last executing test programs: 3m0.959353743s ago: executing program 3 (id=1733): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3m0.855497362s ago: executing program 3 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 3m0.838778402s ago: executing program 3 (id=1737): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x0) 3m0.75908891s ago: executing program 3 (id=1740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f00000001c0)={'syzkaller0\x00', @random="110000000002"}) 3m0.639591931s ago: executing program 3 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000800}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x34, 0x0, &(0x7f0000000240)="0840572d1f40cae31624c58f5054d11fce9f2bf563894788e75ae82ced7adb38315d08fcd1034bd15522d4088d397b96294b6747", 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffea0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002abd7000fcdbdf257700000400000300", @ANYRES32=0x0, @ANYBLOB="0800ef000f0000000800ef000b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001f80)=r7, 0x4) r9 = socket$inet(0x2, 0x4, 0xb) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) 2m59.268423741s ago: executing program 3 (id=1760): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x5, 0xb}}, [@filter_kind_options=@f_cgroup={{0x46}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 2m58.576161547s ago: executing program 2 (id=1769): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x700}, 0x0) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000036c3a000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x92, &(0x7f00000001c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000200000f03000000020000000100000003"], 0x0, 0x69, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 2m58.448203953s ago: executing program 1 (id=1771): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x24) listen(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000190001000000000000000000020000400000fe2d"], 0x24}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r0) 2m58.011857712s ago: executing program 2 (id=1773): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000580), 0x0}, 0x20) 2m57.923488651s ago: executing program 0 (id=1775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2m57.916926359s ago: executing program 1 (id=1776): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x34, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0xb}, {0x4, 0x1}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m57.900788317s ago: executing program 2 (id=1777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x5a5}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 2m57.849378483s ago: executing program 4 (id=1779): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b5318f0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c030a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214217b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d37827bab1a32c9d788e9f74ee57012ca5bfd0dc090b59077b7ef4a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76789ae79ccec252203bda7798de237bbe019d70a7a2d8176638fd53465acdd321f5a500", 0x3b5}], 0x1}}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="24000000010401010000000000000000000000000500010001000000060006"], 0x24}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) 2m57.757044064s ago: executing program 1 (id=1780): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000100)=0xffff, 0x4) connect$bt_l2cap(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) 2m57.635617569s ago: executing program 1 (id=1781): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(r2, &(0x7f00000005c0), 0x10) read(r2, &(0x7f00000017c0)=""/4106, 0x100a) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) socket$tipc(0x1e, 0x5, 0x0) 2m57.231450246s ago: executing program 2 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xfe, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0xa}, @generic={0x0, 0x7, "d58838068b"}]}}}}}}, 0x4a) 2m57.107531972s ago: executing program 2 (id=1783): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b703000000008000850000000600", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2m57.106415007s ago: executing program 2 (id=1784): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="58ff7d34d273b5eb47039f2e40e88fe0baab471a4ffc1014d5e6e3807753884505bb96a9fdaea75f001454fdc09987af40a72c222dfa5f12825fe5d40309455646538691d75c0eac458825715e3cbf2bed02d6b4ce9610502f01a1cce8cf50a7eb8feaa94e3e5c6ec1798199384c870fb4fd7fb691089fb93c1d4804e50d7d6494fd39b0cf63574a1aea73d732ca2549678d231a00973552c8f4d4859de4bcfb8022f03cfd4b91879b0b9d1570fdce0b6603992ff5eb55b0b3012094f123a9b992734bda55f1c43934591417bff1f8bcc51d48fd7ca6f7d38083ac1d68528ecd5a", 0xe1}, {&(0x7f0000000340)="b0d6872d57cf904a69e18b2c5054912177ed6ae0c0f014f91bcd2a0ba1a907f9ff45f8f91d05bb63591a1f6731a9c6ecd2c3b85ba391c1388cdb87b71970283d5e9c90a7ebb9d82f84dffb3052d383c5b8d7dd32ddf39ea2b1f0c24f9e30923d2e51dad057ef47c6126625f4b8d2e01816d2f0cbb37292391abdb91f8a79390febbfd1c3445f6c4e4ffddcbb5c763c88f8", 0x91}, {&(0x7f0000000280)="32386df6", 0x4}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="f98d2c96d410d932b543d2e5fa9d3f54d2f359fadda48da2bdae6410c519c4e1d9c9ec9457367cd9", 0x28}], 0x5, &(0x7f0000000800)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1ff}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x60, 0x200000d0}, 0x4000041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x28, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="14dc4d757f54a89187ff28392bf9b5ef34c36a4266ea31201cc3", 0x1a}], 0x1}}], 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/141, 0x8d}], 0x1}, 0x200}], 0x1, 0x2143, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x71) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendto$llc(r4, &(0x7f0000000100)="618b8c9285fa94bd072d0914a95e7d5f5f8b363937f03bb2f42f6aac82140d6ab58bac9e4f6a04bdc476f475d67a23d2caf024e9172287998b3e45e191c61348801108f4dba4c6f536a76405b777fcd3d6dc04492e1e6a5019d026d28444fcc46e06f25f8ad99f726c1d89cc660fc32258f0937c086b6600c6b3a29b795a374d0275d3021be6391f823fafb5890489eb1a5f8d2883067a537358e0d8993aebbb70213a3d62a259c902f8265c2d2f", 0xae, 0x408c1, &(0x7f00000001c0)={0x1a, 0x10e, 0x1, 0x7f, 0x5, 0xd, @broadcast}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 2m57.075392077s ago: executing program 0 (id=1785): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m57.023114034s ago: executing program 0 (id=1786): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x700}, 0x0) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000036c3a000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x92, &(0x7f00000001c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000200000f03000000020000000100000003"], 0x0, 0x69, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 2m56.921647912s ago: executing program 4 (id=1787): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000580), 0x0}, 0x20) 2m56.874217852s ago: executing program 4 (id=1788): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x24) listen(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000190001000000000000000000020000400000fe2d"], 0x24}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) close(r0) 2m56.87329192s ago: executing program 0 (id=1789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000001c0)=0x9, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/31, &(0x7f0000000240)=0x1f) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000001d00)={{0xa, 0x4e24, 0x8, @mcast2, 0xf}, {0xa, 0x4e20, 0x9, @private0, 0x1}, 0x0, {[0x2, 0xffff047d, 0x3c8, 0x800, 0x7, 0x7ff, 0x5, 0xd2]}}, 0x5c) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001b00)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x10000}, {&(0x7f00000000c0)=""/90, 0x5a}, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/198, 0xc6}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001380)=""/220, 0xdc}, {&(0x7f0000001480)=""/191, 0xbf}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001640)=""/75, 0x4b}], 0x7, 0x45, 0x5}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x8}, &(0x7f0000000200)=0x3, &(0x7f0000001740)=0x7ff, 0x6, 0x5, 0xfffffffffffffff8, 0x4, 0x2, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x6}, &(0x7f0000001780)=0x1, &(0x7f00000017c0)=0x7, 0x8001, 0x7ff, 0x0, 0x7, 0x59, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x4}, {&(0x7f0000001800)=""/18, 0x12}, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001900)=""/113, 0x71}, {&(0x7f0000001980)=""/175, 0xaf}], 0x3, 0x6, 0x200}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @mask_fadd={0x58, 0x114, 0x8, {{0x200, 0x5}, &(0x7f0000001a80)=0x2, &(0x7f0000001ac0)=0xfffd, 0x75, 0x3076, 0x2, 0x80000000000, 0x3, 0xffffffffffffffff}}, @rdma_dest={0x18, 0x114, 0x2, {0x4d, 0x81}}], 0x1c8}, 0x0) 2m56.791936204s ago: executing program 0 (id=1790): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x34, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0xb}, {0x4, 0x1}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m56.786455045s ago: executing program 4 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000ad000000000040a343edbdf131cf4fa7fe8f0df66213940d056063d74bd5e56b778f0db3444217ba9256711c263efd5f9289f3e5f5eee0813cf57cc2940c58e9497e3bab3cedd15c11f1a731fcdd30e18af3f94f201c994a5710c9c54709c133a3484c9122b409b478e8fe30704bb7973eaa99128ce2965714f0f000748c5649cf3cd55af9a023306e17a490537e2e236df30acbfb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2m56.767061338s ago: executing program 1 (id=1792): write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f", 0x17) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000280)=0x3, 0x4) socket$inet6(0xa, 0xa, 0x0) 2m56.683927647s ago: executing program 4 (id=1793): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x4000, @empty, {[@timestamp_addr={0x44, 0x4, 0x0, 0x1, 0x5}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x800}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000004c0), 0x5, r1}, 0x38) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x7, 0x10}, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000001880)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe6}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_ATM={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x8a}]}}]}, 0x54}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r9, &(0x7f0000000080)={0x23, 0x0, 0xc, 0x1d}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x1e, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0x2, 0x7, 0x5, 0xffffffffffffffe2, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1f07c61b, 0xc1, &(0x7f00000004c0)=""/193, 0x40f00, 0x0, '\x00', r7, @sched_cls=0x2e, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0xf, 0x2, 0x81}, 0x10, r10, r0, 0x2, &(0x7f0000000900)=[r1], &(0x7f0000000980)=[{0x0, 0x5, 0xe, 0x1}, {0x1, 0x1, 0x5, 0x7}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m56.616637577s ago: executing program 0 (id=1794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001a00010000002000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000001400030007000000000000000000000000000000140001000000000000000000cf"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x93) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=0x1, 0xffffffffffffffff, 0x3c, 0x0, r6, @void, @value}, 0x20) socket(0x10, 0x3, 0x0) 2m56.551549814s ago: executing program 1 (id=1795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2m56.540308023s ago: executing program 4 (id=1796): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) sendmsg$sock(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010001000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000866b5de8aff328fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x10) 2m8.865269024s ago: executing program 32 (id=1794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001a00010000002000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000001400030007000000000000000000000000000000140001000000000000000000cf"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x93) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=0x1, 0xffffffffffffffff, 0x3c, 0x0, r6, @void, @value}, 0x20) socket(0x10, 0x3, 0x0) 2m8.845199842s ago: executing program 33 (id=1795): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2m8.787854194s ago: executing program 34 (id=1784): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="58ff7d34d273b5eb47039f2e40e88fe0baab471a4ffc1014d5e6e3807753884505bb96a9fdaea75f001454fdc09987af40a72c222dfa5f12825fe5d40309455646538691d75c0eac458825715e3cbf2bed02d6b4ce9610502f01a1cce8cf50a7eb8feaa94e3e5c6ec1798199384c870fb4fd7fb691089fb93c1d4804e50d7d6494fd39b0cf63574a1aea73d732ca2549678d231a00973552c8f4d4859de4bcfb8022f03cfd4b91879b0b9d1570fdce0b6603992ff5eb55b0b3012094f123a9b992734bda55f1c43934591417bff1f8bcc51d48fd7ca6f7d38083ac1d68528ecd5a", 0xe1}, {&(0x7f0000000340)="b0d6872d57cf904a69e18b2c5054912177ed6ae0c0f014f91bcd2a0ba1a907f9ff45f8f91d05bb63591a1f6731a9c6ecd2c3b85ba391c1388cdb87b71970283d5e9c90a7ebb9d82f84dffb3052d383c5b8d7dd32ddf39ea2b1f0c24f9e30923d2e51dad057ef47c6126625f4b8d2e01816d2f0cbb37292391abdb91f8a79390febbfd1c3445f6c4e4ffddcbb5c763c88f8", 0x91}, {&(0x7f0000000280)="32386df6", 0x4}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="f98d2c96d410d932b543d2e5fa9d3f54d2f359fadda48da2bdae6410c519c4e1d9c9ec9457367cd9", 0x28}], 0x5, &(0x7f0000000800)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1ff}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18, 0x84, 0x6, {0x4}}], 0x60, 0x200000d0}, 0x4000041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8002}, 0x4) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x28, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="14dc4d757f54a89187ff28392bf9b5ef34c36a4266ea31201cc3", 0x1a}], 0x1}}], 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/141, 0x8d}], 0x1}, 0x200}], 0x1, 0x2143, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x71) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendto$llc(r4, &(0x7f0000000100)="618b8c9285fa94bd072d0914a95e7d5f5f8b363937f03bb2f42f6aac82140d6ab58bac9e4f6a04bdc476f475d67a23d2caf024e9172287998b3e45e191c61348801108f4dba4c6f536a76405b777fcd3d6dc04492e1e6a5019d026d28444fcc46e06f25f8ad99f726c1d89cc660fc32258f0937c086b6600c6b3a29b795a374d0275d3021be6391f823fafb5890489eb1a5f8d2883067a537358e0d8993aebbb70213a3d62a259c902f8265c2d2f", 0xae, 0x408c1, &(0x7f00000001c0)={0x1a, 0x10e, 0x1, 0x7f, 0x5, 0xd, @broadcast}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 2m8.719719766s ago: executing program 35 (id=1760): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x5, 0xb}}, [@filter_kind_options=@f_cgroup={{0x46}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 2m8.61395707s ago: executing program 36 (id=1796): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) sendmsg$sock(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000010001000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000866b5de8aff328fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x10) 4.075878193s ago: executing program 8 (id=2942): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 3.957951163s ago: executing program 8 (id=2947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000c80)=[{&(0x7f0000000440)="4bb2d656d5b87de223a9b3a1c6fad9a56d98331b18bbc963154082d7a61a005ad9c835df3efee2c29090d728f0f84acbde87a032354291", 0x37}, {&(0x7f0000000340)="f1dce151ba5676451cb6a1d5f96c2ebcd51fbcea754ad02e9cb2bd53d91540d43c72af706fdff19f48b924c2e295b911a5f25090a2a44789e81f53", 0x3b}], 0x2) 2.97399386s ago: executing program 8 (id=2960): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 1) socket$inet6_tcp(0xa, 0x1, 0x0) 2.323307743s ago: executing program 8 (id=2965): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000000a000000040003"], 0x1c}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x84}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000a9000200"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32=r4, @ANYBLOB="0800070009000000080004007f0000007fd654c3f28208ab78"], 0x3c}}, 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/239, 0xef}], 0x1}, 0x2) 1.75937127s ago: executing program 6 (id=2975): unshare(0x24060400) r0 = socket$inet6(0xa, 0x3, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x700, 0x0, 0x8, {{0x1b, 0x4, 0x0, 0x5, 0x6c, 0x67, 0x0, 0x78, 0x2f, 0x0, @empty, @local, {[@end, @timestamp_prespec={0x44, 0xc, 0x52, 0x3, 0x9, [{@local, 0x5}]}, @ssrr={0x89, 0x1b, 0x2c, [@empty, @loopback, @multicast1, @empty, @multicast1, @local]}, @end, @timestamp={0x44, 0xc, 0xc4, 0x0, 0x6, [0x1, 0x9]}, @rr={0x7, 0x17, 0xc0, [@rand_addr=0x64010100, @multicast2, @multicast2, @multicast1, @remote]}, @generic={0x82, 0x5, "e9132f"}, @generic={0x44, 0x5, "56c1e0"}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@broadcast, 0x4e20, 0x2, 0x4e22, 0x0, 0xd, 0x80, 0x10, 0x2f, r1}, {0xff, 0xd5, 0x46f, 0x6, 0x5, 0x38, 0xfff, 0x8}, {0x200, 0x7fff, 0x7fffffff, 0x8}, 0x5, 0x6e6bb6, 0x2, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x4d3, 0x6c}, 0xa, @in=@remote, 0x3501, 0x0, 0x0, 0x80, 0x8, 0x197, 0xfffffffb}}, 0xe8) r2 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649fa1", 0x68}], 0x1}, 0x4000006) r3 = socket(0x1e, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0xc, 0x0, 0x4000, @void, @value}, 0x10) connect$tipc(r3, 0x0, 0x0) 1.745725629s ago: executing program 6 (id=2976): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x44, 0x1, 0x0, 0x0, 0x21, 0x0, @private=0x3, @broadcast}, @source_quench={0x4, 0x0, 0x0, 0x21, {0xa, 0x4, 0x0, 0x3d, 0x0, 0x65, 0x4, 0x9, 0x5e, 0x3, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp={0x44, 0x10, 0xe9, 0x0, 0x5, [0x5, 0x5, 0x4]}, @noop]}}}}}}}, 0x0) 1.726472743s ago: executing program 5 (id=2978): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) close(r5) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9f7d9cca39af1b58d57bfeeb010018000000000000004000000040000000020000000000000000000009000000000000000000000001050000000800000e7327bcc084835a7d3800000000000000000b0000000002000000020000000000000000000000471aadda8c34f00426a4bd94921319719ccbedbf8711229124b08512fdff8a6a1e757eb7096eef3b552c894d4f79bc184d7d7b5bedb1743def406730544f666bb0e07823442b241edf8bba8ac7471b113d8cdd641ce616282e6bebf280eba314bf1e7a886f474278d4594358ef237457a65c33114da12ab5dfd96669d307ae"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) listen(r3, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) unshare(0x20020480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000003000000002000ea4854106155000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) 1.611255185s ago: executing program 6 (id=2979): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x3) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x111, 0x4b4, 0x160, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x10, 0x9, 0x1004, 0x4, 0x6, 0x140, 0x4, 0x80, 0x78}, {0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff, 0xfc}, {0xffffffffffffffff, 0xfe}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="08000500060000a7b5da0e860a76ff001800030303030b0300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0x19, &(0x7f0000000100)='\a', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x10, &(0x7f0000000100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @jmp={0x5, 0x1, 0x0, 0x9, 0x0, 0x80, 0x10}, @generic={0x1, 0x8, 0xb, 0x1, 0x160000}, @exit, @jmp={0x5, 0x0, 0x0, 0xb, 0x6, 0x30, 0xfffffffffffffffc}, @generic={0x5, 0x2, 0x1, 0x101, 0xfff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000001a40)={0x1, &(0x7f0000000740)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x7000000, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c011}, 0x20000800) 1.50108881s ago: executing program 5 (id=2981): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.371200808s ago: executing program 6 (id=2982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 1.271331775s ago: executing program 8 (id=2983): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'pci\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000080}, 0x4880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf43100000000c00060000003add89d08831a108828e", @ANYRES32=r2, @ANYBLOB="05001000070000000c0006000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4008080) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x8008, 0xe2, 0xffff}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001040000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200f713000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186300000a0000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r7, @ANYRESDEC=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r9, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x140, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x4c020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x2b19b020c1ffdeea, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r10}, 0x18) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="880000001000010800"/20, @ANYRES32=r15, @ANYBLOB="00000000000000001c002b800000030000000000080003000000000008000800", @ANYRES32, @ANYBLOB="4c001a80100002800c00019808000f000000000038000280"], 0x88}}, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000240)={'bridge0\x00', @remote}) 1.228616811s ago: executing program 7 (id=2984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800020001000000080001000000000034000480050003000000000005000300000000000500030000000000050003000000"], 0x5c}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000054}, 0x4000000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x8090) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x10, 0x1, 0x401, 0x101, {{0xb, 0x4, 0x2, 0x6, 0x2c, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @generic={0x86, 0x9, "3fde4abbc811e3"}, @rr={0x7, 0x7, 0x9e, [@broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRESOCT=r10, @ANYRESHEX=r10, @ANYRES16=r0, @ANYRES64=0x0, @ANYRESDEC=r6], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', r11, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r12}, 0x10) getuid() (async) r13 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r13, 0x0, 0x32, &(0x7f0000000340)=0x4405, 0x4) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000020a0101000000005e1affd5020000000900010073797a30"], 0x7c}}, 0x0) 1.063884987s ago: executing program 7 (id=2985): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.04164113s ago: executing program 7 (id=2986): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000240)={'erspan0', 0x32, 0x38}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 973.428759ms ago: executing program 7 (id=2987): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) 896.41604ms ago: executing program 7 (id=2988): close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x9) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r2, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 499.530742ms ago: executing program 5 (id=2993): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x60]}}) 483.946402ms ago: executing program 9 (id=2994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000c80)=[{&(0x7f0000000440)="4bb2d656d5b87de223a9b3a1c6fad9a56d98331b18bbc963154082d7a61a005ad9c835df3efee2c29090d728f0f84acbde87a032354291", 0x37}, {&(0x7f0000000340)="f1dce151ba5676451cb6a1d5f96c2ebcd51fbcea754ad02e9cb2bd53d91540d43c72af706fdff19f48b924c2e295b911a5f25090a2a44789e81f53", 0x3b}], 0x2) 462.923972ms ago: executing program 6 (id=2995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x88, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_FLOWINFO={0xffffffffffffffd0, 0x7, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @IFLA_IPTUN_PROTO={0x0, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) 435.990038ms ago: executing program 9 (id=2996): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ff7f000000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 349.089842ms ago: executing program 5 (id=2997): unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) 348.678344ms ago: executing program 9 (id=2998): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x1d, 0x2, 0x6) socket$rds(0x15, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0xc, 0x7, 0x8000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 328.114031ms ago: executing program 8 (id=2999): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x1800, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 295.704768ms ago: executing program 9 (id=3000): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 217.664669ms ago: executing program 9 (id=3001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0x5, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRES32=r0, @ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0x5, 0x2}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRES32=r0, @ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 217.389156ms ago: executing program 5 (id=3002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01c7274000060001004e220000000000000a0000000060cf14cc8ed02ac3ceaf48be15737cdf0e2ded8267991f0b62671b844809c30106fe0b67f5f9c878fe33b72642ddeb66b7df12f2de4ce47ccee93433beb6c0c72485141c8df81acf23f303bb9e47ee3090c42d15c646a6a4"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 91.550747ms ago: executing program 5 (id=3003): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000008000"], 0x1c}}, 0x0) (fail_nth: 8) 68.704974ms ago: executing program 9 (id=3004): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="6c16", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000000000000008400000600000000810002000509c90001000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000030004000080ae01"], 0x38, 0x2000}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x3c}}, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0xffffffff, 0x12) 9.076969ms ago: executing program 6 (id=3005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x58}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 0s ago: executing program 7 (id=3006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000c80)=[{&(0x7f0000000440)="4bb2d656d5b87de223a9b3a1c6fad9a56d98331b18bbc963154082d7a61a005ad9c835df3efee2c29090d728f0f84acbde87a032354291", 0x37}, {&(0x7f0000000340)="f1dce151ba5676451cb6a1d5f96c2ebcd51fbcea754ad02e9cb2bd53d91540d43c72af706fdff19f48b924c2e295b911a5f25090a2a44789e81f53", 0x3b}], 0x2) kernel console output (not intermixed with test programs): _ratelimit: 8 callbacks suppressed [ 271.103841][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.303631][T11514] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2030'. [ 271.423862][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.630348][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2034'. [ 271.671507][T11528] netlink: 'syz.8.2037': attribute type 10 has an invalid length. [ 272.143760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.181742][T11549] netlink: 'syz.7.2046': attribute type 10 has an invalid length. [ 272.267931][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.275456][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.367921][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.375141][T11549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.382603][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.389810][T11549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.417680][T11549] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 272.453644][T11557] netlink: 'syz.5.2048': attribute type 10 has an invalid length. [ 272.463784][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.507252][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.515998][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.543341][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.550628][T11557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.558109][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.565288][T11557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.596415][T11557] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 272.614714][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2051'. [ 272.844235][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2057'. [ 273.184334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.316925][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2061'. [ 273.462083][T11616] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2069'. [ 273.480316][T11613] netlink: 'syz.6.2067': attribute type 10 has an invalid length. [ 273.513786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.537777][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.545342][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.593708][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.600900][T11613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.608517][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.615700][T11613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.646048][T11613] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.655657][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2071'. [ 273.891243][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2074'. [ 273.906259][T11633] geneve0 speed is unknown, defaulting to 1000 [ 274.223772][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.543483][T11650] geneve0 speed is unknown, defaulting to 1000 [ 274.553775][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.761158][T11667] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2086'. [ 274.790540][T11663] netlink: 'syz.7.2085': attribute type 10 has an invalid length. [ 274.832223][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.835541][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2088'. [ 274.839755][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.263752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.583908][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.164566][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.225148][ T6269] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 276.251432][ T6269] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 276.261792][ T8082] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 276.270952][ T8082] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 276.277852][ T8082] wlan1: authentication with 08:02:11:00:00:00 timed out [ 276.287447][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.301613][T11718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.303751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.453366][T11737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input9 [ 276.623853][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.758624][T11748] __nla_validate_parse: 4 callbacks suppressed [ 276.758642][T11748] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2110'. [ 276.800823][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2111'. [ 276.822303][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2110'. [ 277.343748][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.665172][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.896663][T11793] netlink: 'syz.6.2122': attribute type 10 has an invalid length. [ 277.914311][T11793] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.921631][T11793] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.094872][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2124'. [ 278.222320][T11805] tipc: Enabling of bearer rejected, already enabled [ 278.267596][T11813] netlink: 'syz.5.2127': attribute type 10 has an invalid length. [ 278.325918][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.333263][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.383816][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.608781][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2132'. [ 278.703861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.736302][T11831] syzkaller0: entered promiscuous mode [ 278.762296][T11831] syzkaller0: entered allmulticast mode [ 278.996540][T11848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2140'. [ 279.013930][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2140'. [ 279.038115][T11848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2140'. [ 279.057600][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2136'. [ 279.070616][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2136'. [ 279.347180][ T5892] IPVS: starting estimator thread 0... [ 279.423752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.464738][T11865] IPVS: using max 18 ests per chain, 43200 per kthread [ 279.743918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.468417][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.786020][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.293607][T11845] syzkaller0: entered promiscuous mode [ 281.299446][T11845] syzkaller0: entered allmulticast mode [ 281.390112][T11857] netlink: 'syz.5.2141': attribute type 16 has an invalid length. [ 281.399383][T11857] netlink: 'syz.5.2141': attribute type 17 has an invalid length. [ 281.413931][T11857] netlink: 'syz.5.2141': attribute type 27 has an invalid length. [ 281.425544][T11870] tipc: Started in network mode [ 281.430552][T11870] tipc: Node identity ac1414aa, cluster identity 4711 [ 281.438936][T11870] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.446430][T11870] tipc: Enabled bearer , priority 10 [ 281.505526][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.581812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.713850][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.823777][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.853800][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.003768][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.143839][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.293835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.447371][ T6269] tipc: Node number set to 2886997162 [ 282.543773][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.687150][T11890] __nla_validate_parse: 2 callbacks suppressed [ 283.687169][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 283.712731][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2151'. [ 283.724215][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2151'. [ 283.873929][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2156'. [ 283.930557][T11896] geneve0 speed is unknown, defaulting to 1000 [ 284.223325][T11938] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2162'. [ 284.255980][T11938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2162'. [ 284.308605][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2162'. [ 284.407520][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2164'. [ 284.493613][T11930] geneve0 speed is unknown, defaulting to 1000 [ 284.527028][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2166'. [ 284.607778][T11952] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.617128][T11952] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.626007][T11952] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.634845][T11952] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.657396][T11952] vxlan0: entered promiscuous mode [ 284.671588][T11952] vxlan0: entered allmulticast mode [ 284.888862][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2168'. [ 285.750669][T12000] netlink: 'syz.6.2180': attribute type 21 has an invalid length. [ 285.788303][T12000] netlink: 'syz.6.2180': attribute type 4 has an invalid length. [ 285.838571][T12005] xt_ecn: cannot match TCP bits for non-tcp packets [ 285.845577][T12000] netlink: 'syz.6.2180': attribute type 5 has an invalid length. [ 286.463752][ C0] net_ratelimit: 12 callbacks suppressed [ 286.463772][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.502901][T12026] geneve0 speed is unknown, defaulting to 1000 [ 286.703807][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.745074][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.863044][T12043] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.871952][T12043] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.880772][T12043] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.889532][T12043] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.914045][T12043] vxlan0: entered promiscuous mode [ 286.921679][T12043] vxlan0: entered allmulticast mode [ 287.033792][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.059918][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.299730][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.503848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.722930][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.743910][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.063812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.130950][ T61] bridge_slave_1: left allmulticast mode [ 288.144217][ T61] bridge_slave_1: left promiscuous mode [ 288.160643][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.202308][ T61] bridge_slave_0: left allmulticast mode [ 288.210384][ T61] bridge_slave_0: left promiscuous mode [ 288.265944][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.325807][ T61] infiniband syz2: set down [ 288.502405][ T61] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 288.514618][ T61] bridge0 (unregistering): left allmulticast mode [ 