last executing test programs: 1m39.338621033s ago: executing program 3 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 51.113946087s ago: executing program 3 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 37.418338847s ago: executing program 3 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 28.019422788s ago: executing program 3 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 15.929042465s ago: executing program 3 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 6.549606986s ago: executing program 3 (id=701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x10, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) 3.947425931s ago: executing program 2 (id=2069): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)=""/4122, 0x101a}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000004500)=""/4100, 0x1004}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000b80)=""/72, 0x48}, {&(0x7f00000002c0)=""/41, 0x29}], 0x8}, 0x40008100) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006cc0)="95", 0x1}, {&(0x7f0000006fc0)="12", 0x1}], 0x2}}], 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 3.729897895s ago: executing program 1 (id=2072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'veth1\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x4b, 0x1e, "4372073830000000020000000000000000320900ef86ed689a894bea2450"}}) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0xc800) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xa, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x2c, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, 0x4100, 0x10200}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}]}, 0x2c}}, 0x0) 2.921907989s ago: executing program 0 (id=2077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x61910926728ca924) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2040) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 2.79345986s ago: executing program 0 (id=2078): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000300)="a537ddd3b589338e23fde0855b90ff09845e61001eeb7dbbcf218e94d19f819b407f028c840afdf3329d31af7ece87dc9b48", 0x32, 0x20000045, &(0x7f0000000240)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) shutdown(r1, 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) close(0x3) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7, 0x0) ioctl$int_in(r4, 0x541b, 0x0) 2.349597079s ago: executing program 4 (id=2080): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) shutdown(r0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) (async) 2.263578905s ago: executing program 4 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fe02ffff000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a800400018018000180140003000100040007000600469500000000050004000080"], 0x40}}, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x0) 1.841712796s ago: executing program 2 (id=2082): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500001405000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) 1.832763716s ago: executing program 1 (id=2083): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001740)={'wg2\x00', 0x0}) socket$netlink(0x10, 0x3, 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000940)={r4, 0x3, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000035c0)={r4, "a2e9fa3784199856fbec4a6a558a0d3f"}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000003380), &(0x7f00000033c0)=0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/230, 0xe6}], 0x2}}], 0x1, 0x12040, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001780)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000030c0)={0xffffffffffffffff, 0xe0, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002e00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000002e40)=[0x0], &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000002ec0)=[{}], 0x8, 0x10, &(0x7f0000002f00), &(0x7f0000002f40), 0x8, 0xc6, 0x8, 0xfffffffffffffef3, &(0x7f0000002f80)}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r12, @ANYRES64=r12], 0x1c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000003180)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000100)="d6b50fb1ec55337012956de39b170d986f94669b91182741492011a7454a1e8af712841a6176042386d112704e04edc318336ce848399308e83a2176d68a616108de58ba5eb12ecd6c699bbee6171d8745b5d2c77e24a8a3c3ad8e0e4ed33f9ba11edfae2cff9f777b8bcd8ee9", 0x6d}, {&(0x7f0000000180)="f5ca5525b44982166c421e15c944fd6a8a324a28f5c3a5d9ee8522eb8798553d3bbb03a1b8cdf17e41d56e124ece3aed816e776d2d8ad501b98e87e99d9da502", 0x40}, {&(0x7f0000000300)="5e4b914e5f79f1ee1d9efc61645484366bd181610feea3279bce123eac62cb1f654f52f225441d762767df2bc2925116adf582e583f89bced8e0cc2164d51874977fcbf6c9631e4658834f011eb1d7973299d84f3530db84cf8d0aaa9f2512bacd98a641ddf5175a12f274d6b9c2f4bd7155c661331f7b581e05fd855eb27f9bfa1c37281e7d85dcdf231338", 0x8c}, {&(0x7f00000003c0)="ef87c8e923abe4d8f1e2f7278dc828260b5f7fb2fdd52fae9dd96bc07fef0189cc82e3e934fb490488ff1b751c2c0798eb0d31c3d0f9307c2d96c8edab7442ce3f4a8737e3db16bad4368b7f73d1628383c3d2f41742666ef94e51cbe1381cebb9303f7b3870058aa47faa0a5ae152a45c224b1b06b00995533108e3e3", 0x7d}, {&(0x7f0000000440)="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", 0xfe}, {&(0x7f0000000540)="8921eb93813bd6233d8c8e24d936cf237237de701fa12c18c39796ab3d9263df32b1f8eb504fe95dc6eef28d89704714d0c2672dcbe4b2a145aa7faba2cb58a235475294ab2040faa38ff10f068e41403107", 0x52}, {&(0x7f0000000240)="a350cc01832360227026d80f288811d4925a8975596b7a79b53319cf62025647b6c758e1ae794eddec7f5ef36e29cb", 0x2f}, {&(0x7f00000005c0)="8b9eaca21ac417a6fcea5c40571c39d7012581c1f8ae95b096f1043878", 0x1d}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="6f3ebaedebf0a963016a0ed9bc5e5b82c41f8ab7e68a496cbe14011d06c7fb0dc17524c6f110d8ce9d1336507d49ff98481dc05a2f92a9d008854ce0360897cd1a430bfa4fbaff049db279dc0ad4a855", 0x50}], 0xa, &(0x7f00000017c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xac, [@empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x40}, @remote]}, @lsrr={0x83, 0x23, 0x2c, [@multicast2, @remote, @private=0xa010101, @local, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}}}}], 0xc8}}, {{&(0x7f00000018c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002b00)=[{&(0x7f0000001900)="c929e3a24103351a674d98658e6bef1e69b6a7bfb055f62afb3fd03023460983c67742b1686c56038adb7807edbb4d92513704e3122828f03df06304df789fa7c302f1deba26fa07295a84e96750a31d4836f2e8d9671dcdcb403c5ab6464e6c36fea1c72dd423dff596e8c1ab7df9aaf8906265a8a4", 0x76}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000003400)="b63d2b1f0a1ec3abbdb74e5f7a531474309e89791bb3af3e394eb31d674acff44ed61878de2c47d90a1c7a0e395b13ec46895e28e3377daf7504bafee640172f1eaf7fa65d190b00b0abafa6fff4c1f2248b7d989fca3e018557efadaad58efd7128a5c6931ba74d6593f3b3f2875c12da1f242746f198a040fb858674ab0a6804d02f910dc802c087bf1403d4b9ee6a3da7c5cb0218c53f0d23c4cfd298d275e958bec9873d70173d330ad3af9afbada89be69ae5360816c741ccdf487233e5ace6115035d8f097b18d2a61b673bb4036607e67802c0a9a0d7893481a07e2d43c52ad5c24a35ae2a924bd4d62c695b52d0ce177cfa62fc1", 0xf8}, {&(0x7f0000002a80)="d6306cd56ddf3ec56cac839dd7a914f716fbef92f2e1259e94a2f8bc24fbaa16bd302a647e89e1c4b5ab0fdc26116afcbd54ef9fd92d075072fd9bbdf4138faa15a1ae75d7baaf553681a7aa963a2a07e68fea68a2c02c10eae683631ed0003f248529ac9a671a0267164be5fdbdaad366b2bcae7e5055", 0x77}], 0x4}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002b40)="fb4cc928a552677104fa54e7cfe924ca0d0a7f590458361d4b99550a1a4e09f097328a3a9a13e1f6bf286b43750b6832a5410dcd194926efdb7fd1ae886d7deac695707f258d2972e4a2222cb69e05f57eb012269ed3d24a150a39fa4860ddf4b71656f9a1566c1520320aa3f6d50e4ceb2a12f799684226c194e100f126cec403f680", 0x83}, {&(0x7f0000002c00)="707c4b316ca51b5af52760bfb68d9401669e977e2a83fc73260d074e9f753b760514ad1a5a573a644acf7ba67f182fbfccc5f1ddfc737296433fde23ddece77b4aa9264bde420817305b815520eaab8f24d2f2949a34dc33dcd90161c20d8ee31ee0eb4c1b08a92f21d61e60ba779a9edd38f1941d1bc58a1e4c71c83ab182b1fd5469ce6874b784a6a3fe0985253b9298f1cf2dde8b657e5e29850cf0bf713376e59cf2f66e161affb4a03d317ffc8c376c7358c835827690bf2253ece35c17bb4e95a212ed55d5d310", 0xca}, {&(0x7f0000002d00)="f8db386849970ce813c556de017b0525bd3107d7a279a61701fd09e89c09baeb0fe80c9313dbeb35226935e33110bafdabca0f529be58b1b1f71096302cfd7a51b2cbf720b63e516a2ad322136f3400829c07aae4db0e7b303749324b438680513317cac6593159b8762d471c363c4c186fb04fb1f734d029fcd544067fd2c85a4829ca9568b9e1b", 0x88}], 0x3, &(0x7f0000003100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3e}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11}}], 0x70}}], 0x3, 0x10) sendmmsg$unix(r0, &(0x7f0000003580)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.828389862s ago: executing program 4 (id=2084): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000001180)="e0", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) 1.741764813s ago: executing program 2 (id=2085): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) accept(r0, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300008ddc5071862885e9000a0000", @ANYRES64=r5, @ANYRES32, @ANYRES64=r4], 0x50) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) recvmsg$can_raw(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000040000e4bdae439d9afc3000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff6, 0x4) bind$inet6(r10, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 1.74129127s ago: executing program 0 (id=2086): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0xd}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0xd}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x886b, 0x956b4}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700282c0020010000000000000000000000000000ff0200000000000000000000000000013c0200000000000001020000c910fff5"], 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x0, 0x0) (async) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0xa000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}]}}}]}, 0x50}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x1) (async) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x1) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x4) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r9, 0x0, 0x0, 0x40002023, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) 1.692780213s ago: executing program 2 (id=2087): syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000f80700000000002200030045059078ac141432ac1414000000000000000000de00000077a2a561eb805b437768685ba9ab14e259e243b2a9aafc889079ace45cc0f9a49f56f954957c0b52544abd706af609d44d97e962e6df", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="5010000090780000"], 0x36) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001c0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="74020000b12e00001e04600c04020000"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000f80700000000002200030045059078ac141432ac1414000000000000000000de00000077a2a561eb805b437768685ba9ab14e259e243b2a9aafc889079ace45cc0f9a49f56f954957c0b52544abd706af609d44d97e962e6df", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="5010000090780000"], 0x36) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001c0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="74020000b12e00001e04600c04020000"], 0x0) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x1ba, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x1c, 0x4, 0x0, 0x36, 0x1ac, 0x68, 0x0, 0x6, 0x6, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x8, [{@broadcast, 0x6}, {@multicast1, 0x80}]}, @generic={0x82, 0x12, "02ff7f00000000000023600000000000"}, @ra={0x94, 0x4}, @generic={0x89, 0x5, "a5022c"}, @end, @timestamp_prespec={0x44, 0x2c, 0x95, 0x3, 0x7, [{@loopback, 0x6}, {@broadcast, 0x4}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010100, 0x4}]}]}}, {{0x4e24, 0x4e23, r0, r5, 0x1, 0x0, 0x16, 0x4, 0xfff7, 0x0, 0x1, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x1e, [0x8, 0x6, 0x7dd, 0xc, 0x1000, 0x0, 0x9d79]}, @md5sig={0x13, 0x12, "518df370fd0a54ccfcbd58544276487c"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x8, 0x6}]}}, {"670024e6265f72a048d38c8ff1ee77a2ee8bf2d32a6fb10caa728fa7699cffed1a853cfd7e2f6daccc35e14f3f5f7147ff108ad267c7a5f0829864301a206a0f9b6032d2ba26fcd9b80515cfe606a2946932afabe36d2c215eb5cb655012ce08342db02963ddc86fe00b6d43b597551e1cc5c6d363705f8e16b10fb22136a988d62c6aef31096a12d3bb6d6790b19b81f7952044caed92ce4761231bbb32596f02b2c9f147fe71da690c810d3080c8bd2c157ba73454375758629fb6f52d85d68243c7d9821ef2955eb614e091c57a6148b804f186f9ab9ca453016fe44ffd302f136e87"}}}}}}, 0x0) 1.515308837s ago: executing program 2 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x2b, 0x80801, 0x1) socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x400c5) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) socket$igmp(0x2, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) 1.467572409s ago: executing program 1 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r3) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="71235b8002030300000000000000000000000000080001000100000008000440000000010800034000000000"], 0x2c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r4, 0x0, 0x8000014) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000180)=""/51, 0x33}], 0x3}, 0x1f00) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0xc810}, 0x40048c0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x2000000000000060, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070a0000f8ffffffb703000008000000b7040000fa5400008524fbd5605866485f5988ade9c0042f9a00000082000095", @ANYRES8=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x33, &(0x7f00000019c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0xce, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @opaque="5fb31c3f9a6150addd"}}}}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x680000b, 0x30, 0xffffffffffffffff, 0x540e2000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001001000"/20, @ANYRES32=r10, @ANYBLOB="0100020000000000080004000e0000001c001a8018000a8014000700fe880000000000000000000000000101"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r11 = accept$ax25(r3, &(0x7f00000006c0)={{0x3, @netrom}, [@rose, @default, @remote, @remote, @null, @netrom, @default, @default]}, &(0x7f0000000000)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f0000000100)=@bpq0, 0x10) 1.289132912s ago: executing program 2 (id=2090): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0) unshare(0x62040200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x9280, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x10}, 0x18) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x15, 0x12}}) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) shutdown(r1, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x0, 0x81, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x38}}, 0x4040814) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES16, @ANYBLOB="a18000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) 819.022524ms ago: executing program 0 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x8, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r5) 818.086523ms ago: executing program 1 (id=2092): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8592900", @ANYRES16=r3, @ANYBLOB="010008000000000000003b000000a1003300801c0700ffffffffffff0802110000017d73b97d7a622500dfdc0000000000000200100400050b968d613b0406010127ddcd0006020700052f017e0459e5c9040536c56bad7097b8b5ff39fbb54d6c8adaf9e1ff093f5245d019d8666a681c776c72168c987fb66f250301b5072a01032d1a001003fcffffffffffffff050006000e0000000100f683000075710700ff0000fd042076060808090000fe000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf25670000000c009900c50a00007b783982a4ae6ba21546ec20ca45e76ebb12b6f7708ba79850391b8b8b983cfb3ca199d53dc8321103341017927273830694659300e262386bbbc865383651f19ea7502d6f7f04161e6680638af9690eb2e414da92cd416665e40e265b6ef113c267b9e1474b7464d47331a8f84658015c9a75450e92ced4223261261d58e51d481584d89e1dcdc54f70c1c92613c12c3e3d0587a40534ad85429d308c12652e3efbbf369b4b3eb4734a5c9a5ea2db"], 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRES16=r6, @ANYRES16, @ANYBLOB="85d0e0205f81cf567ba5731c8c08e689589d36f2a3a928590a83f1616212fc6a6d1a230cb45551881f864aeff69ea99d4f05a9a5cb876bfd8a3ed7d8124a895d1e8639c9a1bb43080cb0613e2825e669b61489b38f91fc8e74523dc4f66b4fc5c40ad1e1d5fbe9af93f6321ffacd6dbe9186"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r6, &(0x7f0000000300)=[{}], 0x155555555555567d, 0xe9d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0x9d32f4b220c65367}) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0xffffffffffffff15, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="ff", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 816.162403ms ago: executing program 4 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000ff25d34360c2450d0a9b0bf953f71a51f9d24fb51fe80f812742a16f71430a89b0d6eb60f6a86e07bc1191481a3fa5325d59e6dd45ad51f43f494f218ab29434cc54798d27a8a495fa5cca90b35c5fe509b542ece3da6880f3716c9759d66d1f3902000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="08003500000000000a000600ae434a4c8eae0000"], 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8c0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'macvlan0\x00', @local}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x8, 0xfffffffc, {{0x6, 0x4, 0x1, 0x3d, 0x18, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @private=0xa0100fe, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x9}]}}}}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x81, 