0801a9a0a0 RDI: 0000000000000006 [ 472.359186][T15978] RBP: 00007f0801a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 472.359199][T15978] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 472.359212][T15978] R13: 0000000000000000 R14: 00007f0800da5fa0 R15: 00007ffe157676e8 [ 472.359259][T15978] [ 472.899970][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.617237][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 473.672362][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 473.940989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.979549][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.562092][T16059] team0: Device gtp0 is of different type [ 475.815713][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3269'. [ 475.840684][T16066] siw: device registration error -23 [ 475.847923][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3269'. [ 476.019554][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.124752][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'. [ 476.137331][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'. [ 476.354161][T16086] sctp: [Deprecated]: syz.1.3276 (pid 16086) Use of int in max_burst socket option deprecated. [ 476.354161][T16086] Use struct sctp_assoc_value instead [ 476.615639][T16094] netlink: 'syz.1.3280': attribute type 2 has an invalid length. [ 476.643689][T16094] netlink: 'syz.1.3280': attribute type 9 has an invalid length. [ 476.673637][T16094] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3280'. [ 476.713675][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 476.724179][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3280'. [ 476.780954][T16097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3281'. [ 476.942794][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3282'. [ 476.942847][T16097] tipc: Enabling of bearer rejected, failed to enable media [ 476.982814][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'. [ 477.059669][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.526292][T16107] syz_tun: entered allmulticast mode [ 478.099545][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.380709][T16140] geneve2: entered promiscuous mode [ 478.385976][T16140] geneve2: entered allmulticast mode [ 478.526673][T16144] geneve2: entered promiscuous mode [ 478.560488][T16144] geneve2: entered allmulticast mode [ 478.760859][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.790018][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.804474][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.824094][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.850801][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 478.859187][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.008591][T16151] lo speed is unknown, defaulting to 1000 [ 479.139627][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.179543][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.205796][ T9236] bond0 (unregistering): (slave team0): Releasing backup interface [ 480.228450][ T9236] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 480.246988][ T9236] veth1_vlan: left allmulticast mode [ 480.270954][ T9236] bond0 (unregistering): Released all slaves [ 480.295374][ T9236] bond1 (unregistering): Released all slaves [ 480.308422][ T9236] bond2 (unregistering): Released all slaves [ 480.315836][T16200] netlink: 'syz.0.3310': attribute type 4 has an invalid length. [ 480.334471][ T9236] bond3 (unregistering): Released all slaves [ 480.356816][ T9236] bond4 (unregistering): Released all slaves [ 480.398088][T16203] netlink: 'syz.0.3310': attribute type 4 has an invalid length. [ 480.899802][ T5843] Bluetooth: hci1: command tx timeout [ 480.922340][T16221] __nla_validate_parse: 7 callbacks suppressed [ 480.922359][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 481.041653][T16151] chnl_net:caif_netlink_parms(): no params data found [ 481.208717][T16232] bridge_slave_0: left allmulticast mode [ 481.214984][T16232] bridge_slave_0: left promiscuous mode [ 481.220756][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.237665][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.258570][T16232] bridge_slave_1: left allmulticast mode [ 481.280205][T16232] bridge_slave_1: left promiscuous mode [ 481.285997][T16232] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.317646][T16232] bond0: (slave bond_slave_0): Releasing backup interface [ 481.328020][T16232] bond0: (slave bond_slave_1): Releasing backup interface [ 481.356051][T16232] team0: Port device team_slave_0 removed [ 481.367050][T16232] team0: Port device team_slave_1 removed [ 481.373798][T16232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.381393][T16232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.394689][T16232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.402454][T16232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.436229][T16232] team0: Port device geneve0 removed [ 481.495760][T16236] team0: Mode changed to "loadbalance" [ 481.524873][ T9236] hsr_slave_0: left promiscuous mode [ 481.535051][ T9236] hsr_slave_1: left promiscuous mode [ 481.579182][ T9236] pimreg (unregistering): left allmulticast mode [ 482.259707][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.714708][ T8531] smc: removing ib device syz1 [ 482.983169][ T5843] Bluetooth: hci1: command tx timeout [ 483.299552][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.335096][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3331'. [ 483.534140][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'. [ 483.551645][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 483.722227][T16151] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.751100][T16151] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.759008][T16151] bridge_slave_0: entered allmulticast mode [ 483.804762][T16151] bridge_slave_0: entered promiscuous mode [ 483.850779][T16151] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.857922][T16151] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.890289][T16151] bridge_slave_1: entered allmulticast mode [ 483.911766][T16151] bridge_slave_1: entered promiscuous mode [ 484.271879][T16151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.327378][T16151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.339552][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.572365][T16151] team0: Port device team_slave_0 added [ 484.661063][T16151] team0: Port device team_slave_1 added [ 484.807352][T16294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3338'. [ 484.837162][T16293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3338'. [ 484.876544][T16151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.877632][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3338'. [ 484.892901][T16151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.892936][T16151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.895021][T16151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.937700][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3338'. [ 485.022916][T16151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.065440][ T5843] Bluetooth: hci1: command tx timeout [ 485.095835][T16151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.175550][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 485.184966][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 485.291775][T16301] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 485.371949][T16151] hsr_slave_0: entered promiscuous mode [ 485.378477][T16151] hsr_slave_1: entered promiscuous mode [ 485.384252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.452013][T16151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.479039][T16151] Cannot create hsr debugfs directory [ 485.828664][ T9236] IPVS: stop unused estimator thread 0... [ 486.291618][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 486.419541][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.620197][T16151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.674374][T16151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.710799][T16151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.722210][T16352] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 486.754373][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3353'. [ 486.769674][T16151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.978906][T16151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.053267][T16151] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.104916][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.112117][ T9229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.148268][ T5843] Bluetooth: hci1: command tx timeout [ 487.164008][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.171171][ T9237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.225627][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'. [ 487.265481][T16370] netlink: 'syz.3.3361': attribute type 9 has an invalid length. [ 487.309419][T16369] lo speed is unknown, defaulting to 1000 [ 487.316136][T16151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.459548][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.735304][T16151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.894186][T16151] veth0_vlan: entered promiscuous mode [ 487.911328][T16387] sit0: entered promiscuous mode [ 487.943109][T16387] netlink: 'syz.0.3365': attribute type 1 has an invalid length. [ 487.956987][T16387] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3365'. [ 488.002250][T16151] veth1_vlan: entered promiscuous mode [ 488.057894][T16369] netlink: 'syz.1.3362': attribute type 39 has an invalid length. [ 488.124617][T16151] veth0_macvtap: entered promiscuous mode [ 488.159367][T16151] veth1_macvtap: entered promiscuous mode [ 488.333006][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.374190][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.428051][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.454561][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.474283][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.499542][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.506914][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.530574][T16151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.559312][T16398] netlink: 'syz.3.3369': attribute type 4 has an invalid length. [ 488.611434][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.648485][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.652589][T16407] netlink: 'syz.3.3369': attribute type 4 has an invalid length. [ 488.660045][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.687112][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.697212][T16151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.720246][T16151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.739047][T16151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.822263][T16417] netlink: 'syz.0.3377': attribute type 13 has an invalid length. [ 488.845091][T16151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.877004][T16151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.886993][T16151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.899376][T16151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.943049][T16417] bridge0: port 1(vlan2) entered blocking state [ 488.949399][T16417] bridge0: port 1(vlan2) entered disabled state [ 488.961018][T16417] vlan2: entered allmulticast mode [ 488.974090][T16417] vlan2: entered promiscuous mode [ 489.038961][T16417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3377'. [ 489.122975][T16417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3377'. [ 489.133750][T16417] tipc: Invalid UDP bearer configuration [ 489.133793][T16417] tipc: Enabling of bearer rejected, failed to enable media [ 489.154449][T16428] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 489.245108][T16428] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.255311][T16428] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.264486][T16428] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.273975][T16428] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.284878][T16428] bond1: (slave geneve2): making interface the new active one [ 489.294529][T16428] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 