288.543958][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.738065][ T61] bond0 (unregistering): left allmulticast mode [ 288.745029][ T61] bond_slave_0: left allmulticast mode [ 288.750544][ T61] bond_slave_1: left allmulticast mode [ 288.756532][ T61] bond0 (unregistering): left promiscuous mode [ 288.762711][ T61] bond_slave_0: left promiscuous mode [ 288.769030][ T61] bond_slave_1: left promiscuous mode [ 288.783883][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.799767][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.810927][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.822821][ T61] bond0 (unregistering): Released all slaves [ 288.974823][ T6269] geneve0 speed is unknown, defaulting to 1000 [ 289.063143][ T6269] IPVS: starting estimator thread 0... [ 289.096087][ T6263] geneve0 speed is unknown, defaulting to 1000 [ 289.099723][T12107] tipc: Started in network mode [ 289.108812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.127884][T12107] tipc: Node identity ac1414aa, cluster identity 4711 [ 289.136110][T12107] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.164794][T12107] tipc: Enabled bearer , priority 10 [ 289.174612][T12108] IPVS: using max 27 ests per chain, 64800 per kthread [ 289.183007][T12085] geneve0 speed is unknown, defaulting to 1000 [ 289.545753][ T2985] smc: removing ib device syz2 [ 290.139331][T12136] netlink: 'syz.7.2218': attribute type 16 has an invalid length. [ 290.186891][T12136] netlink: 'syz.7.2218': attribute type 17 has an invalid length. [ 290.244357][T12136] netlink: 'syz.7.2218': attribute type 27 has an invalid length. [ 290.253157][T12139] __nla_validate_parse: 15 callbacks suppressed [ 290.253214][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2219'. [ 290.268754][ T5892] tipc: Node number set to 2886997162 [ 290.365169][T12142] tipc: Enabling of bearer rejected, already enabled [ 290.471804][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2220'. [ 290.746772][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2222'. [ 290.862488][T12162] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2223'. [ 290.900689][T12162] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2223'. [ 290.983478][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2224'. [ 291.059982][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2223'. [ 291.663840][ C0] net_ratelimit: 16 callbacks suppressed [ 291.663861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.809393][T12189] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.818290][T12189] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.827321][T12189] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.836265][T12189] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.872875][T12189] vxlan0: entered promiscuous mode [ 291.900087][T12189] vxlan0: entered allmulticast mode [ 291.905449][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.043376][ T61] tipc: Disabling bearer [ 292.050980][ T61] tipc: Disabling bearer [ 292.069594][ T61] tipc: Left network mode [ 292.210715][T12202] netlink: 'syz.7.2232': attribute type 16 has an invalid length. [ 292.223900][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.233932][T12202] netlink: 'syz.7.2232': attribute type 17 has an invalid length. [ 292.254668][T12202] netlink: 'syz.7.2232': attribute type 27 has an invalid length. [ 292.270596][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2234'. [ 292.303697][T12202] tipc: Enabling of bearer rejected, already enabled [ 292.313745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.431999][ T61] hsr_slave_0: left promiscuous mode [ 292.455769][ T61] hsr_slave_1: left promiscuous mode [ 292.482778][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.509888][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.529435][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.554255][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.621660][ T61] veth1_macvtap: left promiscuous mode [ 292.643845][ T61] veth0_macvtap: left promiscuous mode [ 292.650340][ T61] veth1_vlan: left promiscuous mode [ 292.663041][ T61] veth0_vlan: left promiscuous mode [ 292.713755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.273807][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.353755][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.512298][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2240'. [ 293.571919][ T61] team0 (unregistering): Port device team_slave_1 removed [ 293.642134][ T61] team0 (unregistering): Port device team_slave_0 removed [ 293.744111][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.137408][T12227] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 294.310915][T12243] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2240'. [ 294.313743][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.383760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.056057][ T61] IPVS: stop unused estimator thread 0... [ 295.313222][ T6260] IPVS: starting estimator thread 0... [ 295.329870][T12306] syzkaller0: entered promiscuous mode [ 295.377699][T12306] syzkaller0: entered allmulticast mode [ 295.423400][T12310] netlink: 'syz.6.2253': attribute type 16 has an invalid length. [ 295.448758][T12315] IPVS: using max 21 ests per chain, 50400 per kthread [ 295.471880][T12310] netlink: 'syz.6.2253': attribute type 17 has an invalid length. [ 295.499468][T12310] netlink: 'syz.6.2253': attribute type 27 has an invalid length. [ 296.867693][ C0] net_ratelimit: 6 callbacks suppressed [ 296.867715][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.425983][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.507774][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.550609][T12329] __nla_validate_parse: 2 callbacks suppressed [ 297.550630][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2257'. [ 297.903808][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.308806][T12389] netlink: 'syz.8.2274': attribute type 16 has an invalid length. [ 298.324220][T12389] netlink: 'syz.8.2274': attribute type 17 has an invalid length. [ 298.352453][T12389] netlink: 'syz.8.2274': attribute type 27 has an invalid length. [ 298.411529][ T6260] IPVS: starting estimator thread 0... [ 298.463753][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.504762][T12394] IPVS: using max 23 ests per chain, 55200 per kthread [ 298.543817][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.556312][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2275'. [ 298.943759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.513751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.583852][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.744379][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2285'. [ 299.818717][T12449] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2285'. [ 299.889975][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2285'. [ 299.918072][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2287'. [ 299.983745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.582558][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2283'. [ 300.596789][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2283'. [ 300.904586][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2295'. [ 301.682234][T12505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2299'. [ 302.063875][ C0] net_ratelimit: 5 callbacks suppressed [ 302.063894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.559607][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2314'. [ 302.634071][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.672242][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2315'. [ 302.703948][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.031028][T12581] netlink: 'syz.7.2318': attribute type 16 has an invalid length. [ 303.061238][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2318'. [ 303.082847][T12581] tipc: Enabling of bearer rejected, already enabled [ 303.103892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.537995][T12605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.623841][T12609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.645090][T12608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.663760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.729991][T12608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.753849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.776329][T12608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.143821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.713746][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.783760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.829102][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2334'. [ 304.864084][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2334'. [ 304.883830][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2334'. [ 304.913342][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2334'. [ 305.194555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.657719][T12674] netlink: 'syz.7.2338': attribute type 10 has an invalid length. [ 305.774530][T12683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.901640][T12683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.961242][T12683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.117339][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.210900][T12707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.255521][T12702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.413515][T12711] netlink: 828 bytes leftover after parsing attributes in process `syz.9.2348'. [ 306.489730][T12716] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2349'. [ 306.507509][T12716] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2349'. [ 306.756303][T12728] netlink: 'syz.6.2352': attribute type 10 has an invalid length. [ 306.938978][T12739] netlink: 'syz.9.2355': attribute type 16 has an invalid length. [ 306.947733][T12739] netlink: 'syz.9.2355': attribute type 17 has an invalid length. [ 306.966643][T12739] netlink: 'syz.9.2355': attribute type 27 has an invalid length. [ 307.071494][T12746] tipc: Enabling of bearer rejected, already enabled [ 307.263834][ C0] net_ratelimit: 5 callbacks suppressed [ 307.263854][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.824805][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.913746][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.046550][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.131168][T12801] __nla_validate_parse: 2 callbacks suppressed [ 308.131189][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2367'. [ 308.154957][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.170720][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.303825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.873835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.943813][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.082494][T12843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2374'. [ 309.094015][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2374'. [ 309.108012][T12839] netlink: 'syz.8.2373': attribute type 10 has an invalid length. [ 309.138921][T12843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2374'. [ 309.190178][T12843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2374'. [ 309.343753][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.670554][T12863] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2382'. [ 309.680705][T12863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2382'. [ 309.690431][T12863] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2382'. [ 309.699574][T12863] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2382'. [ 309.797161][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2380'. [ 309.903749][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.983808][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.252578][T12881] netlink: 'syz.6.2385': attribute type 16 has an invalid length. [ 310.275866][T12881] netlink: 'syz.6.2385': attribute type 17 has an invalid length. [ 310.284990][T12881] netlink: 'syz.6.2385': attribute type 27 has an invalid length. [ 310.383849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.538542][T12896] tipc: Started in network mode [ 310.550600][T12896] tipc: Node identity ac1414aa, cluster identity 4711 [ 310.569718][T12896] tipc: Enabled bearer , priority 10 [ 311.694753][ T5893] tipc: Node number set to 2886997162 [ 312.473800][ C0] net_ratelimit: 15 callbacks suppressed [ 312.473822][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.643797][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.023765][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.103816][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.504093][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.663798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.063772][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.154048][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.176571][T13063] __nla_validate_parse: 6 callbacks suppressed [ 314.176590][T13063] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2431'. [ 314.228675][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2431'. [ 314.553767][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.717303][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.062966][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2436'. [ 315.086423][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2436'. [ 315.100292][T13097] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2437'. [ 315.106415][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2436'. [ 315.134355][T13094] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2436'. [ 315.137177][T13097] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2437'. [ 315.209642][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2437'. [ 315.523414][T13115] netlink: 'syz.7.2443': attribute type 16 has an invalid length. [ 315.531773][T13115] netlink: 'syz.7.2443': attribute type 17 has an invalid length. [ 315.540292][T13115] netlink: 'syz.7.2443': attribute type 27 has an invalid length. [ 315.599370][T13115] tipc: Enabling of bearer rejected, already enabled [ 316.093180][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2447'. [ 317.348831][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.356994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.663810][ C0] net_ratelimit: 10 callbacks suppressed [ 317.663830][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.833782][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.233796][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.275851][T13241] netlink: 'syz.5.2473': attribute type 16 has an invalid length. [ 318.299534][T13241] netlink: 'syz.5.2473': attribute type 17 has an invalid length. [ 318.307598][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.323817][T13241] netlink: 'syz.5.2473': attribute type 27 has an invalid length. [ 318.558786][T13248] tipc: Enabling of bearer rejected, already enabled [ 318.713786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.863780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.264372][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.343776][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.613936][T13297] __nla_validate_parse: 6 callbacks suppressed [ 319.613956][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2486'. [ 319.743767][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.904020][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.529215][T13341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.594406][T13341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.621828][T13341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.915616][T13355] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2498'. [ 320.929797][T13355] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2498'. [ 321.018323][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2498'. [ 321.204276][T13362] netlink: 'syz.8.2500': attribute type 16 has an invalid length. [ 321.223932][T13362] netlink: 'syz.8.2500': attribute type 17 has an invalid length. [ 321.253016][T13362] netlink: 'syz.8.2500': attribute type 27 has an invalid length. [ 321.312969][T13362] tipc: Started in network mode [ 321.327773][T13362] tipc: Node identity ac1414aa, cluster identity 4711 [ 321.350849][T13362] tipc: Enabled bearer , priority 10 [ 322.464416][ T46] tipc: Node number set to 2886997162 [ 322.863828][ C0] net_ratelimit: 19 callbacks suppressed [ 322.863849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.873826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.023798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.403762][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.433758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.503762][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.903767][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.073798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.463748][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.463848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.944426][T13487] netlink: 'syz.6.2541': attribute type 16 has an invalid length. [ 324.952882][T13487] netlink: 'syz.6.2541': attribute type 17 has an invalid length. [ 324.962163][T13487] netlink: 'syz.6.2541': attribute type 27 has an invalid length. [ 325.198939][T13497] netlink: 'syz.9.2544': attribute type 16 has an invalid length. [ 325.207159][T13497] netlink: 'syz.9.2544': attribute type 17 has an invalid length. [ 325.215226][T13497] netlink: 'syz.9.2544': attribute type 27 has an invalid length. [ 325.672085][T13511] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2546'. [ 325.708889][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2546'. [ 325.764560][T13511] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2546'. [ 325.891002][T13515] netlink: 'syz.8.2548': attribute type 16 has an invalid length. [ 327.062335][T13576] validate_nla: 2 callbacks suppressed [ 327.062355][T13576] netlink: 'syz.6.2565': attribute type 16 has an invalid length. [ 327.090972][T13576] netlink: 'syz.6.2565': attribute type 17 has an invalid length. [ 327.099472][T13576] netlink: 'syz.6.2565': attribute type 27 has an invalid length. [ 327.310882][T13586] FAULT_INJECTION: forcing a failure. [ 327.310882][T13586] name failslab, interval 1, probability 0, space 0, times 1 [ 327.324391][T13586] CPU: 1 UID: 0 PID: 13586 Comm: syz.7.2569 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 327.335202][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 