0x0, 0x4}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, 0x0, &(0x7f0000000180)) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kvm_halt_poll_ns\x00', r12}, 0x18) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) close(r10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, r8, 0x400, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x38}}, 0x0) 472.966877ms ago: executing program 0 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, @void, @value}, 0x94) 469.565349ms ago: executing program 1 (id=2095): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="6d8526b98aa5b5ef7e7750e19cbc4e33", 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0xfffd, 0x2}, 0xe) r2 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x48, 0x13, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c089}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400), 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="050000000000fdffffff0600000008000300", @ANYRES32=r6, @ANYBLOB="08000500060000000a00e80008021100000000002800178004000100040005"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810) listen(r3, 0x0) listen(r1, 0x0) 413.10684ms ago: executing program 4 (id=2096): socket$netlink(0x10, 0x3, 0xf) (async) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000211c00028008000100", @ANYRES32=r3, @ANYBLOB="050008000300000008000c0008000000"], 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000211c00028008000100", @ANYRES32=r3, @ANYBLOB="050008000300000008000c0008000000"], 0x50}}, 0x0) 274.038708ms ago: executing program 0 (id=2097): unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 209.333424ms ago: executing program 1 (id=2098): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[@ANYBLOB="f005000001030500000000000000000006"], 0x5f0}, 0x1, 0x0, 0x0, 0x810}, 0x4000084) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket(0x15, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x8a, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x57d, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "b2f2a03891307a69", "00000100", "634eca88", "a3aed7f3f111d75e"}, 0x28) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@ipv4_delrule={0x38, 0x21, 0x403, 0x80000200, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xb38}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'nicvf0\x00'}]}, 0x38}}, 0x20004080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0xfd, [0x4, 0x2, 0x0, 0x0, 0x0, 0x8000, 0xfffe], [0x0, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}}}]}, 0x88}}, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x1, 0xfb, 0x0, 0x1}, 0xc) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 0s ago: executing program 4 (id=2099): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) unshare(0x8000c00) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="340000002e000305000004000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB], 0x34}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000103010300000000000000000701c9b27a40cd00050c000200ff1c00fc000000950800034000030000000000000000084000000082"], 0x34}, 0x1, 0x0, 0x0, 0x8824}, 0x4c000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x7) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x218}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0xc851) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f00000001c0)=0x7f, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x24}}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) connect$pppoe(r10, &(0x7f00000000c0)={0x18, 0x0, {0x0, @random='\x00\t\x00\fB\x00'}}, 0x1e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.221048][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.245863][ T9585] xt_hashlimit: size too large, truncated to 1048576 [ 200.247629][ T9351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.278101][ T9351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.297105][ T9351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.307233][ T9351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.490011][ T8754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.517891][ T8754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.600441][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.627002][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.644945][ T9594] xt_hashlimit: size too large, truncated to 1048576 [ 200.972783][ T9600] vlan3: entered promiscuous mode [ 201.004480][ T9600] team0: Device vlan3 is already an upper device of the team interface [ 201.620556][ T9618] netlink: 'syz.2.1047': attribute type 11 has an invalid length. [ 201.701872][ T9621] tipc: Enabling of bearer rejected, failed to enable media [ 201.885091][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 201.885115][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 201.894908][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 202.118910][ T1105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.235126][ T9633] bridge3: left promiscuous mode [ 202.433263][ T1105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.856371][ T1105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.984114][ T1105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.269985][ T1105] bridge_slave_1: left allmulticast mode [ 203.276284][ T1105] bridge_slave_1: left promiscuous mode [ 203.295100][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.326580][ T1105] bridge_slave_0: left allmulticast mode [ 203.333442][ T1105] bridge_slave_0: left promiscuous mode [ 203.348021][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.435296][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.449975][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.469078][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.486727][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.495792][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.503658][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.816746][ T9673] net_ratelimit: 2096 callbacks suppressed [ 203.816770][ T9673] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 203.956499][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.965842][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 203.980663][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.992091][ T1105] bond0 (unregistering): Released all slaves [ 204.033777][ T9660] lo speed is unknown, defaulting to 1000 [ 204.182857][ T9682] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 204.337294][ T9685] __nla_validate_parse: 1 callbacks suppressed [ 204.337315][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1064'. [ 204.421090][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 204.475746][ T1105] hsr_slave_0: left promiscuous mode [ 204.485437][ T1105] hsr_slave_1: left promiscuous mode [ 204.502498][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.516947][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.534809][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.543750][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.581437][ T1105] veth1_macvtap: left promiscuous mode [ 204.587133][ T1105] veth0_macvtap: left promiscuous mode [ 204.593854][ T1105] veth1_vlan: left promiscuous mode [ 204.599454][ T1105] veth0_vlan: left promiscuous mode [ 205.041025][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1068'. [ 205.266343][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 205.315129][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 205.558644][ T5846] Bluetooth: hci1: command tx timeout [ 205.782712][ T9699] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 205.823426][ T9696] lo speed is unknown, defaulting to 1000 [ 206.257526][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.264835][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.279410][ T9660] bridge_slave_0: entered allmulticast mode [ 206.296736][ T9660] bridge_slave_0: entered promiscuous mode [ 206.318846][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.326017][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.367612][ T9660] bridge_slave_1: entered allmulticast mode [ 206.384367][ T9660] bridge_slave_1: entered promiscuous mode [ 206.529555][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.578114][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.607699][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1080'. [ 206.689738][ T9660] team0: Port device team_slave_0 added [ 206.718292][ T9660] team0: Port device team_slave_1 added [ 206.757248][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.764510][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.792851][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.823836][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.831173][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.857821][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.089944][ T9660] hsr_slave_0: entered promiscuous mode [ 207.096507][ T9660] hsr_slave_1: entered promiscuous mode [ 207.148475][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.156157][ T9660] Cannot create hsr debugfs directory [ 207.397052][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1092'. [ 207.638624][ T5846] Bluetooth: hci1: command tx timeout [ 207.764824][ T9784] xt_policy: too many policy elements [ 207.799860][ T9783] xt_policy: too many policy elements [ 207.989693][ T9794] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 208.021533][ T9660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.082747][ T9660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.130375][ T9660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.170340][ T9660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.199806][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1103'. [ 208.449523][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.486109][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.515530][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.522907][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.558247][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.565383][ T8754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.635778][ T9817] lo speed is unknown, defaulting to 1000 [ 208.854031][ T9822] vlan3: entered promiscuous mode [ 208.870633][ T9822] team0: Device vlan3 is already an upper device of the team interface [ 209.148534][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.251898][ T9836] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 209.268301][ T9660] veth0_vlan: entered promiscuous mode [ 209.291438][ T9660] veth1_vlan: entered promiscuous mode [ 209.310692][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 209.328707][ T9840] sock: sock_set_timeout: `syz.4.1115' (pid 9840) tries to set negative timeout [ 209.371673][ T9660] veth0_macvtap: entered promiscuous mode [ 209.389925][ T9660] veth1_macvtap: entered promiscuous mode [ 209.434660][ T9840] netlink: 'syz.4.1115': attribute type 39 has an invalid length. [ 209.444604][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.456198][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.471359][ T9660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.481865][ T9660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.493383][ T9660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.511826][ T9660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.671054][ T9850] lo speed is unknown, defaulting to 1000 [ 209.718069][ T55] Bluetooth: hci1: command tx timeout [ 209.771266][ T9854] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 209.959561][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.003944][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.086722][ T9859] lo speed is unknown, defaulting to 1000 [ 210.185333][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.237623][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.357529][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 210.364849][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 210.834185][ T9873] vlan2: entered promiscuous mode [ 210.839645][ T9873] team0: Device vlan2 is already an upper device of the team interface [ 210.854313][ T9851] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 211.168223][ T9876] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1124'. [ 211.228380][ T9876] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1124'. [ 211.438461][ T9878] bridge0: port 1(dummy0) entered blocking state [ 211.463320][ T9878] bridge0: port 1(dummy0) entered disabled state [ 211.484074][ T9878] dummy0: entered allmulticast mode [ 211.502820][ T9878] dummy0: entered promiscuous mode [ 211.710452][ T9891] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 211.776103][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.824465][ T9889] lo speed is unknown, defaulting to 1000 [ 211.953350][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.985947][ T9894] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 212.028440][ T9894] bond0: (slave vcan1): Error -95 calling set_mac_address [ 212.080416][ T9886] tipc: Started in network mode [ 212.093041][ T9886] tipc: Node identity ac1414aa, cluster identity 4711 [ 212.101261][ T9886] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.108977][ T9886] tipc: Enabled bearer , priority 10 [ 212.237875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.299505][ T8181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.377628][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.517523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.586278][ T8181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.657491][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.667020][ T8181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.797446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.852059][ T8181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.894227][ T9905] vlan3: entered promiscuous mode [ 212.900364][ T9905] team0: Device vlan3 is already an upper device of the team interface [ 212.937950][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.061158][ T9917] IPVS: Error connecting to the multicast addr [ 213.077532][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.104868][ T9915] IPVS: Error connecting to the multicast addr [ 213.136069][ T8181] bridge_slave_1: left allmulticast mode [ 213.141982][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 213.168753][ T8181] bridge_slave_1: left promiscuous mode [ 213.194990][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.211112][ T8181] bridge_slave_0: left allmulticast mode [ 213.227520][ T5931] tipc: Node number set to 2886997162 [ 213.234146][ T8181] bridge_slave_0: left promiscuous mode [ 213.245106][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.392488][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.403802][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.415083][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.426692][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.436597][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.444265][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.911748][ T9939] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 214.305501][ T8181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.320276][ T8181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.332130][ T8181] bond0 (unregistering): Released all slaves [ 214.358096][ T9936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1141'. [ 214.483539][ T9939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.527854][ T9945] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1143'. [ 214.553666][ T9938] lo speed is unknown, defaulting to 1000 [ 214.633704][ T9927] lo speed is unknown, defaulting to 1000 [ 215.115889][ T9962] lo speed is unknown, defaulting to 1000 [ 215.133043][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 215.160469][ T8181] hsr_slave_0: left promiscuous mode [ 215.170159][ T8181] hsr_slave_1: left promiscuous mode [ 215.178077][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.185548][ T8181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.195868][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.207160][ T8181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.237452][ C0] net_ratelimit: 3 callbacks suppressed [ 215.237476][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.270605][ T8181] veth1_macvtap: left promiscuous mode [ 215.276389][ T8181] veth0_macvtap: left promiscuous mode [ 215.289947][ T8181] veth1_vlan: left promiscuous mode [ 215.295820][ T8181] veth0_vlan: left promiscuous mode [ 215.477721][ T55] Bluetooth: hci1: command tx timeout [ 216.201789][ T8181] team0 (unregistering): Port device team_slave_1 removed [ 216.267178][ T8181] team0 (unregistering): Port device team_slave_0 removed [ 216.277444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.902724][ T9927] chnl_net:caif_netlink_parms(): no params data found [ 217.216642][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.218901][ T9975] netlink: 'syz.0.1152': attribute type 4 has an invalid length. [ 217.229487][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.239081][ T9927] bridge_slave_0: entered allmulticast mode [ 217.246304][ T9927] bridge_slave_0: entered promiscuous mode [ 