last executing test programs: 51.876005745s ago: executing program 3 (id=897): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c00000003"], 0xa0}}, 0x8040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000004380)=[{{&(0x7f00000002c0)=@generic={0x1, "5c5cefed78a48d3dad155e60f94160013af79a50e8809133e38fc18a2433ffe0cbdaa20eaa1b67ef5399bf343d3e1043eec0e603c55917c7e218844590eca2a2286162a9c947d6fec327b043def4ecabf64993266dfdc241cc6e14ea6fe29f6542400f00fffcf467faa67c2d31462dc67ed88895180aae118fbc4a2b7c9a"}, 0x80, 0x0}}], 0x1, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000040)=0x63, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 51.734509192s ago: executing program 3 (id=899): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x3) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) write$tun(r7, &(0x7f00000000c0)={@val={0x0, 0x8914}, @val={0x3, 0x0, 0xe6c, 0x5, 0x8, 0x9}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @generic={0x3, 0x88e5, 0x6, 0x1, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, "9b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "c98609e27c071b58843f682d60765d24"}}}}}, 0x41) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, r4, r4, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) epoll_create1(0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) listen(0xffffffffffffffff, 0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) (async) write$tun(r7, &(0x7f00000000c0)={@val={0x0, 0x8914}, @val={0x3, 0x0, 0xe6c, 0x5, 0x8, 0x9}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @generic={0x3, 0x88e5, 0x6, 0x1, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, "9b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "c98609e27c071b58843f682d60765d24"}}}}}, 0x41) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, r4, r4, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) (async) 51.547780534s ago: executing program 3 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x80000000}]}}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 45.798335475s ago: executing program 1 (id=937): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r4, 0x5411, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x22, 0x0, &(0x7f00000002c0)="259a53f271a76d2608004c6588a87f9e34de1d08f5fc539c04277682bcb8ea6ed6ea", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) close(r0) socket(0x10, 0x803, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 45.276407697s ago: executing program 1 (id=940): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000), 0x4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31070000000000009621012834d29d6a01006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x2, 0x0, 0x1bb5818a4d1752a}, 0x4890) sendfile(r6, r5, 0x0, 0x5) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, r9, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r12}, 0x10) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 45.096777997s ago: executing program 1 (id=941): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000006580), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000006680)={&(0x7f00000065c0)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000b40)=@ethtool_dump={0x3e, 0x1}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000b5467a8daafcbd9d6850b36d938500001ff76ac30450a1f81128ab6595aefca60bc086bc79764b13c6253f32dc47dfd5a067a79c4fdfc1f2b355d9be34c6e3b896dd6326d78508f368e1c0971083bcb2f67eefc44d8ab1f6849d60f13d0c7acb8cbe53f08436b0fdd5fb06f78ef3dc336933284e320568b2d980160526a377f1683fe027fb9e789e16efa4c796dbc04e1eff2f6b43af4d1bdfd0e5642b14fd4603a200192e0dccb0fd6266ddf507d13699c0df406245"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000006580), r1) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000006680)={&(0x7f00000065c0)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4(r3, 0x0, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r5}, 0x8) (async) socket(0x1, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000b40)=@ethtool_dump={0x3e, 0x1}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000b5467a8daafcbd9d6850b36d938500001ff76ac30450a1f81128ab6595aefca60bc086bc79764b13c6253f32dc47dfd5a067a79c4fdfc1f2b355d9be34c6e3b896dd6326d78508f368e1c0971083bcb2f67eefc44d8ab1f6849d60f13d0c7acb8cbe53f08436b0fdd5fb06f78ef3dc336933284e320568b2d980160526a377f1683fe027fb9e789e16efa4c796dbc04e1eff2f6b43af4d1bdfd0e5642b14fd4603a200192e0dccb0fd6266ddf507d13699c0df406245"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 44.864363116s ago: executing program 1 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r1 = socket$packet(0x11, 0x2, 0x300) epoll_create(0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x6, @remote}, 0x10) 40.640545682s ago: executing program 3 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x80000000}]}}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 30.829338205s ago: executing program 1 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r1 = socket$packet(0x11, 0x2, 0x300) epoll_create(0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x6, @remote}, 0x10) 27.639686282s ago: executing program 3 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x80000000}]}}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 16.821511875s ago: executing program 1 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r1 = socket$packet(0x11, 0x2, 0x300) epoll_create(0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r2, 0x1, 0x6, @remote}, 0x10) 15.313925973s ago: executing program 3 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x80000000}]}}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 4.880946654s ago: executing program 4 (id=1208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) unshare(0x4000600) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x5, &(0x7f00000000c0)=0x2, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2b, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x24}}, 0x90) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4.705878661s ago: executing program 4 (id=1210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.139762037s ago: executing program 0 (id=1215): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x16}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xe5ec, 0x80000001, 0x7f00, 0x0, 0xffffffff}, 0x1f, 0x200000, 0x3, 0x0, 0x101, 0x14, 0x0, 0xfc, 0x0, 0xffff, {0xffffff81}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x885}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.860353338s ago: executing program 0 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) read(r0, &(0x7f0000000040)=""/225, 0xe1) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) read(r0, &(0x7f0000000040)=""/225, 0xe1) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 3.596733562s ago: executing program 4 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f00000003c0), &(0x7f00000002c0)=@tcp6=r4, 0x2}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'full', 0x20, 0xffffffffffff134c, 0x20, 0xffffb}, 0x2f) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f00000001c0)=@buf={0xb1, &(0x7f0000000100)="ef769ee034d8efbb8d3e23f1ef9e6eee64cf6b4856e0dd3fd2cb5c4417fe13fb7dff77b0fcc40ce50d59abcea574c83b689d5ce3755c1037ef0ef40a756f1454bdebed0b58354da9f45ad8ef6aa878def13d2dee494a674a6c4f60923a11c0231b2c9c1920f84284a52db6bb7a99467ffc829938be9031d95ad4d40039f9a9a29752a2d8318798ba9c784f1fc5abd364b92514798aad62c43da5e16fb2a692dc2eeda8ea1cc8986c810a41ce3625342147"}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r4, @ANYBLOB="8b04040000000000700012800b00010067877679d6656e65766500006001028005000400010000001400070000000000000000000000080000fbe2f86c86160cffaa0000050009000100000005000c"], 0x90}, 0x1, 0x0, 0x0, 0x4141}, 0x0) 3.566804001s ago: executing program 2 (id=1219): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="f80000000101015bfcffff00000020000a00000944001980080002000200000008000200b000000008000180"], 0xf8}}, 0x8004) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) close(0x4) read(r1, &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x3ec}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="f80000000101015bfcffff00000020000a00000944001980080002000200000008000200b000000008000180"], 0xf8}}, 0x8004) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) (async) close(0x4) (async) read(r1, &(0x7f0000000000), 0x0) (async) 3.452760141s ago: executing program 0 (id=1220): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00002fe20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x6, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x66, 0x7}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0x2, [{0x5, 0x10001, 0x7d}, {0x9, 0x8001, 0x7}, {0x2, 0xf, 0x8}, {0xf, 0x7, 0x4}, {0xb, 0x101, 0x9}, {0xe, 0x7, 0x1}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0xa, 0xe}, {0x3, 0xfff}, {0x3, 0x1}]}, @union={0x4, 0x2, 0x0, 0x5, 0x0, 0xfff, [{0x7, 0x0, 0x7}, {0x5, 0x0, 0xf}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @enum64={0x4, 0x5, 0x0, 0x13, 0x1, 0xb, [{0x2, 0x7fff, 0xff}, {0x8, 0x5, 0x9}, {0xa, 0x7f, 0x6}, {0x3, 0x2f404a6b, 0x3}, {0x2, 0x101, 0xf}]}]}, {0x0, [0x61, 0x30, 0x2e, 0x0]}}, &(0x7f0000000a40)=""/208, 0x136, 0xd0, 0x0, 0xfc5b, 0x10000, @value=r0}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.418158775s ago: executing program 4 (id=1221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)='k', 0x1}, {&(0x7f00000005c0)='0', 0x1}, {&(0x7f0000005180)='^', 0x1}], 0x3}}], 0x1, 0x0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20045) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 3.259705243s ago: executing program 2 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) clock_gettime(0x7, &(0x7f00000003c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x4, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x40480c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef82, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x100, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x300, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x54}}, 0x0) 3.196277181s ago: executing program 4 (id=1223): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0x2, 0x3, 