327.345280][T13586] Call Trace: [ 327.348564][T13586] [ 327.351511][T13586] dump_stack_lvl+0x241/0x360 [ 327.356219][T13586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.361424][T13586] ? __pfx__printk+0x10/0x10 [ 327.366022][T13586] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 327.371486][T13586] ? __pfx___might_resched+0x10/0x10 [ 327.376776][T13586] should_fail_ex+0x3b0/0x4e0 [ 327.381454][T13586] should_failslab+0xac/0x100 [ 327.386134][T13586] ? tls_set_sw_offload+0x32a/0x13e0 [ 327.391418][T13586] __kmalloc_cache_noprof+0x6c/0x2c0 [ 327.396708][T13586] tls_set_sw_offload+0x32a/0x13e0 [ 327.401817][T13586] ? dst_release+0xa0/0xf0 [ 327.406232][T13586] ? get_netdev_for_sock+0x2e4/0x380 [ 327.411517][T13586] ? tls_set_device_offload_rx+0x37d/0x4a0 [ 327.417324][T13586] tls_setsockopt+0xb80/0x1220 [ 327.422097][T13586] ? __pfx_tls_setsockopt+0x10/0x10 [ 327.427290][T13586] ? __fget_files+0x29/0x470 [ 327.431874][T13586] ? aa_sock_opt_perm+0x79/0x120 [ 327.436809][T13586] ? sock_common_setsockopt+0x37/0xc0 [ 327.442198][T13586] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 327.448083][T13586] do_sock_setsockopt+0x3af/0x720 [ 327.453109][T13586] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 327.458648][T13586] ? __fget_files+0x29/0x470 [ 327.463232][T13586] ? __fget_files+0x3f3/0x470 [ 327.467901][T13586] ? __fget_files+0x29/0x470 [ 327.472489][T13586] __sys_setsockopt+0x1a2/0x250 [ 327.477369][T13586] __x64_sys_setsockopt+0xb5/0xd0 [ 327.482396][T13586] do_syscall_64+0xf3/0x230 [ 327.486893][T13586] ? clear_bhb_loop+0x35/0x90 [ 327.491565][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.497471][T13586] RIP: 0033:0x7fed18f7e719 [ 327.501887][T13586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.521493][T13586] RSP: 002b:00007fed19d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.529918][T13586] RAX: ffffffffffffffda RBX: 00007fed19135f80 RCX: 00007fed18f7e719 [ 327.537886][T13586] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 327.545851][T13586] RBP: 00007fed19d8f090 R08: 0000000000000038 R09: 0000000000000000 [ 327.553816][T13586] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 327.561781][T13586] R13: 0000000000000000 R14: 00007fed19135f80 R15: 00007ffe752284b8 [ 327.569760][T13586] [ 328.063773][ C0] net_ratelimit: 16 callbacks suppressed [ 328.063794][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.158590][T13606] netlink: 'syz.8.2577': attribute type 1 has an invalid length. [ 328.228978][T13606] bond0: entered promiscuous mode [ 328.233832][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.293283][T13619] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2577'. [ 328.304047][T13606] bond_slave_0: entered promiscuous mode [ 328.309918][T13606] bond_slave_1: entered promiscuous mode [ 328.370324][T13606] bridge0: entered promiscuous mode [ 328.386941][T13606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.431852][T13606] bond0: left promiscuous mode [ 328.447355][T13606] bond_slave_0: left promiscuous mode [ 328.465328][T13606] bond_slave_1: left promiscuous mode [ 328.494515][T13606] bridge0: left promiscuous mode [ 328.597674][T13625] netlink: 'syz.9.2581': attribute type 16 has an invalid length. [ 328.623868][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.623876][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.674227][T13625] netlink: 'syz.9.2581': attribute type 17 has an invalid length. [ 328.682568][T13625] netlink: 'syz.9.2581': attribute type 27 has an invalid length. [ 328.703835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.804163][T13643] SET target dimension over the limit! [ 328.920179][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2584'. [ 329.005331][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2583'. [ 329.103745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.161022][T13657] x_tables: duplicate underflow at hook 1 [ 329.217069][T13652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.222457][T13656] netlink: 'syz.8.2589': attribute type 16 has an invalid length. [ 329.263754][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.284040][T13656] netlink: 'syz.8.2589': attribute type 17 has an invalid length. [ 329.324217][T13656] netlink: 'syz.8.2589': attribute type 27 has an invalid length. [ 329.379786][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2589'. [ 329.664763][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.673844][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.745895][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.292251][T13690] sctp: [Deprecated]: syz.8.2603 (pid 13690) Use of int in max_burst socket option deprecated. [ 330.292251][T13690] Use struct sctp_assoc_value instead [ 330.676142][T13707] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2607'. [ 330.688219][T13703] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2606'. [ 330.704523][T13707] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2607'. [ 330.725659][T13707] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2607'. [ 331.087232][T13725] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2613'. [ 331.118468][T13725] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2613'. [ 331.190162][T13732] FAULT_INJECTION: forcing a failure. [ 331.190162][T13732] name failslab, interval 1, probability 0, space 0, times 0 [ 331.207650][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'. [ 331.230235][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.5.2615 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 331.241056][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.251133][T13732] Call Trace: [ 331.254411][T13732] [ 331.257337][T13732] dump_stack_lvl+0x241/0x360 [ 331.262015][T13732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.267211][T13732] ? __pfx__printk+0x10/0x10 [ 331.271803][T13732] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 331.277785][T13732] ? __pfx___might_resched+0x10/0x10 [ 331.283067][T13732] ? kfree+0x1a0/0x440 [ 331.287138][T13732] should_fail_ex+0x3b0/0x4e0 [ 331.291811][T13732] should_failslab+0xac/0x100 [ 331.296485][T13732] ? __alloc_skb+0x1c3/0x440 [ 331.301076][T13732] kmem_cache_alloc_node_noprof+0x71/0x320 [ 331.306885][T13732] __alloc_skb+0x1c3/0x440 [ 331.311301][T13732] ? __pfx___alloc_skb+0x10/0x10 [ 331.316242][T13732] ? netlink_ack_tlv_len+0x6e/0x200 [ 331.321471][T13732] netlink_ack+0x13f/0xa30 [ 331.325900][T13732] ? __pfx_lock_acquire+0x10/0x10 [ 331.330937][T13732] ? __pfx_nl80211_set_bss+0x10/0x10 [ 331.336235][T13732] ? __pfx_nl80211_post_doit+0x10/0x10 [ 331.341772][T13732] netlink_rcv_skb+0x262/0x430 [ 331.346543][T13732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.351575][T13732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.356877][T13732] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 331.362347][T13732] genl_rcv+0x28/0x40 [ 331.366330][T13732] netlink_unicast+0x7f6/0x990 [ 331.371094][T13732] ? __pfx_netlink_unicast+0x10/0x10 [ 331.376376][T13732] ? __virt_addr_valid+0x183/0x530 [ 331.381484][T13732] ? __check_object_size+0x48e/0x900 [ 331.386771][T13732] netlink_sendmsg+0x8e4/0xcb0 [ 331.391555][T13732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.396839][T13732] ? aa_sock_msg_perm+0x91/0x160 [ 331.401774][T13732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.407061][T13732] __sock_sendmsg+0x221/0x270 [ 331.411737][T13732] ____sys_sendmsg+0x52a/0x7e0 [ 331.416507][T13732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.421802][T13732] __sys_sendmsg+0x292/0x380 [ 331.426394][T13732] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.431511][T13732] ? __pfx_vfs_write+0x10/0x10 [ 331.436294][T13732] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.442623][T13732] ? do_syscall_64+0x100/0x230 [ 331.447409][T13732] ? do_syscall_64+0xb6/0x230 [ 331.452100][T13732] do_syscall_64+0xf3/0x230 [ 331.456610][T13732] ? clear_bhb_loop+0x35/0x90 [ 331.461294][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.467197][T13732] RIP: 0033:0x7f23ac37e719 [ 331.471612][T13732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.491216][T13732] RSP: 002b:00007f23ad104038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.499626][T13732] RAX: ffffffffffffffda RBX: 00007f23ac536058 RCX: 00007f23ac37e719 [ 331.507597][T13732] RDX: 0000000000000004 RSI: 0000000020000380 RDI: 0000000000000003 [ 331.515564][T13732] RBP: 00007f23ad104090 R08: 0000000000000000 R09: 0000000000000000 [ 331.523527][T13732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.531491][T13732] R13: 0000000000000001 R14: 00007f23ac536058 R15: 00007fff72872c18 [ 331.539468][T13732] [ 331.712194][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2617'. [ 331.725037][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2617'. [ 331.736645][T13739] nbd: socks must be embedded in a SOCK_ITEM attr [ 331.856236][T13750] netlink: 596 bytes leftover after parsing attributes in process `syz.9.2621'. [ 331.993539][T13756] sctp: [Deprecated]: syz.8.2623 (pid 13756) Use of int in max_burst socket option deprecated. [ 331.993539][T13756] Use struct sctp_assoc_value instead [ 332.001344][T13758] FAULT_INJECTION: forcing a failure. [ 332.001344][T13758] name failslab, interval 1, probability 0, space 0, times 0 [ 332.033398][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.6.2624 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 332.044645][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.054730][T13758] Call Trace: [ 332.058036][T13758] [ 332.060984][T13758] dump_stack_lvl+0x241/0x360 [ 332.065690][T13758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.070909][T13758] ? __pfx__printk+0x10/0x10 [ 332.075537][T13758] ? ref_tracker_alloc+0x332/0x490 [ 332.080663][T13758] should_fail_ex+0x3b0/0x4e0 [ 332.085350][T13758] ? skb_clone+0x20c/0x390 [ 332.089795][T13758] should_failslab+0xac/0x100 [ 332.094493][T13758] ? skb_clone+0x20c/0x390 [ 332.098911][T13758] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 332.104283][T13758] skb_clone+0x20c/0x390 [ 332.108532][T13758] __netlink_deliver_tap+0x3cc/0x7f0 [ 332.113828][T13758] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.119058][T13758] netlink_deliver_tap+0x19d/0x1b0 [ 332.124187][T13758] netlink_unicast+0x7c4/0x990 [ 332.128971][T13758] ? __pfx_netlink_unicast+0x10/0x10 [ 332.134279][T13758] ? __virt_addr_valid+0x183/0x530 [ 332.139417][T13758] ? __check_object_size+0x48e/0x900 [ 332.144723][T13758] netlink_sendmsg+0x8e4/0xcb0 [ 332.149521][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.154824][T13758] ? aa_sock_msg_perm+0x91/0x160 [ 332.159769][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.165068][T13758] __sock_sendmsg+0x221/0x270 [ 332.169792][T13758] ____sys_sendmsg+0x52a/0x7e0 [ 332.174575][T13758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.179876][T13758] __sys_sendmsg+0x292/0x380 [ 332.184472][T13758] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.189593][T13758] ? __pfx_vfs_write+0x10/0x10 [ 332.194377][T13758] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.200706][T13758] ? do_syscall_64+0x100/0x230 [ 332.205473][T13758] ? do_syscall_64+0xb6/0x230 [ 332.210146][T13758] do_syscall_64+0xf3/0x230 [ 332.214641][T13758] ? clear_bhb_loop+0x35/0x90 [ 332.219318][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.225212][T13758] RIP: 0033:0x7f01bad7e719 [ 332.229620][T13758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.249221][T13758] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.257632][T13758] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 332.265597][T13758] RDX: 0000000000000080 RSI: 0000000020000380 RDI: 0000000000000003 [ 332.273563][T13758] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 332.281524][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.289488][T13758] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 332.297469][T13758] [ 332.477324][T13770] validate_nla: 3 callbacks suppressed [ 332.477342][T13770] netlink: 'syz.6.2629': attribute type 1 has an invalid length. [ 332.604505][T13770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.643196][T13773] bond1: (slave bridge1): making interface the new active one [ 332.660964][T13773] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 332.730073][T13774] vlan3: entered promiscuous mode [ 332.747938][T13774] bond1: entered promiscuous mode [ 332.753017][T13774] bridge1: entered promiscuous mode [ 332.761462][T13774] vlan3: entered allmulticast mode [ 332.767470][T13774] bond1: entered allmulticast mode [ 332.772742][T13774] bridge1: entered allmulticast mode [ 333.081493][T13792] netlink: 'syz.7.2637': attribute type 1 has an invalid length. [ 333.108276][T13792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.158034][T13796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.175090][T13796] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 333.218445][T13796] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 333.256092][T13800] netlink: 'syz.6.2639': attribute type 4 has an invalid length. [ 333.272552][T13792] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 333.351222][T13792] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 333.353873][ C0] net_ratelimit: 16 callbacks suppressed [ 333.353899][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.508344][T13792] netlink: 'syz.7.2637': attribute type 12 has an invalid length. [ 333.539864][T13792] netlink: 'syz.7.2637': attribute type 2 has an invalid length. [ 333.561269][T13792] netlink: 'syz.7.2637': attribute type 10 has an invalid length. [ 333.583864][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.823832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.823864][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.903813][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.934939][T13834] tun0: tun_chr_ioctl cmd 2147767519 [ 334.023941][T13837] netlink: 'syz.6.2648': attribute type 21 has an invalid length. [ 334.119699][T13837] can: request_module (can-proto-4) failed. [ 334.129771][T13847] netlink: zone id is out of range [ 334.134991][T13847] netlink: zone id is out of range [ 334.150895][T13847] netlink: zone id is out of range [ 334.159991][T13847] netlink: zone id is out of range [ 334.166168][T13847] netlink: zone id is out of range [ 334.466097][T13866] FAULT_INJECTION: forcing a failure. [ 334.466097][T13866] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 334.496142][T13866] CPU: 0 UID: 0 PID: 13866 Comm: syz.8.2655 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 334.506952][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.517016][T13866] Call Trace: [ 334.520452][T13866] [ 334.523382][T13866] dump_stack_lvl+0x241/0x360 [ 334.528067][T13866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.533280][T13866] ? __pfx__printk+0x10/0x10 [ 334.537879][T13866] ? __pfx_lock_release+0x10/0x10 [ 334.542912][T13866] ? __lock_acquire+0x1384/0x2050 [ 334.547940][T13866] should_fail_ex+0x3b0/0x4e0 [ 334.552621][T13866] _copy_from_user+0x2f/0xc0 [ 334.557211][T13866] sctp_getsockopt_sctp_status+0xd5/0xe20 [ 334.562932][T13866] ? mark_lock+0x9a/0x360 [ 334.567258][T13866] ? __pfx_sctp_getsockopt_sctp_status+0x10/0x10 [ 334.573596][T13866] ? sctp_getsockopt+0x13a/0xbb0 [ 334.578531][T13866] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 334.584258][T13866] sctp_getsockopt+0x649/0xbb0 [ 334.589023][T13866] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 334.594914][T13866] do_sock_getsockopt+0x3c4/0x7e0 [ 334.599941][T13866] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 334.605485][T13866] ? __fget_files+0x3f3/0x470 [ 334.610153][T13866] ? __fget_files+0x29/0x470 [ 334.614747][T13866] __sys_getsockopt+0x267/0x330 [ 334.619608][T13866] ? __pfx___sys_getsockopt+0x10/0x10 [ 334.624977][T13866] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.631310][T13866] ? do_syscall_64+0x100/0x230 [ 334.636071][T13866] __x64_sys_getsockopt+0xb5/0xd0 [ 334.641092][T13866] do_syscall_64+0xf3/0x230 [ 334.645588][T13866] ? clear_bhb_loop+0x35/0x90 [ 334.650261][T13866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.656152][T13866] RIP: 0033:0x7f580d17e719 [ 334.660562][T13866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.680163][T13866] RSP: 002b:00007f580df88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 334.688592][T13866] RAX: ffffffffffffffda RBX: 00007f580d336058 RCX: 00007f580d17e719 [ 334.696559][T13866] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 334.704529][T13866] RBP: 00007f580df88090 R08: 00000000200001c0 R09: 0000000000000000 [ 334.712493][T13866] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 334.720461][T13866] R13: 0000000000000001 R14: 00007f580d336058 R15: 00007ffd2ab5dde8 [ 334.728442][T13866] [ 335.922636][T13918] FAULT_INJECTION: forcing a failure. [ 335.922636][T13918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.963865][T13918] CPU: 1 UID: 0 PID: 13918 Comm: syz.8.2675 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 335.974692][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.984774][T13918] Call Trace: [ 335.988077][T13918] [ 335.991026][T13918] dump_stack_lvl+0x241/0x360 [ 335.995734][T13918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.000959][T13918] ? __pfx__printk+0x10/0x10 [ 336.005581][T13918] ? __pfx_lock_release+0x10/0x10 [ 336.010641][T13918] should_fail_ex+0x3b0/0x4e0 [ 336.015345][T13918] _copy_from_iter+0x21f/0x1e70 [ 336.020217][T13918] ? __virt_addr_valid+0x183/0x530 [ 336.025359][T13918] ? __pfx_lock_release+0x10/0x10 [ 336.030418][T13918] ? __alloc_skb+0x28f/0x440 [ 336.035036][T13918] ? __pfx__copy_from_iter+0x10/0x10 [ 336.040333][T13918] ? __virt_addr_valid+0x183/0x530 [ 336.045440][T13918] ? __virt_addr_valid+0x183/0x530 [ 336.050569][T13918] ? __virt_addr_valid+0x45f/0x530 [ 336.055693][T13918] ? __check_object_size+0x48e/0x900 [ 336.061004][T13918] netlink_sendmsg+0x73d/0xcb0 [ 336.065816][T13918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.071119][T13918] ? aa_sock_msg_perm+0x91/0x160 [ 336.076068][T13918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.081381][T13918] __sock_sendmsg+0x221/0x270 [ 336.086077][T13918] ____sys_sendmsg+0x52a/0x7e0 [ 336.090844][T13918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.096133][T13918] __sys_sendmsg+0x292/0x380 [ 336.100732][T13918] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.105870][T13918] ? __pfx_vfs_write+0x10/0x10 [ 336.110646][T13918] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.116971][T13918] ? do_syscall_64+0x100/0x230 [ 336.121738][T13918] ? do_syscall_64+0xb6/0x230 [ 336.126434][T13918] do_syscall_64+0xf3/0x230 [ 336.130947][T13918] ? clear_bhb_loop+0x35/0x90 [ 336.135639][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.141564][T13918] RIP: 0033:0x7f580d17e719 [ 336.145985][T13918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.165618][T13918] RSP: 002b:00007f580dfa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.174041][T13918] RAX: ffffffffffffffda RBX: 00007f580d335f80 RCX: 00007f580d17e719 [ 336.182030][T13918] RDX: 0000000000004000 RSI: 0000000020000440 RDI: 0000000000000004 [ 336.190000][T13918] RBP: 00007f580dfa9090 R08: 0000000000000000 R09: 0000000000000000 [ 336.197966][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.205936][T13918] R13: 0000000000000000 R14: 00007f580d335f80 R15: 00007ffd2ab5dde8 [ 336.213920][T13918] [ 336.868886][T13955] __nla_validate_parse: 18 callbacks suppressed [ 336.868906][T13955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2684'. [ 336.971677][T13957] netlink: 'syz.8.2686': attribute type 5 has an invalid length. [ 337.074846][T13964] trusted_key: syz.7.2689 sent an empty control message without MSG_MORE. [ 337.152038][T13968] netlink: 'syz.9.2690': attribute type 16 has an invalid length. [ 337.173983][T13968] netlink: 'syz.9.2690': attribute type 17 has an invalid length. [ 337.268428][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2690'. [ 337.372775][T13982] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 337.396389][T13980] ip6gretap0: entered promiscuous mode [ 337.413922][T13980] batadv_slave_0: entered promiscuous mode [ 337.744073][T13993] tipc: Enabling of bearer rejected, failed to enable media [ 337.942335][T14005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.950685][T14005] batadv_slave_0: entered promiscuous mode [ 338.236773][T14013] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2705'. [ 338.246721][T14013] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2705'. [ 338.312387][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2705'. [ 338.543860][ C0] net_ratelimit: 37 callbacks suppressed [ 338.543883][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.863757][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.024004][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.033768][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.112155][T14032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.181156][T14032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.193795][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.213059][T14032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.583791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.803016][T14062] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 339.903920][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.063918][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.066285][T14071] validate_nla: 1 callbacks suppressed [ 340.066301][T14071] netlink: 'syz.6.2725': attribute type 21 has an invalid length. [ 340.076650][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.093235][T14071] netlink: 'syz.6.2725': attribute type 20 has an invalid length. [ 340.101594][T14071] FAULT_INJECTION: forcing a failure. [ 340.101594][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 340.120742][T14071] CPU: 0 UID: 0 PID: 14071 Comm: syz.6.2725 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 340.131643][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.141720][T14071] Call Trace: [ 340.144995][T14071] [ 340.147919][T14071] dump_stack_lvl+0x241/0x360 [ 340.152590][T14071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.157785][T14071] ? __pfx__printk+0x10/0x10 [ 340.162404][T14071] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 340.167899][T14071] ? __pfx___might_resched+0x10/0x10 [ 340.173187][T14071] should_fail_ex+0x3b0/0x4e0 [ 340.177887][T14071] should_failslab+0xac/0x100 [ 340.182557][T14071] ? __request_module+0x2b9/0x650 [ 340.187579][T14071] __kmalloc_cache_noprof+0x6c/0x2c0 [ 340.192864][T14071] __request_module+0x2b9/0x650 [ 340.197714][T14071] ? __mutex_unlock_slowpath+0x6f9/0x750 [ 340.203346][T14071] ? __pfx___request_module+0x10/0x10 [ 340.208717][T14071] ? __pfx_lock_release+0x10/0x10 [ 340.213764][T14071] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 340.219486][T14071] lwtunnel_valid_encap_type+0x39e/0x5f0 [ 340.225121][T14071] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 340.230862][T14071] rtm_to_fib6_config+0x1058/0x1860 [ 340.236082][T14071] ? __pfx_rtm_to_fib6_config+0x10/0x10 [ 340.241658][T14071] ? mark_lock+0x9a/0x360 [ 340.246012][T14071] inet6_rtm_newroute+0xd9/0x2310 [ 340.251041][T14071] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 340.256583][T14071] ? __mutex_trylock_common+0x183/0x2e0 [ 340.262122][T14071] ? __pfx___might_resched+0x10/0x10 [ 340.267418][T14071] ? __pfx___mutex_trylock_common+0x10/0x10 [ 340.273325][T14071] ? rcu_is_watching+0x15/0xb0 [ 340.278101][T14071] ? trace_contention_end+0x3c/0x120 [ 340.283393][T14071] ? __mutex_lock+0x2ef/0xd70 [ 340.288074][T14071] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 340.293612][T14071] rtnetlink_rcv_msg+0x73f/0xcf0 [ 340.298550][T14071] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 340.303654][T14071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.309131][T14071] ? ref_tracker_free+0x643/0x7e0 [ 340.314151][T14071] netlink_rcv_skb+0x1e3/0x430 [ 340.318910][T14071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.324373][T14071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.329683][T14071] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.334894][T14071] netlink_unicast+0x7f6/0x990 [ 340.339656][T14071] ? __pfx_netlink_unicast+0x10/0x10 [ 340.344944][T14071] ? __virt_addr_valid+0x183/0x530 [ 340.350067][T14071] ? __check_object_size+0x48e/0x900 [ 340.355362][T14071] netlink_sendmsg+0x8e4/0xcb0 [ 340.360133][T14071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.365413][T14071] ? aa_sock_msg_perm+0x91/0x160 [ 340.370354][T14071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.375660][T14071] __sock_sendmsg+0x221/0x270 [ 340.380357][T14071] ____sys_sendmsg+0x52a/0x7e0 [ 340.385142][T14071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.390470][T14071] __sys_sendmsg+0x292/0x380 [ 340.395081][T14071] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.400188][T14071] ? __pfx_vfs_write+0x10/0x10 [ 340.404979][T14071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.411315][T14071] ? do_syscall_64+0x100/0x230 [ 340.416085][T14071] ? do_syscall_64+0xb6/0x230 [ 340.420757][T14071] do_syscall_64+0xf3/0x230 [ 340.425603][T14071] ? clear_bhb_loop+0x35/0x90 [ 340.430271][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.436159][T14071] RIP: 0033:0x7f01bad7e719 [ 340.440566][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.460173][T14071] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.468602][T14071] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 340.476595][T14071] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 340.484567][T14071] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 340.492553][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.500521][T14071] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 340.508507][T14071] [ 340.512468][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.820822][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2731'. [ 340.832281][T14088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.843989][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2731'. [ 340.907488][T14093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.929781][T14088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.029411][T14099] FAULT_INJECTION: forcing a failure. [ 341.029411][T14099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.057377][T14099] CPU: 0 UID: 0 PID: 14099 Comm: syz.7.2736 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 341.068194][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.078280][T14099] Call Trace: [ 341.081583][T14099] [ 341.084541][T14099] dump_stack_lvl+0x241/0x360 [ 341.086610][T14101] netlink: 'syz.8.2738': attribute type 2 has an invalid length. [ 341.089227][T14099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.102141][T14099] ? __pfx__printk+0x10/0x10 [ 341.106775][T14099] ? snprintf+0xda/0x120 [ 341.111044][T14099] should_fail_ex+0x3b0/0x4e0 [ 341.115745][T14099] _copy_to_user+0x31/0xb0 [ 341.120193][T14099] simple_read_from_buffer+0xca/0x150 [ 341.125601][T14099] proc_fail_nth_read+0x1e9/0x250 [ 341.130639][T14099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.136187][T14099] ? rw_verify_area+0x55e/0x6f0 [ 341.141035][T14099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.146579][T14099] vfs_read+0x1fc/0xb70 [ 341.150740][T14099] ? fdget_pos+0x24e/0x320 [ 341.155152][T14099] ? __pfx_vfs_read+0x10/0x10 [ 341.159835][T14099] ? __fget_files+0x3f3/0x470 [ 341.164515][T14099] ? fdget_pos+0x24e/0x320 [ 341.168943][T14099] ksys_read+0x183/0x2b0 [ 341.173182][T14099] ? __pfx_ksys_read+0x10/0x10 [ 341.177946][T14099] ? do_syscall_64+0x100/0x230 [ 341.182707][T14099] ? do_syscall_64+0xb6/0x230 [ 341.187382][T14099] do_syscall_64+0xf3/0x230 [ 341.191879][T14099] ? clear_bhb_loop+0x35/0x90 [ 341.196561][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.202454][T14099] RIP: 0033:0x7fed18f7d15c [ 341.206862][T14099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 341.226462][T14099] RSP: 002b:00007fed19d8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.234875][T14099] RAX: ffffffffffffffda RBX: 00007fed19135f80 RCX: 00007fed18f7d15c [ 341.242841][T14099] RDX: 000000000000000f RSI: 00007fed19d8f0a0 RDI: 0000000000000006 [ 341.250832][T14099] RBP: 00007fed19d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.258803][T14099] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.266769][T14099] R13: 0000000000000000 R14: 00007fed19135f80 R15: 00007ffe752284b8 [ 341.274751][T14099] [ 341.291672][T14104] FAULT_INJECTION: forcing a failure. [ 341.291672][T14104] name failslab, interval 1, probability 0, space 0, times 0 [ 341.313905][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.6.2739 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 341.324721][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.334804][T14104] Call Trace: [ 341.338104][T14104] [ 341.341066][T14104] dump_stack_lvl+0x241/0x360 [ 341.345786][T14104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.351007][T14104] ? __pfx__printk+0x10/0x10 [ 341.355627][T14104] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 341.361642][T14104] ? __pfx___might_resched+0x10/0x10 [ 341.366963][T14104] should_fail_ex+0x3b0/0x4e0 [ 341.371664][T14104] should_failslab+0xac/0x100 [ 341.376367][T14104] ? __alloc_skb+0x1c3/0x440 [ 341.380971][T14104] kmem_cache_alloc_node_noprof+0x71/0x320 [ 341.386789][T14104] __alloc_skb+0x1c3/0x440 [ 341.391238][T14104] ? __pfx___alloc_skb+0x10/0x10 [ 341.396211][T14104] ? netlink_autobind+0xd6/0x2f0 [ 341.401189][T14104] ? netlink_autobind+0x2b0/0x2f0 [ 341.406260][T14104] netlink_sendmsg+0x638/0xcb0 [ 341.411063][T14104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.416376][T14104] ? aa_sock_msg_perm+0x91/0x160 [ 341.421346][T14104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.426654][T14104] __sock_sendmsg+0x221/0x270 [ 341.431340][T14104] ____sys_sendmsg+0x52a/0x7e0 [ 341.436111][T14104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.441404][T14104] __sys_sendmsg+0x292/0x380 [ 341.445999][T14104] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.451116][T14104] ? __pfx_vfs_write+0x10/0x10 [ 341.455987][T14104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.462314][T14104] ? do_syscall_64+0x100/0x230 [ 341.467072][T14104] ? do_syscall_64+0xb6/0x230 [ 341.471770][T14104] do_syscall_64+0xf3/0x230 [ 341.476268][T14104] ? clear_bhb_loop+0x35/0x90 [ 341.480942][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.486836][T14104] RIP: 0033:0x7f01bad7e719 [ 341.491249][T14104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.510967][T14104] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.519386][T14104] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 341.527359][T14104] RDX: 0000000020004804 RSI: 0000000020000300 RDI: 0000000000000003 [ 341.535338][T14104] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 341.543311][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.551278][T14104] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 341.559345][T14104] [ 342.128371][T14137] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2752'. [ 342.252248][T14122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.268552][T14122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.280055][T14122] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 342.291062][T14122] bond0 (unregistering): Released all slaves [ 342.320525][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2747'. [ 342.331940][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2747'. [ 342.390261][T14142] xt_ipcomp: unknown flags 12 [ 342.585473][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.647703][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.667376][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.791115][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2756'. [ 342.800615][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2756'. [ 342.811321][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2756'. [ 342.867897][T14164] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2761'. [ 343.046473][T14175] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2765'. [ 343.111130][T14175] vxcan1: tx address claim with dest, not broadcast [ 343.131690][T14180] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2767'. [ 343.143575][T14181] FAULT_INJECTION: forcing a failure. [ 343.143575][T14181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.162466][T14181] CPU: 0 UID: 0 PID: 14181 Comm: syz.6.2766 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 343.173270][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.183349][T14181] Call Trace: [ 343.186650][T14181] [ 343.189599][T14181] dump_stack_lvl+0x241/0x360 [ 343.194301][T14181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.199527][T14181] ? __pfx__printk+0x10/0x10 [ 343.204156][T14181] ? __pfx_lock_release+0x10/0x10 [ 343.209220][T14181] should_fail_ex+0x3b0/0x4e0 [ 343.213926][T14181] _copy_from_user+0x2f/0xc0 [ 343.218537][T14181] copy_msghdr_from_user+0xae/0x680 [ 343.223755][T14181] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 343.229598][T14181] __sys_recvmsg+0x24c/0x3d0 [ 343.234221][T14181] ? __pfx___sys_recvmsg+0x10/0x10 [ 343.239353][T14181] ? __mutex_unlock_slowpath+0x21d/0x750 [ 343.245037][T14181] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.251399][T14181] ? do_syscall_64+0x100/0x230 [ 343.256185][T14181] ? do_syscall_64+0xb6/0x230 [ 343.260887][T14181] do_syscall_64+0xf3/0x230 [ 343.265407][T14181] ? clear_bhb_loop+0x35/0x90 [ 343.270093][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.275991][T14181] RIP: 0033:0x7f01bad7e719 [ 343.280422][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.300057][T14181] RSP: 002b:00007f01bbaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 343.308515][T14181] RAX: ffffffffffffffda RBX: 00007f01baf36058 RCX: 00007f01bad7e719 [ 343.316514][T14181] RDX: 0000000000000000 RSI: 0000000020000e80 RDI: 0000000000000003 [ 343.324506][T14181] RBP: 00007f01bbaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 343.332495][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.340482][T14181] R13: 0000000000000001 R14: 00007f01baf36058 R15: 00007ffd986ffeb8 [ 343.348491][T14181] [ 343.629717][T14210] vlan3: entered promiscuous mode [ 343.663944][ C0] net_ratelimit: 14 callbacks suppressed [ 343.663964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.753911][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.837622][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2774'. [ 344.063792][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.224001][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.277537][T14240] FAULT_INJECTION: forcing a failure. [ 344.277537][T14240] name failslab, interval 1, probability 0, space 0, times 0 [ 344.295522][T14240] CPU: 1 UID: 0 PID: 14240 Comm: syz.7.2783 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 344.306329][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.308377][T14242] bridge_slave_1: left allmulticast mode [ 344.316392][T14240] Call Trace: [ 344.316422][T14240] [ 344.316439][T14240] dump_stack_lvl+0x241/0x360 [ 344.316475][T14240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.316493][T14240] ? __pfx__printk+0x10/0x10 [ 344.316532][T14240] ? fs_reclaim_acquire+0x93/0x130 [ 344.322687][T14242] bridge_slave_1: left promiscuous mode [ 344.325432][T14240] ? __pfx___might_resched+0x10/0x10 [ 344.325469][T14240] should_fail_ex+0x3b0/0x4e0 [ 344.325493][T14240] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 344.325516][T14240] should_failslab+0xac/0x100 [ 344.328703][T14242] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.333097][T14240] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 344.333126][T14240] __kmalloc_noprof+0xd8/0x400 [ 344.333155][T14240] tomoyo_realpath_from_path+0xcf/0x5e0 [ 344.333188][T14240] tomoyo_path_number_perm+0x23a/0x880 [ 344.402460][T14240] ? tomoyo_path_number_perm+0x208/0x880 [ 344.404017][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.408082][T14240] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 344.408145][T14240] ? __fget_files+0x29/0x470 [ 344.425740][T14240] ? __fget_files+0x3f3/0x470 [ 344.430432][T14240] security_file_ioctl+0xc6/0x2a0 [ 344.435453][T14240] __se_sys_ioctl+0x47/0x170 [ 344.440054][T14240] do_syscall_64+0xf3/0x230 [ 344.444564][T14240] ? clear_bhb_loop+0x35/0x90 [ 344.449234][T14240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.455129][T14240] RIP: 0033:0x7fed18f7e719 [ 344.459540][T14240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.479151][T14240] RSP: 002b:00007fed19d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.487563][T14240] RAX: ffffffffffffffda RBX: 00007fed19135f80 RCX: 00007fed18f7e719 [ 344.495528][T14240] RDX: 0000000020000900 RSI: 00000000000089f1 RDI: 0000000000000004 [ 344.503516][T14240] RBP: 00007fed19d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.511499][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.519473][T14240] R13: 0000000000000000 R14: 00007fed19135f80 R15: 00007ffe752284b8 [ 344.527458][T14240] [ 344.534702][T14242] bridge_slave_0: left allmulticast mode [ 