489.314502][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.343564][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.451244][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.459107][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.540208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.910054][T16464] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 489.948061][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3390'. [ 490.231840][T16476] sit0: entered promiscuous mode [ 490.300413][T16476] netlink: 'syz.4.3394': attribute type 1 has an invalid length. [ 490.345531][T16476] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3394'. [ 490.578640][T16488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3398'. [ 490.587805][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.612658][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 490.989327][T16509] gretap1: entered promiscuous mode [ 491.419236][T16531] netlink: 'syz.0.3410': attribute type 4 has an invalid length. [ 491.506728][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'. [ 491.549065][T16538] xt_CONNSECMARK: invalid mode: 0 [ 491.619617][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.670388][T16545] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 491.670417][T16544] IPVS: stopping backup sync thread 16545 ... [ 491.848175][T16542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.886522][T16542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 491.951313][T16556] lo speed is unknown, defaulting to 1000 [ 492.070435][T16542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.106021][T16542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.277581][T16542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.310773][T16542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.469349][T16542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.497581][T16542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.531341][T16587] lo speed is unknown, defaulting to 1000 [ 492.659537][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 492.992063][ T5851] Bluetooth: hci1: command 0x0405 tx timeout [ 493.043298][T16613] validate_nla: 1 callbacks suppressed [ 493.043317][T16613] netlink: 'syz.1.3435': attribute type 75 has an invalid length. [ 493.074955][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'. [ 493.102002][T16542] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.114239][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 493.127047][T16542] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.415919][T16610] bridge_slave_1 (unregistering): left allmulticast mode [ 493.425371][T16610] bridge_slave_1 (unregistering): left promiscuous mode [ 493.437335][T16610] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.484602][T16542] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.494453][T16542] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.505585][T16623] Cannot find map_set index 0 as target [ 493.522292][T16542] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.531423][T16542] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.541963][T16622] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 493.542684][T16624] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 493.595529][T16542] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.638095][T16542] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 493.699670][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 493.905512][ T30] audit: type=1107 audit(1742321488.384:6): pid=16638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 493.925339][T16637] lo speed is unknown, defaulting to 1000 [ 494.104951][T16651] netlink: 'syz.3.3445': attribute type 4 has an invalid length. [ 494.119725][T16651] netlink: 'syz.3.3445': attribute type 4 has an invalid length. [ 494.739672][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 494.840031][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3455'. [ 494.960742][T16681] netlink: 'syz.3.3456': attribute type 4 has an invalid length. [ 494.995368][T16681] netlink: 'syz.3.3456': attribute type 4 has an invalid length. [ 495.037313][T16683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3457'. [ 495.403953][T16700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 495.526640][T16700] sctp: [Deprecated]: syz.3.3462 (pid 16700) Use of int in maxseg socket option. [ 495.526640][T16700] Use struct sctp_assoc_value instead [ 495.712358][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'. [ 495.779574][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.214518][T16726] Bluetooth: MGMT ver 1.23 [ 496.261528][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'. [ 496.291331][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'. [ 496.819680][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.916248][T16740] ip6t_srh: unknown srh match flags 5294 [ 496.957764][T16742] veth1_macvtap: left promiscuous mode [ 496.970317][T16742] macsec0: entered promiscuous mode [ 496.975578][T16742] macsec0: entered allmulticast mode [ 497.025743][T16742] veth1_macvtap: entered promiscuous mode [ 497.049717][T16742] veth1_macvtap: entered allmulticast mode [ 497.055818][T16742] macsec0: left promiscuous mode [ 497.086225][T16742] macsec0: left allmulticast mode [ 497.104907][T16742] veth1_macvtap: left allmulticast mode [ 497.276597][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'. [ 497.402737][T16759] lo speed is unknown, defaulting to 1000 [ 497.491500][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3480'. [ 497.516842][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3480'. [ 497.762508][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3482'. [ 497.860131][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.071849][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3484'. [ 498.243257][T16775] vlan2: entered allmulticast mode [ 498.260206][T16775] hsr0: entered allmulticast mode [ 498.290301][T16775] hsr_slave_0: entered allmulticast mode [ 498.306863][T16775] hsr_slave_1: entered allmulticast mode [ 498.349832][T16775] hsr0: left allmulticast mode [ 498.355485][T16775] hsr_slave_0: left allmulticast mode [ 498.368267][T16775] hsr_slave_1: left allmulticast mode [ 498.416755][T16776] netlink: 'syz.4.3484': attribute type 12 has an invalid length. [ 498.449960][T16776] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3484'. [ 498.518622][T16775] netlink: 'syz.4.3484': attribute type 12 has an invalid length. [ 498.546269][T16775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3484'. [ 498.566342][T16780] netlink: 'syz.1.3487': attribute type 9 has an invalid length. [ 498.607545][T16780] netlink: 'syz.1.3487': attribute type 6 has an invalid length. [ 498.637702][T16780] netlink: 'syz.1.3487': attribute type 7 has an invalid length. [ 498.669621][T16780] netlink: 'syz.1.3487': attribute type 8 has an invalid length. [ 498.899558][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.163668][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3493'. [ 499.180028][T16800] No such timeout policy "syz0" [ 499.196133][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3493'. [ 499.412435][T16805] tipc: Enabling of bearer rejected, already enabled [ 499.939566][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 500.210844][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3497'. [ 500.799288][T16826] syz_tun (unregistering): left allmulticast mode [ 500.979715][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 501.100592][T16853] dummy0: entered promiscuous mode [ 501.142228][T16853] dummy0: left promiscuous mode [ 501.606457][T16881] netlink: 'syz.3.3515': attribute type 4 has an invalid length. [ 501.942394][T16887] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 501.979780][T16887] netlink: 'syz.4.3516': attribute type 2 has an invalid length. [ 502.019784][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 502.464588][T16906] __nla_validate_parse: 102 callbacks suppressed [ 502.464607][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 502.549252][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 503.059692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 503.118987][T16929] netlink: 'syz.4.3528': attribute type 4 has an invalid length. [ 503.502029][T16945] xt_connbytes: Forcing CT accounting to be enabled [ 503.974396][T16963] gretap0: left promiscuous mode [ 504.023302][T16963] sit0: left promiscuous mode [ 504.099672][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 504.156713][T16963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.198772][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3551'. [ 505.139580][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 506.181309][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.219567][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 507.520237][T16994] ip6t_srh: unknown srh invflags 4449 [ 507.595324][T16996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3546'. [ 507.615241][T16998] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3547'. [ 507.842865][T17009] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 507.861649][T17009] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 508.029326][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 508.045292][T17018] siw: device registration error -23 [ 508.259617][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 508.490533][T17036] IPv6: addrconf: prefix option has invalid lifetime [ 508.497804][T17035] IPv6: addrconf: prefix option has invalid lifetime [ 509.021953][T17058] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3564'. [ 509.238269][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 509.249790][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 509.299615][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 509.512274][T17095] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.3576'. [ 509.530546][T17095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.604657][T17102] sit0: left promiscuous mode [ 509.912677][T17111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.938362][T17117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 510.041763][T17119] netlink: del zone limit has 4 unknown bytes [ 510.050150][T17121] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3587'. [ 510.118886][T17123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3588'. [ 510.246603][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.254185][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.273345][T17129] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 510.339638][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 510.413807][T17123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.426504][T17123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.467460][T17138] netlink: 'syz.1.3590': attribute type 10 has an invalid length. [ 510.514120][T17123] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.523257][T17123] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.533025][T17123] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.542380][T17123] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.606567][T17127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.614936][T17127] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.625752][T17127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.671886][T17138] team0: entered promiscuous mode [ 510.677094][T17138] team_slave_0: entered promiscuous mode [ 510.687427][T17138] team_slave_1: entered promiscuous mode [ 510.701453][T17138] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 510.712921][T17138] bridge0: port 2(team0) entered blocking state [ 510.720382][T17138] bridge0: port 2(team0) entered disabled state [ 510.726914][T17138] team0: entered allmulticast mode [ 510.732918][T17138] team_slave_0: entered allmulticast mode [ 510.738754][T17138] team_slave_1: entered allmulticast mode [ 510.744862][T17138] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 511.012594][T17111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.060165][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 511.123098][T17111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.227221][T17111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.302561][T17111] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.323944][T17111] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.339332][T17111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.355654][T17111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.379621][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 