217.265242][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.283273][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.300231][ T9927] bridge_slave_1: entered allmulticast mode [ 217.307105][ T9927] bridge_slave_1: entered promiscuous mode [ 217.317453][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.342550][ T9984] lo: entered promiscuous mode [ 217.347579][ T9984] lo: left allmulticast mode [ 217.383602][ T5890] lo speed is unknown, defaulting to 1000 [ 217.425175][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.438584][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.521088][ T9927] team0: Port device team_slave_0 added [ 217.535299][ T9927] team0: Port device team_slave_1 added [ 217.557770][ T55] Bluetooth: hci1: command tx timeout [ 217.669891][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.688330][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.735060][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.755412][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.763941][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.797518][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.848397][ T9994] lo speed is unknown, defaulting to 1000 [ 217.951887][ T9927] hsr_slave_0: entered promiscuous mode [ 217.966482][ T9927] hsr_slave_1: entered promiscuous mode [ 217.984007][ T9927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.000848][ T9927] Cannot create hsr debugfs directory [ 218.357443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.637056][T10006] lo speed is unknown, defaulting to 1000 [ 218.826746][T10025] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1167'. [ 218.856289][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1167'. [ 218.985962][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1169'. [ 219.009060][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 219.018489][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1169'. [ 219.036308][T10034] netlink: 'syz.0.1171': attribute type 32 has an invalid length. [ 219.039504][T10029] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.055345][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 219.074719][T10034] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 219.278966][ T9927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.317905][ T9927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.330368][ T9927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.341558][ T9927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.397483][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.533235][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.564818][ T9927] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.589328][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.596814][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.615683][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.622972][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.637818][ T55] Bluetooth: hci1: command tx timeout [ 219.955421][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.052483][ T9927] veth0_vlan: entered promiscuous mode [ 220.080907][ T9927] veth1_vlan: entered promiscuous mode [ 220.124421][ T9927] veth0_macvtap: entered promiscuous mode [ 220.155917][ T9927] veth1_macvtap: entered promiscuous mode [ 220.186850][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.203835][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.242821][ T9927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.262259][ T9927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.276319][ T9927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.278716][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 220.293076][ T9927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.437555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.451007][T10078] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1185'. [ 220.466350][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.476188][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.543885][ T8181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.569315][ T8181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.645960][T10082] team0: Port device dummy0 removed [ 220.751973][T10088] netlink: 'syz.4.1189': attribute type 10 has an invalid length. [ 220.760061][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1189'. [ 220.775397][T10088] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.803759][T10088] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.819289][T10088] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.829923][T10088] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.872651][T10088] team0: Port device geneve0 added [ 221.477497][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.536654][T10110] netlink: 'syz.2.1197': attribute type 2 has an invalid length. [ 221.635489][T10115] lo speed is unknown, defaulting to 1000 [ 221.723979][T10121] lo speed is unknown, defaulting to 1000 [ 221.836021][T10121] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1201'. [ 222.296126][ T8181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.517598][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.287910][T10135] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 223.557450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.620280][ T8181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.744353][ T8181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.763793][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 223.855471][T10155] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.863727][ T5855] IPVS: starting estimator thread 0... [ 223.895289][T10135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.917979][T10151] lo speed is unknown, defaulting to 1000 [ 223.956599][ T8181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.976111][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.986636][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.987450][T10156] IPVS: using max 19 ests per chain, 45600 per kthread [ 224.017532][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.027966][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.035865][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.044343][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.239932][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 224.256360][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 224.296220][T10159] lo speed is unknown, defaulting to 1000 [ 224.501379][T10171] lo speed is unknown, defaulting to 1000 [ 224.522582][ T8181] bridge_slave_1: left allmulticast mode [ 224.530897][ T8181] bridge_slave_1: left promiscuous mode [ 224.536798][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.546563][ T8181] bridge_slave_0: left allmulticast mode [ 224.552796][ T8181] bridge_slave_0: left promiscuous mode [ 224.558890][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.597426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.972031][ T8181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.984522][ T8181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.995133][ T8181] bond0 (unregistering): Released all slaves [ 225.456158][ T8181] hsr_slave_0: left promiscuous mode [ 225.471930][ T8181] hsr_slave_1: left promiscuous mode [ 225.488416][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.498643][ T8181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.509226][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.517199][ T8181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.568096][ T8181] veth1_macvtap: left promiscuous mode [ 225.574076][ T8181] veth0_macvtap: left promiscuous mode [ 225.580324][ T8181] veth1_vlan: left promiscuous mode [ 225.591759][ T8181] veth0_vlan: left promiscuous mode [ 225.637465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.128862][ T55] Bluetooth: hci1: command tx timeout [ 226.224986][ T8181] team0 (unregistering): Port device team_slave_1 removed [ 226.277647][ T8181] team0 (unregistering): Port device team_slave_0 removed [ 226.677440][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.770554][T10159] chnl_net:caif_netlink_parms(): no params data found [ 227.105664][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.117593][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.125650][T10159] bridge_slave_0: entered allmulticast mode [ 227.133258][T10159] bridge_slave_0: entered promiscuous mode [ 227.143437][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.167683][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.192374][T10159] bridge_slave_1: entered allmulticast mode [ 227.209278][T10159] bridge_slave_1: entered promiscuous mode [ 227.323138][T10159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.365766][T10159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.413344][T10222] pim6reg: entered allmulticast mode [ 227.438427][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 227.461029][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 227.490623][T10159] team0: Port device team_slave_0 added [ 227.514228][T10159] team0: Port device team_slave_1 added [ 227.604419][T10230] SET target dimension over the limit! [ 227.618608][T10232] SET target dimension over the limit! [ 227.717505][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.753772][T10159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.763249][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.791970][T10159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.812301][T10159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.820405][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.859061][T10159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.872644][T10239] tipc: New replicast peer: 255.255.255.255 [ 227.889802][T10239] tipc: Enabled bearer , priority 10 [ 227.953132][T10238] lo speed is unknown, defaulting to 1000 [ 227.991649][T10232] lo speed is unknown, defaulting to 1000 [ 228.001718][T10159] hsr_slave_0: entered promiscuous mode [ 228.013216][T10159] hsr_slave_1: entered promiscuous mode [ 228.022942][T10159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.031195][T10159] Cannot create hsr debugfs directory [ 228.197659][ T55] Bluetooth: hci1: command tx timeout [ 228.723833][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 228.740769][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 228.752526][T10265] netlink: 'syz.2.1243': attribute type 11 has an invalid length. [ 228.760581][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.850006][T10275] netlink: 'syz.0.1245': attribute type 2 has an invalid length. [ 228.893837][T10275] netlink: 'syz.0.1245': attribute type 9 has an invalid length. [ 228.915887][T10275] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1245'. [ 228.926219][T10279] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.061113][T10283] ax25_connect(): syz.4.1247 uses autobind, please contact jreuter@yaina.de [ 229.078601][T10279] syzkaller0: entered promiscuous mode [ 229.084206][T10279] syzkaller0: entered allmulticast mode [ 229.802618][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.278657][ T55] Bluetooth: hci1: command tx timeout [ 230.837469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.395050][T10159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.414652][T10309] batadv_slave_1: entered promiscuous mode [ 231.452335][T10159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.475089][T10159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.533700][T10159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.616705][T10315] lo speed is unknown, defaulting to 1000 [ 231.819099][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 231.877561][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.950127][T10159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.180136][T10159] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.249748][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.256941][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.295011][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.302266][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.357639][ T55] Bluetooth: hci1: command tx timeout [ 232.400064][T10354] FAULT_INJECTION: forcing a failure. [ 232.400064][T10354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.423772][T10354] CPU: 1 UID: 0 PID: 10354 Comm: syz.1.1266 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 232.423803][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.423817][T10354] Call Trace: [ 232.423825][T10354] [ 232.423834][T10354] dump_stack_lvl+0x241/0x360 [ 232.423866][T10354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.423890][T10354] ? __pfx__printk+0x10/0x10 [ 232.423913][T10354] ? __pfx_lock_release+0x10/0x10 [ 232.423954][T10354] should_fail_ex+0x40a/0x550 [ 232.423991][T10354] _copy_from_user+0x2d/0xb0 [ 232.424022][T10354] copy_msghdr_from_user+0xae/0x680 [ 232.424058][T10354] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 232.424086][T10354] ? __fget_files+0x2a/0x410 [ 232.424126][T10354] ? __fget_files+0x2a/0x410 [ 232.424167][T10354] __sys_sendmsg+0x209/0x350 [ 232.424196][T10354] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.424232][T10354] ? do_sys_openat2+0x17a/0x1d0 [ 232.424290][T10354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.424325][T10354] ? do_syscall_64+0x100/0x230 [ 232.424354][T10354] ? do_syscall_64+0xb6/0x230 [ 232.424383][T10354] do_syscall_64+0xf3/0x230 [ 232.424409][T10354] ? clear_bhb_loop+0x35/0x90 [ 232.424441][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.424470][T10354] RIP: 0033:0x7fe97818d169 [ 232.424496][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.424513][T10354] RSP: 002b:00007fe97908d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.424535][T10354] RAX: ffffffffffffffda RBX: 00007fe9783a5fa0 RCX: 00007fe97818d169 [ 232.424550][T10354] RDX: 0000000004000080 RSI: 0000400000001200 RDI: 0000000000000003 [ 232.424563][T10354] RBP: 00007fe97908d090 R08: 0000000000000000 R09: 0000000000000000 [ 232.424576][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.424588][T10354] R13: 0000000000000000 R14: 00007fe9783a5fa0 R15: 00007ffea0fe48a8 [ 232.424619][T10354] [ 232.917491][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.930542][T10159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.055045][T10159] veth0_vlan: entered promiscuous mode [ 233.074755][T10159] veth1_vlan: entered promiscuous mode [ 233.169329][T10159] veth0_macvtap: entered promiscuous mode [ 233.189143][T10159] veth1_macvtap: entered promiscuous mode [ 233.219254][T10159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.252255][T10159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.274840][T10159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.298132][T10159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.307187][T10159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.337398][T10159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.373053][T10379] batadv_slave_1: left promiscuous mode [ 233.557914][ T8752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.568546][ T8752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.632423][ T8754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.656328][ T8754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.957526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.997474][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.023380][T10424] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 235.076588][T10424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1288'. [ 235.125735][T10429] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 235.151602][T10429] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 235.166670][ T8754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.182190][T10429] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 235.853159][ T8754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.016041][ T8754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.038169][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.071341][ T8754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.261460][ T8754] bridge_slave_1: left allmulticast mode [ 236.274591][ T8754] bridge_slave_1: left promiscuous mode [ 236.297910][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.329623][ T8754] bridge_slave_0: left allmulticast mode [ 236.352069][ T8754] bridge_slave_0: left promiscuous mode [ 236.359295][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.381861][T10445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.419293][T10445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.558723][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.569365][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.578050][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.586385][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.595651][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 236.604785][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.029849][ T8754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.042168][ T8754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.059321][ T8754] bond0 (unregistering): Released all slaves [ 237.077451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.088193][T10443] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 237.098177][T10438] IPVS: Unknown mcast interface: veth榜 [ 