0x2) socket$kcm(0x2d, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r2 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000002c0)}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.04572028s ago: executing program 2 (id=1224): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18020300000000000000000000000000950000000000c927f150000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000580)={0x6, 'veth0_to_team\x00', {}, 0x5}) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x1}, 0x1}) 2.647098228s ago: executing program 2 (id=1225): r0 = socket(0x22, 0x4, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 2.528967417s ago: executing program 0 (id=1226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000680)="01d163f3", 0x4, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000600)="099f51a17d4b1574047528cf1544befa5358896bda6a19612200c532e25453ac891b36", 0x23, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.423630972s ago: executing program 2 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000c0007800800124000060000050001000600"], 0x4c}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb813a5af23e92c01a58b5d601000400"/30], &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000, @value}, 0x28) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x24, &(0x7f0000000000), 0x4) write(r5, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4010, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) close(r1) 1.647827935s ago: executing program 0 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x5, 0x3, 0x7) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021000600000018011a80300002802c00018008000f0008000000080011007a80000008002000ff010000080004000c00000008001e0003000000a0000a800500080002"], 0x1c0}, 0x1, 0xba01}, 0x20048050) 1.492956288s ago: executing program 0 (id=1229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 46.647739ms ago: executing program 4 (id=1230): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0xc, 0x9, 0x86, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x7) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="00214717a70700000000030600710a06069d856829c2f5d7a3", 0x19}], 0x1, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r7, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040), 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) recvmsg(r7, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000006babf55ceed8d382e0599ffdff87231382a897bf19c128e4a83823cae8e4091cbf636c4869424ce63ab69bbc270be78ec18faa97c1b0306f52e73c3c24a5e36aaa72a114f8a0d44ad229fb64183167bb6ca7bf370ce0ea06d2d09bf2c3c8dd98492a80d76b48622c8e413785efa3e6627f1251dcb515db48444b79e58261fe79f9ba6055", @ANYRES8=r6, @ANYBLOB="03cbda7f3aa77845050600", @ANYRES32=r6, @ANYRES32=r3, @ANYRESHEX=r5, @ANYRESOCT=r6], 0xec0}}, 0x80) 0s ago: executing program 2 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x5, 0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r4, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000080) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x1}, {0x9, 0x1, 0xfa, 0xff}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="08000c00ff"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): kaller1: entered promiscuous mode [ 132.729816][ T7451] syzkaller1: entered allmulticast mode [ 132.747011][ T7452] netlink: 72 bytes leftover after parsing attributes in process `syz.3.386'. [ 132.817699][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834452][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882642][ T7461] xt_TCPMSS: Only works on TCP SYN packets [ 132.973338][ T7458] netlink: 148 bytes leftover after parsing attributes in process `syz.3.386'. [ 132.991434][ T7458] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 133.019954][ T7460] veth0_to_bridge: entered promiscuous mode [ 133.033051][ T7455] veth0_to_bridge: left promiscuous mode [ 133.179774][ T7468] sctp: [Deprecated]: syz.4.390 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.179774][ T7468] Use struct sctp_sack_info instead [ 133.315004][ T7476] xt_l2tp: v2 doesn't support IP mode [ 133.688194][ T7501] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.108197][ T7509] veth0_to_bridge: entered promiscuous mode [ 134.116324][ T7508] veth0_to_bridge: left promiscuous mode [ 134.326698][ T7518] netlink: 'syz.0.402': attribute type 16 has an invalid length. [ 134.342487][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 134.352360][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 134.362469][ T7529] lo speed is unknown, defaulting to 1000 [ 134.384896][ T7529] lo speed is unknown, defaulting to 1000 [ 134.453678][ T7529] lo speed is unknown, defaulting to 1000 [ 134.509775][ T7529] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.558391][ T7536] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.570582][ T7529] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.624743][ T7541] netlink: 'syz.0.408': attribute type 11 has an invalid length. [ 134.729942][ T7529] lo speed is unknown, defaulting to 1000 [ 134.771909][ T7529] lo speed is unknown, defaulting to 1000 [ 134.785733][ T7529] lo speed is unknown, defaulting to 1000 [ 134.826318][ T7529] lo speed is unknown, defaulting to 1000 [ 134.844346][ T7529] lo speed is unknown, defaulting to 1000 [ 134.949829][ T7554] veth0_to_bridge: entered promiscuous mode [ 134.957991][ T7553] veth0_to_bridge: left promiscuous mode [ 135.178965][ T7563] lo speed is unknown, defaulting to 1000 [ 135.389503][ T7577] lo speed is unknown, defaulting to 1000 [ 135.676343][ T7578] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 135.730969][ T7578] team0: Port device geneve0 added [ 135.790326][ T7578] syz.2.421 (7578) used greatest stack depth: 19624 bytes left [ 136.001750][ T7598] __nla_validate_parse: 10 callbacks suppressed [ 136.001768][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 136.219474][ T7611] veth0_to_bridge: entered promiscuous mode [ 136.234481][ T7606] veth0_to_bridge: left promiscuous mode [ 136.340668][ T7618] IPVS: length: 35 != 24 [ 136.524896][ T7628] lo speed is unknown, defaulting to 1000 [ 136.735990][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 136.863713][ T7637] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 136.889115][ T7646] raw_sendmsg: syz.4.437 forgot to set AF_INET. Fix it! [ 137.110320][ T7658] netlink: 9 bytes leftover after parsing attributes in process `syz.2.440'. [ 137.150788][ T7658] 0·: renamed from hsr_slave_1 (while UP) [ 137.160001][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'. [ 137.189139][ T7658] 0·: entered allmulticast mode [ 137.200502][ T7658] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 137.269614][ T7661] veth0_to_bridge: entered promiscuous mode [ 137.290034][ T7660] veth0_to_bridge: left promiscuous mode [ 137.436225][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 137.550734][ T7664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.579680][ T7664] sctp: [Deprecated]: syz.2.445 (pid 7664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.579680][ T7664] Use struct sctp_sack_info instead [ 137.599999][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 137.609469][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 137.701572][ T7669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.709138][ T7669] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.722588][ T7669] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 137.773784][ T7673] netlink: 'syz.4.446': attribute type 27 has an invalid length. [ 137.854074][ T7686] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 137.865535][ T7688] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 138.043987][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.070652][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.130785][ T7673] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.150810][ T7673] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.160244][ T7673] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.176808][ T7673] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.281713][ T7673] vlan0: left allmulticast mode [ 138.286723][ T7673] bond0: left allmulticast mode [ 138.292329][ T7673] bond_slave_0: left allmulticast mode [ 138.297830][ T7673] bond_slave_1: left allmulticast mode [ 138.307108][ T9] lo speed is unknown, defaulting to 1000 [ 138.314762][ T7676] tipc: Started in network mode [ 138.327753][ T9] syz2: Port: 1 Link DOWN [ 138.341641][ T7676] tipc: Node identity e6ced1748bbb, cluster identity 4711 [ 138.349285][ T7676] tipc: Enabled bearer , priority 0 [ 138.403505][ T7690] syzkaller0: entered promiscuous mode [ 138.419472][ T7690] syzkaller0: entered allmulticast mode [ 138.456316][ T7696] tipc: Resetting bearer [ 138.532391][ T7675] tipc: Resetting bearer [ 138.598519][ T7675] tipc: Disabling bearer [ 138.668471][ T7711] veth0_to_bridge: entered promiscuous mode [ 138.689643][ T7709] veth0_to_bridge: left promiscuous mode [ 138.705958][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 139.004244][ T7734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.124544][ T7734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.312579][ T7734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.412596][ T7734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.604559][ T7734] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.695041][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.472'. [ 139.704874][ T7734] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.746408][ T7734] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.778339][ T7774] lo speed is unknown, defaulting to 1000 [ 139.884277][ T7777] lo speed is unknown, defaulting to 1000 [ 139.899715][ T7734] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.147918][ T7779] lo speed is unknown, defaulting to 1000 [ 140.651544][ T7798] veth0: entered promiscuous mode [ 140.676803][ T7798] netlink: 'syz.0.479': attribute type 23 has an invalid length. [ 140.998459][ T7798] veth0: left promiscuous mode [ 141.016873][ T7805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.532184][ T7828] netlink: 'syz.3.486': attribute type 29 has an