344.540391][T14242] bridge_slave_0: left promiscuous mode [ 344.548400][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.577442][T14242] bond0: (slave bridge0): Releasing backup interface [ 344.584304][T14240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.703791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.783815][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.787426][T14252] FAULT_INJECTION: forcing a failure. [ 344.787426][T14252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.804481][T14252] CPU: 1 UID: 0 PID: 14252 Comm: syz.9.2788 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 344.815270][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.825331][T14252] Call Trace: [ 344.828608][T14252] [ 344.831538][T14252] dump_stack_lvl+0x241/0x360 [ 344.836219][T14252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.841412][T14252] ? __pfx__printk+0x10/0x10 [ 344.846005][T14252] ? __pfx_lock_release+0x10/0x10 [ 344.851039][T14252] should_fail_ex+0x3b0/0x4e0 [ 344.855811][T14252] _copy_from_user+0x2f/0xc0 [ 344.860402][T14252] copy_msghdr_from_user+0xae/0x680 [ 344.865607][T14252] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 344.871427][T14252] __sys_sendmsg+0x22d/0x380 [ 344.876024][T14252] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.881151][T14252] ? __pfx_vfs_write+0x10/0x10 [ 344.885935][T14252] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.892262][T14252] ? do_syscall_64+0x100/0x230 [ 344.897029][T14252] ? do_syscall_64+0xb6/0x230 [ 344.901712][T14252] do_syscall_64+0xf3/0x230 [ 344.906218][T14252] ? clear_bhb_loop+0x35/0x90 [ 344.910907][T14252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.916806][T14252] RIP: 0033:0x7f0fa697e719 [ 344.921219][T14252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.940824][T14252] RSP: 002b:00007f0fa780f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.949250][T14252] RAX: ffffffffffffffda RBX: 00007f0fa6b35f80 RCX: 00007f0fa697e719 [ 344.957217][T14252] RDX: 0000000000004040 RSI: 0000000020000680 RDI: 0000000000000003 [ 344.965184][T14252] RBP: 00007f0fa780f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.973147][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.981115][T14252] R13: 0000000000000000 R14: 00007f0fa6b35f80 R15: 00007ffebc2399b8 [ 344.989089][T14252] [ 345.103867][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.263865][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.288192][T14260] tun0: tun_chr_ioctl cmd 3223385353 [ 345.423839][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.658450][T14288] FAULT_INJECTION: forcing a failure. [ 345.658450][T14288] name failslab, interval 1, probability 0, space 0, times 0 [ 345.671293][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.6.2803 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 345.682089][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.692180][T14288] Call Trace: [ 345.695482][T14288] [ 345.698416][T14288] dump_stack_lvl+0x241/0x360 [ 345.703108][T14288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.708308][T14288] ? __pfx__printk+0x10/0x10 [ 345.712905][T14288] ? fs_reclaim_acquire+0x93/0x130 [ 345.718014][T14288] ? __pfx___might_resched+0x10/0x10 [ 345.723304][T14288] should_fail_ex+0x3b0/0x4e0 [ 345.727980][T14288] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 345.733705][T14288] should_failslab+0xac/0x100 [ 345.738473][T14288] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 345.744190][T14288] __kmalloc_noprof+0xd8/0x400 [ 345.748958][T14288] tomoyo_realpath_from_path+0xcf/0x5e0 [ 345.754511][T14288] tomoyo_path_number_perm+0x23a/0x880 [ 345.759971][T14288] ? tomoyo_path_number_perm+0x208/0x880 [ 345.765597][T14288] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 345.771599][T14288] ? __fget_files+0x29/0x470 [ 345.776187][T14288] ? __fget_files+0x3f3/0x470 [ 345.780868][T14288] security_file_ioctl+0xc6/0x2a0 [ 345.785890][T14288] __se_sys_ioctl+0x47/0x170 [ 345.790483][T14288] do_syscall_64+0xf3/0x230 [ 345.794982][T14288] ? clear_bhb_loop+0x35/0x90 [ 345.799652][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.805545][T14288] RIP: 0033:0x7f01bad7e719 [ 345.809954][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.829562][T14288] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.837990][T14288] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 345.845960][T14288] RDX: 0000000020000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 345.853927][T14288] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 345.861892][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.869855][T14288] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 345.877833][T14288] [ 345.890545][T14288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 345.899175][T14288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input10 [ 346.420593][T14316] netlink: 'syz.8.2808': attribute type 39 has an invalid length. [ 346.549144][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.563988][T14321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.764703][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.790564][T14321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.929282][T14332] FAULT_INJECTION: forcing a failure. [ 346.929282][T14332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.955693][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.7.2813 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 346.966508][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.976586][T14332] Call Trace: [ 346.979974][T14332] [ 346.982923][T14332] dump_stack_lvl+0x241/0x360 [ 346.987632][T14332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.992866][T14332] ? __pfx__printk+0x10/0x10 [ 346.997494][T14332] ? snprintf+0xda/0x120 [ 347.001766][T14332] should_fail_ex+0x3b0/0x4e0 [ 347.006470][T14332] _copy_to_user+0x31/0xb0 [ 347.010916][T14332] simple_read_from_buffer+0xca/0x150 [ 347.016328][T14332] proc_fail_nth_read+0x1e9/0x250 [ 347.021369][T14332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.026928][T14332] ? rw_verify_area+0x55e/0x6f0 [ 347.031785][T14332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.037333][T14332] vfs_read+0x1fc/0xb70 [ 347.041489][T14332] ? fdget_pos+0x24e/0x320 [ 347.045907][T14332] ? __pfx_vfs_read+0x10/0x10 [ 347.050585][T14332] ? __fget_files+0x3f3/0x470 [ 347.055261][T14332] ? fdget_pos+0x24e/0x320 [ 347.059677][T14332] ksys_read+0x183/0x2b0 [ 347.063927][T14332] ? __pfx_ksys_read+0x10/0x10 [ 347.068705][T14332] ? do_syscall_64+0x100/0x230 [ 347.073465][T14332] ? do_syscall_64+0xb6/0x230 [ 347.078137][T14332] do_syscall_64+0xf3/0x230 [ 347.082636][T14332] ? clear_bhb_loop+0x35/0x90 [ 347.087307][T14332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.093196][T14332] RIP: 0033:0x7fed18f7d15c [ 347.097603][T14332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 347.117203][T14332] RSP: 002b:00007fed19d6e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.125611][T14332] RAX: ffffffffffffffda RBX: 00007fed19136058 RCX: 00007fed18f7d15c [ 347.133575][T14332] RDX: 000000000000000f RSI: 00007fed19d6e0a0 RDI: 0000000000000004 [ 347.141537][T14332] RBP: 00007fed19d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 347.149678][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.157642][T14332] R13: 0000000000000001 R14: 00007fed19136058 R15: 00007ffe752284b8 [ 347.165617][T14332] [ 347.580895][T14353] veth0_vlan: entered allmulticast mode [ 347.725200][T14360] __nla_validate_parse: 11 callbacks suppressed [ 347.725219][T14360] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2822'. [ 347.748710][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2822'. [ 347.805205][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2824'. [ 348.439682][T14395] bridge_slave_0: entered promiscuous mode [ 348.622822][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2837'. [ 348.945962][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2840'. [ 349.001447][T14411] FAULT_INJECTION: forcing a failure. [ 349.001447][T14411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.018975][T14411] CPU: 1 UID: 0 PID: 14411 Comm: syz.7.2841 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 349.029792][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.039878][T14411] Call Trace: [ 349.043176][T14411] [ 349.046124][T14411] dump_stack_lvl+0x241/0x360 [ 349.050831][T14411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.056057][T14411] ? __pfx__printk+0x10/0x10 [ 349.060684][T14411] ? __pfx_lock_release+0x10/0x10 [ 349.065745][T14411] should_fail_ex+0x3b0/0x4e0 [ 349.070456][T14411] _copy_from_user+0x2f/0xc0 [ 349.073823][ C0] net_ratelimit: 15 callbacks suppressed [ 349.073887][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.075056][T14411] copy_msghdr_from_user+0xae/0x680 [ 349.080782][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.087677][T14411] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 349.087715][T14411] __sys_sendmsg+0x22d/0x380 [ 349.110340][T14411] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.115458][T14411] ? __pfx_vfs_write+0x10/0x10 [ 349.120234][T14411] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.126579][T14411] ? do_syscall_64+0x100/0x230 [ 349.131362][T14411] ? do_syscall_64+0xb6/0x230 [ 349.136056][T14411] do_syscall_64+0xf3/0x230 [ 349.140586][T14411] ? clear_bhb_loop+0x35/0x90 [ 349.145288][T14411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.151203][T14411] RIP: 0033:0x7fed18f7e719 [ 349.155619][T14411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.175248][T14411] RSP: 002b:00007fed19d8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.183687][T14411] RAX: ffffffffffffffda RBX: 00007fed19135f80 RCX: 00007fed18f7e719 [ 349.191659][T14411] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 349.199624][T14411] RBP: 00007fed19d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.207591][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.215594][T14411] R13: 0000000000000000 R14: 00007fed19135f80 R15: 00007ffe752284b8 [ 349.223585][T14411] [ 349.263793][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.392489][T14418] netlink: 'syz.8.2846': attribute type 1 has an invalid length. [ 349.423827][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.434724][T14418] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2846'. [ 349.543425][T14434] FAULT_INJECTION: forcing a failure. [ 349.543425][T14434] name failslab, interval 1, probability 0, space 0, times 0 [ 349.589685][T14434] CPU: 1 UID: 0 PID: 14434 Comm: syz.6.2848 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 349.593782][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.600478][T14434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.617573][T14434] Call Trace: [ 349.620854][T14434] [ 349.623788][T14434] dump_stack_lvl+0x241/0x360 [ 349.628468][T14434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.633665][T14434] ? __pfx__printk+0x10/0x10 [ 349.638259][T14434] ? fs_reclaim_acquire+0x93/0x130 [ 349.643362][T14434] ? __pfx___might_resched+0x10/0x10 [ 349.648649][T14434] should_fail_ex+0x3b0/0x4e0 [ 349.653324][T14434] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 349.659041][T14434] should_failslab+0xac/0x100 [ 349.663714][T14434] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 349.669428][T14434] __kmalloc_noprof+0xd8/0x400 [ 349.674194][T14434] tomoyo_realpath_from_path+0xcf/0x5e0 [ 349.679745][T14434] tomoyo_path_number_perm+0x23a/0x880 [ 349.685204][T14434] ? tomoyo_path_number_perm+0x208/0x880 [ 349.690832][T14434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.696833][T14434] ? __fget_files+0x29/0x470 [ 349.701421][T14434] ? __fget_files+0x3f3/0x470 [ 349.706097][T14434] security_file_ioctl+0xc6/0x2a0 [ 349.711118][T14434] __se_sys_ioctl+0x47/0x170 [ 349.715710][T14434] do_syscall_64+0xf3/0x230 [ 349.720208][T14434] ? clear_bhb_loop+0x35/0x90 [ 349.724879][T14434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.730775][T14434] RIP: 0033:0x7f01bad7e719 [ 349.735183][T14434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.754793][T14434] RSP: 002b:00007f01bbad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.763207][T14434] RAX: ffffffffffffffda RBX: 00007f01baf36130 RCX: 00007f01bad7e719 [ 349.771174][T14434] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 349.779137][T14434] RBP: 00007f01bbad6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.787104][T14434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.795069][T14434] R13: 0000000000000000 R14: 00007f01baf36130 R15: 00007ffd986ffeb8 [ 349.803046][T14434] [ 349.814052][T14434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.143893][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.151179][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.157130][T14455] FAULT_INJECTION: forcing a failure. [ 350.157130][T14455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.213889][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.6.2855 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 350.225402][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.235480][T14455] Call Trace: [ 350.238777][T14455] [ 350.241723][T14455] dump_stack_lvl+0x241/0x360 [ 350.246424][T14455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.251644][T14455] ? __pfx__printk+0x10/0x10 [ 350.256269][T14455] ? __pfx_lock_release+0x10/0x10 [ 350.261358][T14455] should_fail_ex+0x3b0/0x4e0 [ 350.266069][T14455] _copy_from_user+0x2f/0xc0 [ 350.270687][T14455] __sys_bpf+0x1a4/0x810 [ 350.274959][T14455] ? __pfx___sys_bpf+0x10/0x10 [ 350.279757][T14455] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.285765][T14455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.292122][T14455] ? do_syscall_64+0x100/0x230 [ 350.296916][T14455] __x64_sys_bpf+0x7c/0x90 [ 350.298646][T14464] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2859'. [ 350.301335][T14455] do_syscall_64+0xf3/0x230 [ 350.301362][T14455] ? clear_bhb_loop+0x35/0x90 [ 350.301384][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.325546][T14455] RIP: 0033:0x7f01bad7e719 [ 350.328362][T14464] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2859'. [ 350.329963][T14455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.329984][T14455] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.330007][T14455] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 350.375107][T14455] RDX: 0000000000000094 RSI: 0000000020000600 RDI: 0000000000000005 [ 350.383108][T14455] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 350.391105][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.399106][T14455] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 350.407119][T14455] [ 350.411572][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.435328][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2859'. [ 350.463846][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.488397][T14469] FAULT_INJECTION: forcing a failure. [ 350.488397][T14469] name failslab, interval 1, probability 0, space 0, times 0 [ 350.543136][T14469] CPU: 1 UID: 0 PID: 14469 Comm: syz.5.2860 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 350.553966][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.564026][T14469] Call Trace: [ 350.567324][T14469] [ 350.570247][T14469] dump_stack_lvl+0x241/0x360 [ 350.574920][T14469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.580112][T14469] ? __pfx__printk+0x10/0x10 [ 350.584720][T14469] ? __kmalloc_noprof+0xb0/0x400 [ 350.589677][T14469] ? __pfx___might_resched+0x10/0x10 [ 350.594965][T14469] should_fail_ex+0x3b0/0x4e0 [ 350.599656][T14469] ? iovec_from_user+0x87/0x240 [ 350.604505][T14469] should_failslab+0xac/0x100 [ 350.609176][T14469] ? iovec_from_user+0x87/0x240 [ 350.614028][T14469] __kmalloc_noprof+0xd8/0x400 [ 350.618808][T14469] iovec_from_user+0x87/0x240 [ 350.623500][T14469] ? mark_lock+0x9a/0x360 [ 350.627838][T14469] __import_iovec+0x152/0x870 [ 350.632521][T14469] import_iovec+0xeb/0x120 [ 350.634098][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.636933][T14469] vfs_writev+0x1c2/0xba0 [ 350.636974][T14469] ? __pfx_vfs_writev+0x10/0x10 [ 350.653165][T14469] ? fdget_pos+0x19a/0x320 [ 350.657587][T14469] do_writev+0x1b1/0x350 [ 350.661838][T14469] ? __pfx_do_writev+0x10/0x10 [ 350.666601][T14469] ? do_syscall_64+0x100/0x230 [ 350.671365][T14469] ? do_syscall_64+0xb6/0x230 [ 350.676039][T14469] do_syscall_64+0xf3/0x230 [ 350.680534][T14469] ? clear_bhb_loop+0x35/0x90 [ 350.685213][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.691107][T14469] RIP: 0033:0x7f23ac37e719 [ 350.695516][T14469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.715118][T14469] RSP: 002b:00007f23ad125038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 350.723532][T14469] RAX: ffffffffffffffda RBX: 00007f23ac535f80 RCX: 00007f23ac37e719 [ 350.731500][T14469] RDX: 0000000000000009 RSI: 0000000020000a40 RDI: 0000000000000003 [ 350.739468][T14469] RBP: 00007f23ad125090 R08: 0000000000000000 R09: 0000000000000000 [ 350.747434][T14469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.755401][T14469] R13: 0000000000000000 R14: 00007f23ac535f80 R15: 00007fff72872c18 [ 350.763377][T14469] [ 351.010383][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2867'. [ 351.104285][T14492] netlink: 'syz.9.2866': attribute type 2 has an invalid length. [ 351.237837][T14496] netlink: 'syz.8.2870': attribute type 1 has an invalid length. [ 351.381661][T14503] vlan2: entered promiscuous mode [ 351.403357][T14503] dummy0: entered promiscuous mode [ 351.434426][T14503] team0: Port device vlan2 added [ 352.363598][T14544] vlan3: entered promiscuous mode [ 352.369234][T14544] dummy0: entered promiscuous mode [ 352.382218][T14544] team0: Port device vlan3 added [ 352.974368][T14564] FAULT_INJECTION: forcing a failure. [ 352.974368][T14564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.994415][T14564] CPU: 1 UID: 0 PID: 14564 Comm: syz.9.2891 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 353.005233][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.015315][T14564] Call Trace: [ 353.018619][T14564] [ 353.021572][T14564] dump_stack_lvl+0x241/0x360 [ 353.026283][T14564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.031511][T14564] ? __pfx__printk+0x10/0x10 [ 353.036130][T14564] ? __pfx_lock_release+0x10/0x10 [ 353.041197][T14564] should_fail_ex+0x3b0/0x4e0 [ 353.045897][T14564] _copy_from_user+0x2f/0xc0 [ 353.050518][T14564] copy_msghdr_from_user+0xae/0x680 [ 353.055733][T14564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 353.061554][T14564] __sys_sendmsg+0x22d/0x380 [ 