237.146301][T10450] lo speed is unknown, defaulting to 1000 [ 237.583101][ T8754] hsr_slave_0: left promiscuous mode [ 237.597143][ T8754] hsr_slave_1: left promiscuous mode [ 237.613748][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.627474][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.662687][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1301'. [ 237.686242][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.711117][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.751276][ T8754] veth1_macvtap: left promiscuous mode [ 237.758863][ T8754] veth0_macvtap: left promiscuous mode [ 237.764566][ T8754] veth1_vlan: left promiscuous mode [ 237.770057][ T8754] veth0_vlan: left promiscuous mode [ 238.117559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.471869][ T8754] team0 (unregistering): Port device team_slave_1 removed [ 238.523376][ T8754] team0 (unregistering): Port device team_slave_0 removed [ 238.680472][ T5846] Bluetooth: hci1: command tx timeout [ 239.027167][T10493] lo: left promiscuous mode [ 239.050512][T10493] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.077493][T10493] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.085935][T10493] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.103168][T10493] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.157517][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.197001][ T5931] lo speed is unknown, defaulting to 1000 [ 239.241850][T10450] chnl_net:caif_netlink_parms(): no params data found [ 239.470459][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.497798][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.523315][T10450] bridge_slave_0: entered allmulticast mode [ 239.542943][T10450] bridge_slave_0: entered promiscuous mode [ 239.572690][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.588309][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.597220][T10450] bridge_slave_1: entered allmulticast mode [ 239.606130][T10450] bridge_slave_1: entered promiscuous mode [ 239.679108][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.701120][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.805804][T10450] team0: Port device team_slave_0 added [ 239.836980][T10450] team0: Port device team_slave_1 added [ 239.921507][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.935172][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.968907][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.988477][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.995638][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.028871][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.094751][T10450] hsr_slave_0: entered promiscuous mode [ 240.101634][T10450] hsr_slave_1: entered promiscuous mode [ 240.110379][T10450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.118643][T10450] Cannot create hsr debugfs directory [ 240.197549][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.611866][T10450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.630358][T10450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.649922][T10450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.671056][T10450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.757626][ T5846] Bluetooth: hci1: command tx timeout [ 240.845190][T10450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.870053][T10450] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.907008][T10450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.917663][T10450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.941628][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.948825][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.980864][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.988168][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.237428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.260651][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.474817][T10450] veth0_vlan: entered promiscuous mode [ 241.504901][T10450] veth1_vlan: entered promiscuous mode [ 241.571230][T10450] veth0_macvtap: entered promiscuous mode [ 241.584626][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 241.602307][T10450] veth1_macvtap: entered promiscuous mode [ 241.656417][T10450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.676790][T10450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.691454][T10450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.701811][T10450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.711744][T10450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.729655][T10450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.925455][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.961582][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.116309][T10625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.155333][T10625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.276897][T10636] FAULT_INJECTION: forcing a failure. [ 242.276897][T10636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.277555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.357628][T10636] CPU: 0 UID: 0 PID: 10636 Comm: syz.2.1339 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 242.357661][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.357683][T10636] Call Trace: [ 242.357691][T10636] [ 242.357699][T10636] dump_stack_lvl+0x241/0x360 [ 242.357732][T10636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.357755][T10636] ? __pfx__printk+0x10/0x10 [ 242.357783][T10636] ? snprintf+0xda/0x120 [ 242.357807][T10636] should_fail_ex+0x40a/0x550 [ 242.357842][T10636] _copy_to_user+0x31/0xb0 [ 242.357872][T10636] simple_read_from_buffer+0xca/0x150 [ 242.357904][T10636] proc_fail_nth_read+0x1e9/0x250 [ 242.357938][T10636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.357972][T10636] ? rw_verify_area+0x243/0x630 [ 242.357993][T10636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.358023][T10636] vfs_read+0x1f8/0xb40 [ 242.358047][T10636] ? fdget_pos+0x254/0x320 [ 242.358080][T10636] ? __pfx___mutex_lock+0x10/0x10 [ 242.358105][T10636] ? __pfx_vfs_read+0x10/0x10 [ 242.358123][T10636] ? do_sys_openat2+0x17a/0x1d0 [ 242.358157][T10636] ? __fget_files+0x2a/0x410 [ 242.358190][T10636] ? __fget_files+0x395/0x410 [ 242.358220][T10636] ? __fget_files+0x2a/0x410 [ 242.358261][T10636] ksys_read+0x18f/0x2b0 [ 242.358286][T10636] ? __pfx_ksys_read+0x10/0x10 [ 242.358309][T10636] ? do_syscall_64+0x100/0x230 [ 242.358339][T10636] ? do_syscall_64+0xb6/0x230 [ 242.358368][T10636] do_syscall_64+0xf3/0x230 [ 242.358395][T10636] ? clear_bhb_loop+0x35/0x90 [ 242.358428][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.358454][T10636] RIP: 0033:0x7f0bbc18bb7c [ 242.358473][T10636] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.358490][T10636] RSP: 002b:00007f0bbcf45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.358513][T10636] RAX: ffffffffffffffda RBX: 00007f0bbc3a5fa0 RCX: 00007f0bbc18bb7c [ 242.358528][T10636] RDX: 000000000000000f RSI: 00007f0bbcf450a0 RDI: 0000000000000004 [ 242.358541][T10636] RBP: 00007f0bbcf45090 R08: 0000000000000000 R09: 0000000000000000 [ 242.358554][T10636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.358566][T10636] R13: 0000000000000000 R14: 00007f0bbc3a5fa0 R15: 00007ffe4a6295f8 [ 242.358599][T10636] [ 242.597108][T10647] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 242.838830][ T55] Bluetooth: hci1: command tx timeout [ 242.888601][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 242.985089][T10661] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1347'. [ 243.207677][T10673] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 243.215781][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 243.228560][T10673] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.253485][T10673] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.278408][T10673] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.286996][T10673] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.317948][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.341759][T10673] team0: Port device geneve0 added [ 244.214546][T10724] netlink: 'syz.4.1356': attribute type 32 has an invalid length. [ 244.225341][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 244.234560][T10724] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 244.299031][T10724] 8021q: adding VLAN 0 to HW filter on device bond10 [ 244.357543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.498531][T10738] syzkaller1: entered promiscuous mode [ 244.504086][T10738] syzkaller1: entered allmulticast mode [ 244.704228][T10749] netlink: 'syz.2.1364': attribute type 21 has an invalid length. [ 244.712766][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1364'. [ 244.928826][T10765] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1369'. [ 244.945963][T10765] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 245.087072][T10775] lo speed is unknown, defaulting to 1000 [ 245.109555][T10780] netlink: 'syz.2.1372': attribute type 27 has an invalid length. [ 245.251510][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 245.260847][T10788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1375'. [ 245.284495][T10788] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 245.295937][T10788] gretap1: entered promiscuous mode [ 245.397524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.494795][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1377'. [ 245.674458][T10799] syzkaller0: entered promiscuous mode [ 245.680335][T10799] syzkaller0: entered allmulticast mode [ 246.437633][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.477452][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.669993][T10844] SET target dimension over the limit! [ 248.258563][T10819] lo speed is unknown, defaulting to 1000 [ 248.517591][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.563401][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'. [ 248.612606][T10859] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 248.881140][T10870] lo speed is unknown, defaulting to 1000 [ 248.930882][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1399'. [ 248.951498][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 248.985118][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1399'. [ 249.012756][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1399'. [ 249.228080][T10888] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1403'. [ 249.299270][T10888] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 249.353590][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'. [ 249.557532][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.670005][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 249.717907][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 250.015629][T10909] macvlan7: entered promiscuous mode [ 250.021351][T10909] macvlan7: entered allmulticast mode [ 250.027202][T10909] bond0: entered allmulticast mode [ 250.043343][T10909] bond_slave_0: entered allmulticast mode [ 250.053464][T10909] bond_slave_1: entered allmulticast mode [ 250.062751][T10909] bond0: entered promiscuous mode [ 250.073457][T10909] bond_slave_0: entered promiscuous mode [ 250.083000][T10909] bond_slave_1: entered promiscuous mode [ 250.110901][T10909] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 250.161852][T10909] team0: Port device macvlan7 added [ 250.247049][T10917] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 250.256577][T10917] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1415'. [ 250.597504][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.715102][T10945] gretap1: left promiscuous mode [ 251.022688][T10961] lo speed is unknown, defaulting to 1000 [ 251.053390][T10964] team0: left allmulticast mode [ 251.058527][T10964] team_slave_0: left allmulticast mode [ 251.064492][T10964] team_slave_1: left allmulticast mode [ 251.071634][T10964] macvlan5: left allmulticast mode [ 251.078093][T10964] team0: left promiscuous mode [ 251.083028][T10964] team_slave_0: left promiscuous mode [ 251.097740][T10964] team_slave_1: left promiscuous mode [ 251.110324][T10964] macvlan5: left promiscuous mode [ 251.121980][T10964] bridge0: port 3(team0) entered disabled state [ 251.149252][T10964] batman_adv: batadv0: Removing interface: dummy0 [ 251.158502][T10964] bridge_slave_0: left allmulticast mode [ 251.164213][T10964] bridge_slave_0: left promiscuous mode [ 251.173301][T10968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 251.187729][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.205822][T10964] bridge_slave_1: left allmulticast mode [ 251.211819][T10964] bridge_slave_1: left promiscuous mode [ 251.217913][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.228956][T10964] bond0: (slave bond_slave_0): Releasing backup interface [ 251.236875][T10964] bond_slave_0: left promiscuous mode [ 251.242745][T10964] bond_slave_0: left allmulticast mode [ 251.250314][T10964] bond0: (slave bond_slave_1): Releasing backup interface [ 251.262111][T10964] bond_slave_1: left promiscuous mode [ 251.267700][T10964] bond_slave_1: left allmulticast mode [ 251.280228][T10964] team0: Port device team_slave_0 removed [ 251.290043][T10964] team0: Port device team_slave_1 removed [ 251.296146][T10964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.304366][T10964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.317025][T10964] team0: Port device macvlan5 removed [ 251.325154][T10964] bond0: left allmulticast mode [ 251.330302][T10964] bond0: left promiscuous mode [ 251.349229][T10964] team0: Port device macvlan7 removed [ 251.629051][T10987] lo speed is unknown, defaulting to 1000 [ 251.637488][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.219338][T11002] delete_channel: no stack [ 252.677545][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.371717][T11057] lo speed is unknown, defaulting to 1000 [ 253.544840][T11063] FAULT_INJECTION: forcing a failure. [ 253.544840][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.577800][T11063] CPU: 1 UID: 0 PID: 11063 Comm: syz.1.1456 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 253.577835][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.577848][T11063] Call Trace: [ 253.577855][T11063] [ 253.577863][T11063] dump_stack_lvl+0x241/0x360 [ 253.577907][T11063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.577931][T11063] ? __pfx__printk+0x10/0x10 [ 253.577953][T11063] ? __pfx_lock_release+0x10/0x10 [ 253.577992][T11063] should_fail_ex+0x40a/0x550 [ 253.578027][T11063] _copy_from_user+0x2d/0xb0 [ 253.578056][T11063] sctp_setsockopt+0xcc/0x11c0 [ 253.578090][T11063] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 253.578122][T11063] do_sock_setsockopt+0x3af/0x720 [ 253.578151][T11063] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 253.578180][T11063] ? __fget_files+0x395/0x410 [ 253.578210][T11063] ? __fget_files+0x2a/0x410 [ 253.578250][T11063] __x64_sys_setsockopt+0x1ee/0x280 [ 253.578281][T11063] do_syscall_64+0xf3/0x230 [ 253.578309][T11063] ? clear_bhb_loop+0x35/0x90 [ 253.578341][T11063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.578369][T11063] RIP: 0033:0x7fe97818d169 [ 253.578388][T11063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.578405][T11063] RSP: 002b:00007fe97908d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 253.578427][T11063] RAX: ffffffffffffffda RBX: 00007fe9783a5fa0 RCX: 00007fe97818d169 [ 253.578443][T11063] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 253.578456][T11063] RBP: 00007fe97908d090 R08: 0000000000000010 R09: 0000000000000000 [ 253.578469][T11063] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001 [ 253.578482][T11063] R13: 0000000000000000 R14: 00007fe9783a5fa0 R15: 00007ffea0fe48a8 [ 253.578513][T11063] [ 253.629026][T11064] xt_CT: No such helper "snmp" [ 253.719802][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.945184][T11068] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 254.205208][T11075] __nla_validate_parse: 4 callbacks suppressed [ 254.205229][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 254.430445][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 254.524128][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 254.686361][T11093] nr0: entered promiscuous mode [ 254.757510][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.041912][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.058134][T11108] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1472'. [ 255.178439][T11112] lo speed is unknown, defaulting to 1000 [ 255.433884][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1475'. [ 255.797427][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.198293][T11145] lo speed is unknown, defaulting to 1000 [ 256.255223][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 256.461349][T11160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1483'. [ 256.662932][T11174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.698000][T11174] team0: Device bond0 failed to register rx_handler [ 256.837452][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.976890][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1487'. [ 257.008427][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1487'. [ 257.801072][T11237] sctp: [Deprecated]: syz.0.1499 (pid 11237) Use of int in maxseg socket option. [ 257.801072][T11237] Use struct sctp_assoc_value instead [ 