invalid length. [ 141.549470][ T7825] tap0: tun_chr_ioctl cmd 1074025677 [ 141.561818][ T7825] tap0: linktype set to 6 [ 142.097544][ T7842] lo speed is unknown, defaulting to 1000 [ 142.440891][ T7851] lo speed is unknown, defaulting to 1000 [ 142.562636][ T7860] lo speed is unknown, defaulting to 1000 [ 142.582477][ T7866] geneve1: entered promiscuous mode [ 142.598503][ T7866] geneve1: entered allmulticast mode [ 143.646625][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.506'. [ 143.680143][ T7906] netlink: 240 bytes leftover after parsing attributes in process `syz.2.506'. [ 143.950746][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.511'. [ 144.146241][ T67] tipc: Subscription rejected, illegal request [ 144.233084][ T7936] lo speed is unknown, defaulting to 1000 [ 144.372038][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 144.386506][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.518'. [ 144.739618][ T7964] bridge0: port 3(batadv0) entered disabled state [ 144.804449][ T7964] bridge_slave_1: left allmulticast mode [ 144.820426][ T7964] bridge_slave_1: left promiscuous mode [ 144.840895][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.912411][ T7964] bridge_slave_0: left allmulticast mode [ 144.931322][ T7964] bridge_slave_0: left promiscuous mode [ 144.944238][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.013495][ T7964] bond0: (slave bridge0): Releasing backup interface [ 145.218377][ T7974] netlink: 'syz.3.525': attribute type 4 has an invalid length. [ 145.319627][ T7980] lo speed is unknown, defaulting to 1000 [ 145.359538][ T7981] lo speed is unknown, defaulting to 1000 [ 145.465676][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'. [ 145.498579][ T7987] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 145.698571][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 145.710048][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 145.801200][ T7995] syz_tun: entered allmulticast mode [ 145.844343][ T7995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.531'. [ 145.878763][ T8003] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 145.916496][ T8000] lo speed is unknown, defaulting to 1000 [ 146.000027][ T8003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.060143][ T8005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.079899][ T8005] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 146.113264][ T8005] bond1: (slave vcan2): Error -95 calling set_mac_address [ 146.188940][ T7992] syz_tun: left allmulticast mode [ 146.416094][ T8029] netlink: 5 bytes leftover after parsing attributes in process `syz.3.538'. [ 147.340646][ T8059] macvtap1: entered promiscuous mode [ 147.422186][ T8059] vlan0: entered promiscuous mode [ 147.427694][ T8059] macvtap1: entered allmulticast mode [ 147.492031][ T8059] vlan0: entered allmulticast mode [ 147.538724][ T8059] veth0_vlan: entered allmulticast mode [ 147.576041][ T8059] vlan0: left allmulticast mode [ 147.599258][ T8059] veth0_vlan: left allmulticast mode [ 147.606404][ T8059] vlan0: left promiscuous mode [ 148.808947][ T8119] lo speed is unknown, defaulting to 1000 [ 149.085674][ T8124] veth1_to_bond: entered allmulticast mode [ 149.131937][ T8124] veth1_to_bond: entered promiscuous mode [ 149.154910][ T8123] veth1_to_bond: left promiscuous mode [ 149.160919][ T8123] veth1_to_bond: left allmulticast mode [ 149.746246][ T8151] __nla_validate_parse: 7 callbacks suppressed [ 149.746266][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 149.923505][ T8158] pimreg: entered allmulticast mode [ 149.937734][ T8151] pimreg: left allmulticast mode [ 150.056238][ T8170] netlink: 172 bytes leftover after parsing attributes in process `syz.0.578'. [ 150.074415][ T8170] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 150.086367][ T8170] veth0: entered promiscuous mode [ 150.099381][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 150.172431][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 150.191931][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 150.218491][ T8175] netlink: 'syz.1.579': attribute type 12 has an invalid length. [ 150.400069][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.581'. [ 150.471624][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 150.565955][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 150.785308][ T8210] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 150.806942][ T8210] k›*·]‘: entered promiscuous mode [ 150.981568][ T8218] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.007807][ T8218] vlan2: entered promiscuous mode [ 151.030030][ T8218] bond0: entered promiscuous mode [ 151.057818][ T8218] bond_slave_0: entered promiscuous mode [ 151.064067][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 151.095294][ T8218] bond_slave_1: entered promiscuous mode [ 151.243159][ T8230] xt_CT: No such helper "pptp" [ 151.910741][ T8216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 151.925488][ T8234] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 151.927342][ T8230] netlink: 'syz.0.593': attribute type 2 has an invalid length. [ 152.248527][ T8259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.468468][ T8280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.483777][ T8280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.507430][ T8285] netlink: 'syz.1.605': attribute type 3 has an invalid length. [ 152.538534][ T8278] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 152.558446][ T8278] team_slave_1: entered promiscuous mode [ 152.638490][ T8280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.656083][ T8280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.826611][ T8280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.837356][ T8280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.990771][ T8280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.008481][ T8280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.199640][ T8280] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.226215][ T8280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.268772][ T8280] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.295370][ T8280] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.348768][ T8280] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.366164][ T8280] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.382808][ T8305] lo speed is unknown, defaulting to 1000 [ 153.426667][ T8280] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.448378][ T8280] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.876722][ T8332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.280494][ T8336] lo speed is unknown, defaulting to 1000 [ 154.623113][ T8368] tipc: Started in network mode [ 154.628056][ T8368] tipc: Node identity 4a06f3d7a857, cluster identity 4711 [ 154.651737][ T8368] tipc: Enabled bearer , priority 0 [ 154.765725][ T8368] syzkaller0: entered promiscuous mode [ 154.794757][ T8368] syzkaller0: entered allmulticast mode [ 154.801057][ T8368] tipc: Resetting bearer [ 155.207587][ T8376] netlink: 'syz.4.630': attribute type 7 has an invalid length. [ 155.237833][ T8376] : entered promiscuous mode [ 155.306439][ T8361] tipc: Resetting bearer [ 155.761484][ T2149] tipc: Node number set to 3797021655 [ 156.715621][ T8361] tipc: Disabling bearer [ 156.947689][ T8405] __nla_validate_parse: 12 callbacks suppressed [ 156.947709][ T8405] netlink: 49 bytes leftover after parsing attributes in process `syz.0.638'. [ 157.208255][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 157.775917][ T8447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.649'. [ 157.810328][ T8450] syzkaller1: entered promiscuous mode [ 157.816224][ T8450] syzkaller1: entered allmulticast mode [ 157.935776][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'. [ 158.230355][ T8464] batadv1: entered allmulticast mode [ 158.244071][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.524650][ T8471] lo speed is unknown, defaulting to 1000 [ 158.565931][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 158.820777][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.664'. [ 159.004641][ T8510] FAULT_INJECTION: forcing a failure. [ 159.004641][ T8510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.008664][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 159.024515][ T8510] CPU: 1 UID: 0 PID: 8510 Comm: syz.3.667 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 159.024545][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.024557][ T8510] Call Trace: [ 159.024565][ T8510] [ 159.024573][ T8510] dump_stack_lvl+0x189/0x250 [ 159.024607][ T8510] ? __lock_acquire+0xaac/0xd20 [ 159.024637][ T8510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.024664][ T8510] ? __pfx__printk+0x10/0x10 [ 159.024684][ T8510] ? __might_fault+0xb0/0x130 [ 159.024720][ T8510] should_fail_ex+0x414/0x560 [ 159.024755][ T8510] _copy_from_user+0x2d/0xb0 [ 159.024787][ T8510] __sys_connect+0x123/0x440 [ 159.024808][ T8510] ? __fget_files+0x3a0/0x420 [ 159.024834][ T8510] ? __pfx___sys_connect+0x10/0x10 [ 159.024877][ T8510] __x64_sys_connect+0x7a/0x90 [ 159.024899][ T8510] do_syscall_64+0xf6/0x210 [ 159.024937][ T8510] ? clear_bhb_loop+0x45/0xa0 [ 159.024961][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.024980][ T8510] RIP: 0033:0x7f8de258e969 [ 159.024996][ T8510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.025013][ T8510] RSP: 002b:00007f8de3484038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 159.025033][ T8510] RAX: ffffffffffffffda RBX: 00007f8de27b6080 RCX: 00007f8de258e969 [ 159.025046][ T8510] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000006 [ 159.025058][ T8510] RBP: 00007f8de3484090 R08: 0000000000000000 R09: 0000000000000000 [ 159.025070][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.025081][ T8510] R13: 0000000000000001 R14: 00007f8de27b6080 R15: 00007ffccd7cf8f8 [ 159.025110][ T8510] [ 159.206207][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.668'. [ 159.493435][ T8530] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.673'. [ 159.643126][ T8541] syz.1.675: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 159.663306][ T8541] CPU: 0 UID: 0 PID: 8541 Comm: syz.1.675 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 159.663335][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 159.663347][ T8541] Call Trace: [ 159.663354][ T8541] [ 159.663363][ T8541] dump_stack_lvl+0x189/0x250 [ 159.663400][ T8541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.663430][ T8541] ? __pfx__printk+0x10/0x10 [ 159.663450][ T8541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.663483][ T8541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.663536][ T8541] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 159.663570][ T8541] warn_alloc+0x214/0x310 [ 159.663617][ T8541] ? __pfx_warn_alloc+0x10/0x10 [ 159.663652][ T8541] ? __get_vm_area_node+0x1c5/0x2d0 [ 159.663674][ T8541] ? __get_vm_area_node+0x25a/0x2d0 [ 159.663704][ T8541] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 159.663757][ T8541] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.663786][ T8541] ? __kasan_kmalloc+0x93/0xb0 [ 159.663813][ T8541] vmalloc_user_noprof+0x74/0x80 [ 159.663839][ T8541] ? xskq_create+0xbf/0x170 [ 159.663861][ T8541] xskq_create+0xbf/0x170 [ 159.663887][ T8541] xsk_init_queue+0xb0/0x110 [ 159.663913][ T8541] xsk_setsockopt+0x4de/0x710 [ 159.663937][ T8541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.663966][ T8541] ? aa_sock_opt_perm+0x74/0x110 [ 159.663987][ T8541] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 159.664006][ T8541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 159.664030][ T8541] do_sock_setsockopt+0x257/0x3e0 [ 159.664053][ T8541] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 159.664072][ T8541] ? __fget_files+0x2a/0x420 [ 159.664099][ T8541] ? __fget_files+0x3a0/0x420 [ 159.664120][ T8541] ? __fget_files+0x2a/0x420 [ 159.664152][ T8541] __x64_sys_setsockopt+0x18b/0x220 [ 159.664179][ T8541] do_syscall_64+0xf6/0x210 [ 159.664205][ T8541] ? clear_bhb_loop+0x45/0xa0 [ 159.664228][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.664245][ T8541] RIP: 0033:0x7faafed8e969 [ 159.664261][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.664275][ T8541] RSP: 002b:00007faaffb78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 159.664294][ T8541] RAX: ffffffffffffffda RBX: 00007faafefb6080 RCX: 00007faafed8e969 [ 159.664307][ T8541] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000a [ 159.664317][ T8541] RBP: 00007faafee10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 159.664328][ T8541] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 159.664339][ T8541] R13: 0000000000000000 R14: 00007faafefb6080 R15: 00007fff68535158 [ 159.664368][ T8541] [ 159.664374][ T8541] Mem-Info: [ 159.733447][ T8541] active_anon:5285 inactive_anon:0 isolated_anon:0 [ 159.733447][ T8541] active_file:1476 inactive_file:38340 isolated_file:0 [ 159.733447][ T8541] unevictable:768 dirty:167 writeback:0 [ 159.733447][ T8541] slab_reclaimable:10375 slab_unreclaimable:99105 [ 159.733447][ T8541] mapped:28519 shmem:1405 pagetables:787 [ 159.733447][ T8541] sec_pagetables:0 bounce:0 [ 159.733447][ T8541] kernel_misc_reclaimable:0 [ 159.733447][ T8541] free:1347866 free_pcp:445 free_cma:0 [ 159.761451][ T8541] Node 0 active_anon:21140kB inactive_anon:0kB active_file:5904kB inactive_file:153284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114076kB dirty:668kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11256kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.020545][ T8541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.104062][ T8541] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.226621][ T8558] veth0_to_bridge: entered promiscuous mode [ 160.233637][ T8556] veth0_to_bridge: left promiscuous mode [ 160.241783][ T8541] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 160.247602][ T8541] Node 0 DMA32 free:1462320kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:20812kB inactive_anon:0kB active_file:5980kB inactive_file:153184kB unevictable:1536kB writepending:756kB present:3129332kB managed:2564100kB mlocked:0kB bounce:0kB free_pcp:3324kB local_pcp:1140kB free_cma:0kB [ 160.320396][ T8541] lowmem_reserve[]: 0 0 0 0 0 [ 160.325571][ T8541] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.361053][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 160.382076][ T8541] lowmem_reserve[]: 0 0 0 0 0 [ 160.387309][ T8541] Node 1 Normal free:3912732kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:64kB free_cma:0kB [ 160.420775][ T8541] lowmem_reserve[]: 0 0 0 0 0 [ 160.432449][ T8541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.457725][ T8541] Node 0 DMA32: 40*4kB (ME) 211*8kB (UME) 154*16kB (UME) 380*32kB (UME) 108*64kB (UME) 50*128kB (UM) 45*256kB (UM) 20*512kB (UM) 13*1024kB (UME) 5*2048kB (UM) 339*4096kB (UM) = 1463640kB [ 160.488336][ T8541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 160.502083][ T8541] Node 1 Normal: 245*4kB (UE) 71*8kB (UME) 43*16kB (UME) 239*32kB (UME) 114*64kB (UME) 28*128kB (UME) 17*256kB (UME) 7*512kB (UM) 5*1024kB (UM) 2*2048kB (U) 946*4096kB (M) = 3912732kB [ 160.541611][ T8541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.571303][ T8541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.603912][ T8541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.633231][ T8541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.637528][ T8566] atomic_op ffff88805d758198 conn xmit_atomic 0000000000000000 [ 160.669993][ T8541] 41242 total pagecache pages [ 160.687376][ T8541] 0 pages in swap cache [ 160.737027][ T8541] Free swap = 124996kB [ 160.744156][ T8541] Total swap = 124996kB [ 160.748358][ T8541] 2097051 pages RAM [ 160.752377][ T8541] 0 pages HighMem/MovableOnly [ 160.757081][ T8541] 424368 pages reserved [ 160.763127][ T8541] 0 pages cma reserved [ 160.818209][ T8580] netlink: 'syz.2.687': attribute type 3 has an invalid length. [ 160.827823][ T8580] netlink: 'syz.2.687': attribute type 3 has an invalid length. [ 160.994222][ T8600] FAULT_INJECTION: forcing a failure. [ 160.994222][ T8600] name failslab, interval 1, probability 0, space 0, times 1 [ 161.008665][ T8600] CPU: 1 UID: 0 PID: 8600 Comm: syz.1.690 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 161.008693][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 161.008705][ T8600] Call Trace: [ 161.008713][ T8600] [ 161.008721][ T8600] dump_stack_lvl+0x189/0x250 [ 161.008759][ T8600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.008788][ T8600] ? __pfx__printk+0x10/0x10 [ 161.008813][ T8600] ? __pfx___might_resched+0x10/0x10 [ 161.008831][ T8600] ? fs_reclaim_acquire+0x7d/0x100 [ 161.008864][ T8600] should_fail_ex+0x414/0x560 [ 161.008899][ T8600] should_failslab+0xa8/0x100 [ 161.008926][ T8600] __kmalloc_noprof+0xcb/0x4f0 [ 161.008948][ T8600] ? tomoyo_encode2+0x27f/0x530 [ 161.008975][ T8600] tomoyo_encode2+0x27f/0x530 [ 161.009003][ T8600] tomoyo_check_unix_address+0x3c3/0x7b0 [ 161.009033][ T8600] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 161.009054][ T8600] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 161.009090][ T8600] ? __might_fault+0xb0/0x130 [ 161.009121][ T8600] tomoyo_socket_connect_permission+0x1b2/0x290 [ 161.009154][ T8600] security_socket_connect+0xc8/0x2b0 [ 161.009181][ T8600] __sys_connect+0x231/0x440 [ 161.009201][ T8600] ? __fget_files+0x3a0/0x420 [ 161.009227][ T8600] ? __pfx___sys_connect+0x10/0x10 [ 161.009270][ T8600] __x64_sys_connect+0x7a/0x90 [ 161.009291][ T8600] do_syscall_64+0xf6/0x210 [ 161.009319][ T8600] ? clear_bhb_loop+0x45/0xa0 [ 161.009344][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.009362][ T8600] RIP: 0033:0x7faafed8e969 [ 161.009379][ T8600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.009395][ T8600] RSP: 002b:00007faaffb78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 161.009415][ T8600] RAX: ffffffffffffffda RBX: 00007faafefb6080 RCX: 00007faafed8e969 [ 161.009429][ T8600] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000006 [ 161.009441][ T8600] RBP: 00007faaffb78090 R08: 0000000000000000 R09: 0000000000000000 [ 161.009452][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.009463][ T8600] R13: 0000000000000001 R14: 00007faafefb6080 R15: 00007fff68535158 [ 161.009494][ T8600] [ 161.441321][ T8608] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 161.460237][ T8613] netlink: 'syz.0.696': attribute type 4 has an invalid length. [ 161.469024][ T8608] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 161.971421][ T8646] __nla_validate_parse: 10 callbacks suppressed [ 161.971442][ T8646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.707'. [ 162.115981][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'. [ 162.137576][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'. [ 162.377869][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 162.411081][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 162.429787][ T8670] FAULT_INJECTION: forcing a failure. [ 162.429787][ T8670] name failslab, interval 1, probability 0, space 0, times 0 [ 162.444707][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.1.716 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 162.444733][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 162.444743][ T8670] Call Trace: [ 162.444750][ T8670] [ 162.444757][ T8670] dump_stack_lvl+0x189/0x250 [ 162.444790][ T8670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.444818][ T8670] ? __pfx__printk+0x10/0x10 [ 162.444840][ T8670] ? __pfx___might_resched+0x10/0x10 [ 162.444858][ T8670] ? fs_reclaim_acquire+0x7d/0x100 [ 162.444890][ T8670] should_fail_ex+0x414/0x560 [ 162.444922][ T8670] should_failslab+0xa8/0x100 [ 162.444948][ T8670] kmem_cache_alloc_noprof+0x73/0x3c0 [ 162.444969][ T8670] ? getname_kernel+0x5a/0x2f0 [ 162.444996][ T8670] getname_kernel+0x5a/0x2f0 [ 162.445022][ T8670] kern_path+0x1d/0x50 [ 162.445047][ T8670] unix_find_other+0x15a/0x900 [ 162.445068][ T8670] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 162.445092][ T8670] ? __pfx_unix_find_other+0x10/0x10 [ 162.445115][ T8670] ? aa_sk_perm+0x81e/0x950 [ 162.445145][ T8670] unix_dgram_connect+0x6f0/0xd30 [ 162.445174][ T8670] ? __pfx_unix_dgram_connect+0x10/0x10 [ 162.445200][ T8670] ? bpf_lsm_socket_connect+0x9/0x20 [ 162.445225][ T8670] __sys_connect+0x313/0x440 [ 162.445245][ T8670] ? __fget_files+0x3a0/0x420 [ 162.445270][ T8670] ? __pfx___sys_connect+0x10/0x10 [ 162.445312][ T8670] __x64_sys_connect+0x7a/0x90 [ 162.445334][ T8670] do_syscall_64+0xf6/0x210 [ 162.445380][ T8670] ? clear_bhb_loop+0x45/0xa0 [ 162.445405][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.445424][ T8670] RIP: 0033:0x7faafed8e969 [ 162.445442][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.445458][ T8670] RSP: 002b:00007faaffb78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 162.445478][ T8670] RAX: ffffffffffffffda RBX: 00007faafefb6080 RCX: 00007faafed8e969 [ 162.445493][ T8670] RDX: 000000000000006e RSI: 00002000000002c0 RDI: 0000000000000006 [ 162.445505][ T8670] RBP: 00007faaffb78090 R08: 0000000000000000 R09: 0000000000000000 [ 162.445517][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.445541][ T8670] R13: 0000000000000001 R14: 00007faafefb6080 R15: 00007fff68535158 [ 162.445572][ T8670] [ 162.688908][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.715'. [ 163.017236][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 163.067760][ T30] audit: type=1800 audit(1746075805.393:2): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.715" name="cgroup.controllers" dev="tmpfs" ino=836 res=0 errno=0 [ 163.166114][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 163.299056][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 163.308169][ T8687] netlink: 'syz.4.720': attribute type 13 has an invalid length. [ 163.320409][ T8687] netlink: 'syz.4.720': attribute type 12 has an invalid length. [ 163.397957][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 163.846583][ T5887] IPVS: starting estimator thread 0... [ 163.854847][ T8715] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 163.878414][ T8715] netlink: 'syz.4.730': attribute type 2 has an invalid length. [ 163.927855][ T8710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.961314][ T8716] IPVS: using max 31 ests per chain, 74400 per kthread [ 163.995882][ T8723] FAULT_INJECTION: forcing a failure. [ 163.995882][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.071846][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.0.731 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 164.071873][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 164.071884][ T8723] Call Trace: [ 164.071891][ T8723] [ 164.071899][ T8723] dump_stack_lvl+0x189/0x250 [ 164.071933][ T8723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.071960][ T8723] ? __pfx__printk+0x10/0x10 [ 164.071990][ T8723] should_fail_ex+0x414/0x560 [ 164.072024][ T8723] _copy_to_user+0x31/0xb0 [ 164.072049][ T8723] simple_read_from_buffer+0xe1/0x170 [ 164.072077][ T8723] proc_fail_nth_read+0x1df/0x250 [ 164.072105][ T8723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.072133][ T8723] ? rw_verify_area+0x258/0x650 [ 164.072152][ T8723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.072179][ T8723] vfs_read+0x1fd/0x980 [ 164.072203][ T8723] ? __pfx___mutex_lock+0x10/0x10 [ 164.072230][ T8723] ? __pfx_vfs_read+0x10/0x10 [ 164.072252][ T8723] ? __fget_files+0x2a/0x420 [ 164.072280][ T8723] ? __fget_files+0x3a0/0x420 [ 164.072302][ T8723] ? __fget_files+0x2a/0x420 [ 164.072334][ T8723] ksys_read+0x145/0x250 [ 164.072356][ T8723] ? __pfx_ksys_read+0x10/0x10 [ 164.072387][ T8723] ? do_syscall_64+0xba/0x210 [ 164.072417][ T8723] do_syscall_64+0xf6/0x210 [ 164.072452][ T8723] ? clear_bhb_loop+0x45/0xa0 [ 164.072475][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.072492][ T8723] RIP: 0033:0x7fd06ed8d37c [ 164.072509][ T8723] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 164.072523][ T8723] RSP: 002b:00007fd06fb85030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.072543][ T8723] RAX: ffffffffffffffda RBX: 00007fd06efb6080 RCX: 00007fd06ed8d37c [ 164.072556][ T8723] RDX: 000000000000000f RSI: 00007fd06fb850a0 RDI: 000000000000000c [ 164.072567][ T8723] RBP: 00007fd06fb85090 R08: 0000000000000000 R09: 0000000000000000 [ 164.072577][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.072588][ T8723] R13: 0000000000000001 R14: 00007fd06efb6080 R15: 00007ffd54f6dcd8 [ 164.072616][ T8723] [ 164.372631][ T8710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.416465][ T8719] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.426676][ T8719] tipc: Enabled bearer , priority 10 [ 164.481472][ T8710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.551277][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.578151][ T8710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.698246][ T8710] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.717222][ T8710] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.734289][ T8710] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.749210][ T8710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.821288][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.351232][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.411428][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.451267][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.491414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.531390][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.571448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.611386][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.651368][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.691424][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.741414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.781305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.811521][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.851315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.891635][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.941415][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.971414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.011291][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.051380][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.091367][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.131363][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.171317][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.221315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.251309][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.291333][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.331273][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.371304][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.421266][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.451427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.254841][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261249][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.491325][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.531372][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.571320][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.611366][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.651343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.691375][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.731301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.771371][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.811307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.861361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.891281][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.931361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.575309][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 206.575340][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 206.971264][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.011353][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.051346][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.814165][ T8742] team0: Device gtp0 is of different type [ 209.874723][ T8746] __nla_validate_parse: 8 callbacks suppressed [ 209.874741][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 210.091338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.308477][ T8756] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 210.457121][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 210.463402][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.744'. [ 210.580090][ T8771] netlink: 'syz.3.746': attribute type 39 has an invalid length. [ 210.664979][ T8774] vxcan1: tx address claim with dlc 0 [ 210.685707][ T8774] vxcan1: tx address claim with dlc 0 [ 210.985277][ T8786] lo speed is unknown, defaulting to 1000 [ 211.131303][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.640831][ T8835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'. [ 212.023766][ T8842] netlink: 'syz.4.761': attribute type 39 has an invalid length. [ 212.099807][ T8852] vxcan1: entered allmulticast mode [ 212.181322][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.462389][ T8866] ªªªªªª†³?