353.066153][T14564] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.071280][T14564] ? __pfx_vfs_write+0x10/0x10 [ 353.076076][T14564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.082403][T14564] ? do_syscall_64+0x100/0x230 [ 353.087166][T14564] ? do_syscall_64+0xb6/0x230 [ 353.091838][T14564] do_syscall_64+0xf3/0x230 [ 353.096336][T14564] ? clear_bhb_loop+0x35/0x90 [ 353.101032][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.106932][T14564] RIP: 0033:0x7f0fa697e719 [ 353.111345][T14564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.130947][T14564] RSP: 002b:00007f0fa77ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.139364][T14564] RAX: ffffffffffffffda RBX: 00007f0fa6b36058 RCX: 00007f0fa697e719 [ 353.147332][T14564] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 000000000000000a [ 353.155299][T14564] RBP: 00007f0fa77ee090 R08: 0000000000000000 R09: 0000000000000000 [ 353.163266][T14564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.171230][T14564] R13: 0000000000000001 R14: 00007f0fa6b36058 R15: 00007ffebc2399b8 [ 353.179210][T14564] [ 353.291724][T14566] __nla_validate_parse: 7 callbacks suppressed [ 353.291743][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2892'. [ 353.836007][T14580] xt_ecn: cannot match TCP bits for non-tcp packets [ 353.860432][T14584] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2897'. [ 354.303843][ C0] net_ratelimit: 16 callbacks suppressed [ 354.303869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.316742][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.494458][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2906'. [ 354.509853][T14608] rdma_rxe: rxe_newlink: failed to add lo [ 354.543834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.557349][T14608] netlink: 'syz.7.2905': attribute type 11 has an invalid length. [ 354.567876][T14612] FAULT_INJECTION: forcing a failure. [ 354.567876][T14612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.603864][T14608] netlink: 'syz.7.2905': attribute type 3 has an invalid length. [ 354.623773][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.666447][T14612] CPU: 1 UID: 0 PID: 14612 Comm: syz.5.2904 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 354.677262][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.687346][T14612] Call Trace: [ 354.690639][T14612] [ 354.693583][T14612] dump_stack_lvl+0x241/0x360 [ 354.698278][T14612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.703494][T14612] ? __pfx__printk+0x10/0x10 [ 354.708113][T14612] ? __pfx_lock_release+0x10/0x10 [ 354.713163][T14612] should_fail_ex+0x3b0/0x4e0 [ 354.717864][T14612] _copy_from_user+0x2f/0xc0 [ 354.722475][T14612] copy_msghdr_from_user+0xae/0x680 [ 354.727697][T14612] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 354.733539][T14612] __sys_recvmsg+0x24c/0x3d0 [ 354.738157][T14612] ? __pfx___sys_recvmsg+0x10/0x10 [ 354.743288][T14612] ? __mutex_unlock_slowpath+0x21d/0x750 [ 354.748971][T14612] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.755324][T14612] ? do_syscall_64+0x100/0x230 [ 354.760108][T14612] ? do_syscall_64+0xb6/0x230 [ 354.764814][T14612] do_syscall_64+0xf3/0x230 [ 354.769326][T14612] ? clear_bhb_loop+0x35/0x90 [ 354.774029][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.779943][T14612] RIP: 0033:0x7f23ac37e719 [ 354.784372][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.804008][T14612] RSP: 002b:00007f23ad0e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 354.812450][T14612] RAX: ffffffffffffffda RBX: 00007f23ac536130 RCX: 00007f23ac37e719 [ 354.820455][T14612] RDX: 0000000000000002 RSI: 0000000020000a40 RDI: 0000000000000003 [ 354.823759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.828408][T14612] RBP: 00007f23ad0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 354.843414][T14612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.851384][T14612] R13: 0000000000000001 R14: 00007f23ac536130 R15: 00007fff72872c18 [ 354.859365][T14612] [ 354.884334][T14614] FAULT_INJECTION: forcing a failure. [ 354.884334][T14614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.912346][T14614] CPU: 0 UID: 0 PID: 14614 Comm: syz.8.2907 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 354.923161][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.933245][T14614] Call Trace: [ 354.936548][T14614] [ 354.939507][T14614] dump_stack_lvl+0x241/0x360 [ 354.944208][T14614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.949432][T14614] ? __pfx__printk+0x10/0x10 [ 354.954054][T14614] ? __pfx_lock_release+0x10/0x10 [ 354.959119][T14614] should_fail_ex+0x3b0/0x4e0 [ 354.963819][T14614] _copy_from_user+0x2f/0xc0 [ 354.968437][T14614] xt_copy_counters+0x225/0x520 [ 354.973318][T14614] ? __pfx_xt_copy_counters+0x10/0x10 [ 354.978720][T14614] ? apparmor_capable+0x13b/0x1b0 [ 354.983774][T14614] ? bpf_lsm_capable+0x9/0x10 [ 354.988470][T14614] ? security_capable+0x7e/0x2d0 [ 354.993438][T14614] do_ipt_set_ctl+0x188/0x1250 [ 354.998234][T14614] ? __pfx___might_resched+0x10/0x10 [ 355.003548][T14614] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 355.008789][T14614] ? rcu_is_watching+0x15/0xb0 [ 355.013579][T14614] ? trace_contention_end+0x3c/0x120 [ 355.018887][T14614] ? __mutex_lock+0x2ef/0xd70 [ 355.023593][T14614] ? __mutex_unlock_slowpath+0x21d/0x750 [ 355.029248][T14614] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 355.034652][T14614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.040652][T14614] ? aa_sk_perm+0x96d/0xab0 [ 355.045183][T14614] ? sb_end_write+0xe9/0x1c0 [ 355.049799][T14614] ? __pfx_aa_sk_perm+0x10/0x10 [ 355.054666][T14614] ? vfs_write+0x730/0xd30 [ 355.059110][T14614] nf_setsockopt+0x295/0x2c0 [ 355.063727][T14614] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 355.069638][T14614] do_sock_setsockopt+0x3af/0x720 [ 355.074691][T14614] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 355.080261][T14614] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 355.086360][T14614] __sys_setsockopt+0x1a2/0x250 [ 355.091221][T14614] __x64_sys_setsockopt+0xb5/0xd0 [ 355.096251][T14614] do_syscall_64+0xf3/0x230 [ 355.100752][T14614] ? clear_bhb_loop+0x35/0x90 [ 355.105428][T14614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.111321][T14614] RIP: 0033:0x7f580d17e719 [ 355.115739][T14614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.135340][T14614] RSP: 002b:00007f580dfa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 355.143752][T14614] RAX: ffffffffffffffda RBX: 00007f580d335f80 RCX: 00007f580d17e719 [ 355.151720][T14614] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 355.159685][T14614] RBP: 00007f580dfa9090 R08: 0000000000000048 R09: 0000000000000000 [ 355.167654][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.175621][T14614] R13: 0000000000000000 R14: 00007f580d335f80 R15: 00007ffd2ab5dde8 [ 355.183599][T14614] [ 355.246362][T14620] ip6tnl0: Master is either lo or non-ether device [ 355.343790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.351003][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.593789][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.663850][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.904509][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.047228][T14641] FAULT_INJECTION: forcing a failure. [ 356.047228][T14641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.069861][T14641] CPU: 1 UID: 0 PID: 14641 Comm: syz.6.2916 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 356.080759][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.090844][T14641] Call Trace: [ 356.094142][T14641] [ 356.097088][T14641] dump_stack_lvl+0x241/0x360 [ 356.101797][T14641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.107021][T14641] ? __pfx__printk+0x10/0x10 [ 356.111641][T14641] ? __pfx_lock_release+0x10/0x10 [ 356.116700][T14641] should_fail_ex+0x3b0/0x4e0 [ 356.121401][T14641] _copy_from_user+0x2f/0xc0 [ 356.126026][T14641] copy_msghdr_from_user+0xae/0x680 [ 356.131247][T14641] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 356.137067][T14641] __sys_sendmsg+0x22d/0x380 [ 356.141658][T14641] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.146780][T14641] ? __pfx_vfs_write+0x10/0x10 [ 356.151561][T14641] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.157886][T14641] ? do_syscall_64+0x100/0x230 [ 356.162644][T14641] ? do_syscall_64+0xb6/0x230 [ 356.167316][T14641] do_syscall_64+0xf3/0x230 [ 356.171811][T14641] ? clear_bhb_loop+0x35/0x90 [ 356.176487][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.182380][T14641] RIP: 0033:0x7f01bad7e719 [ 356.186787][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.206388][T14641] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.214803][T14641] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 356.222767][T14641] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 356.230736][T14641] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 356.238700][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.246668][T14641] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 356.254644][T14641] [ 356.913422][T14673] hsr0: entered promiscuous mode [ 357.047483][T14682] FAULT_INJECTION: forcing a failure. [ 357.047483][T14682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.060996][T14682] CPU: 0 UID: 0 PID: 14682 Comm: syz.8.2928 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 357.071794][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.073048][T14680] FAULT_INJECTION: forcing a failure. [ 357.073048][T14680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.081859][T14682] Call Trace: [ 357.081876][T14682] [ 357.081886][T14682] dump_stack_lvl+0x241/0x360 [ 357.081913][T14682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.081932][T14682] ? __pfx__printk+0x10/0x10 [ 357.081958][T14682] ? __pfx_lock_release+0x10/0x10 [ 357.081988][T14682] should_fail_ex+0x3b0/0x4e0 [ 357.082011][T14682] _copy_from_user+0x2f/0xc0 [ 357.082035][T14682] copy_msghdr_from_user+0xae/0x680 [ 357.082068][T14682] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 357.140959][T14682] __sys_sendmsg+0x22d/0x380 [ 357.145596][T14682] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.150744][T14682] ? __pfx_vfs_write+0x10/0x10 [ 357.155577][T14682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.161935][T14682] ? do_syscall_64+0x100/0x230 [ 357.166718][T14682] ? do_syscall_64+0xb6/0x230 [ 357.171409][T14682] do_syscall_64+0xf3/0x230 [ 357.175930][T14682] ? clear_bhb_loop+0x35/0x90 [ 357.180619][T14682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.186532][T14682] RIP: 0033:0x7f580d17e719 [ 357.190962][T14682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.210586][T14682] RSP: 002b:00007f580dfa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.219032][T14682] RAX: ffffffffffffffda RBX: 00007f580d335f80 RCX: 00007f580d17e719 [ 357.227031][T14682] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 357.235029][T14682] RBP: 00007f580dfa9090 R08: 0000000000000000 R09: 0000000000000000 [ 357.243027][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.251030][T14682] R13: 0000000000000000 R14: 00007f580d335f80 R15: 00007ffd2ab5dde8 [ 357.259051][T14682] [ 357.267717][T14680] CPU: 1 UID: 0 PID: 14680 Comm: syz.9.2926 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 357.278523][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.288597][T14680] Call Trace: [ 357.291899][T14680] [ 357.294851][T14680] dump_stack_lvl+0x241/0x360 [ 357.299557][T14680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.304785][T14680] ? __pfx__printk+0x10/0x10 [ 357.309421][T14680] should_fail_ex+0x3b0/0x4e0 [ 357.314127][T14680] _copy_from_user+0x2f/0xc0 [ 357.318750][T14680] move_addr_to_kernel+0x82/0x150 [ 357.323797][T14680] __sys_connect+0xc1/0x300 [ 357.328328][T14680] ? __pfx___sys_connect+0x10/0x10 [ 357.333471][T14680] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.339829][T14680] ? do_syscall_64+0x100/0x230 [ 357.344620][T14680] __x64_sys_connect+0x7a/0x90 [ 357.349411][T14680] do_syscall_64+0xf3/0x230 [ 357.353934][T14680] ? clear_bhb_loop+0x35/0x90 [ 357.358633][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.364707][T14680] RIP: 0033:0x7f0fa697e719 [ 357.369110][T14680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.388724][T14680] RSP: 002b:00007f0fa780f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 357.397243][T14680] RAX: ffffffffffffffda RBX: 00007f0fa6b35f80 RCX: 00007f0fa697e719 [ 357.405214][T14680] RDX: 0000000000000010 RSI: 0000000020000640 RDI: 0000000000000004 [ 357.413187][T14680] RBP: 00007f0fa780f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.421155][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.429122][T14680] R13: 0000000000000000 R14: 00007f0fa6b35f80 R15: 00007ffebc2399b8 [ 357.437096][T14680] [ 357.447008][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2927'. [ 357.462647][T14688] netlink: 'syz.8.2930': attribute type 1 has an invalid length. [ 357.519256][T14688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.635219][T14704] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2934'. [ 357.877636][T14715] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2939'. [ 357.899590][T14715] FAULT_INJECTION: forcing a failure. [ 357.899590][T14715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.923981][T14715] CPU: 1 UID: 0 PID: 14715 Comm: syz.6.2939 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 357.934827][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.944911][T14715] Call Trace: [ 357.948215][T14715] [ 357.951166][T14715] dump_stack_lvl+0x241/0x360 [ 357.955873][T14715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.961097][T14715] ? __pfx__printk+0x10/0x10 [ 357.965725][T14715] should_fail_ex+0x3b0/0x4e0 [ 357.970429][T14715] _copy_from_user+0x2f/0xc0 [ 357.975042][T14715] move_addr_to_kernel+0x82/0x150 [ 357.980060][T14715] __sys_sendto+0x29f/0x4f0 [ 357.984571][T14715] ? __pfx___sys_sendto+0x10/0x10 [ 357.989619][T14715] ? __mutex_unlock_slowpath+0x21d/0x750 [ 357.995274][T14715] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.001264][T14715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.007603][T14715] __x64_sys_sendto+0xde/0x100 [ 358.012371][T14715] do_syscall_64+0xf3/0x230 [ 358.016883][T14715] ? clear_bhb_loop+0x35/0x90 [ 358.021551][T14715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.027439][T14715] RIP: 0033:0x7f01bad7e719 [ 358.031842][T14715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.051450][T14715] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 358.059879][T14715] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 358.067844][T14715] RDX: 00000000000005b2 RSI: 0000000020000180 RDI: 0000000000000003 [ 358.075811][T14715] RBP: 00007f01bbb18090 R08: 0000000020000140 R09: 0000000000000014 [ 358.083779][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.091762][T14715] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 358.099741][T14715] [ 358.160950][T14723] netlink: 'syz.6.2943': attribute type 1 has an invalid length. [ 358.213437][T14723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.241274][T14725] netlink: 'syz.8.2942': attribute type 10 has an invalid length. [ 358.313492][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2946'. [ 358.422310][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2948'. [ 358.524158][T14741] FAULT_INJECTION: forcing a failure. [ 358.524158][T14741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.564364][T14741] CPU: 0 UID: 0 PID: 14741 Comm: syz.6.2950 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 358.575191][T14741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.585275][T14741] Call Trace: [ 358.588574][T14741] [ 358.591508][T14741] dump_stack_lvl+0x241/0x360 [ 358.596188][T14741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.601396][T14741] ? __pfx__printk+0x10/0x10 [ 358.605998][T14741] ? __pfx_lock_release+0x10/0x10 [ 358.611043][T14741] should_fail_ex+0x3b0/0x4e0 [ 358.615714][T14741] _copy_from_user+0x2f/0xc0 [ 358.620304][T14741] copy_msghdr_from_user+0xae/0x680 [ 358.625512][T14741] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 358.631355][T14741] __sys_sendmsg+0x22d/0x380 [ 358.635967][T14741] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.641082][T14741] ? __pfx_vfs_write+0x10/0x10 [ 358.645880][T14741] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.652233][T14741] ? do_syscall_64+0x100/0x230 [ 358.657012][T14741] ? do_syscall_64+0xb6/0x230 [ 358.661689][T14741] do_syscall_64+0xf3/0x230 [ 358.666210][T14741] ? clear_bhb_loop+0x35/0x90 [ 358.670912][T14741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.676842][T14741] RIP: 0033:0x7f01bad7e719 [ 358.681280][T14741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.700910][T14741] RSP: 002b:00007f01bbb18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.709398][T14741] RAX: ffffffffffffffda RBX: 00007f01baf35f80 RCX: 00007f01bad7e719 [ 358.717383][T14741] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 358.725364][T14741] RBP: 00007f01bbb18090 R08: 0000000000000000 R09: 0000000000000000 [ 358.733355][T14741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.737040][T14748] FAULT_INJECTION: forcing a failure. [ 358.737040][T14748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.741321][T14741] R13: 0000000000000000 R14: 00007f01baf35f80 R15: 00007ffd986ffeb8 [ 358.762319][T14741] [ 358.824341][T14748] CPU: 0 UID: 0 PID: 14748 Comm: syz.9.2952 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 358.835166][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.845250][T14748] Call Trace: [ 358.848542][T14748] [ 358.851484][T14748] dump_stack_lvl+0x241/0x360 [ 358.856178][T14748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.861399][T14748] ? __pfx__printk+0x10/0x10 [ 358.866031][T14748] ? __pfx_lock_release+0x10/0x10 [ 358.871089][T14748] should_fail_ex+0x3b0/0x4e0 [ 358.875782][T14748] _copy_from_user+0x2f/0xc0 [ 358.880379][T14748] __sys_bpf+0x1a4/0x810 [ 358.884621][T14748] ? __pfx___sys_bpf+0x10/0x10 [ 358.889389][T14748] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.895377][T14748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.901704][T14748] ? do_syscall_64+0x100/0x230 [ 358.906469][T14748] __x64_sys_bpf+0x7c/0x90 [ 358.910882][T14748] do_syscall_64+0xf3/0x230 [ 358.915381][T14748] ? clear_bhb_loop+0x35/0x90 [ 358.920055][T14748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.925953][T14748] RIP: 0033:0x7f0fa697e719 [ 358.930363][T14748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.949967][T14748] RSP: 002b:00007f0fa77cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.958377][T14748] RAX: ffffffffffffffda RBX: 00007f0fa6b36130 RCX: 00007f0fa697e719 [ 358.966346][T14748] RDX: 0000000000000020 RSI: 00000000200003c0 RDI: 0000000000000001 [ 358.974312][T14748] RBP: 00007f0fa77cd090 R08: 0000000000000000 R09: 0000000000000000 [ 358.982278][T14748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.990243][T14748] R13: 0000000000000001 R14: 00007f0fa6b36130 R15: 00007ffebc2399b8 [ 358.998223][T14748] [ 359.106972][T14757] netlink: 'syz.6.2955': attribute type 1 has an invalid length. [ 359.124749][T14762] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2956'. [ 359.145493][T14763] FAULT_INJECTION: forcing a failure. [ 359.145493][T14763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.161650][T14757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.172561][T14757] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2955'. [ 359.189229][T14763] CPU: 1 UID: 0 PID: 14763 Comm: syz.7.2958 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 359.191720][T14757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.200013][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.200032][T14763] Call Trace: [ 359.200040][T14763] [ 359.200050][T14763] dump_stack_lvl+0x241/0x360 [ 359.200075][T14763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.200093][T14763] ? __pfx__printk+0x10/0x10 [ 359.200117][T14763] ? __pfx_lock_release+0x10/0x10 [ 359.200148][T14763] should_fail_ex+0x3b0/0x4e0 [ 359.200179][T14763] _copy_from_user+0x2f/0xc0 [ 359.208390][T14757] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 359.216799][T14763] copy_msghdr_from_user+0xae/0x680 [ 359.216833][T14763] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 359.216865][T14763] __sys_recvmsg+0x24c/0x3d0 [ 359.223434][T14757] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 359.227735][T14763] ? __pfx___sys_recvmsg+0x10/0x10 [ 359.227765][T14763] ? __mutex_unlock_slowpath+0x21d/0x750 [ 359.227810][T14763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.302050][T14763] ? do_syscall_64+0x100/0x230 [ 359.306842][T14763] ? do_syscall_64+0xb6/0x230 [ 359.311551][T14763] do_syscall_64+0xf3/0x230 [ 359.316083][T14763] ? clear_bhb_loop+0x35/0x90 [ 359.320790][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.326716][T14763] RIP: 0033:0x7fed18f7e719 [ 359.331148][T14763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.339804][T14770] FAULT_INJECTION: forcing a failure. [ 359.339804][T14770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.350757][T14763] RSP: 002b:00007fed19d8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 359.350784][T14763] RAX: ffffffffffffffda RBX: 00007fed19135f80 RCX: 00007fed18f7e719 [ 359.350798][T14763] RDX: 0000000000000060 RSI: 00000000200003c0 RDI: 0000000000000005 [ 359.350811][T14763] RBP: 00007fed19d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.350822][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.350833][T14763] R13: 0000000000000000 R14: 00007fed19135f80 R15: 00007ffe752284b8 [ 359.350860][T14763] [ 359.424778][T14770] CPU: 0 UID: 0 PID: 14770 Comm: syz.8.2960 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 359.435589][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.445669][T14770] Call Trace: [ 359.448973][T14770] [ 359.451923][T14770] dump_stack_lvl+0x241/0x360 [ 359.456636][T14770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.461866][T14770] ? __pfx__printk+0x10/0x10 [ 359.466489][T14770] ? __pfx_lock_release+0x10/0x10 [ 359.471553][T14770] should_fail_ex+0x3b0/0x4e0 [ 359.476262][T14770] _copy_from_user+0x2f/0xc0 [ 359.480881][T14770] __sys_bpf+0x1a4/0x810 [ 359.485155][T14770] ? __pfx___sys_bpf+0x10/0x10 [ 359.489970][T14770] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.495983][T14770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.502342][T14770] ? do_syscall_64+0x100/0x230 [ 359.507137][T14770] __x64_sys_bpf+0x7c/0x90 [ 359.511578][T14770] do_syscall_64+0xf3/0x230 [ 359.516101][T14770] ? clear_bhb_loop+0x35/0x90 [ 359.520801][T14770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.526725][T14770] RIP: 0033:0x7f580d17e719 [ 359.531161][T14770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.550795][T14770] RSP: 002b:00007f580dfa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.559244][T14770] RAX: ffffffffffffffda RBX: 00007f580d335f80 RCX: 00007f580d17e719 [ 359.567247][T14770] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 000000000000001a [ 359.575248][T14770] RBP: 00007f580dfa9090 R08: 0000000000000000 R09: 0000000000000000 [ 359.578934][T14781] FAULT_INJECTION: forcing a failure. [ 359.578934][T14781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.583221][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.583238][T14770] R13: 0000000000000000 R14: 00007f580d335f80 R15: 00007ffd2ab5dde8 [ 359.583267][T14770] [ 359.583631][ C0] net_ratelimit: 15 callbacks suppressed [ 359.583678][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.601194][T14781] CPU: 1 UID: 0 PID: 14781 Comm: syz.9.2964 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 359.604435][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.612343][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.655819][T14781] Call Trace: [ 359.659097][T14781] [ 359.662027][T14781] dump_stack_lvl+0x241/0x360 [ 359.666707][T14781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.671901][T14781] ? __pfx__printk+0x10/0x10 [ 359.676496][T14781] ? __pfx_lock_release+0x10/0x10 [ 359.681522][T14781] should_fail_ex+0x3b0/0x4e0 [ 359.686195][T14781] _copy_from_user+0x2f/0xc0 [ 359.690785][T14781] __sys_bpf+0x1a4/0x810 [ 359.695024][T14781] ? __pfx___sys_bpf+0x10/0x10 [ 359.699791][T14781] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.705788][T14781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.712202][T14781] ? do_syscall_64+0x100/0x230 [ 359.716963][T14781] __x64_sys_bpf+0x7c/0x90 [ 359.721374][T14781] do_syscall_64+0xf3/0x230 [ 359.725872][T14781] ? clear_bhb_loop+0x35/0x90 [ 359.730542][T14781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.736436][T14781] RIP: 0033:0x7f0fa697e719 [ 359.740849][T14781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.760454][T14781] RSP: 002b:00007f0fa780f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.768867][T14781] RAX: ffffffffffffffda RBX: 00007f0fa6b35f80 RCX: 00007f0fa697e719 [ 359.776834][T14781] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000000 [ 359.784799][T14781] RBP: 00007f0fa780f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.792775][T14781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.800738][T14781] R13: 0000000000000001 R14: 00007f0fa6b35f80 R15: 00007ffebc2399b8 [ 359.808722][T14781] [ 359.823822][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.823861][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.870081][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2956'. [ 360.063776][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.206495][T14798] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 360.384110][ T5855] Bluetooth: hci6: command 0x0406 tx timeout [ 360.390231][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 360.398892][ T5844] Bluetooth: hci8: command 0x0406 tx timeout [ 360.401441][ T5847] Bluetooth: hci7: command 0x0406 tx timeout [ 360.416657][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2973'. [ 360.541161][T14824] dccp_invalid_packet: P.Data Offset(33) too large [ 360.623799][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.631078][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.767531][T14836] SET target dimension over the limit! [ 360.864189][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.096223][T14850] netlink: 'syz.8.2983': attribute type 10 has an invalid length. [ 361.133086][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2983'. [ 361.842795][T14873] netlink: 'syz.6.2995': attribute type 1 has an invalid length. [ 361.958031][T14873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.002587][T14877] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2995'. [ 362.045132][T14877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.083578][T14877] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 362.102543][T14877] bond4: (slave ip6tnl1): Error -95 calling set_mac_address [ 362.162435][T14885] netlink: 'syz.8.2999': attribute type 10 has an invalid length. [ 362.188728][T14885] dummy0: left promiscuous mode [ 362.240259][T14885] dummy0: entered promiscuous mode [ 362.251044][T14885] [ 362.253397][T14885] ============================================ [ 362.259569][T14885] WARNING: possible recursive locking detected [ 362.265750][T14885] 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 Not tainted [ 362.272863][T14885] -------------------------------------------- [ 362.279014][T14885] syz.8.2999/14885 is trying to acquire lock: [ 362.285072][T14885] ffff8880663b4e00 (team->team_lock_key#8){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 362.295354][T14885] [ 362.295354][T14885] but task is already holding lock: [ 362.302711][T14885] ffff8880663b4e00 (team->team_lock_key#8){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 362.312389][T14885] [ 362.312389][T14885] other info that might help us debug this: [ 362.320443][T14885] Possible unsafe locking scenario: [ 362.320443][T14885] [ 362.327882][T14885] CPU0 [ 362.331155][T14885] ---- [ 362.334421][T14885] lock(team->team_lock_key#8); [ 362.339361][T14885] lock(team->team_lock_key#8); [ 362.344296][T14885] [ 362.344296][T14885] *** DEADLOCK *** [ 362.344296][T14885] [ 362.352423][T14885] May be due to missing lock nesting notation [ 362.352423][T14885] [ 362.360745][T14885] 2 locks held by syz.8.2999/14885: [ 362.365941][T14885] #0: ffffffff8fcd4968 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.375380][T14885] #1: ffff8880663b4e00 (team->team_lock_key#8){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 362.385481][T14885] [ 362.385481][T14885] stack backtrace: [ 362.391358][T14885] CPU: 0 UID: 0 PID: 14885 Comm: syz.8.2999 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 362.402106][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.412150][T14885] Call Trace: [ 362.415418][T14885] [ 362.418342][T14885] dump_stack_lvl+0x241/0x360 [ 362.423011][T14885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.428201][T14885] ? __pfx__printk+0x10/0x10 [ 362.432784][T14885] ? lockdep_unlock+0x16a/0x300 [ 362.437631][T14885] print_deadlock_bug+0x483/0x620 [ 362.442645][T14885] validate_chain+0x15e2/0x5920 [ 362.447490][T14885] ? __pfx_validate_chain+0x10/0x10 [ 362.452685][T14885] ? __pfx_validate_chain+0x10/0x10 [ 362.457874][T14885] ? __lock_acquire+0x1384/0x2050 [ 362.462896][T14885] ? __pfx_validate_chain+0x10/0x10 [ 362.468095][T14885] ? mark_lock+0x9a/0x360 [ 362.472414][T14885] ? mark_lock+0x9a/0x360 [ 362.476730][T14885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.483070][T14885] __lock_acquire+0x1384/0x2050 [ 362.487945][T14885] lock_acquire+0x1ed/0x550 [ 362.492801][T14885] ? team_port_change_check+0x51/0x1e0 [ 362.498258][T14885] ? __pfx_lock_acquire+0x10/0x10 [ 362.503280][T14885] ? mark_lock+0x9a/0x360 [ 362.507603][T14885] ? __pfx___might_resched+0x10/0x10 [ 362.512882][T14885] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 362.519392][T14885] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.525367][T14885] ? ip_mc_up+0x1da/0x300 [ 362.529692][T14885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.536013][T14885] __mutex_lock+0x136/0xd70 [ 362.540535][T14885] ? team_port_change_check+0x51/0x1e0 [ 362.545987][T14885] ? __pfx_igmp_group_added+0x10/0x10 [ 362.551353][T14885] ? ip_mc_up+0x1da/0x300 [ 362.555674][T14885] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 362.561390][T14885] ? bond_netdev_event+0xdd/0xf20 [ 362.566407][T14885] ? team_port_change_check+0x51/0x1e0 [ 362.571853][T14885] ? __pfx___mutex_lock+0x10/0x10 [ 362.576868][T14885] ? __asan_memset+0x23/0x50 [ 362.581454][T14885] team_port_change_check+0x51/0x1e0 [ 362.586730][T14885] team_device_event+0x4e6/0x5b0 [ 362.591653][T14885] ? notifier_call_chain+0x162/0x3e0 [ 362.596936][T14885] notifier_call_chain+0x19f/0x3e0 [ 362.602047][T14885] __dev_notify_flags+0x207/0x400 [ 362.607066][T14885] ? dev_set_rx_mode+0xb8/0x2e0 [ 362.611916][T14885] ? __pfx___dev_notify_flags+0x10/0x10 [ 362.617452][T14885] ? __dev_change_flags+0x515/0x6f0 [ 362.622641][T14885] ? __pfx___dev_change_flags+0x10/0x10 [ 362.628178][T14885] ? dsa_user_netdevice_event+0x714/0x2970 [ 362.633979][T14885] dev_change_flags+0xf0/0x1a0 [ 362.638823][T14885] vlan_device_event+0x1b81/0x1de0 [ 362.643931][T14885] ? rt6_multipath_rebalance+0x7e0/0x880 [ 362.649558][T14885] ? br_device_event+0x148/0x970 [ 362.654482][T14885] ? __pfx_phonet_device_notify+0x10/0x10 [ 362.660189][T14885] ? __pfx_vlan_device_event+0x10/0x10 [ 362.665639][T14885] ? __pfx_br_device_event+0x10/0x10 [ 362.670918][T14885] ? raw_notifier+0x9d/0x740 [ 362.675506][T14885] ? isotp_notifier+0xa4/0x6b0 [ 362.680259][T14885] ? cgw_notifier+0xd8/0x3b0 [ 362.684837][T14885] ? packet_notifier+0x76/0xa30 [ 362.689683][T14885] notifier_call_chain+0x19f/0x3e0 [ 362.694791][T14885] dev_open+0x13a/0x1b0 [ 362.698938][T14885] ? __pfx_dev_open+0x10/0x10 [ 362.703602][T14885] ? team_add_slave+0x69e/0x2760 [ 362.708529][T14885] ? team_add_slave+0x69e/0x2760 [ 362.713457][T14885] ? team_add_slave+0x8b5/0x2760 [ 362.718386][T14885] team_add_slave+0x9c8/0x2760 [ 362.723145][T14885] ? __dev_change_flags+0x515/0x6f0 [ 362.728332][T14885] ? __pfx_team_add_slave+0x10/0x10 [ 362.733529][T14885] ? __pfx___dev_change_flags+0x10/0x10 [ 362.739065][T14885] ? validate_linkmsg+0x825/0xa30 [ 362.744083][T14885] ? vprintk_emit+0x7ed/0xa10 [ 362.748749][T14885] ? __pfx_validate_linkmsg+0x10/0x10 [ 362.754116][T14885] ? mutex_is_locked+0x12/0x50 [ 362.758871][T14885] do_setlink+0xe40/0x4210 [ 362.763282][T14885] ? __nla_validate_parse+0x4f4/0x3090 [ 362.768738][T14885] ? __pfx__printk+0x10/0x10 [ 362.773328][T14885] ? __pfx_do_setlink+0x10/0x10 [ 362.778170][T14885] ? __nla_validate_parse+0x26ce/0x3090 [ 362.783709][T14885] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 362.789252][T14885] ? rtnl_newlink+0x107/0x1550 [ 362.794011][T14885] ? aa_get_newest_label+0xff/0x6f0 [ 362.799199][T14885] ? __pfx_aa_get_newest_label+0x10/0x10 [ 362.804819][T14885] ? __pfx_aa_get_newest_label+0x10/0x10 [ 362.810445][T14885] ? apparmor_capable+0x13b/0x1b0 [ 362.815461][T14885] ? bpf_lsm_capable+0x9/0x10 [ 362.820131][T14885] ? security_capable+0x7e/0x2d0 [ 362.825060][T14885] ? ns_capable+0x8a/0xf0 [ 362.829378][T14885] ? rtnl_link_get_net_capable+0x103/0x2d0 [ 362.835176][T14885] rtnl_newlink+0xeec/0x1550 [ 362.839759][T14885] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.844773][T14885] ? __mutex_lock+0x9ab/0xd70 [ 362.849440][T14885] ? __mutex_lock+0x52a/0xd70 [ 362.854106][T14885] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.859202][T14885] ? __pfx___mutex_lock+0x10/0x10 [ 362.864216][T14885] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.869228][T14885] rtnetlink_rcv_msg+0x73f/0xcf0 [ 362.874151][T14885] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 362.879255][T14885] ? __lock_acquire+0x1384/0x2050 [ 362.884274][T14885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.889732][T14885] netlink_rcv_skb+0x1e3/0x430 [ 362.894489][T14885] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.899937][T14885] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.905220][T14885] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.910412][T14885] netlink_unicast+0x7f6/0x990 [ 362.915168][T14885] ? __pfx_netlink_unicast+0x10/0x10 [ 362.920443][T14885] ? __virt_addr_valid+0x183/0x530 [ 362.925552][T14885] ? __check_object_size+0x48e/0x900 [ 362.930829][T14885] netlink_sendmsg+0x8e4/0xcb0 [ 362.935589][T14885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.940864][T14885] ? aa_sock_msg_perm+0x91/0x160 [ 362.945802][T14885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.951079][T14885] __sock_sendmsg+0x221/0x270 [ 362.955749][T14885] ____sys_sendmsg+0x52a/0x7e0 [ 362.960507][T14885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.965790][T14885] __sys_sendmsg+0x292/0x380 [ 362.970371][T14885] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.975487][T14885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.981807][T14885] ? do_syscall_64+0x100/0x230 [ 362.986562][T14885] ? do_syscall_64+0xb6/0x230 [ 362.991228][T14885] do_syscall_64+0xf3/0x230 [ 362.995721][T14885] ? clear_bhb_loop+0x35/0x90 [ 363.000388][T14885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.006276][T14885] RIP: 0033:0x7f580d17e719 [ 363.010683][T14885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.030279][T14885] RSP: 002b:00007f580dfa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.038685][T14885] RAX: ffffffffffffffda RBX: 00007f580d335f80 RCX: 00007f580d17e719 [ 363.046646][T14885] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 363.054953][T14885] RBP: 00007f580d1f139e R08: 0000000000000000 R09: 0000000000000000 [ 363.062913][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.070870][T14885] R13: 0000000000000000 R14: 00007f580d335f80 R15: 00007ffd2ab5dde8 [ 363.078843][T14885] [ 365.023753][ C1] net_ratelimit: 17 callbacks suppressed [ 365.023776][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.183807][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.190902][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.198014][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.263739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.063749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.223987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.231092][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.238190][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.303769][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.233729][ C1] net_ratelimit: 15 callbacks suppressed [ 370.233751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.383894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.391000][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.398123][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.463784][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.263724][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.423815][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.430937][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.438057][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.503758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available