257.877433][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.215246][T11254] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 258.423463][T11261] openvswitch: netlink: Message has 1 unknown bytes. [ 258.434853][T11261] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.502492][T11263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1510'. [ 258.553823][T11263] lo speed is unknown, defaulting to 1000 [ 258.643526][T11270] macvlan7: left promiscuous mode [ 258.662761][T11270] macvlan7: left allmulticast mode [ 258.917470][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.951030][T11278] tipc: Failed to remove unknown binding: 66,1,1/0:2280190987/2280190989 [ 259.789798][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 259.845802][T11319] sctp: [Deprecated]: syz.0.1528 (pid 11319) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.845802][T11319] Use struct sctp_sack_info instead [ 259.943813][T11321] netlink: 'syz.2.1529': attribute type 2 has an invalid length. [ 259.951938][T11321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1529'. [ 259.957499][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.272985][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 260.595429][T11346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1540'. [ 260.611382][T11346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1540'. [ 260.646595][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 260.997457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.093124][T11372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.226312][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 261.520797][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 261.669475][T11394] lo speed is unknown, defaulting to 1000 [ 261.867595][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 262.037439][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.252686][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 262.356523][T11401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 262.385779][T11401] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 263.077469][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.102569][T11451] netlink: 'syz.2.1573': attribute type 27 has an invalid length. [ 263.120014][T11451] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.129506][T11451] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.138303][T11451] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.150306][T11451] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.205374][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.215264][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.226214][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.246484][T11455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.622648][T11471] syzkaller1: entered promiscuous mode [ 263.628869][T11471] syzkaller1: entered allmulticast mode [ 263.945441][T11480] syzkaller0: entered promiscuous mode [ 263.957435][T11480] syzkaller0: entered allmulticast mode [ 264.117447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.157465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.197559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.801920][T11541] netlink: 'syz.2.1596': attribute type 9 has an invalid length. [ 266.803054][T11539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.860226][T11545] netlink: 'syz.2.1596': attribute type 9 has an invalid length. [ 267.054432][T11552] lo speed is unknown, defaulting to 1000 [ 267.217851][T11564] __nla_validate_parse: 4 callbacks suppressed [ 267.217874][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 267.219423][T11552] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1601'. [ 267.237461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.664346][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 267.709204][T11578] lo speed is unknown, defaulting to 1000 [ 267.783380][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 267.888770][T11578] nbd: socks must be embedded in a SOCK_ITEM attr [ 268.277950][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.643831][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 268.814167][T11610] netlink: 'syz.4.1616': attribute type 12 has an invalid length. [ 268.822195][T11610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1616'. [ 268.838773][T11610] netlink: 'syz.4.1616': attribute type 3 has an invalid length. [ 268.852398][T11610] netlink: 506 bytes leftover after parsing attributes in process `syz.4.1616'. [ 268.905127][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 268.916058][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 269.017737][T11619] sctp: [Deprecated]: syz.2.1620 (pid 11619) Use of int in max_burst socket option deprecated. [ 269.017737][T11619] Use struct sctp_assoc_value instead [ 269.089808][T11623] lo speed is unknown, defaulting to 1000 [ 269.317472][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.526995][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 269.687654][T11644] Cannot find add_set index 3 as target [ 269.760873][T11646] netlink: 'syz.0.1631': attribute type 4 has an invalid length. [ 270.268470][T11665] tipc: Enabling of bearer rejected, failed to enable media [ 270.357443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.540718][T11676] lo speed is unknown, defaulting to 1000 [ 270.574750][T11678] ip6tnl1: entered promiscuous mode [ 270.599712][T11677] lo speed is unknown, defaulting to 1000 [ 270.643253][T11681] Bluetooth: MGMT ver 1.23 [ 271.227043][T11706] FAULT_INJECTION: forcing a failure. [ 271.227043][T11706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.247867][T11706] CPU: 1 UID: 0 PID: 11706 Comm: syz.4.1649 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 271.247900][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.247913][T11706] Call Trace: [ 271.247921][T11706] [ 271.247928][T11706] dump_stack_lvl+0x241/0x360 [ 271.247955][T11706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.247974][T11706] ? __pfx__printk+0x10/0x10 [ 271.247993][T11706] ? __pfx_lock_release+0x10/0x10 [ 271.248025][T11706] should_fail_ex+0x40a/0x550 [ 271.248055][T11706] _copy_from_user+0x2d/0xb0 [ 271.248079][T11706] copy_msghdr_from_user+0xae/0x680 [ 271.248109][T11706] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 271.248132][T11706] ? __fget_files+0x2a/0x410 [ 271.248159][T11706] ? __fget_files+0x2a/0x410 [ 271.248191][T11706] __sys_sendmsg+0x209/0x350 [ 271.248214][T11706] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.248244][T11706] ? do_sys_openat2+0x17a/0x1d0 [ 271.248298][T11706] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.248324][T11706] ? do_syscall_64+0x100/0x230 [ 271.248348][T11706] ? do_syscall_64+0xb6/0x230 [ 271.248372][T11706] do_syscall_64+0xf3/0x230 [ 271.248393][T11706] ? clear_bhb_loop+0x35/0x90 [ 271.248419][T11706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.248448][T11706] RIP: 0033:0x7f7db718d169 [ 271.248463][T11706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.248477][T11706] RSP: 002b:00007f7db7f0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.248496][T11706] RAX: ffffffffffffffda RBX: 00007f7db73a5fa0 RCX: 00007f7db718d169 [ 271.248510][T11706] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 0000000000000003 [ 271.248520][T11706] RBP: 00007f7db7f0b090 R08: 0000000000000000 R09: 0000000000000000 [ 271.248531][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.248540][T11706] R13: 0000000000000000 R14: 00007f7db73a5fa0 R15: 00007ffe12dace28 [ 271.248565][T11706] [ 271.397532][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.889352][T11726] batadv_slave_1: entered promiscuous mode [ 272.382103][T11736] __nla_validate_parse: 2 callbacks suppressed [ 272.382124][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 272.420312][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 272.437387][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.644636][T11742] lo speed is unknown, defaulting to 1000 [ 273.058171][T11754] netlink: 'syz.1.1666': attribute type 10 has an invalid length. [ 273.328481][T11767] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1670'. [ 273.338051][T11767] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 273.477489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.659936][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1674'. [ 273.764761][T11783] xt_TCPMSS: Only works on TCP SYN packets [ 273.954871][T11792] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1679'. [ 274.146354][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 274.256323][T11804] FAULT_INJECTION: forcing a failure. [ 274.256323][T11804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.277981][T11804] CPU: 0 UID: 0 PID: 11804 Comm: syz.1.1683 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 274.278013][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.278027][T11804] Call Trace: [ 274.278035][T11804] [ 274.278044][T11804] dump_stack_lvl+0x241/0x360 [ 274.278076][T11804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.278099][T11804] ? __pfx__printk+0x10/0x10 [ 274.278123][T11804] ? __pfx_lock_release+0x10/0x10 [ 274.278165][T11804] should_fail_ex+0x40a/0x550 [ 274.278204][T11804] _copy_from_iter+0x1df/0x1c40 [ 274.278230][T11804] ? __virt_addr_valid+0x183/0x530 [ 274.278252][T11804] ? __pfx_lock_release+0x10/0x10 [ 274.278291][T11804] ? __alloc_skb+0x28f/0x440 [ 274.278313][T11804] ? __pfx__copy_from_iter+0x10/0x10 [ 274.278341][T11804] ? __virt_addr_valid+0x183/0x530 [ 274.278368][T11804] ? __virt_addr_valid+0x183/0x530 [ 274.278386][T11804] ? __virt_addr_valid+0x45f/0x530 [ 274.278407][T11804] ? __phys_addr_symbol+0x2f/0x70 [ 274.278427][T11804] ? __check_object_size+0x47a/0x730 [ 274.278462][T11804] netlink_sendmsg+0x742/0xcb0 [ 274.278509][T11804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.278547][T11804] ? aa_sock_msg_perm+0x91/0x160 [ 274.278585][T11804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.278616][T11804] __sock_sendmsg+0x221/0x270 [ 274.278651][T11804] ____sys_sendmsg+0x53a/0x860 [ 274.278684][T11804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.278707][T11804] ? __fget_files+0x2a/0x410 [ 274.278742][T11804] ? __fget_files+0x2a/0x410 [ 274.278782][T11804] __sys_sendmsg+0x269/0x350 [ 274.278813][T11804] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.278853][T11804] ? do_sys_openat2+0x17a/0x1d0 [ 274.278911][T11804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.278945][T11804] ? do_syscall_64+0x100/0x230 [ 274.278980][T11804] ? do_syscall_64+0xb6/0x230 [ 274.279011][T11804] do_syscall_64+0xf3/0x230 [ 274.279038][T11804] ? clear_bhb_loop+0x35/0x90 [ 274.279071][T11804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.279100][T11804] RIP: 0033:0x7fe97818d169 [ 274.279120][T11804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.279138][T11804] RSP: 002b:00007fe97908d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.279161][T11804] RAX: ffffffffffffffda RBX: 00007fe9783a5fa0 RCX: 00007fe97818d169 [ 274.279177][T11804] RDX: 0000000044048010 RSI: 0000400000000640 RDI: 0000000000000008 [ 274.279191][T11804] RBP: 00007fe97908d090 R08: 0000000000000000 R09: 0000000000000000 [ 274.279204][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.279216][T11804] R13: 0000000000000000 R14: 00007fe9783a5fa0 R15: 00007ffea0fe48a8 [ 274.279248][T11804] [ 274.555272][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.932242][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 274.947465][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 274.956776][T11815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1686'. [ 274.972670][T11814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1686'. [ 275.468595][T11823] netlink: 'syz.2.1689': attribute type 4 has an invalid length. [ 275.557395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.852819][T11834] ip6tnl1: left promiscuous mode [ 276.597483][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.854021][T11846] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 276.863117][T11846] veth0_vlan: left promiscuous mode [ 276.869912][T11846] veth0_vlan: entered promiscuous mode [ 276.878455][T11846] team0: Device veth0_vlan failed to register rx_handler [ 277.611429][T11872] netlink: 'syz.0.1702': attribute type 16 has an invalid length. [ 277.637407][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.645070][T11872] netlink: 'syz.0.1702': attribute type 17 has an invalid length. [ 277.673641][T11872] 8021q: adding VLAN 0 to HW filter on device  [ 277.688477][T11872] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.696517][T11872] bridge0: port 1(dummy0) entered blocking state [ 277.703121][T11872] bridge0: port 1(dummy0) entered forwarding state [ 277.713465][T11872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.097150][T11874] __nla_validate_parse: 7 callbacks suppressed [ 278.097166][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1703'. [ 278.164857][T11876] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 278.204479][T11876] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 278.232464][T11876] veth11: entered promiscuous mode [ 278.579330][T11886] lo speed is unknown, defaulting to 1000 [ 278.671836][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1708'. [ 278.678090][T11893] bridge0: port 1(vlan3) entered blocking state [ 278.681036][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.687139][T11893] bridge0: port 1(vlan3) entered disabled state [ 278.703203][T11893] vlan3: entered allmulticast mode [ 278.716220][T11893] vlan3: left allmulticast mode [ 279.717430][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.209586][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1721'. [ 280.401333][T11937] lo speed is unknown, defaulting to 1000 [ 280.411588][T11938] lo speed is unknown, defaulting to 1000 [ 280.497440][T11942] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1725'. [ 280.622950][T11947] syzkaller0: entered promiscuous mode [ 280.628557][T11947] syzkaller0: entered allmulticast mode [ 280.757464][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.083027][T11952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1728'. [ 281.095729][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 281.797448][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.183756][T11965] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1733'. [ 282.839112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.056918][T11978] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1737'. [ 283.097928][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 283.300690][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 283.342071][T11991] lo speed is unknown, defaulting to 1000 [ 283.418039][ T8754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.453709][T11994] veth6: entered allmulticast mode [ 283.533731][ T8754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.594415][ T8754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.653606][ T8754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.746817][ T8754] bridge_slave_1: left allmulticast mode [ 283.753934][ T8754] bridge_slave_1: left promiscuous mode [ 283.759876][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.769437][ T8754] bridge_slave_0: left allmulticast mode [ 283.775117][ T8754] bridge_slave_0: left promiscuous mode [ 283.781207][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.877527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.145957][ T8754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.156914][ T8754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.168511][ T8754] bond0 (unregistering): Released all slaves [ 284.509556][ T8754] hsr_slave_0: left promiscuous mode [ 284.547722][ T8754] hsr_slave_1: left promiscuous mode [ 284.564155][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.582445][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.631953][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.654904][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.708477][T12010] x_tables: duplicate underflow at hook 2 [ 284.731463][T12012] SET target dimension over the limit! [ 284.762399][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 284.762966][ T8754] veth1_macvtap: left promiscuous mode [ 284.782141][ T8754] veth0_macvtap: left promiscuous mode [ 284.807818][ T8754] veth1_vlan: left promiscuous mode [ 284.813209][ T8754] veth0_vlan: left promiscuous mode [ 284.875025][T12014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 284.917502][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.989219][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.001482][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.018540][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.033820][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.048174][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.055700][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.527874][T12036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1751'. [ 285.703835][ T8754] team0 (unregistering): Port device team_slave_1 removed [ 285.776954][ T8754] team0 (unregistering): Port device team_slave_0 removed [ 285.957409][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.294116][T12019] lo speed is unknown, defaulting to 1000 [ 286.473738][T12048] tipc: Started in network mode [ 