ÂHºm: renamed from lo (while UP) [ 212.501921][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'. [ 213.070442][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 213.104543][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 213.120193][ T8887] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 213.150426][ T8887] netlink: 10 bytes leftover after parsing attributes in process `syz.0.772'. [ 213.175448][ T8889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.771'. [ 213.195964][ T8895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.211331][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.231338][ T8895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.240064][ T8895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.287267][ T8895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.313168][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 213.574365][ T8915] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 213.654744][ T8921] lo speed is unknown, defaulting to 1000 [ 214.105659][ T8943] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 214.113699][ T8943] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 214.251812][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.256646][ T8973] __nla_validate_parse: 7 callbacks suppressed [ 215.256668][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.791'. [ 215.301233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.602149][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 215.621519][ T8988] nbd: must specify a size in bytes for the device [ 215.631620][ T30] audit: type=1800 audit(1746075857.953:3): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.799" name="memory.events" dev="tmpfs" ino=542 res=0 errno=0 [ 215.657749][ T8991] netlink: 224 bytes leftover after parsing attributes in process `syz.2.799'. [ 215.672646][ T8991] netlink: 'syz.2.799': attribute type 2 has an invalid length. [ 215.681687][ T8992] netlink: 'syz.2.799': attribute type 2 has an invalid length. [ 215.692247][ T8991] netlink: 'syz.2.799': attribute type 2 has an invalid length. [ 215.711347][ T8992] netlink: 'syz.2.799': attribute type 2 has an invalid length. [ 215.736502][ T8991] Bluetooth: MGMT ver 1.23 [ 215.959734][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.801'. [ 215.972181][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 216.245772][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 216.273226][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 216.331607][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.360554][ T9025] syzkaller0: entered promiscuous mode [ 216.373793][ T9025] syzkaller0: entered allmulticast mode [ 216.374326][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 216.403655][ T9027] veth0_to_bridge: entered promiscuous mode [ 216.418170][ T9026] veth0_to_bridge: left promiscuous mode [ 216.720155][ T9032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.809'. [ 216.723440][ T9037] netlink: 'syz.3.811': attribute type 23 has an invalid length. [ 216.742750][ T9030] bond0: entered promiscuous mode [ 216.755374][ T9030] bond_slave_0: entered promiscuous mode [ 216.762496][ T9030] bond_slave_1: entered promiscuous mode [ 216.768457][ T9030] bond0: entered allmulticast mode [ 216.773695][ T9030] bond_slave_0: entered allmulticast mode [ 216.779547][ T9030] bond_slave_1: entered allmulticast mode [ 216.788235][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.914739][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 217.009021][ T30] audit: type=1107 audit(1746075859.333:4): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 217.168079][ T9068] veth0_to_bridge: entered promiscuous mode [ 217.237041][ T9063] veth0_to_bridge: left promiscuous mode [ 217.371274][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.866719][ T9095] pim6reg: entered allmulticast mode [ 217.883545][ T9103] pim6reg: left allmulticast mode [ 218.135258][ T9101] lo speed is unknown, defaulting to 1000 [ 218.205614][ T9113] gretap0: entered promiscuous mode [ 218.232719][ T9113] macsec1: entered allmulticast mode [ 218.238340][ T9113] gretap0: entered allmulticast mode [ 218.268690][ T9113] gretap0: left allmulticast mode [ 218.291009][ T9113] gretap0: left promiscuous mode [ 218.359366][ T9119] veth0_to_bridge: entered promiscuous mode [ 218.400097][ T9118] veth0_to_bridge: left promiscuous mode [ 218.411493][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.809972][ T9126] pim6reg: entered allmulticast mode [ 218.827208][ T9133] pim6reg: left allmulticast mode [ 219.032178][ T9141] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20002 [ 219.451404][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.469404][ T9159] veth0_to_bridge: entered promiscuous mode [ 219.534760][ T9152] veth0_to_bridge: left promiscuous mode [ 219.760171][ T9171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.120262][ T9180] bond2 (unregistering): Released all slaves [ 220.304281][ T9190] lo speed is unknown, defaulting to 1000 [ 220.376644][ T9201] batadv1: entered promiscuous mode [ 220.445338][ T9203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.491343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.767709][ T9215] __nla_validate_parse: 76 callbacks suppressed [ 220.767732][ T9215] netlink: 136 bytes leftover after parsing attributes in process `syz.0.856'. [ 220.816748][ T9215] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 220.858014][ T9219] netlink: 76 bytes leftover after parsing attributes in process `syz.3.857'. [ 220.880015][ T9213] veth0_to_bridge: entered promiscuous mode [ 220.888684][ T9212] veth0_to_bridge: left promiscuous mode [ 220.929706][ T9221] lo speed is unknown, defaulting to 1000 [ 220.963108][ T9219] syzkaller1: entered promiscuous mode [ 220.968735][ T9219] syzkaller1: entered allmulticast mode [ 221.216057][ T9237] netlink: 'syz.1.860': attribute type 10 has an invalid length. [ 221.258654][ T9234] ip6gre1: entered allmulticast mode [ 221.532487][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.155300][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.866'. [ 222.180253][ T9258] netlink: 'syz.2.867': attribute type 10 has an invalid length. [ 222.192727][ T9254] tap0: tun_chr_ioctl cmd 1074025677 [ 222.216359][ T9254] tap0: linktype set to 780 [ 222.223793][ T9258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.867'. [ 222.258411][ T9258] batadv0: entered promiscuous mode [ 222.271301][ T9258] batadv0: entered allmulticast mode [ 222.277736][ T9258] bridge0: port 3(batadv0) entered blocking state [ 222.290887][ T9258] bridge0: port 3(batadv0) entered disabled state [ 222.307923][ T9258] bridge0: port 3(batadv0) entered blocking state [ 222.314571][ T9258] bridge0: port 3(batadv0) entered forwarding state [ 222.536728][ T9277] xt_TCPMSS: Only works on TCP SYN packets [ 222.558658][ T9277] trusted_key: syz.3.871 sent an empty control message without MSG_MORE. [ 222.571642][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.595533][ T67] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 222.605023][ T67] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 222.815575][ T9294] macvlan0: entered promiscuous mode [ 222.834773][ T9294] macvlan0: entered allmulticast mode [ 222.850233][ T9294] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 222.868650][ T9294] team0: Port device macvlan0 added [ 222.950803][ T9289] lo speed is unknown, defaulting to 1000 [ 223.232983][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.883'. [ 223.264099][ T30] audit: type=1804 audit(1746075865.593:5): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.883" name="memory.events" dev="tmpfs" ino=909 res=1 errno=0 [ 223.311513][ T30] audit: type=1800 audit(1746075865.613:6): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.883" name="memory.events" dev="tmpfs" ino=909 res=0 errno=0 [ 223.441208][ T30] audit: type=1800 audit(1746075865.763:7): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.887" name="memory.events" dev="tmpfs" ino=915 res=0 errno=0 [ 223.556643][ T9332] netlink: 44 bytes leftover after parsing attributes in process `syz.3.888'. [ 223.611334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.684572][ T9341] lo speed is unknown, defaulting to 1000 [ 224.033544][ T9362] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 224.055814][ T9362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.895'. [ 224.078717][ T9362] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 224.171023][ T9369] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 224.402552][ T9371] bond5: (slave gretap1): making interface the new active one [ 224.424819][ T9371] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 224.661397][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.805918][ T9380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.901'. [ 224.833017][ T9380] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 224.860155][ T9380] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 224.898479][ T9380] netlink: 'syz.2.901': attribute type 2 has an invalid length. [ 224.942339][ T9380] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 224.950064][ T9380] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 225.691414][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.934347][ T9405] netlink: 248 bytes leftover after parsing attributes in process `syz.4.909'. [ 225.990963][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.001498][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.010256][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.032041][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.043945][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.264376][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 226.282761][ T9408] team0 (unregistering): Port device team_slave_0 removed [ 226.298121][ T9408] team0 (unregistering): Port device team_slave_1 removed [ 226.323236][ T9408] team0 (unregistering): Port device macvlan0 removed [ 226.416139][ T9421] 8021q: adding VLAN 0 to HW filter on device team1 [ 226.504300][ T9412] lo speed is unknown, defaulting to 1000 [ 226.731525][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.757243][ T9428] sctp: [Deprecated]: syz.4.913 (pid 9428) Use of int in max_burst socket option. [ 226.757243][ T9428] Use struct sctp_assoc_value instead [ 226.934764][ T9412] chnl_net:caif_netlink_parms(): no params data found [ 227.290056][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.318587][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.339929][ T9412] bridge_slave_0: entered allmulticast mode [ 227.360468][ T9412] bridge_slave_0: entered promiscuous mode [ 227.388619][ T9457] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-—¦%": -EINTR [ 227.407906][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.436408][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.444090][ T9412] bridge_slave_1: entered allmulticast mode [ 227.458160][ T9412] bridge_slave_1: entered promiscuous mode [ 227.637738][ T9412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.725898][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 227.738084][ T9412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.769620][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 227.781221][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.932399][ T9412] team0: Port device team_slave_0 added [ 227.954013][ T9412] team0: Port device team_slave_1 added [ 228.072886][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.086309][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.122064][ T5830] Bluetooth: hci4: command tx timeout [ 228.149567][ T9412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.200612][ T9412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.226716][ T9412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.299563][ T9412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.326020][ T9484] lo speed is unknown, defaulting to 1000 [ 228.449798][ T9493] netlink: 248 bytes leftover after parsing attributes in process `syz.0.928'. [ 228.630652][ T9412] hsr_slave_0: entered promiscuous mode [ 228.647618][ T9412] hsr_slave_1: entered promiscuous mode [ 228.668053][ T9412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.685037][ T9412] Cannot create hsr debugfs directory [ 228.811371][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.064584][ T9501] !: renamed from dummy0 (while UP) [ 229.189808][ T9504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 229.218480][ T9504] validate_nla: 2 callbacks suppressed [ 229.218500][ T9504] netlink: 'syz.1.930': attribute type 3 has an invalid length. [ 229.231951][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 229.425321][ T9412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.527503][ T9412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.669327][ T9412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.672262][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 229.732551][ T9513] 8021q: VLANs not supported on vcan0 [ 229.775578][ T9412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.851242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.990271][ T9412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.017821][ T9412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.042202][ T9412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.067523][ T9412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.171833][ T5830] Bluetooth: hci4: command tx timeout [ 230.268521][ T9412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.329094][ T9412] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.353107][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.360286][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.403341][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.410477][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.891304][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.980512][ T9539] lo speed is unknown, defaulting to 1000 [ 231.150282][ T9412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.265525][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 231.358079][ T9412] veth0_vlan: entered promiscuous mode [ 231.420759][ T9412] veth1_vlan: entered promiscuous mode [ 231.469195][ T67] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.490014][ T67] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.604870][ T67] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.621523][ T67] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.683046][ T9412] veth0_macvtap: entered promiscuous mode [ 231.706808][ T9412] veth1_macvtap: entered promiscuous mode [ 231.854236][ T67] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.891186][ T67] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.931247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.987031][ T67] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.008632][ T67] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.047250][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.082034][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.111561][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.131486][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.161290][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.195436][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.228792][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.251909][ T5830] Bluetooth: hci4: command tx timeout [ 232.504797][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.551130][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.581215][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.611194][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.641181][ T9412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.676281][ T9412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.710483][ T9412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.757913][ T9412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.792081][ T9412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.817636][ T9412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.841194][ T9412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.954399][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.963951][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.971826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.980314][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.994350][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.002218][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.787580][ T67] bond0 (unregistering): Released all slaves [ 233.805317][ T9574] netlink: 'syz.0.949': attribute type 309 has an invalid length. [ 233.820515][ T9560] lo speed is unknown, defaulting to 1000 [ 233.962561][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.977743][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.021245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.041746][ T9583] Cannot find del_set index 4 as target [ 234.138656][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 234.167867][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.213410][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.275546][ T67] hsr_slave_0: left promiscuous mode [ 234.292985][ T67] hsr_slave_1: left promiscuous mode [ 234.295633][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 234.319930][ T67] veth1_macvtap: left allmulticast mode [ 234.332697][ T67] veth1_macvtap: left promiscuous mode [ 234.334479][ T5830] Bluetooth: hci4: command tx timeout [ 234.338254][ T67] veth0_macvtap: left promiscuous mode [ 234.354243][ T67] veth1_vlan: left promiscuous mode [ 234.359601][ T67] veth0_vlan: left promiscuous mode [ 235.051313][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.053434][ T5830] Bluetooth: hci1: command tx timeout [ 235.111376][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 235.352053][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 235.393652][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.959'. [ 235.502315][ T9560] chnl_net:caif_netlink_parms(): no params data found [ 235.555649][ T9620] netlink: 'syz.2.960': attribute type 8 has an invalid length. [ 235.570395][ T9621] netlink: 'syz.2.960': attribute type 8 has an invalid length. [ 235.651524][ T9623] netlink: 64 bytes leftover after parsing attributes in process `syz.4.962'. [ 235.829581][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.839512][ T67] IPVS: stop unused estimator thread 0... [ 235.845856][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.857020][ T9560] bridge_slave_0: entered allmulticast mode [ 235.867409][ T9560] bridge_slave_0: entered promiscuous mode [ 235.876281][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.883567][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.890990][ T9560] bridge_slave_1: entered allmulticast mode [ 235.899190][ T9560] bridge_slave_1: entered promiscuous mode [ 235.995867][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.018594][ T9560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.032675][ T9560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.091301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.094551][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.223945][ T9639] netlink: 'syz.4.966': attribute type 33 has an invalid length. [ 236.231958][ T9639] netlink: 152 bytes leftover after parsing attributes in process `syz.4.966'. [ 236.272496][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.294322][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 236.395954][ T9560] team0: Port device team_slave_0 added [ 236.490335][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.516242][ T9560] team0: Port device team_slave_1 added [ 236.588105][ T9649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.969'. [ 236.638272][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.648167][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.654803][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.970'. [ 236.665075][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.671606][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.680110][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.717867][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.727715][ T9560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.743079][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.747709][ T9560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.757553][ T9560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.788683][ T9560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.131437][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.218778][ T5835] Bluetooth: hci1: command tx timeout [ 237.379205][ T9650] lo speed is unknown, defaulting to 1000 [ 237.442483][ T9670] netlink: 5 bytes leftover after parsing attributes in process `syz.4.974'. [ 237.462560][ T9667] pimreg: entered allmulticast mode [ 237.714009][ T67] bridge_slave_1: left allmulticast mode [ 237.735237][ T67] bridge_slave_1: left promiscuous mode [ 237.754577][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.789426][ T67] bridge_slave_0: left allmulticast mode [ 237.797945][ T67] bridge_slave_0: left promiscuous mode [ 237.810803][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.133173][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.145029][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.157918][ T67] bond0 (unregistering): Released all slaves [ 