512.779261][T17227] netlink: 'syz.0.3620': attribute type 4 has an invalid length. [ 512.818892][T17230] netlink: 'syz.0.3620': attribute type 4 has an invalid length. [ 512.849612][T17227] netlink: 'syz.0.3620': attribute type 4 has an invalid length. [ 512.926532][T17237] __nla_validate_parse: 11 callbacks suppressed [ 512.926553][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'. [ 513.459632][ C1] net_ratelimit: 1 callbacks suppressed [ 513.459652][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 513.628397][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'. [ 513.756372][T17273] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3632'. [ 514.019912][ T5924] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 514.027386][ T5924] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 514.049560][T17286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3638'. [ 514.132902][ T5924] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 514.295557][T17296] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3640'. [ 514.330859][T17294] ip6t_srh: unknown srh invflags 4449 [ 514.500746][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 514.510311][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 515.539574][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 516.579664][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 516.765271][T17333] xt_cgroup: path and classid specified [ 516.797452][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3655'. [ 516.804352][T17333] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 516.813036][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3655'. [ 516.837710][T17333] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3653'. [ 517.238015][T17350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.260196][T17350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.365755][T17350] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.374590][T17350] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.392107][T17350] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.411179][T17350] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.436713][T17350] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 517.444537][T17350] macsec1: left promiscuous mode [ 517.451586][T17350] macsec1: left allmulticast mode [ 517.619694][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 517.675820][T17366] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 517.723390][T17362] ipt_REJECT: ECHOREPLY no longer supported. [ 517.737212][T17369] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 517.863247][T17372] team0: Device gtp0 is of different type [ 517.942767][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 517.963270][T17381] Bluetooth: MGMT ver 1.23 [ 517.981299][T17381] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3667'. [ 517.985966][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3666'. [ 518.065019][T17381] vlan2: entered allmulticast mode [ 518.096459][T17381] batadv0: entered allmulticast mode [ 518.106659][T17381] batadv0: left allmulticast mode [ 518.172452][T17390] netlink: 'syz.4.3669': attribute type 12 has an invalid length. [ 518.187476][T17390] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3669'. [ 518.254929][T17390] 0·: renamed from hsr0 (while UP) [ 518.272462][T17390] 0·: entered allmulticast mode [ 518.285465][T17390] hsr_slave_0: entered allmulticast mode [ 518.308117][T17390] hsr_slave_1: entered allmulticast mode [ 518.317469][T17390] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 518.659565][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 518.825181][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 518.849606][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 518.875152][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 519.699566][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 519.890188][T17455] netlink: 'syz.2.3689': attribute type 2 has an invalid length. [ 519.897988][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3689'. [ 520.042821][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3691'. [ 520.063272][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 520.140379][T17467] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 520.739595][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 520.917545][T17502] netlink: 'syz.4.3704': attribute type 8 has an invalid length. [ 521.724433][T17541] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 521.779567][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 521.911499][T17545] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.069944][T17554] netlink: 'syz.3.3719': attribute type 1 has an invalid length. [ 522.106435][T17545] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.276762][T17545] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.402959][T17556] bond1: entered promiscuous mode [ 522.408350][T17556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.475958][T17545] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.819679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 523.021135][T17545] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.045770][T17545] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.081618][T17545] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.116832][T17545] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.152511][T17577] xt_cgroup: path and classid specified [ 523.193961][T17577] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 523.238664][T17577] __nla_validate_parse: 7 callbacks suppressed [ 523.238694][T17577] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3725'. [ 523.364388][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 523.406447][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 523.718133][T17591] netlink: 'syz.0.3728': attribute type 9 has an invalid length. [ 523.741597][T17591] netlink: 'syz.0.3728': attribute type 6 has an invalid length. [ 523.859581][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 524.327931][T17618] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3734'. [ 524.351893][T17618] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3734'. [ 524.363418][T17621] netlink: 'syz.2.3735': attribute type 10 has an invalid length. [ 524.408474][T17621] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.416037][T17621] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.482530][T17621] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.490018][T17621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.498855][T17621] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.506020][T17621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.641901][T17621] team0: Port device bridge0 added [ 524.899578][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 525.495454][T17669] netlink: 'syz.3.3745': attribute type 1 has an invalid length. [ 525.619240][T17669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.939550][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 526.286913][T17691] lo speed is unknown, defaulting to 1000 [ 526.364845][T17697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 526.526643][T17693] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 526.665895][T17697] vlan2: left allmulticast mode [ 526.679815][T17697] vlan2: left promiscuous mode [ 526.694117][T17697] bridge0: port 1(vlan2) entered disabled state [ 526.979613][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 527.254783][T17707] lo speed is unknown, defaulting to 1000 [ 527.851265][T17707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3751'. [ 528.019564][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 528.630574][T17739] netlink: 'syz.0.3758': attribute type 1 has an invalid length. [ 528.649905][T17739] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.3758'. [ 529.059575][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 529.120005][T17759] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 529.601296][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3768'. [ 529.639833][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3768'. [ 529.679393][T17773] lo speed is unknown, defaulting to 1000 [ 530.099548][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 530.466805][T17773] lo speed is unknown, defaulting to 1000 [ 530.654988][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 530.665939][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 530.753137][T17831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3784'. [ 530.770244][T17831] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 530.902269][T17823] lo speed is unknown, defaulting to 1000 [ 531.139696][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 531.730331][T17859] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3790'. [ 532.002241][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'. [ 532.059645][T17872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'. [ 532.179548][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 532.326272][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3799'. [ 532.608111][T17886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.741174][T17886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.896580][T17886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.093416][T17886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.219652][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 533.375003][T17908] netlink: 'syz.0.3808': attribute type 4 has an invalid length. [ 533.430865][T17911] netlink: 'syz.0.3808': attribute type 4 has an invalid length. [ 533.480226][T17886] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.566529][T17886] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.712949][T17886] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.777951][T17886] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.951725][T17928] netlink: 'syz.0.3817': attribute type 4 has an invalid length. [ 534.004005][T17930] netlink: 'syz.0.3817': attribute type 4 has an invalid length. [ 534.259134][T17937] dccp_invalid_packet: P.Data Offset(0) too small [ 534.259606][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 534.381739][T17931] lo speed is unknown, defaulting to 1000 [ 534.552585][T17939] Cannot find add_set index 3 as target [ 534.811351][T17948] netlink: 'syz.4.3823': attribute type 4 has an invalid length. [ 535.264031][T17971] team0: Device gtp0 is of different type [ 535.299550][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 535.822100][T17975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 535.893256][T17999] lo speed is unknown, defaulting to 1000 [ 536.261914][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 536.339576][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 536.730116][T18018] openvswitch: netlink: Actions may not be safe on all matching packets [ 537.099311][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3844'. [ 537.160191][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3844'. [ 537.367154][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3847'. [ 537.379612][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 537.421228][T18034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3847'. [ 537.890933][T18051] xt_cgroup: path and classid specified [ 537.923413][T18051] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3853'. [ 538.123909][T18057] batman_adv: batadv0: Adding interface: dummy0 [ 538.146893][T18057] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.209594][T18057] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 538.241117][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 538.251593][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3859'. [ 538.275546][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 538.407559][T18068] Cannot find add_set index 3 as target [ 538.420336][T18071] netlink: 'syz.1.3861': attribute type 10 has an invalid length. [ 538.420385][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 538.452059][T18071] veth1_vlan: left promiscuous mode [ 538.469991][T18071] team0: Device veth1_vlan failed to register rx_handler [ 538.516176][T18078] netlink: set zone limit has 4 unknown bytes [ 538.725961][T18082] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3864'. [ 538.762843][T18075] netlink: 'syz.4.3862': attribute type 4 has an invalid length. [ 538.846482][T18075] netlink: 'syz.4.3862': attribute