286.480034][T12048] tipc: Node identity a24858c35099, cluster identity 4711 [ 286.490546][T12048] tipc: Enabled bearer , priority 0 [ 286.586150][T12057] syzkaller0: entered promiscuous mode [ 286.596962][T12057] syzkaller0: entered allmulticast mode [ 286.604528][T12057] tipc: Resetting bearer [ 286.635763][T12047] tipc: Resetting bearer [ 286.997429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.079488][ T5846] Bluetooth: hci1: command tx timeout [ 287.623571][ T8870] tipc: Node number set to 4073806019 [ 288.037405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.077427][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.159606][ T5846] Bluetooth: hci1: command tx timeout [ 289.183617][T12047] tipc: Disabling bearer [ 289.230153][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1762'. [ 289.378734][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 289.387407][T12072] lo speed is unknown, defaulting to 1000 [ 289.434085][T12086] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 289.504611][T12019] chnl_net:caif_netlink_parms(): no params data found [ 289.672901][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1769'. [ 289.722010][T12102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1767'. [ 289.819917][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 289.857984][T12108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1770'. [ 289.869918][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 289.885681][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1770'. [ 290.089835][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.102022][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.111744][T12019] bridge_slave_0: entered allmulticast mode [ 290.117450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.123477][T12019] bridge_slave_0: entered promiscuous mode [ 290.155615][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.163222][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.184681][T12019] bridge_slave_1: entered allmulticast mode [ 290.193584][T12019] bridge_slave_1: entered promiscuous mode [ 290.268113][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.297025][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.376193][T12019] team0: Port device team_slave_0 added [ 290.395536][T12019] team0: Port device team_slave_1 added [ 290.455887][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.463817][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.492144][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.510523][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.521395][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.548294][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.611993][T12019] hsr_slave_0: entered promiscuous mode [ 290.618767][T12019] hsr_slave_1: entered promiscuous mode [ 290.624837][T12019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.647619][T12019] Cannot create hsr debugfs directory [ 290.732319][T12136] wireguard0: entered promiscuous mode [ 290.738595][T12136] wireguard0: entered allmulticast mode [ 291.041841][T12146] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 291.157406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.237874][ T55] Bluetooth: hci1: command tx timeout [ 291.255107][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1783'. [ 291.523911][T12019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.554898][T12019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.615981][T12019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.652815][T12019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.735703][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'. [ 291.964656][T12193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.971970][T12193] IPv6: NLM_F_CREATE should be set when creating new route [ 291.979276][T12193] IPv6: NLM_F_CREATE should be set when creating new route [ 291.986494][T12193] IPv6: NLM_F_CREATE should be set when creating new route [ 291.995991][T12196] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 292.012916][T12195] vlan0: entered promiscuous mode [ 292.052603][T12197] gretap0: entered promiscuous mode [ 292.065601][T12200] 0猉功D: renamed from gretap0 [ 292.096342][T12200] 0猉功D: left promiscuous mode [ 292.106146][T12200] 0猉功D: entered allmulticast mode [ 292.117878][T12200] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 292.197457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.285671][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.326550][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.349392][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.356560][ T8754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.396163][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.403415][ T8754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.431500][T12019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.443721][T12019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.852135][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.994337][T12019] veth0_vlan: entered promiscuous mode [ 293.062056][T12019] veth1_vlan: entered promiscuous mode [ 293.220820][T12236] syzkaller0: entered promiscuous mode [ 293.237533][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.246420][T12236] syzkaller0: entered allmulticast mode [ 293.293558][T12019] veth0_macvtap: entered promiscuous mode [ 293.328099][ T55] Bluetooth: hci1: command 0x0419 tx timeout [ 293.641272][T12019] veth1_macvtap: entered promiscuous mode [ 294.278606][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.317450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.398401][ T5846] Bluetooth: hci1: command 0x0419 tx timeout [ 295.622556][T12019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.666368][T12019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.720597][T12019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.744472][T12019] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.767676][T12019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.776531][T12019] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.010504][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.042805][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.099923][T12290] __nla_validate_parse: 7 callbacks suppressed [ 296.099944][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 296.131191][T10620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.155391][T10620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.241333][T12299] 0猉功D: left allmulticast mode [ 296.302101][T12299] bridge0: port 1(dummy0) entered disabled state [ 296.357385][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.370756][T12299] batadv_slave_1: left promiscuous mode [ 296.383803][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 296.536278][T12313] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 296.759305][T12329] delete_channel: no stack [ 297.015532][ T8754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.279977][ T8754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.393989][ T8754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.397536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.456617][ T8754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.653186][ T8754] bridge_slave_1: left allmulticast mode [ 297.659204][ T8754] bridge_slave_1: left promiscuous mode [ 297.664898][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.674105][ T8754] bridge_slave_0: left allmulticast mode [ 297.680259][ T8754] bridge_slave_0: left promiscuous mode [ 297.685967][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.038247][ T8754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.052479][ T8754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.063329][ T8754] bond0 (unregistering): Released all slaves [ 298.288540][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 298.437567][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.702381][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 298.729987][ T8754] hsr_slave_0: left promiscuous mode [ 298.736111][ T8754] hsr_slave_1: left promiscuous mode [ 298.742618][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.757595][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.776179][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.791977][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.806420][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.823615][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.834198][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.847324][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.855197][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 298.862784][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.914459][ T8754] veth1_macvtap: left promiscuous mode [ 298.920368][ T8754] veth0_macvtap: left promiscuous mode [ 298.926004][ T8754] veth1_vlan: left promiscuous mode [ 298.931512][ T8754] veth0_vlan: left promiscuous mode [ 299.431453][ T8754] team0 (unregistering): Port device team_slave_1 removed [ 299.477082][ T8754] team0 (unregistering): Port device team_slave_0 removed [ 299.477443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.922510][T12362] bridge0: port 1(vlan3) entered blocking state [ 299.933719][T12362] bridge0: port 1(vlan3) entered disabled state [ 299.940234][T12362] vlan3: entered allmulticast mode [ 299.946224][T12362] vlan3: entered promiscuous mode [ 299.980597][T12363] bond2: entered promiscuous mode [ 299.985907][T12363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.056429][T12380] lo speed is unknown, defaulting to 1000 [ 300.108220][T12372] lo speed is unknown, defaulting to 1000 [ 300.525842][T12404] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1850'. [ 300.580032][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'. [ 300.686050][T12372] chnl_net:caif_netlink_parms(): no params data found [ 300.746361][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.931739][ T55] Bluetooth: hci1: command tx timeout [ 300.947975][T12372] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.963749][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.971272][T12372] bridge_slave_0: entered allmulticast mode [ 300.985460][T12372] bridge_slave_0: entered promiscuous mode [ 300.994345][T12372] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.008281][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.015647][T12372] bridge_slave_1: entered allmulticast mode [ 301.027902][T12372] bridge_slave_1: entered promiscuous mode [ 301.117438][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 301.152220][T12372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.194860][T12372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.301080][T12372] team0: Port device team_slave_0 added [ 301.326320][T12372] team0: Port device team_slave_1 added [ 301.461711][T12372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.477479][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.544310][T12372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.589442][T12372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.612412][T12372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.667372][T12372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.797481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.822326][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 301.853026][T12372] hsr_slave_0: entered promiscuous mode [ 301.868947][T12372] hsr_slave_1: entered promiscuous mode [ 301.891587][T12372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.927402][T12372] Cannot create hsr debugfs directory [ 302.121435][T12464] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1863'. [ 302.514018][T12487] IPv6: Can't replace route, no match found [ 302.837528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.976167][T12503] netlink: 'syz.1.1875': attribute type 2 has an invalid length. [ 302.976323][T12500] lo speed is unknown, defaulting to 1000 [ 302.984844][T12372] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.008012][ T55] Bluetooth: hci1: command tx timeout [ 303.044800][T12372] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.110715][T12372] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.205505][T12372] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.372225][T12516] lo: entered allmulticast mode [ 303.493669][T12522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'. [ 303.661011][T12372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.703760][T12372] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.758652][T12500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1876'. [ 303.783004][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.790269][T10618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.865184][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 303.877643][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.948196][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.955409][ T8754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.172967][T12543] syzkaller0: entered allmulticast mode [ 304.189217][T12543] syzkaller0: entered promiscuous mode [ 304.231437][T12539] syzkaller0 (unregistering): left promiscuous mode [ 304.277906][T12539] syzkaller0 (unregistering): left allmulticast mode [ 304.297600][ T30] audit: type=1804 audit(1742274870.650:6): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1891" name="/newroot/453/cgroup.controllers" dev="tmpfs" ino=2349 res=1 errno=0 [ 304.332981][ T30] audit: type=1800 audit(1742274870.650:7): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1891" name="cgroup.controllers" dev="tmpfs" ino=2349 res=0 errno=0 [ 304.420858][ T30] audit: type=1804 audit(1742274870.650:8): pid=12551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1891" name="/newroot/453/cgroup.controllers" dev="tmpfs" ino=2349 res=1 errno=0 [ 304.459037][ T30] audit: type=1800 audit(1742274870.650:9): pid=12551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1891" name="cgroup.controllers" dev="tmpfs" ino=2349 res=0 errno=0 [ 304.533440][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 304.684647][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.833790][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 304.858955][T12372] veth0_vlan: entered promiscuous mode [ 304.917511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.959217][T12372] veth1_vlan: entered promiscuous mode [ 305.033416][T12372] veth0_macvtap: entered promiscuous mode [ 305.063728][T12372] veth1_macvtap: entered promiscuous mode [ 305.078165][ T55] Bluetooth: hci1: command tx timeout [ 305.136448][T12372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.158238][T12372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.175738][T12372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.203535][T12372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.214100][T12372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.237791][T12372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.409674][ T8754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.431141][ T8754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.491470][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'. [ 305.504217][T10618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.515372][T10618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.569152][T12599] netlink: 'syz.0.1903': attribute type 1 has an invalid length. [ 305.957629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.191048][T12630] x_tables: ip_tables: udp match: only valid for protocol 17 [ 306.452955][T10614] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.579135][T10614] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.887133][T10614] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.997709][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.095772][T10614] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.246564][T10614] bridge_slave_1: left allmulticast mode [ 307.252517][T10614] bridge_slave_1: left promiscuous mode [ 307.258610][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.267871][T10614] bridge_slave_0: left allmulticast mode [ 307.273568][T10614] bridge_slave_0: left promiscuous mode [ 307.279459][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.656331][T10614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.668257][T10614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.679393][T10614] bond0 (unregistering): Released all slaves [ 308.037431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.208060][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.218321][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.227649][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.242363][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.251737][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.264941][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.080046][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.123261][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.290166][T10614] hsr_slave_0: left promiscuous mode [ 310.296021][T10614] hsr_slave_1: left promiscuous mode [ 310.302470][T10614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.310828][T10614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.322128][T10614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.330049][T10614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.357714][ T55] Bluetooth: hci1: command tx timeout [ 310.368324][T10614] veth1_macvtap: left promiscuous mode [ 310.373918][T10614] veth0_macvtap: left promiscuous mode [ 310.389754][T10614] veth1_vlan: left promiscuous mode [ 310.395170][T10614] veth0_vlan: left promiscuous mode [ 310.873707][T10614] team0 (unregistering): Port device team_slave_1 removed [ 310.922895][T10614] team0 (unregistering): Port device team_slave_0 removed [ 311.167386][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.431798][T12663] lo speed is unknown, defaulting to 1000 [ 311.599779][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 311.712042][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1927'. [ 311.753934][T12697] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 311.815959][T12663] chnl_net:caif_netlink_parms(): no params data found [ 312.046699][ T30] audit: type=1804 audit(1742274878.400:10): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1933" name="/newroot/439/memory.events" dev="tmpfs" ino=2271 res=1 errno=0 [ 312.073868][ T30] audit: type=1800 audit(1742274878.430:11): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1933" name="memory.events" dev="tmpfs" ino=2271 res=0 errno=0 [ 312.170887][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.187896][T12663] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.197646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.206974][T12663] bridge_slave_0: entered allmulticast mode [ 312.225628][T12663] bridge_slave_0: entered promiscuous mode [ 312.247611][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.270733][T12663] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.285116][T12663] bridge_slave_1: entered allmulticast mode [ 312.294969][T12663] bridge_slave_1: entered promiscuous mode [ 312.422894][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1938'. [ 312.438297][ T55] Bluetooth: hci1: command tx timeout [ 312.465913][T12663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.506794][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 312.517673][T12738] netlink: 'syz.4.1939': attribute type 4 has an invalid length. [ 312.551510][T12663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.675906][T12742] lo speed is unknown, defaulting to 1000 [ 312.710245][T12663] team0: Port device team_slave_0 added [ 312.941579][T12749] vlan3 (unregistering): left allmulticast mode [ 312.948250][T12749] vlan3 (unregistering): left promiscuous mode [ 312.954490][T12749] bridge0: port 1(vlan3) entered disabled state [ 312.966976][T12749] bond0 (unregistering): Released all slaves [ 312.997070][T12663] team0: Port device team_slave_1 added [ 313.026309][T12760] pimreg: entered allmulticast mode [ 313.096177][T12763] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1945'. [ 313.124064][T12754] 8021q: VLANs not supported on pimreg [ 313.135835][T12663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.146948][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.237448][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.254495][T12663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.312921][T12663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.321011][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.354667][T12663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.636108][T12783] dummy0: left allmulticast mode [ 313.647491][T12783] dummy0: left promiscuous mode [ 313.657917][T12783] bridge0: port 1(dummy0) entered disabled state [ 313.795812][T12783] team0: Port device macvlan4 removed [ 313.981980][T12663] hsr_slave_0: entered promiscuous mode [ 314.005646][T12663] hsr_slave_1: entered promiscuous mode [ 314.030686][T12663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.055758][T12663] Cannot create hsr debugfs directory [ 314.277725][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.528587][ T55] Bluetooth: hci1: command tx timeout [ 315.022248][T12837] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 315.201839][T12846] netlink: 'syz.4.1961': attribute type 29 has an invalid length. [ 315.210741][T12846] netlink: 'syz.4.1961': attribute type 29 has an invalid length. [ 315.223455][T12663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.235238][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1960'. [ 315.277222][T12663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.297796][T12663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.317616][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.318924][T12663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.495207][T12857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1963'. [ 315.512142][T12663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.561476][T12663] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.603378][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.610604][T10614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.680503][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.687946][T10614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.960541][T12874] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 316.026182][T12874] lo speed is unknown, defaulting to 1000 [ 316.096549][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1968'. [ 316.144530][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1968'. [ 316.347030][T12663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.357620][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.507897][T12894] batadv_slave_1: entered promiscuous mode [ 316.598880][ T55] Bluetooth: hci1: command tx timeout [ 316.614995][T12898] lo speed is unknown, defaulting to 1000 [ 316.662174][T12663] veth0_vlan: entered promiscuous mode [ 316.667886][T12904] sctp: [Deprecated]: syz.4.1977 (pid 12904) Use of int in max_burst socket option. [ 316.667886][T12904] Use struct sctp_assoc_value instead [ 316.720539][T12663] veth1_vlan: entered promiscuous mode [ 316.895322][T12663] veth0_macvtap: entered promiscuous mode [ 316.954250][T12663] veth1_macvtap: entered promiscuous mode [ 317.034136][T12663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.062910][T12663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.083906][T12663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.093264][T12663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.102649][T12663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.111786][T12663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.230853][T12918] syz_tun: entered allmulticast mode [ 317.285445][T10624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.326511][T10624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.362722][T12917] syz_tun: left allmulticast mode [ 317.397660][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.414729][T10618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.448186][T10618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.953163][T12925] lo speed is unknown, defaulting to 1000 [ 317.984597][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.995206][T12936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.005552][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.016063][T12940] batadv_slave_0: entered promiscuous mode [ 318.025568][T12940] batadv_slave_0: left promiscuous mode [ 318.050968][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1988'. [ 318.437642][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.491924][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1992'. [ 318.590593][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.801489][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.973910][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.073369][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.156860][ T53] bridge_slave_1: left allmulticast mode [ 319.164290][ T53] bridge_slave_1: left promiscuous mode [ 319.170255][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.179618][ T53] bridge_slave_0: left allmulticast mode [ 319.185323][ T53] bridge_slave_0: left promiscuous mode [ 319.191383][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.487775][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.538466][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.551675][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.563115][ T53] bond0 (unregistering): Released all slaves [ 319.785240][ T53] hsr_slave_0: left promiscuous mode [ 319.791362][ T53] hsr_slave_1: left promiscuous mode [ 319.797141][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.806648][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.815621][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.823314][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.851218][ T53] veth1_macvtap: left promiscuous mode [ 319.856773][ T53] veth0_macvtap: left promiscuous mode [ 319.862513][ T53] veth1_vlan: left promiscuous mode [ 319.868250][ T53] veth0_vlan: left promiscuous mode [ 320.517723][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.683176][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.696391][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.706949][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.718824][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.726653][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 320.743604][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.269733][ T53] team0 (unregistering): Port device team_slave_1 removed [ 321.294022][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2004'. [ 321.405143][ T53] team0 (unregistering): Port device team_slave_0 removed [ 321.557526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.155356][T12985] lo speed is unknown, defaulting to 1000 [ 322.449823][T12985] chnl_net:caif_netlink_parms(): no params data found [ 322.529661][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2011'. [ 322.567822][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2011'. [ 322.603102][T13012] block nbd0: Unsupported socket: shutdown callout must be supported. [ 322.607518][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.744495][T13018] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2012'. [ 322.769839][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2012'. [ 322.807602][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 322.811274][T13016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2013'. [ 322.827413][T13016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2013'. [ 322.838345][ T55] Bluetooth: hci1: command tx timeout [ 322.851358][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.868713][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.871435][T13018] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 322.876569][T12985] bridge_slave_0: entered allmulticast mode [ 322.900891][T12985] bridge_slave_0: entered promiscuous mode [ 322.915954][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.924054][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.932164][T12985] bridge_slave_1: entered allmulticast mode [ 322.939986][T12985] bridge_slave_1: entered promiscuous mode [ 322.963303][T13022] lo speed is unknown, defaulting to 1000 [ 323.070381][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.108695][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.210392][T13032] __nla_validate_parse: 2 callbacks suppressed [ 323.210420][T13032] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2016'. [ 323.286076][T12985] team0: Port device team_slave_0 added [ 323.320095][T13032] netlink: 'syz.4.2016': attribute type 10 has an invalid length. [ 323.476925][T12985] team0: Port device team_slave_1 added [ 323.536464][T13050] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 323.588981][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.602798][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.631627][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.647382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.648444][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.664102][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.691970][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.714145][T13049] pim6reg1: entered promiscuous mode [ 323.724943][T13049] pim6reg1: entered allmulticast mode [ 323.902897][T12985] hsr_slave_0: entered promiscuous mode [ 323.934129][T12985] hsr_slave_1: entered promiscuous mode [ 323.941839][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.959680][T12985] Cannot create hsr debugfs directory [ 324.326811][T13086] netlink: 'syz.2.2028': attribute type 27 has an invalid length. [ 324.677663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.847506][T12985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.880999][T12985] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.907119][T13099] lo speed is unknown, defaulting to 1000 [ 324.913836][T12985] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.923546][ T5846] Bluetooth: hci1: command tx timeout [ 324.924134][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2035'. [ 324.980290][T12985] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.988506][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 325.061229][T13101] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2035'. [ 325.073303][T13101] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 325.288164][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 325.395159][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.495108][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.549897][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.557092][T10620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.610014][T13114] netpci0: tun_chr_ioctl cmd 1074025677 [ 325.615834][T13114] netpci0: linktype set to 771 [ 325.629093][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.636248][T10620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.727377][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.861058][T13120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2040'. [ 325.881925][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2041'. [ 325.976361][T13123] No such timeout policy "syz0" [ 326.265346][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.342782][T12985] veth0_vlan: entered promiscuous mode [ 326.371023][T13143] tun0: tun_chr_ioctl cmd 1074025673 [ 326.378396][T12985] veth1_vlan: entered promiscuous mode [ 326.438058][T12985] veth0_macvtap: entered promiscuous mode [ 326.453932][T12985] veth1_macvtap: entered promiscuous mode [ 326.481908][T13149] bridge2: entered promiscuous mode [ 326.498778][T13149] bridge2: entered allmulticast mode [ 326.553985][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.599818][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.620343][T12985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.629823][T12985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.639746][T12985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.655946][T12985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.672151][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.757756][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.757860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.773629][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.872681][T10614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.902387][T10614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.939075][T13161] netlink: 'syz.0.2052': attribute type 14 has an invalid length. [ 326.997825][ T5846] Bluetooth: hci1: command 0x040f tx timeout [ 327.025793][T13169] netlink: 'syz.2.2054': attribute type 21 has an invalid length. [ 327.052698][T13169] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.139731][T13171] netlink: 'syz.4.2055': attribute type 10 has an invalid length. [ 327.151787][T13171] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.168715][T13171] team0: entered allmulticast mode [ 327.173915][T13171] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 327.214112][T13171] geneve0: entered allmulticast mode [ 327.232537][T13171] bond0: (slave team0): Enslaving as an active interface with an up link [ 327.703631][T13175] infiniband syz1: set down [ 327.708691][T13175] infiniband syz1: added team_slave_0 [ 327.758734][T13175] RDS/IB: syz1: added [ 327.763825][T13175] smc: adding ib device syz1 with port count 1 [ 327.787134][T13175] smc: ib device syz1 port 1 has pnetid [ 327.799161][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.981122][ T8754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.201923][ T8754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.676921][ T8754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.837821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.875227][ T8754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.953615][ T8754] bridge_slave_1: left allmulticast mode [ 328.960480][ T8754] bridge_slave_1: left promiscuous mode [ 328.966529][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.975676][ T8754] bridge_slave_0: left allmulticast mode [ 328.981680][ T8754] bridge_slave_0: left promiscuous mode [ 328.987473][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.344669][ T8754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.355736][ T8754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.369174][ T8754] bond0 (unregistering): Released all slaves [ 329.611647][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2058'. [ 329.765011][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2061'. [ 329.809030][T13202] lo speed is unknown, defaulting to 1000 [ 329.827755][T13211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2062'. [ 329.887409][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.043146][T13223] No such timeout policy "syz0" [ 330.131883][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 330.162525][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2065'. [ 330.192800][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.202781][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.211892][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.221259][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.233207][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.240728][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.334040][T13237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2068'. [ 330.466098][T13231] lo speed is unknown, defaulting to 1000 [ 330.611295][ T8754] hsr_slave_0: left promiscuous mode [ 330.627925][ T8754] hsr_slave_1: left promiscuous mode [ 330.633944][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.667511][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.685877][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.700316][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.842979][ T8754] veth1_macvtap: left promiscuous mode [ 330.861958][ T8754] veth0_macvtap: left promiscuous mode [ 330.881552][ T8754] veth1_vlan: left promiscuous mode [ 330.896193][ T8754] veth0_vlan: left promiscuous mode [ 330.917479][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.039378][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 331.419707][T13275] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 331.747910][ T8754] team0 (unregistering): Port device team_slave_1 removed [ 331.806772][ T8754] team0 (unregistering): Port device team_slave_0 removed [ 331.967404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.281238][ T5846] Bluetooth: hci1: command tx timeout [ 332.705749][T13297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'. [ 332.845189][T13231] chnl_net:caif_netlink_parms(): no params data found [ 332.997466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.241948][T13231] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.272046][T13231] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.303369][T13231] bridge_slave_0: entered allmulticast mode [ 333.330219][T13231] bridge_slave_0: entered promiscuous mode [ 333.358792][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.387450][T13231] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.394841][T13231] bridge_slave_1: entered allmulticast mode [ 333.418597][T13231] bridge_slave_1: entered promiscuous mode [ 333.589295][T13231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.635292][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 333.708921][T13231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.847132][T13231] team0: Port device team_slave_0 added [ 333.880585][T13231] team0: Port device team_slave_1 added [ 333.965537][T13330] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2095'. [ 334.037388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.123332][T13231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.149798][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.202389][T13231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.249655][T13231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.283079][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.320078][T13231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.349174][T13338] lo speed is unknown, defaulting to 1000 [ 334.356158][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.367513][ T55] Bluetooth: hci1: command tx timeout [ 334.373550][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.385643][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.403682][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.411782][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.426583][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.501411][T13231] hsr_slave_0: entered promiscuous mode [ 334.510198][T13231] hsr_slave_1: entered promiscuous mode [ 334.516402][T13231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.548528][T13231] Cannot create hsr debugfs directory [ 334.648665][T13350] [ 334.651058][T13350] ====================================================== [ 334.658099][T13350] WARNING: possible circular locking dependency detected [ 334.665138][T13350] 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 Not tainted [ 334.672272][T13350] ------------------------------------------------------ [ 334.679317][T13350] syz.4.2099/13350 is trying to acquire lock: [ 334.685409][T13350] ffff88807edb0d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 334.695752][T13350] [ 334.695752][T13350] but task is already holding lock: [ 334.703408][T13350] ffff88805e6a8d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 334.713099][T13350] [ 334.713099][T13350] which lock already depends on the new lock. [ 334.713099][T13350] [ 334.723505][T13350] [ 334.723505][T13350] the existing dependency chain (in reverse order) is: [ 334.732537][T13350] [ 334.732537][T13350] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 334.741005][T13350] lock_acquire+0x1ed/0x550 [ 334.746051][T13350] __mutex_lock+0x19c/0x1010 [ 334.751172][T13350] __dev_open+0x5cb/0x8a0 [ 334.756038][T13350] netif_open+0xae/0x1b0 [ 334.760822][T13350] dev_open+0x13e/0x260 [ 334.765508][T13350] team_add_slave+0xabe/0x28a0 [ 334.770804][T13350] do_set_master+0x579/0x730 [ 334.775922][T13350] do_setlink+0xfee/0x40f0 [ 334.780874][T13350] rtnl_newlink+0x15a6/0x1d90 [ 334.786123][T13350] rtnetlink_rcv_msg+0x791/0xcf0 [ 334.791597][T13350] netlink_rcv_skb+0x206/0x480 [ 334.796894][T13350] netlink_unicast+0x7f6/0x990 [ 334.802188][T13350] netlink_sendmsg+0x8de/0xcb0 [ 334.807483][T13350] __sock_sendmsg+0x221/0x270 [ 334.812712][T13350] ____sys_sendmsg+0x53a/0x860 [ 334.818014][T13350] __sys_sendmsg+0x269/0x350 [ 334.823130][T13350] do_syscall_64+0xf3/0x230 [ 334.828166][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.834593][T13350] [ 334.834593][T13350] -> #1 (team->team_lock_key#3){+.+.}-{4:4}: [ 334.842791][T13350] lock_acquire+0x1ed/0x550 [ 334.847835][T13350] __mutex_lock+0x19c/0x1010 [ 334.852954][T13350] team_set_mac_address+0x122/0x280 [ 334.858682][T13350] netif_set_mac_address+0x327/0x510 [ 334.864493][T13350] do_setlink+0xaa6/0x40f0 [ 334.869433][T13350] rtnl_newlink+0x15a6/0x1d90 [ 334.874658][T13350] rtnetlink_rcv_msg+0x791/0xcf0 [ 334.880129][T13350] netlink_rcv_skb+0x206/0x480 [ 334.885430][T13350] netlink_unicast+0x7f6/0x990 [ 334.890725][T13350] netlink_sendmsg+0x8de/0xcb0 [ 334.896024][T13350] __sock_sendmsg+0x221/0x270 [ 334.901235][T13350] __sys_sendto+0x363/0x4c0 [ 334.906265][T13350] __x64_sys_sendto+0xde/0x100 [ 334.911550][T13350] do_syscall_64+0xf3/0x230 [ 334.916583][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.923027][T13350] [ 334.923027][T13350] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 334.931572][T13350] validate_chain+0x18ef/0x5920 [ 334.936952][T13350] __lock_acquire+0x1397/0x2100 [ 334.942337][T13350] lock_acquire+0x1ed/0x550 [ 334.947374][T13350] __mutex_lock+0x19c/0x1010 [ 334.952494][T13350] dev_set_mac_address+0x2a/0x50 [ 334.957964][T13350] bond_set_mac_address+0x28e/0x830 [ 334.963698][T13350] netif_set_mac_address+0x327/0x510 [ 334.969514][T13350] do_setlink+0xaa6/0x40f0 [ 334.974460][T13350] rtnl_newlink+0x15a6/0x1d90 [ 334.979695][T13350] rtnetlink_rcv_msg+0x791/0xcf0 [ 334.985173][T13350] netlink_rcv_skb+0x206/0x480 [ 334.990481][T13350] netlink_unicast+0x7f6/0x990 [ 334.995778][T13350] netlink_sendmsg+0x8de/0xcb0 [ 335.001079][T13350] __sock_sendmsg+0x221/0x270 [ 335.006289][T13350] ____sys_sendmsg+0x53a/0x860 [ 335.011579][T13350] __sys_sendmsg+0x269/0x350 [ 335.016697][T13350] do_syscall_64+0xf3/0x230 [ 335.021750][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.028179][T13350] [ 335.028179][T13350] other info that might help us debug this: [ 335.028179][T13350] [ 335.038408][T13350] Chain exists of: [ 335.038408][T13350] &dev_instance_lock_key#12 --> team->team_lock_key#3 --> &dev_instance_lock_key#2 [ 335.038408][T13350] [ 335.053664][T13350] Possible unsafe locking scenario: [ 335.053664][T13350] [ 335.061116][T13350] CPU0 CPU1 [ 335.066571][T13350] ---- ---- [ 335.071936][T13350] lock(&dev_instance_lock_key#2); [ 335.077151][T13350] lock(team->team_lock_key#3); [ 335.084625][T13350] lock(&dev_instance_lock_key#2); [ 335.092377][T13350] lock(&dev_instance_lock_key#12); [ 335.097698][T13350] [ 335.097698][T13350] *** DEADLOCK *** [ 335.097698][T13350] [ 335.105872][T13350] 2 locks held by syz.4.2099/13350: [ 335.111094][T13350] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 335.120196][T13350] #1: ffff88805e6a8d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 335.130337][T13350] [ 335.130337][T13350] stack backtrace: [ 335.136233][T13350] CPU: 0 UID: 0 PID: 13350 Comm: syz.4.2099 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 335.136257][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.136268][T13350] Call Trace: [ 335.136277][T13350] [ 335.136286][T13350] dump_stack_lvl+0x241/0x360 [ 335.136312][T13350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.136331][T13350] ? __pfx__printk+0x10/0x10 [ 335.136352][T13350] print_circular_bug+0x13a/0x1b0 [ 335.136375][T13350] check_noncircular+0x36a/0x4a0 [ 335.136394][T13350] ? 0xffffffffa0000954 [ 335.136409][T13350] ? __pfx_check_noncircular+0x10/0x10 [ 335.136429][T13350] ? lockdep_lock+0x123/0x2b0 [ 335.136459][T13350] validate_chain+0x18ef/0x5920 [ 335.136493][T13350] ? validate_chain+0x11e/0x5920 [ 335.136513][T13350] ? __pfx_validate_chain+0x10/0x10 [ 335.136532][T13350] ? page_ext_put+0x97/0xc0 [ 335.136557][T13350] ? validate_chain+0x11e/0x5920 [ 335.136580][T13350] ? __pfx_validate_chain+0x10/0x10 [ 335.136600][T13350] ? __pfx_validate_chain+0x10/0x10 [ 335.136620][T13350] ? mark_lock+0x9a/0x360 [ 335.136634][T13350] ? __pfx_validate_chain+0x10/0x10 [ 335.136654][T13350] __lock_acquire+0x1397/0x2100 [ 335.136687][T13350] lock_acquire+0x1ed/0x550 [ 335.136712][T13350] ? dev_set_mac_address+0x2a/0x50 [ 335.136735][T13350] ? __pfx_lock_acquire+0x10/0x10 [ 335.136762][T13350] ? __pfx___might_resched+0x10/0x10 [ 335.136786][T13350] ? __lock_acquire+0x1397/0x2100 [ 335.136816][T13350] __mutex_lock+0x19c/0x1010 [ 335.136838][T13350] ? dev_set_mac_address+0x2a/0x50 [ 335.136860][T13350] ? dev_set_mac_address+0x2a/0x50 [ 335.136878][T13350] ? __pfx___mutex_lock+0x10/0x10 [ 335.136900][T13350] ? ib_device_get_by_netdev+0x85/0x5e0 [ 335.136930][T13350] ? net_generic+0x1f/0x240 [ 335.136950][T13350] ? net_generic+0x1f0/0x240 [ 335.136972][T13350] dev_set_mac_address+0x2a/0x50 [ 335.136991][T13350] bond_set_mac_address+0x28e/0x830 [ 335.137017][T13350] ? __pfx_bond_set_mac_address+0x10/0x10 [ 335.137039][T13350] ? hsr_netdev_notify+0x295/0xb50 [ 335.137066][T13350] ? notifier_call_chain+0x15a/0x3f0 [ 335.137091][T13350] ? notifier_call_chain+0x3cc/0x3f0 [ 335.137117][T13350] netif_set_mac_address+0x327/0x510 [ 335.137139][T13350] ? __pfx_netif_set_mac_address+0x10/0x10 [ 335.137160][T13350] ? rcu_is_watching+0x15/0xb0 [ 335.137180][T13350] ? trace_kmalloc+0x1f/0xd0 [ 335.137203][T13350] ? do_setlink+0x7a7/0x40f0 [ 335.137222][T13350] do_setlink+0xaa6/0x40f0 [ 335.137249][T13350] ? __pfx_do_setlink+0x10/0x10 [ 335.137273][T13350] ? __pfx___might_resched+0x10/0x10 [ 335.137300][T13350] ? __pfx___mutex_trylock_common+0x10/0x10 [ 335.137326][T13350] ? rcu_is_watching+0x15/0xb0 [ 335.137345][T13350] ? trace_contention_end+0x3c/0x120 [ 335.137364][T13350] ? __mutex_lock+0x397/0x1010 [ 335.137387][T13350] ? __pfx_aa_get_newest_label+0x10/0x10 [ 335.137417][T13350] ? rtnl_newlink+0xc4c/0x1d90 [ 335.137444][T13350] ? __pfx___mutex_lock+0x10/0x10 [ 335.137475][T13350] ? ns_capable+0x8a/0xf0 [ 335.137496][T13350] ? rtnl_link_get_net_capable+0x168/0x340 [ 335.137515][T13350] rtnl_newlink+0x15a6/0x1d90 [ 335.137548][T13350] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.137574][T13350] ? __pfx_validate_chain+0x10/0x10 [ 335.137601][T13350] ? validate_chain+0x11e/0x5920 [ 335.137619][T13350] ? __pfx_lock_acquire+0x10/0x10 [ 335.137645][T13350] ? __pfx_lock_release+0x10/0x10 [ 335.137672][T13350] ? __pfx_validate_chain+0x10/0x10 [ 335.137691][T13350] ? mark_lock+0x9a/0x360 [ 335.137709][T13350] ? __lock_acquire+0x1397/0x2100 [ 335.137749][T13350] ? __pfx_lock_release+0x10/0x10 [ 335.137781][T13350] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.137807][T13350] rtnetlink_rcv_msg+0x791/0xcf0 [ 335.137833][T13350] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 335.137860][T13350] ? __lock_acquire+0x1397/0x2100 [ 335.137886][T13350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.137919][T13350] netlink_rcv_skb+0x206/0x480 [ 335.137945][T13350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.137972][T13350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.138007][T13350] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.138033][T13350] netlink_unicast+0x7f6/0x990 [ 335.138059][T13350] ? __pfx_netlink_unicast+0x10/0x10 [ 335.138081][T13350] ? __virt_addr_valid+0x45f/0x530 [ 335.138097][T13350] ? __phys_addr_symbol+0x2f/0x70 [ 335.138112][T13350] ? __check_object_size+0x47a/0x730 [ 335.138138][T13350] netlink_sendmsg+0x8de/0xcb0 [ 335.138169][T13350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.138197][T13350] ? aa_sock_msg_perm+0x91/0x160 [ 335.138225][T13350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.138250][T13350] __sock_sendmsg+0x221/0x270 [ 335.138276][T13350] ____sys_sendmsg+0x53a/0x860 [ 335.138300][T13350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.138323][T13350] ? futex_wake+0x523/0x5c0 [ 335.138351][T13350] __sys_sendmsg+0x269/0x350 [ 335.138370][T13350] ? __pfx_futex_wake+0x10/0x10 [ 335.138396][T13350] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.138434][T13350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.138461][T13350] ? do_syscall_64+0x100/0x230 [ 335.138490][T13350] ? do_syscall_64+0xb6/0x230 [ 335.138512][T13350] do_syscall_64+0xf3/0x230 [ 335.138535][T13350] ? clear_bhb_loop+0x35/0x90 [ 335.138561][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.138585][T13350] RIP: 0033:0x7f7db718d169 [ 335.138600][T13350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.138615][T13350] RSP: 002b:00007f7db7f0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.138634][T13350] RAX: ffffffffffffffda RBX: 00007f7db73a5fa0 RCX: 00007f7db718d169 [ 335.138647][T13350] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 000000000000000a [ 335.138659][T13350] RBP: 00007f7db720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 335.138670][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.138680][T13350] R13: 0000000000000000 R14: 00007f7db73a5fa0 R15: 00007ffe12dace28 [ 335.138699][T13350] [ 335.713875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.744217][T13350] bond0: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.770099][T13350] team0: entered promiscuous mode [ 335.785450][T13350] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 335.832665][T13350] geneve0: entered promiscuous mode [ 336.705532][T10624] bridge_slave_1: left allmulticast mode [ 336.711393][T10624] bridge_slave_1: left promiscuous mode [ 336.717074][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.725231][T10624] bridge_slave_0: left allmulticast mode [ 336.731779][T10624] bridge_slave_0: left promiscuous mode [ 336.740249][T10624] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.757752][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.311265][T10624]  (unregistering): Released all slaves [ 337.320608][T10624] bond1 (unregistering): Released all slaves [ 337.426501][T10624] bond0 (unregistering): Released all slaves [ 337.538924][T10624] bond2 (unregistering): Released all slaves [ 337.549484][T10624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.559713][T10624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.570899][T10624] bond0 (unregistering): Released all slaves [ 337.614379][T10624] tipc: Left network mode [ 337.648840][T10624] IPVS: stopping backup sync thread 8419 ... [ 337.797555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.912635][T10624] hsr_slave_0: left promiscuous mode [ 337.919829][T10624] hsr_slave_1: left promiscuous mode [ 337.925836][T10624] hsr_slave_0: left promiscuous mode [ 337.931640][T10624] hsr_slave_1: left promiscuous mode [ 337.937960][T10624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.945507][T10624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.624717][T10624] team0 (unregistering): Port device team_slave_1 removed [ 338.649774][T10624] team0 (unregistering): Port device team_slave_0 removed [ 338.837480][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.877731][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.917544][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.957548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.997405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.037451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available