type 4 has an invalid length. [ 539.205681][T18088] netlink: 'syz.1.3866': attribute type 30 has an invalid length. [ 539.459675][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 539.528221][T18091] xt_cgroup: path and classid specified [ 540.500421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 541.539579][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 541.846721][T18119] netlink: 'syz.2.3874': attribute type 3 has an invalid length. [ 541.858541][T18119] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 542.579547][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 542.966454][T18126] __nla_validate_parse: 1 callbacks suppressed [ 542.966475][T18126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3876'. [ 543.024189][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'. [ 543.037120][T18125] tap0: tun_chr_ioctl cmd 1074025677 [ 543.059825][T18125] tap0: linktype set to 804 [ 543.171625][T18130] netlink: 'syz.2.3878': attribute type 1 has an invalid length. [ 543.244397][T18130] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 543.254765][T18134] lo: entered promiscuous mode [ 543.277661][T16845] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 543.278425][T18130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.297843][T18133] lo: left promiscuous mode [ 543.362744][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3879'. [ 543.374672][T18130] veth3: entered promiscuous mode [ 543.416638][T18130] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 543.450283][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 543.619621][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.983010][T18181] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 543.991384][T18181] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3889'. [ 544.042378][T18186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.191452][T18194] batman_adv: batadv0: Adding interface: ipvlan2 [ 544.197844][T18194] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 544.314814][T18203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3895'. [ 544.418544][T18208] nbd: must specify a size in bytes for the device [ 544.426320][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3896'. [ 544.487151][T18212] netlink: 'syz.0.3898': attribute type 4 has an invalid length. [ 544.519126][T18212] netlink: 'syz.0.3898': attribute type 4 has an invalid length. [ 544.652621][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 544.659661][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 544.663467][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 545.047094][T18243] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3905'. [ 545.058400][T18243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3905'. [ 545.081536][T18245] netlink: 'syz.4.3906': attribute type 1 has an invalid length. [ 545.212722][T18249] tipc: Started in network mode [ 545.232988][T18249] tipc: Node identity 7, cluster identity 4711 [ 545.253446][T18249] tipc: Node number set to 7 [ 545.259080][T18249] tipc: Cannot configure node identity twice [ 545.556944][T18269] lo speed is unknown, defaulting to 1000 [ 545.564307][T18273] x_tables: duplicate underflow at hook 2 [ 545.699715][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 546.077017][T18296] netlink: 'syz.1.3922': attribute type 5 has an invalid length. [ 546.213317][T18303] netlink: zone id is out of range [ 546.218521][T18303] netlink: zone id is out of range [ 546.231717][T18303] netlink: zone id is out of range [ 546.242942][T18303] netlink: zone id is out of range [ 546.250672][T18301] lo speed is unknown, defaulting to 1000 [ 546.269568][T18303] netlink: zone id is out of range [ 546.285106][T18303] netlink: zone id is out of range [ 546.312476][T18303] netlink: set zone limit has 8 unknown bytes [ 546.739623][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 546.891362][T18320] lo speed is unknown, defaulting to 1000 [ 547.407387][T18320] x_tables: duplicate entry at hook 2 [ 547.935980][T18344] xt_cgroup: path and classid specified [ 547.944677][T18344] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 548.473399][T18357] __nla_validate_parse: 5 callbacks suppressed [ 548.473421][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3941'. [ 548.504971][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3941'. [ 548.524506][T18357] netlink: 'syz.4.3941': attribute type 6 has an invalid length. [ 548.706079][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'. [ 548.809912][T18375] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3946'. [ 549.051836][T18383] xt_cgroup: path and classid specified [ 549.079324][T18383] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 549.325334][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3949'. [ 549.410551][T18383] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3950'. [ 549.626200][T18391] bond1: left promiscuous mode [ 549.859540][ C1] net_ratelimit: 6 callbacks suppressed [ 549.859560][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 549.872901][ T5149] Bluetooth: hci5: command 0x0406 tx timeout [ 550.899513][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 551.083647][T18435] netlink: 'syz.3.3962': attribute type 4 has an invalid length. [ 551.140654][T18435] netlink: 'syz.3.3962': attribute type 4 has an invalid length. [ 551.226221][T18437] xt_cgroup: path and classid specified [ 551.234340][T18437] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 551.243911][T18437] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3963'. [ 551.590392][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3970'. [ 551.726747][T18458] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.3982'. [ 551.758932][T18458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.918715][T18466] bridge0: entered allmulticast mode [ 551.939517][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 552.100320][T16841] wlan1: Trigger new scan to find an IBSS to join [ 552.213815][T18474] netlink: 'syz.0.3975': attribute type 1 has an invalid length. [ 552.221788][T18474] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3975'. [ 552.614442][T18485] sctp: [Deprecated]: syz.4.3979 (pid 18485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.614442][T18485] Use struct sctp_sack_info instead [ 552.979504][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 553.878948][T18523] __nla_validate_parse: 3 callbacks suppressed [ 553.878968][T18523] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3990'. [ 553.910885][T18522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3992'. [ 553.937577][T18518] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3990'. [ 554.019556][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 554.085007][T18527] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3994'. [ 554.095228][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'. [ 554.109590][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'. [ 554.385511][T18543] xt_cgroup: path and classid specified [ 554.402193][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3997'. [ 554.412588][T18545] bridge2: entered allmulticast mode [ 554.419748][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3997'. [ 554.421388][T18543] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 554.498062][T18553] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3999'. [ 554.590536][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4001'. [ 555.059629][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 555.066834][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 555.714214][T18594] syz_tun: entered allmulticast mode [ 555.825920][T18594] netlink: 'syz.2.4012': attribute type 4 has an invalid length. [ 555.921076][T18594] syz_tun: left allmulticast mode [ 556.051322][ T36] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 556.091851][T18609] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 556.099844][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 556.327700][T18616] xt_cgroup: path and classid specified [ 556.329694][T18617] netlink: 'syz.2.4019': attribute type 1 has an invalid length. [ 556.360974][T18616] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 556.387615][T18617] bond2: entered promiscuous mode [ 556.392918][T18617] bond2: entered allmulticast mode [ 556.398451][T18617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.728925][T18627] team0: Device ipvlan2 failed to register rx_handler [ 557.109715][T18639] syzkaller1: entered promiscuous mode [ 557.138338][T18639] syzkaller1: entered allmulticast mode [ 557.144283][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 557.483914][T18656] xt_cgroup: path and classid specified [ 557.494165][T18656] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 557.605255][T18663] x_tables: duplicate underflow at hook 1 [ 557.656479][T18666] x_tables: duplicate underflow at hook 3 [ 557.670875][T18666] x_tables: duplicate underflow at hook 3 [ 557.795647][T18663] syz.1.4034: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 557.839687][T18663] CPU: 0 UID: 0 PID: 18663 Comm: syz.1.4034 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 557.839717][T18663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.839730][T18663] Call Trace: [ 557.839739][T18663] [ 557.839756][T18663] dump_stack_lvl+0x241/0x360 [ 557.839788][T18663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.839812][T18663] ? __pfx__printk+0x10/0x10 [ 557.839839][T18663] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 557.839866][T18663] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 557.839896][T18663] warn_alloc+0x278/0x410 [ 557.839924][T18663] ? __pfx_warn_alloc+0x10/0x10 [ 557.839952][T18663] ? xskq_create+0xb6/0x170 [ 557.839974][T18663] ? __get_vm_area_node+0x1c8/0x2d0 [ 557.840005][T18663] ? __get_vm_area_node+0x25c/0x2d0 [ 557.840043][T18663] __vmalloc_node_range_noprof+0x62f/0x1380 [ 557.840094][T18663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 557.840122][T18663] ? __kasan_kmalloc+0x98/0xb0 [ 557.840152][T18663] vmalloc_user_noprof+0x74/0x80 [ 557.840174][T18663] ? xskq_create+0xb6/0x170 [ 557.840194][T18663] xskq_create+0xb6/0x170 [ 557.840218][T18663] xsk_init_queue+0xa1/0x100 [ 557.840241][T18663] xsk_setsockopt+0x4aa/0x810 [ 557.840264][T18663] ? __pfx_xsk_setsockopt+0x10/0x10 [ 557.840285][T18663] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.840319][T18663] ? aa_sock_opt_perm+0x79/0x120 [ 557.840356][T18663] ? __pfx_xsk_setsockopt+0x10/0x10 [ 557.840376][T18663] do_sock_setsockopt+0x3af/0x720 [ 557.840406][T18663] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 557.840436][T18663] ? __fget_files+0x395/0x410 [ 557.840465][T18663] ? __fget_files+0x2a/0x410 [ 557.840502][T18663] __x64_sys_setsockopt+0x1ee/0x280 [ 557.840533][T18663] do_syscall_64+0xf3/0x230 [ 557.840560][T18663] ? clear_bhb_loop+0x35/0x90 [ 557.840593][T18663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.840621][T18663] RIP: 0033:0x7f47bb58d169 [ 557.840639][T18663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.840656][T18663] RSP: 002b:00007f47bc32e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.840678][T18663] RAX: ffffffffffffffda RBX: 00007f47bb7a5fa0 RCX: 00007f47bb58d169 [ 557.840694][T18663] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000005 [ 557.840706][T18663] RBP: 00007f47bb60e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 557.840718][T18663] R10: 0000400000000800 R11: 0000000000000246 R12: 0000000000000000 [ 557.840731][T18663] R13: 0000000000000000 R14: 00007f47bb7a5fa0 R15: 00007fffe6328f38 [ 557.840768][T18663] [ 557.840788][T18663] Mem-Info: [ 557.938084][T18674] syzkaller1: entered promiscuous mode [ 558.113391][T18663] active_anon:10418 inactive_anon:0 isolated_anon:0 [ 558.113391][T18663] active_file:1956 inactive_file:38493 isolated_file:0 [ 558.113391][T18663] unevictable:768 dirty:179 writeback:0 [ 558.113391][T18663] slab_reclaimable:11529 slab_unreclaimable:112651 [ 558.113391][T18663] mapped:29064 shmem:1402 pagetables:779 [ 558.113391][T18663] sec_pagetables:0 bounce:0 [ 558.113391][T18663] kernel_misc_reclaimable:0 [ 558.113391][T18663] free:1308162 free_pcp:612 free_cma:0 [ 558.159200][T18674] syzkaller1: entered allmulticast mode [ 558.172531][T18663] Node 0 active_anon:41872kB inactive_anon:0kB active_file:7824kB inactive_file:153896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116256kB dirty:712kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12428kB pagetables:3116kB sec_pagetables:0kB all_unreclaimable? no [ 558.204914][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 558.221605][T18663] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 558.259293][T18663] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.299021][T18663] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 558.305898][T18663] Node 0 DMA32 free:1311708kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:42132kB inactive_anon:0kB active_file:7824kB inactive_file:153572kB unevictable:1536kB writepending:712kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:2032kB local_pcp:600kB free_cma:0kB [ 558.347339][T18663] lowmem_reserve[]: 0 0 0 0 0 [ 558.353479][T18663] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.387806][T18663] lowmem_reserve[]: 0 0 0 0 0 [ 558.398171][T18663] Node 1 Normal free:3905580kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.437093][T18663] lowmem_reserve[]: 0 0 0 0 0 [ 558.446337][T18663] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 558.466577][T18663] Node 0 DMA32: 1*4kB (E) 32*8kB (UME) 292*16kB (ME) 230*32kB (UME) 39*64kB (UME) 94*128kB (UME) 37*256kB (UM) 71*512kB (UME) 56*1024kB (UME) 5*2048kB (UM) 286*4096kB (UM) = 1311684kB [ 558.539846][T18663] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 558.564309][T18663] Node 1 Normal: 231*4kB (UME) 66*8kB (UME) 44*16kB (UME) 220*32kB (UME) 93*64kB (UME) 28*128kB (UME) 15*256kB (UM) 10*512kB (UM) 5*1024kB (UME) 5*2048kB (UE) 943*4096kB (M) = 3905580kB [ 558.592692][T18663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.606859][T18663] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.667261][T18663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.707002][T18663] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.718490][T18663] 41851 total pagecache pages [ 558.730686][T18663] 0 pages in swap cache [ 558.734879][T18663] Free swap = 124996kB [ 558.739133][T18663] Total swap = 124996kB [ 558.761841][T18663] 2097051 pages RAM [ 558.767266][T18663] 0 pages HighMem/MovableOnly [ 558.781960][T18689] lo speed is unknown, defaulting to 1000 [ 558.789988][T18663] 427902 pages reserved [ 558.794179][T18663] 0 pages cma reserved [ 559.151539][T18701] netlink: 'syz.1.4044': attribute type 4 has an invalid length. [ 559.210683][T18701] netlink: 'syz.1.4044': attribute type 4 has an invalid length. [ 559.369720][T18706] __nla_validate_parse: 10 callbacks suppressed [ 559.369742][T18706] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4046'. [ 559.418909][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 559.460055][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 560.371089][T18722] pim6reg1: entered promiscuous mode [ 560.376466][T18722] pim6reg1: entered allmulticast mode [ 560.511747][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 560.521729][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4053'. [ 560.620729][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'. [ 560.744441][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4058'. [ 560.759949][T18740] bridge2: left allmulticast mode [ 560.766917][T18745] netlink: 'syz.4.4057': attribute type 1 has an invalid length. [ 560.775493][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4058'. [ 560.915913][T18746] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.923294][T18746] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.012468][T18746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.025869][T18746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.104699][T18746] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.113350][T18746] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.122096][T18746] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.130916][T18746] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.187168][T18746] veth3: left promiscuous mode [ 561.196989][T18746] bond2: left promiscuous mode [ 561.203990][T18746] bond2: left allmulticast mode [ 561.212856][T18745] bond2: entered promiscuous mode [ 561.224539][T18745] bond2: entered allmulticast mode [ 561.235479][T18745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.511083][T18773] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 561.590266][T18777] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 561.633334][T18777] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 561.697866][T18783] xt_cgroup: path and classid specified [ 561.708529][T18783] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 561.718470][T18783] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4069'. [ 561.830401][T18789] netlink: 'syz.2.4073': attribute type 10 has an invalid length. [ 561.840577][T18789] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.849208][T18789] bond0: (slave team0): Enslaving as an active interface with an up link [ 561.860068][T18788] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 561.861527][T18789] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0cb9:64ff:fe8e:f1f1 error=-28 [ 562.058475][T18794] batman_adv: batadv0: Adding interface: dummy0 [ 562.110638][T18794] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.147941][T18794] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 562.305474][T18818] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 562.315800][T18789] infiniband syz1: set down [ 562.322031][T18817] IPVS: stopping master sync thread 18818 ... [ 562.340109][T18789] infiniband syz1: added team_slave_0 [ 562.368908][T18789] syz1: rxe_create_cq: returned err = -12 [ 562.398327][T18789] infiniband syz1: Couldn't create ib_mad CQ [ 562.432359][T18789] infiniband syz1: Couldn't open port 1 [ 562.457113][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4080'. [ 562.480174][T18789] RDS/IB: syz1: added [ 562.489754][T18789] smc: adding ib device syz1 with port count 1 [ 562.511093][T18826] SET target dimension over the limit! [ 562.528225][T18789] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 562.559096][T18829] Bluetooth: MGMT ver 1.23 [ 562.807992][T18835] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 562.811761][T18833] lo speed is unknown, defaulting to 1000 [ 563.247593][T18844] xt_cgroup: path and classid specified [ 563.271322][T18844] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 563.559197][T18849] netlink: 'syz.1.4089': attribute type 10 has an invalid length. [ 563.654910][T18842] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.663939][T18842] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.672461][T18842] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.680917][T18842] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.719364][T18842] gretap1: left promiscuous mode [ 563.731234][T18842] bridge0: left allmulticast mode [ 564.552214][T18873] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 564.570229][T18873] __nla_validate_parse: 5 callbacks suppressed [ 564.570247][T18873] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4095'. [ 564.968514][T18886] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 565.045438][T18869] lo speed is unknown, defaulting to 1000 [ 565.171852][T18890] xt_cgroup: path and classid specified [ 565.195325][T18890] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 565.215054][T18890] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4099'. [ 565.229708][ T5851] Bluetooth: hci2: command 0x0405 tx timeout [ 565.294149][T18889] lo speed is unknown, defaulting to 1000 [ 565.641325][T18898] netlink: 'syz.4.4102': attribute type 10 has an invalid length. [ 565.905742][T18900] lo speed is unknown, defaulting to 1000 [ 566.044593][T18911] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 566.070660][T18911] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4106'. [ 566.900047][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 567.021846][T18929] lo speed is unknown, defaulting to 1000 [ 567.286076][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'. [ 567.296076][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'. [ 567.360624][T18952] xt_cgroup: path and classid specified [ 567.369055][T18952] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 567.380115][T18952] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4118'. [ 567.996021][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4126'. [ 568.005182][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4126'. [ 568.014877][T18971] netlink: 'syz.4.4126': attribute type 7 has an invalid length. [ 568.511882][T18976] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4127'. [ 568.521261][T18974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4127'. [ 568.949847][T18992] @ÿ: renamed from veth0_vlan [ 569.012726][T18999] Cannot find del_set index 1 as target [ 569.069006][T18998] lo speed is unknown, defaulting to 1000 [ 569.179208][T19009] netlink: 'syz.0.4136': attribute type 4 has an invalid length. [ 569.195816][T19009] netlink: 'syz.0.4136': attribute type 4 has an invalid length. [ 569.634424][T19033] netlink: 'syz.2.4142': attribute type 39 has an invalid length. [ 570.367023][T19049] __nla_validate_parse: 1 callbacks suppressed [ 570.367043][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4146'. [ 570.514233][T19055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4149'. [ 570.595811][T19059] netlink: 'syz.1.4150': attribute type 4 has an invalid length. [ 570.634383][T19059] netlink: 'syz.1.4150': attribute type 4 has an invalid length. [ 571.090043][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 571.099086][T19083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.276717][T19083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.370898][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4161'. [ 571.416976][T19103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4161'. [ 571.449107][T19105] IPVS: Error connecting to the multicast addr [ 571.474286][T19105] xt_limit: Overflow, try lower: 262144/524288 [ 571.517983][T19111] netlink: 'syz.4.4164': attribute type 4 has an invalid length. [ 571.577311][T19111] netlink: 'syz.4.4164': attribute type 4 has an invalid length. [ 571.848313][T19131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4169'. [ 571.903544][T19133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4170'. [ 571.923261][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4169'. [ 571.953340][T19136] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4172'. [ 572.609990][T19154] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4177'. [ 572.790614][T19159] xt_cgroup: path and classid specified [ 572.830368][T19159] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 573.136104][T19176] batadv0: entered promiscuous mode [ 573.150161][T19176] macsec0: entered allmulticast mode [ 573.169897][T19176] batadv0: entered allmulticast mode [ 573.192592][T19176] batadv0: left allmulticast mode [ 573.209657][T19176] batadv0: left promiscuous mode [ 573.468468][T19191] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 573.695432][T19199] bridge_slave_0: invalid flags given to default FDB implementation [ 573.899980][T19200] lo speed is unknown, defaulting to 1000 [ 574.047467][T19212] openvswitch: netlink: Actions may not be safe on all matching packets [ 574.072508][T19202] ip6gre1: entered promiscuous mode [ 574.716278][T19222] xt_cgroup: path and classid specified [ 574.740077][T19222] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 574.746732][T19209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 575.275911][T19238] syzkaller0: refused to change device tx_queue_len [ 575.516405][T19242] netlink: 'syz.2.4203': attribute type 29 has an invalid length. [ 576.052980][T19267] __nla_validate_parse: 15 callbacks suppressed [ 576.053001][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4212'. [ 576.169589][T19267] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4212'. [ 576.198093][T19267] netlink: 'syz.1.4212': attribute type 3 has an invalid length. [ 576.219336][T19267] netlink: 'syz.1.4212': attribute type 2 has an invalid length. [ 576.243658][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'. [ 576.252987][T19267] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4212'. [ 576.926363][T19301] netlink: 'syz.0.4219': attribute type 1 has an invalid length. [ 576.935133][T19301] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4219'. [ 576.983044][T19295] lo speed is unknown, defaulting to 1000 [ 577.086508][T19304] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.127554][T19304] bond0: (slave bond6): Enslaving as an active interface with an up link [ 577.164791][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 577.476299][T19320] x_tables: duplicate underflow at hook 1 [ 577.496112][T19333] FAULT_INJECTION: forcing a failure. [ 577.496112][T19333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.529966][T19333] CPU: 1 UID: 0 PID: 19333 Comm: syz.3.4225 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 577.529998][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.530012][T19333] Call Trace: [ 577.530021][T19333] [ 577.530030][T19333] dump_stack_lvl+0x241/0x360 [ 577.530064][T19333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.530089][T19333] ? __pfx__printk+0x10/0x10 [ 577.530118][T19333] ? snprintf+0xda/0x120 [ 577.530148][T19333] should_fail_ex+0x40a/0x550 [ 577.530187][T19333] _copy_to_user+0x31/0xb0 [ 577.530219][T19333] simple_read_from_buffer+0xca/0x150 [ 577.530253][T19333] proc_fail_nth_read+0x1e9/0x250 [ 577.530288][T19333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.530323][T19333] ? rw_verify_area+0x243/0x630 [ 577.530345][T19333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.530379][T19333] vfs_read+0x1f8/0xb40 [ 577.530402][T19333] ? fdget_pos+0x254/0x320 [ 577.530436][T19333] ? __pfx___mutex_lock+0x10/0x10 [ 577.530465][T19333] ? __pfx_vfs_read+0x10/0x10 [ 577.530485][T19333] ? do_sys_openat2+0x17a/0x1d0 [ 577.530521][T19333] ? __fget_files+0x2a/0x410 [ 577.530554][T19333] ? __fget_files+0x395/0x410 [ 577.530584][T19333] ? __fget_files+0x2a/0x410 [ 577.530626][T19333] ksys_read+0x18f/0x2b0 [ 577.530652][T19333] ? __pfx_ksys_read+0x10/0x10 [ 577.530677][T19333] ? do_syscall_64+0x100/0x230 [ 577.530710][T19333] ? do_syscall_64+0xb6/0x230 [ 577.530742][T19333] do_syscall_64+0xf3/0x230 [ 577.530771][T19333] ? clear_bhb_loop+0x35/0x90 [ 577.530805][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.530834][T19333] RIP: 0033:0x7f3eb198bb7c [ 577.530854][T19333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 577.530873][T19333] RSP: 002b:00007f3eb2790030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.530898][T19333] RAX: ffffffffffffffda RBX: 00007f3eb1ba6160 RCX: 00007f3eb198bb7c [ 577.530914][T19333] RDX: 000000000000000f RSI: 00007f3eb27900a0 RDI: 0000000000000007 [ 577.530934][T19333] RBP: 00007f3eb2790090 R08: 0000000000000000 R09: 0000000000000000 [ 577.530948][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.530961][T19333] R13: 0000000000000000 R14: 00007f3eb1ba6160 R15: 00007ffde68e7818 [ 577.530994][T19333] [ 578.150494][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4232'. [ 578.228166][T19347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 578.291873][T19353] siw: device registration error -23 [ 578.402646][T19358] xt_cgroup: path and classid specified [ 578.429901][T19358] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 578.440659][T19358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4236'. [ 578.677251][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4240'. [ 578.880490][T19378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4243'. [ 578.979790][ T5149] Bluetooth: hci1: command 0x0405 tx timeout [ 579.233078][ T8888] IPVS: starting estimator thread 0... [ 579.241988][T19402] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 579.332112][T19400] 8021q: VLANs not supported on nlmon0 [ 579.339872][T19401] IPVS: using max 18 ests per chain, 43200 per kthread [ 579.764356][T19427] netlink: 'syz.2.4260': attribute type 11 has an invalid length. [ 579.985662][T19440] netlink: 'syz.2.4264': attribute type 1 has an invalid length. [ 580.176766][T19447] lo speed is unknown, defaulting to 1000 [ 580.573473][T19450] lo speed is unknown, defaulting to 1000 [ 581.316717][T19473] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 581.347863][T19473] macvtap0: entered promiscuous mode [ 581.383907][T19473] macvtap0: entered allmulticast mode [ 581.389358][T19473] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 581.755700][T19493] __nla_validate_parse: 5 callbacks suppressed [ 581.755721][T19493] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4278'. [ 581.827643][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 581.849965][T19499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4280'. [ 582.404855][T19520] xt_CT: No such helper "pptp" [ 582.524519][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 582.575514][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 582.927800][T19542] xt_hashlimit: size too large, truncated to 1048576 [ 582.991369][T19543] netlink: 'syz.3.4293': attribute type 34 has an invalid length. [ 583.103888][T19543] xt_hashlimit: size too large, truncated to 1048576 [ 583.115348][T19546] netlink: 'syz.2.4294': attribute type 4 has an invalid length. [ 583.148814][T19546] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4294'. [ 583.529959][T19565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.655964][T19579] netlink: 'syz.3.4301': attribute type 1 has an invalid length. [ 583.930653][T19588] lo speed is unknown, defaulting to 1000 [ 585.041228][T19656] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4316'. [ 585.060062][T19657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4317'. [ 585.177270][T19664] bridge: RTM_NEWNEIGH with invalid ether address [ 585.391763][T19672] netlink: 'syz.4.4322': attribute type 1 has an invalid length. [ 585.617779][T19678] lo speed is unknown, defaulting to 1000 [ 585.791629][T19698] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.4327'. [ 585.831095][T19698] macsec0: entered promiscuous mode [ 585.838056][T19698] macsec0: left promiscuous mode [ 585.845186][T19703] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 585.857981][T19703] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 585.886714][T19698] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.4327'. [ 585.896143][T19698] openvswitch: netlink: Flow actions attr not present in new flow. [ 585.935791][T19703] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 585.997778][T19703] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 586.284270][T19716] lo speed is unknown, defaulting to 1000 [ 586.559226][T19729] bridge0: port 3(gretap0) entered blocking state [ 586.580012][T19729] bridge0: port 3(gretap0) entered disabled state [ 586.596841][T19729] gretap0: entered allmulticast mode [ 586.611640][T19729] gretap0: entered promiscuous mode [ 586.643169][T19730] gretap0: left allmulticast mode [ 586.658541][T19730] gretap0: left promiscuous mode [ 586.686619][T19730] bridge0: port 3(gretap0) entered disabled state [ 587.034053][T19747] openvswitch: netlink: Actions may not be safe on all matching packets [ 587.101321][T19747] xt_cgroup: path and classid specified [ 587.158078][T19747] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 587.179117][T19747] __nla_validate_parse: 2 callbacks suppressed [ 587.179136][T19747] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4339'. [ 587.202424][T19678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4321'. [ 587.700333][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 588.096466][T19780] netlink: 'syz.1.4348': attribute type 3 has an invalid length. [ 588.306443][T19780] lo speed is unknown, defaulting to 1000 [ 588.551800][T19794] team0: Port device bridge0 removed [ 588.566522][T19794] bond0: (slave team0): Releasing backup interface [ 588.600906][T19794] bridge_slave_0: left allmulticast mode [ 588.606589][T19794] bridge_slave_0: left promiscuous mode [ 588.647856][T19794] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.666092][T19794] bridge_slave_1: left allmulticast mode [ 588.671950][T19794] bridge_slave_1: left promiscuous mode [ 588.677714][T19794] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.703670][T19794] bond0: (slave bond_slave_0): Releasing backup interface [ 588.730145][T19794] bond0: (slave bond_slave_1): Releasing backup interface [ 588.759785][T19794] team0: Port device team_slave_0 removed [ 588.770062][T19794] team0: Port device team_slave_1 removed [ 588.784581][T19794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.797593][T19794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.815973][T19794] bond1: (slave ip6gretap1): Removing an active aggregator [ 588.828999][T19794] bond1: (slave ip6gretap1): Releasing backup interface [ 588.841599][T19794] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 96:6c:d5:08:f9:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 588.881277][T19794] bond1: (slave veth3): Releasing backup interface [ 588.933999][T19795] vlan2: entered allmulticast mode [ 589.033024][T19803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4355'. [ 589.071720][T19802] openvswitch: netlink: Actions may not be safe on all matching packets [ 589.123276][T19802] xt_cgroup: path and classid specified [ 589.171125][T19802] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 589.200326][T19802] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4354'. [ 589.226022][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'. [ 589.268321][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4356'. [ 589.686439][T19822] netlink: 'syz.2.4362': attribute type 6 has an invalid length. [ 589.728340][T19820] lo speed is unknown, defaulting to 1000 [ 589.729126][T19823] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4361'. [ 589.789588][T19823] bridge_slave_0: entered allmulticast mode [ 589.850672][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'. [ 590.010128][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4365'. [ 590.201705][T19837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4361'. [ 590.466605][T19844] xt_cgroup: path and classid specified [ 590.700437][T19844] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 590.969637][T19848] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 591.014051][T19852] can: request_module (can-proto-0) failed. [ 591.121388][T19856] team0: Mode changed to "broadcast" [ 592.011833][T19909] lo speed is unknown, defaulting to 1000 [ 592.161381][T19911] lo speed is unknown, defaulting to 1000 [ 592.466046][T19914] __nla_validate_parse: 9 callbacks suppressed [ 592.466082][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 592.899522][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 593.139724][T19926] sctp: [Deprecated]: syz.3.4389 (pid 19926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.139724][T19926] Use struct sctp_sack_info instead [ 593.506234][T19942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4391'. [ 594.000986][T19953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.014051][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4395'. [ 594.034754][T19954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 594.100361][T19964] batman_adv: batadv0: Removing interface: dummy0 [ 594.119117][T19957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4394'. [ 594.144104][T19964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.174620][T19964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.196399][T19967] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 594.240625][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4394'. [ 594.308441][T19963] lo speed is unknown, defaulting to 1000 [ 594.425443][T19972] openvswitch: netlink: Actions may not be safe on all matching packets [ 594.484810][T19973] xt_cgroup: path and classid specified [ 594.512009][T19972] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 594.540353][T19972] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4399'. [ 594.890561][T19984] Bluetooth: MGMT ver 1.23 [ 594.950565][T19980] can: request_module (can-proto-5) failed. [ 595.101525][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'. [ 595.136621][T19991] netlink: 'syz.2.4403': attribute type 21 has an invalid length. [ 595.417496][T20002] xt_CT: No such helper "snmp" [ 595.633820][T20015] FAULT_INJECTION: forcing a failure. [ 595.633820][T20015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.689557][T20015] CPU: 1 UID: 0 PID: 20015 Comm: syz.1.4413 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 595.689587][T20015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 595.689600][T20015] Call Trace: [ 595.689608][T20015] [ 595.689617][T20015] dump_stack_lvl+0x241/0x360 [ 595.689650][T20015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.689674][T20015] ? __pfx__printk+0x10/0x10 [ 595.689698][T20015] ? __pfx_lock_release+0x10/0x10 [ 595.689738][T20015] should_fail_ex+0x40a/0x550 [ 595.689776][T20015] _copy_from_user+0x2d/0xb0 [ 595.689806][T20015] copy_msghdr_from_user+0xae/0x680 [ 595.689834][T20015] ? __lock_acquire+0x1397/0x2100 [ 595.689868][T20015] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 595.689895][T20015] ? __fget_files+0x2a/0x410 [ 595.689932][T20015] ? __fget_files+0x2a/0x410 [ 595.689969][T20015] do_recvmmsg+0x3bd/0xab0 [ 595.690004][T20015] ? __pfx_do_recvmmsg+0x10/0x10 [ 595.690049][T20015] ? ksys_write+0x22a/0x2b0 [ 595.690079][T20015] ? __pfx_lock_release+0x10/0x10 [ 595.690115][T20015] ? sb_end_write+0xe9/0x1c0 [ 595.690145][T20015] ? vfs_write+0x7fa/0xd10 [ 595.690168][T20015] ? __mutex_unlock_slowpath+0x227/0x800 [ 595.690203][T20015] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 595.690229][T20015] ? __fget_files+0x2a/0x410 [ 595.690272][T20015] __x64_sys_recvmmsg+0x199/0x250 [ 595.690301][T20015] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 595.690327][T20015] ? do_syscall_64+0x100/0x230 [ 595.690357][T20015] ? do_syscall_64+0xb6/0x230 [ 595.690387][T20015] do_syscall_64+0xf3/0x230 [ 595.690414][T20015] ? clear_bhb_loop+0x35/0x90 [ 595.690445][T20015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.690471][T20015] RIP: 0033:0x7f47bb58d169 [ 595.690489][T20015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.690506][T20015] RSP: 002b:00007f47bc32e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.690526][T20015] RAX: ffffffffffffffda RBX: 00007f47bb7a5fa0 RCX: 00007f47bb58d169 [ 595.690541][T20015] RDX: 000000000000001b RSI: 0000400000005c80 RDI: 0000000000000005 [ 595.690554][T20015] RBP: 00007f47bc32e090 R08: 0000000000000000 R09: 0000000000000000 [ 595.690566][T20015] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 595.690578][T20015] R13: 0000000000000000 R14: 00007f47bb7a5fa0 R15: 00007fffe6328f38 [ 595.690607][T20015] [ 596.260569][T20034] lo speed is unknown, defaulting to 1000 [ 596.322072][T20036] netlink: 'syz.3.4419': attribute type 1 has an invalid length. [ 596.368282][T20036] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4419'. [ 596.917909][T20069] netlink: 'syz.4.4427': attribute type 11 has an invalid length. [ 596.941450][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4425'. [ 596.950995][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 599.048209][T20084] 8021q: VLANs not supported on ip_vti0 [ 599.056314][T20092] __nla_validate_parse: 1 callbacks suppressed [ 599.056333][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4433'. [ 599.136184][T20084] bridge3: entered promiscuous mode [ 599.152113][T20084] bridge3: entered allmulticast mode [ 599.185810][T20084] team0: Device bridge3 is up. Set it down before adding it as a team port [ 599.350492][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4435'. [ 599.382337][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4435'. [ 599.414146][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'. [ 599.428226][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'. [ 599.443865][T20111] lo speed is unknown, defaulting to 1000 [ 599.581707][T20111] lo speed is unknown, defaulting to 1000 [ 599.588138][T20111] lo speed is unknown, defaulting to 1000 [ 599.772341][T20111] infiniband syz0: set down [ 599.778569][T20111] infiniband syz0: added lo [ 599.820709][T20111] RDS/IB: syz0: added [ 599.824837][T20111] smc: adding ib device syz0 with port count 1 [ 599.831550][T20111] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 599.848579][ T8888] lo speed is unknown, defaulting to 1000 [ 599.854114][T20114] lo speed is unknown, defaulting to 1000 [ 599.856042][ T8888] lo speed is unknown, defaulting to 1000 [ 599.988355][T20111] lo speed is unknown, defaulting to 1000 [ 600.299171][T20114] lo speed is unknown, defaulting to 1000 [ 600.393292][T20128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4440'. [ 600.567125][T20128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.576897][T20128] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.587067][T20128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.604198][T20111] lo speed is unknown, defaulting to 1000 [ 600.934006][T20111] lo speed is unknown, defaulting to 1000 [ 601.068720][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 601.161677][T20111] lo speed is unknown, defaulting to 1000 [ 601.450581][T20162] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 601.468102][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 601.478700][T20111] lo speed is unknown, defaulting to 1000 [ 601.484882][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4450'. [ 601.667991][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 601.684807][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 601.764245][T20111] lo speed is unknown, defaulting to 1000 [ 601.943094][T20111] lo speed is unknown, defaulting to 1000 [ 602.142948][T20111] lo speed is unknown, defaulting to 1000 [ 602.191696][T20183] sctp: [Deprecated]: syz.3.4458 (pid 20183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.191696][T20183] Use struct sctp_sack_info instead [ 602.330242][T20154] lo speed is unknown, defaulting to 1000 [ 602.563586][T20192] lo speed is unknown, defaulting to 1000 [ 603.047499][T20204] FAULT_INJECTION: forcing a failure. [ 603.047499][T20204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.104184][T20204] CPU: 1 UID: 0 PID: 20204 Comm: syz.3.4464 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 603.104216][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 603.104229][T20204] Call Trace: [ 603.104236][T20204] [ 603.104245][T20204] dump_stack_lvl+0x241/0x360 [ 603.104277][T20204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.104299][T20204] ? __pfx__printk+0x10/0x10 [ 603.104323][T20204] ? __pfx_lock_release+0x10/0x10 [ 603.104363][T20204] should_fail_ex+0x40a/0x550 [ 603.104399][T20204] _copy_from_user+0x2d/0xb0 [ 603.104428][T20204] copy_msghdr_from_user+0xae/0x680 [ 603.104460][T20204] ? __pfx___might_resched+0x10/0x10 [ 603.104491][T20204] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 603.104528][T20204] ? do_recvmmsg+0x44e/0xab0 [ 603.104561][T20204] ? __might_fault+0xaa/0x120 [ 603.104588][T20204] do_recvmmsg+0x3bd/0xab0 [ 603.104626][T20204] ? __pfx_do_recvmmsg+0x10/0x10 [ 603.104674][T20204] ? ksys_write+0x22a/0x2b0 [ 603.104697][T20204] ? __pfx_lock_release+0x10/0x10 [ 603.104735][T20204] ? sb_end_write+0xe9/0x1c0 [ 603.104765][T20204] ? vfs_write+0x7fa/0xd10 [ 603.104790][T20204] ? __mutex_unlock_slowpath+0x227/0x800 [ 603.104827][T20204] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 603.104855][T20204] ? __fget_files+0x2a/0x410 [ 603.104900][T20204] __x64_sys_recvmmsg+0x199/0x250 [ 603.104929][T20204] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 603.104957][T20204] ? do_syscall_64+0x100/0x230 [ 603.104989][T20204] ? do_syscall_64+0xb6/0x230 [ 603.105019][T20204] do_syscall_64+0xf3/0x230 [ 603.105046][T20204] ? clear_bhb_loop+0x35/0x90 [ 603.105079][T20204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.105107][T20204] RIP: 0033:0x7f3eb198d169 [ 603.105125][T20204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.105142][T20204] RSP: 002b:00007f3eb27d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 603.105164][T20204] RAX: ffffffffffffffda RBX: 00007f3eb1ba5fa0 RCX: 00007f3eb198d169 [ 603.105180][T20204] RDX: 000000000000001b RSI: 0000400000005c80 RDI: 0000000000000005 [ 603.105193][T20204] RBP: 00007f3eb27d2090 R08: 0000000000000000 R09: 0000000000000000 [ 603.105206][T20204] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 603.105219][T20204] R13: 0000000000000000 R14: 00007f3eb1ba5fa0 R15: 00007ffde68e7818 [ 603.105249][T20204] [ 603.441971][T20192] lo speed is unknown, defaulting to 1000 [ 603.881864][T20219] lo speed is unknown, defaulting to 1000 [ 604.401299][T20219] lo speed is unknown, defaulting to 1000 [ 604.743504][T20229] openvswitch: netlink: Actions may not be safe on all matching packets [ 604.780122][T20231] __nla_validate_parse: 4 callbacks suppressed [ 604.780143][T20231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4471'. [ 604.855233][T20229] xt_cgroup: path and classid specified [ 604.864609][T20229] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 604.890970][T20229] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4470'. [ 605.056765][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'. [ 605.066188][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 605.075898][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'. [ 605.309286][T20250] FAULT_INJECTION: forcing a failure. [ 605.309286][T20250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.335498][T20252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4477'. [ 605.346559][T20250] CPU: 0 UID: 0 PID: 20250 Comm: syz.2.4476 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 605.346587][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 605.346601][T20250] Call Trace: [ 605.346608][T20250] [ 605.346618][T20250] dump_stack_lvl+0x241/0x360 [ 605.346649][T20250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.346672][T20250] ? __pfx__printk+0x10/0x10 [ 605.346696][T20250] ? __pfx_lock_release+0x10/0x10 [ 605.346738][T20250] should_fail_ex+0x40a/0x550 [ 605.346774][T20250] _copy_from_user+0x2d/0xb0 [ 605.346804][T20250] copy_msghdr_from_user+0xae/0x680 [ 605.346836][T20250] ? __pfx___might_resched+0x10/0x10 [ 605.346867][T20250] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 605.346904][T20250] ? do_recvmmsg+0x44e/0xab0 [ 605.346931][T20250] ? __might_fault+0xaa/0x120 [ 605.346971][T20250] do_recvmmsg+0x3bd/0xab0 [ 605.347009][T20250] ? __pfx_do_recvmmsg+0x10/0x10 [ 605.347056][T20250] ? ksys_write+0x22a/0x2b0 [ 605.347080][T20250] ? __pfx_lock_release+0x10/0x10 [ 605.347118][T20250] ? sb_end_write+0xe9/0x1c0 [ 605.347155][T20250] ? vfs_write+0x7fa/0xd10 [ 605.347181][T20250] ? __mutex_unlock_slowpath+0x227/0x800 [ 605.347218][T20250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.347245][T20250] ? __fget_files+0x2a/0x410 [ 605.347291][T20250] __x64_sys_recvmmsg+0x199/0x250 [ 605.347320][T20250] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 605.347348][T20250] ? do_syscall_64+0x100/0x230 [ 605.347379][T20250] ? do_syscall_64+0xb6/0x230 [ 605.347410][T20250] do_syscall_64+0xf3/0x230 [ 605.347437][T20250] ? clear_bhb_loop+0x35/0x90 [ 605.347469][T20250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.347497][T20250] RIP: 0033:0x7f4e3958d169 [ 605.347514][T20250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.347532][T20250] RSP: 002b:00007f4e3a349038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 605.347555][T20250] RAX: ffffffffffffffda RBX: 00007f4e397a5fa0 RCX: 00007f4e3958d169 [ 605.347570][T20250] RDX: 000000000000001b RSI: 0000400000005c80 RDI: 0000000000000005 [ 605.347584][T20250] RBP: 00007f4e3a349090 R08: 0000000000000000 R09: 0000000000000000 [ 605.347597][T20250] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 605.347610][T20250] R13: 0000000000000000 R14: 00007f4e397a5fa0 R15: 00007ffea743b578 [ 605.347645][T20250] [ 605.894653][T20256] netlink: 'syz.2.4479': attribute type 5 has an invalid length. [ 605.908072][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4481'. [ 606.455824][T20288] siw: device registration error -23 [ 606.953873][T20295] syzkaller0: entered promiscuous mode [ 606.993478][T20295] syzkaller0: entered allmulticast mode [ 607.377994][T20306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4493'. [ 612.758362][T19886] bond1 (unregistering): Released all slaves [ 612.890696][T19886] bond2 (unregistering): Released all slaves [ 613.008135][T19886] bond0 (unregistering): Released all slaves [ 613.137026][T20357] ax25_connect(): syz.2.4504 uses autobind, please contact jreuter@yaina.de [ 613.180923][T20359] ax25_connect(): syz.2.4504 uses autobind, please contact jreuter@yaina.de [ 613.230000][T19886] tipc: Left network mode [ 613.411801][T20368] xt_hashlimit: max too large, truncated to 1048576 [ 613.459903][T20368] netlink: 'syz.2.4508': attribute type 10 has an invalid length. [ 613.628050][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4513'. [ 613.665011][T20374] syz_tun (unregistering): left allmulticast mode [ 613.681957][T20384] openvswitch: netlink: Actions may not be safe on all matching packets [ 613.714206][T20384] xt_cgroup: path and classid specified [ 613.729278][T20368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.742259][T20384] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 613.752630][T20368] team0: Port device batadv0 added [ 613.758461][T20384] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4514'. [ 613.916235][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4516'. [ 613.942273][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4516'. [ 614.010277][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4515'. [ 614.128110][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 614.140920][T20401] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4520'. [ 614.156451][T20402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4519'. [ 614.202501][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 614.329347][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4522'. [ 614.486668][T20407] bridge_slave_1 (unregistering): left allmulticast mode [ 614.501948][T20407] bridge_slave_1 (unregistering): left promiscuous mode [ 614.509104][T20407] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.669615][T20425] openvswitch: netlink: Message has 3 unknown bytes. [ 614.720918][T20425] netlink: 'syz.2.4527': attribute type 10 has an invalid length. [ 614.761215][T20425] [ 614.763705][T20425] ====================================================== [ 614.770757][T20425] WARNING: possible circular locking dependency detected [ 614.777803][T20425] 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 Not tainted [ 614.784935][T20425] ------------------------------------------------------ [ 614.791979][T20425] syz.2.4527/20425 is trying to acquire lock: [ 614.798061][T20425] ffff8880675c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 614.807834][T20425] [ 614.807834][T20425] but task is already holding lock: [ 614.815200][T20425] ffff88804b598d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 614.824183][T20425] [ 614.824183][T20425] which lock already depends on the new lock. [ 614.824183][T20425] [ 614.834588][T20425] [ 614.834588][T20425] the existing dependency chain (in reverse order) is: [ 614.843615][T20425] [ 614.843615][T20425] -> #1 (&dev->lock){+.+.}-{4:4}: [ 614.850844][T20425] lock_acquire+0x1ed/0x550 [ 614.855884][T20425] __mutex_lock+0x19c/0x1010 [ 614.861001][T20425] register_netdevice+0x12d8/0x1b70 [ 614.866724][T20425] cfg80211_register_netdevice+0x149/0x2f0 [ 614.873063][T20425] ieee80211_if_add+0x119d/0x1780 [ 614.878613][T20425] ieee80211_register_hw+0x3708/0x42e0 [ 614.884594][T20425] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 614.890856][T20425] init_mac80211_hwsim+0x87a/0xb00 [ 614.896509][T20425] do_one_initcall+0x248/0x930 [ 614.901813][T20425] do_initcall_level+0x157/0x210 [ 614.907280][T20425] do_initcalls+0x71/0xd0 [ 614.912140][T20425] kernel_init_freeable+0x435/0x5d0 [ 614.917871][T20425] kernel_init+0x1d/0x2b0 [ 614.922733][T20425] ret_from_fork+0x4b/0x80 [ 614.927688][T20425] ret_from_fork_asm+0x1a/0x30 [ 614.932998][T20425] [ 614.932998][T20425] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 614.940753][T20425] validate_chain+0x18ef/0x5920 [ 614.946189][T20425] __lock_acquire+0x1397/0x2100 [ 614.951570][T20425] lock_acquire+0x1ed/0x550 [ 614.956601][T20425] __mutex_lock+0x19c/0x1010 [ 614.961726][T20425] ieee80211_change_mac+0xc6/0x1160 [ 614.967480][T20425] netif_set_mac_address+0x327/0x510 [ 614.973302][T20425] dev_set_mac_address+0x38/0x50 [ 614.978771][T20425] team_modeop_port_enter+0x183/0x240 [ 614.984673][T20425] team_add_slave+0xa8e/0x28a0 [ 614.989988][T20425] do_set_master+0x579/0x730 [ 614.995107][T20425] do_setlink+0xfee/0x40f0 [ 615.000053][T20425] rtnl_newlink+0x15a6/0x1d90 [ 615.005267][T20425] rtnetlink_rcv_msg+0x791/0xcf0 [ 615.010741][T20425] netlink_rcv_skb+0x206/0x480 [ 615.016036][T20425] netlink_unicast+0x7f6/0x990 [ 615.021328][T20425] netlink_sendmsg+0x8de/0xcb0 [ 615.026626][T20425] __sock_sendmsg+0x221/0x270 [ 615.031835][T20425] ____sys_sendmsg+0x53a/0x860 [ 615.037217][T20425] __sys_sendmsg+0x269/0x350 [ 615.042356][T20425] do_syscall_64+0xf3/0x230 [ 615.047392][T20425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.053817][T20425] [ 615.053817][T20425] other info that might help us debug this: [ 615.053817][T20425] [ 615.064045][T20425] Possible unsafe locking scenario: [ 615.064045][T20425] [ 615.071501][T20425] CPU0 CPU1 [ 615.076861][T20425] ---- ---- [ 615.082221][T20425] lock(&dev->lock); [ 615.086304][T20425] lock(&rdev->wiphy.mtx); [ 615.093331][T20425] lock(&dev->lock); [ 615.099839][T20425] lock(&rdev->wiphy.mtx); [ 615.104343][T20425] [ 615.104343][T20425] *** DEADLOCK *** [ 615.104343][T20425] [ 615.112488][T20425] 3 locks held by syz.2.4527/20425: [ 615.117685][T20425] #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 615.126769][T20425] #1: ffff88807d32ce00 (team->team_lock_key#10){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 615.136985][T20425] #2: ffff88804b598d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 615.146419][T20425] [ 615.146419][T20425] stack backtrace: [ 615.152309][T20425] CPU: 0 UID: 0 PID: 20425 Comm: syz.2.4527 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 615.152333][T20425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 615.152345][T20425] Call Trace: [ 615.152352][T20425] [ 615.152360][T20425] dump_stack_lvl+0x241/0x360 [ 615.152385][T20425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.152404][T20425] ? __pfx__printk+0x10/0x10 [ 615.152425][T20425] print_circular_bug+0x13a/0x1b0 [ 615.152448][T20425] check_noncircular+0x36a/0x4a0 [ 615.152468][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152495][T20425] ? __pfx_check_noncircular+0x10/0x10 [ 615.152515][T20425] ? lockdep_lock+0x123/0x2b0 [ 615.152542][T20425] ? check_path+0x21/0x40 [ 615.152560][T20425] ? check_noncircular+0x259/0x4a0 [ 615.152580][T20425] validate_chain+0x18ef/0x5920 [ 615.152606][T20425] ? validate_chain+0x11e/0x5920 [ 615.152627][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152650][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152670][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152689][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152708][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152727][T20425] ? validate_chain+0x11e/0x5920 [ 615.152748][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.152767][T20425] ? mark_lock+0x9a/0x360 [ 615.152785][T20425] __lock_acquire+0x1397/0x2100 [ 615.152819][T20425] lock_acquire+0x1ed/0x550 [ 615.152844][T20425] ? ieee80211_change_mac+0xc6/0x1160 [ 615.152872][T20425] ? __pfx_lock_acquire+0x10/0x10 [ 615.152899][T20425] ? __pfx___might_resched+0x10/0x10 [ 615.152928][T20425] __mutex_lock+0x19c/0x1010 [ 615.152951][T20425] ? ieee80211_change_mac+0xc6/0x1160 [ 615.152975][T20425] ? __pfx_lock_release+0x10/0x10 [ 615.153004][T20425] ? ieee80211_change_mac+0xc6/0x1160 [ 615.153027][T20425] ? __pfx___mutex_lock+0x10/0x10 [ 615.153053][T20425] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 615.153071][T20425] ? ib_device_get_by_netdev+0x85/0x5e0 [ 615.153100][T20425] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 615.153126][T20425] ? hsr_netdev_notify+0x295/0xb50 [ 615.153153][T20425] ieee80211_change_mac+0xc6/0x1160 [ 615.153177][T20425] ? ip6_route_dev_notify+0x99/0x600 [ 615.153198][T20425] ? notifier_call_chain+0x15a/0x3f0 [ 615.153224][T20425] ? notifier_call_chain+0x3cc/0x3f0 [ 615.153252][T20425] netif_set_mac_address+0x327/0x510 [ 615.153276][T20425] ? __pfx_netif_set_mac_address+0x10/0x10 [ 615.153298][T20425] ? netif_set_mtu+0x110/0x1b0 [ 615.153318][T20425] ? __pfx_netif_set_mtu+0x10/0x10 [ 615.153338][T20425] dev_set_mac_address+0x38/0x50 [ 615.153358][T20425] team_modeop_port_enter+0x183/0x240 [ 615.153382][T20425] ? __pfx_team_modeop_port_enter+0x10/0x10 [ 615.153409][T20425] ? team_add_slave+0x981/0x28a0 [ 615.153434][T20425] team_add_slave+0xa8e/0x28a0 [ 615.153464][T20425] ? __pfx_team_add_slave+0x10/0x10 [ 615.153492][T20425] ? __dev_notify_flags+0x316/0x400 [ 615.153511][T20425] ? dev_set_rx_mode+0xb8/0x2e0 [ 615.153530][T20425] ? __pfx___dev_notify_flags+0x10/0x10 [ 615.153549][T20425] ? __dev_change_flags+0x515/0x6f0 [ 615.153570][T20425] ? __pfx___dev_change_flags+0x10/0x10 [ 615.153588][T20425] ? validate_linkmsg+0x828/0xa40 [ 615.153613][T20425] ? mutex_is_locked+0x17/0x50 [ 615.153632][T20425] do_set_master+0x579/0x730 [ 615.153654][T20425] do_setlink+0xfee/0x40f0 [ 615.153682][T20425] ? __pfx_do_setlink+0x10/0x10 [ 615.153704][T20425] ? __pfx___might_resched+0x10/0x10 [ 615.153729][T20425] ? __pfx___mutex_trylock_common+0x10/0x10 [ 615.153751][T20425] ? rcu_is_watching+0x15/0xb0 [ 615.153771][T20425] ? trace_contention_end+0x3c/0x120 [ 615.153791][T20425] ? __mutex_lock+0x397/0x1010 [ 615.153815][T20425] ? __pfx_aa_get_newest_label+0x10/0x10 [ 615.153844][T20425] ? rtnl_newlink+0xc4c/0x1d90 [ 615.153871][T20425] ? __pfx___mutex_lock+0x10/0x10 [ 615.153898][T20425] ? ns_capable+0x8a/0xf0 [ 615.153918][T20425] ? rtnl_link_get_net_capable+0x168/0x340 [ 615.153938][T20425] rtnl_newlink+0x15a6/0x1d90 [ 615.153964][T20425] ? __lock_acquire+0x1397/0x2100 [ 615.153996][T20425] ? __pfx_rtnl_newlink+0x10/0x10 [ 615.154023][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.154049][T20425] ? validate_chain+0x11e/0x5920 [ 615.154068][T20425] ? __pfx_lock_acquire+0x10/0x10 [ 615.154095][T20425] ? __pfx_lock_release+0x10/0x10 [ 615.154122][T20425] ? __pfx_validate_chain+0x10/0x10 [ 615.154141][T20425] ? mark_lock+0x9a/0x360 [ 615.154159][T20425] ? __lock_acquire+0x1397/0x2100 [ 615.154198][T20425] ? __pfx_lock_release+0x10/0x10 [ 615.154231][T20425] ? __pfx_rtnl_newlink+0x10/0x10 [ 615.154259][T20425] rtnetlink_rcv_msg+0x791/0xcf0 [ 615.154286][T20425] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 615.154312][T20425] ? __lock_acquire+0x1397/0x2100 [ 615.154339][T20425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 615.154372][T20425] netlink_rcv_skb+0x206/0x480 [ 615.154399][T20425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 615.154427][T20425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.154462][T20425] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.154494][T20425] netlink_unicast+0x7f6/0x990 [ 615.154533][T20425] ? __pfx_netlink_unicast+0x10/0x10 [ 615.154555][T20425] ? __virt_addr_valid+0x45f/0x530 [ 615.154571][T20425] ? __phys_addr_symbol+0x2f/0x70 [ 615.154587][T20425] ? __check_object_size+0x47a/0x730 [ 615.154612][T20425] netlink_sendmsg+0x8de/0xcb0 [ 615.154643][T20425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.154670][T20425] ? aa_sock_msg_perm+0x91/0x160 [ 615.154699][T20425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.154724][T20425] __sock_sendmsg+0x221/0x270 [ 615.154750][T20425] ____sys_sendmsg+0x53a/0x860 [ 615.154773][T20425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.154792][T20425] ? __fget_files+0x2a/0x410 [ 615.154819][T20425] ? __fget_files+0x2a/0x410 [ 615.154847][T20425] __sys_sendmsg+0x269/0x350 [ 615.154867][T20425] ? __pfx_futex_wake+0x10/0x10 [ 615.154894][T20425] ? __pfx___sys_sendmsg+0x10/0x10 [ 615.154918][T20425] ? kfree+0x4e/0x430 [ 615.154952][T20425] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 615.154978][T20425] ? do_syscall_64+0x100/0x230 [ 615.155002][T20425] ? do_syscall_64+0xb6/0x230 [ 615.155026][T20425] do_syscall_64+0xf3/0x230 [ 615.155048][T20425] ? clear_bhb_loop+0x35/0x90 [ 615.155074][T20425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.155097][T20425] RIP: 0033:0x7f4e3958d169 [ 615.155113][T20425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.155129][T20425] RSP: 002b:00007f4e3a328038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.155147][T20425] RAX: ffffffffffffffda RBX: 00007f4e397a6080 RCX: 00007f4e3958d169 [ 615.155160][T20425] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000007 [ 615.155172][T20425] RBP: 00007f4e3960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 615.155184][T20425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.155194][T20425] R13: 0000000000000000 R14: 00007f4e397a6080 R15: 00007ffea743b578 [ 615.155213][T20425] [ 615.863206][T20425] team0: Device wlan1 failed to register rx_handler [ 615.880832][T19886] hsr_slave_0: left promiscuous mode [ 615.886550][T19886] hsr_slave_1: left promiscuous mode [ 616.717090][T19886] IPVS: stop unused estimator thread 0...