238.171186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.263136][ T9667] pimreg: left allmulticast mode [ 238.326663][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 238.354086][ T9560] hsr_slave_0: entered promiscuous mode [ 238.375718][ T9560] hsr_slave_1: entered promiscuous mode [ 238.390109][ T9560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.415753][ T9560] Cannot create hsr debugfs directory [ 238.705873][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 238.891579][ T5830] Bluetooth: hci4: command tx timeout [ 238.934990][ T9713] netlink: 64 bytes leftover after parsing attributes in process `syz.4.984'. [ 238.953767][ T9711] IPVS: Unknown mcast interface: bridge0 [ 239.099666][ T67] hsr_slave_0: left promiscuous mode [ 239.110275][ T67] hsr_slave_1: left promiscuous mode [ 239.116816][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.124416][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.137542][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.145364][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.176546][ T67] veth1_macvtap: left promiscuous mode [ 239.182293][ T67] veth0_macvtap: left promiscuous mode [ 239.187972][ T67] veth1_vlan: left promiscuous mode [ 239.193662][ T67] veth0_vlan: left promiscuous mode [ 239.211684][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.297080][ T5830] Bluetooth: hci1: command tx timeout [ 239.596284][ T67] team0 (unregistering): Port device team_slave_1 removed [ 239.633649][ T67] team0 (unregistering): Port device team_slave_0 removed [ 240.017342][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 240.174614][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 240.251284][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.395243][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 240.548856][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 240.650608][ T9760] bridge0: port 3(batadv0) entered disabled state [ 240.662180][ T9760] bridge_slave_1: left allmulticast mode [ 240.674641][ T9760] bridge_slave_1: left promiscuous mode [ 240.685902][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.696707][ T9760] bridge_slave_0: left allmulticast mode [ 240.703231][ T9760] bridge_slave_0: left promiscuous mode [ 240.708947][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.807866][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.816158][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.849858][ T9650] bridge_slave_0: entered allmulticast mode [ 240.862487][ T9650] bridge_slave_0: entered promiscuous mode [ 240.889662][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.911839][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.919125][ T9650] bridge_slave_1: entered allmulticast mode [ 240.951868][ T9650] bridge_slave_1: entered promiscuous mode [ 240.981816][ T5830] Bluetooth: hci4: command tx timeout [ 240.996050][ T9774] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 241.059448][ T9774] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 241.080442][ T9650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.118237][ T9650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.291309][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.354203][ T9650] team0: Port device team_slave_0 added [ 241.371939][ T5830] Bluetooth: hci1: command tx timeout [ 241.382305][ T9650] team0: Port device team_slave_1 added [ 241.463985][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.470994][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.498071][ T9650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.546558][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.567046][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.602485][ T9650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.617321][ T9560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.668550][ T9560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.710993][ T9560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.741612][ T9560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.900928][ T9650] hsr_slave_0: entered promiscuous mode [ 241.908390][ T9650] hsr_slave_1: entered promiscuous mode [ 241.915247][ T9650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.923697][ T9650] Cannot create hsr debugfs directory [ 242.019015][ T9811] __nla_validate_parse: 1 callbacks suppressed [ 242.019035][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'. [ 242.049476][ T9811] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1011'. [ 242.331280][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.362288][ T9831] netlink: 'syz.0.1015': attribute type 7 has an invalid length. [ 242.370087][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 242.397244][ T9832] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1016'. [ 242.576279][ T9843] x_tables: duplicate underflow at hook 3 [ 242.587624][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.685353][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1022'. [ 242.688227][ T9560] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.735452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.742673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.808727][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.815975][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.841475][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 242.856869][ T9853] pim6reg: entered allmulticast mode [ 242.887379][ T9853] pim6reg: left allmulticast mode [ 243.052172][ T5830] Bluetooth: hci4: command tx timeout [ 243.155670][ T9860] syzkaller1: entered promiscuous mode [ 243.176688][ T9860] syzkaller1: entered allmulticast mode [ 243.250054][ T9650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.280342][ T9650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.309868][ T9650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.358900][ T9650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.371548][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.453159][ T9560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.603382][ T9560] veth0_vlan: entered promiscuous mode [ 243.608916][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 243.643030][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.671787][ T9560] veth1_vlan: entered promiscuous mode [ 243.700507][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.736545][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.744686][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.767280][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.774494][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.817148][ T9560] veth0_macvtap: entered promiscuous mode [ 243.850811][ T9560] veth1_macvtap: entered promiscuous mode [ 243.909130][ T9882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'. [ 243.917383][ T9650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.952902][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.964155][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.974869][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.990249][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.003244][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.015014][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.027472][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.059427][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.101566][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.131344][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.153887][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.165085][ T9560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.197782][ T9560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.228952][ T9560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.261976][ T9560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.270733][ T9560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.296583][ T9560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.309193][ T9560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.318646][ T9892] tipc: Failed to remove unknown binding: 66,3,3/3797021655:1696000010/1696000011 [ 244.344618][ T9887] bridge1: entered promiscuous mode [ 244.350044][ T9887] bridge1: entered allmulticast mode [ 244.411410][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.599880][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.626417][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.720823][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.737078][ T9904] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 244.747605][ T9909] lo speed is unknown, defaulting to 1000 [ 244.777015][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.789480][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.849257][ T9916] batadv_slave_0: entered promiscuous mode [ 244.946820][ T9919] pim6reg: entered allmulticast mode [ 245.053900][ T9919] pim6reg: left allmulticast mode [ 245.142174][ T5830] Bluetooth: hci4: command tx timeout [ 245.377551][ T9650] veth0_vlan: entered promiscuous mode [ 245.430119][ T9650] veth1_vlan: entered promiscuous mode [ 245.451800][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.707618][ T9650] veth0_macvtap: entered promiscuous mode [ 245.756297][ T9650] veth1_macvtap: entered promiscuous mode [ 245.857953][ T9915] batadv_slave_0: left promiscuous mode [ 246.015663][ T2977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.112931][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.161239][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.199837][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.236287][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.261177][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.286170][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.319269][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.340329][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.359829][ T9938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1044'. [ 246.363217][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.494850][ T2977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.522776][ T9944] xt_TCPMSS: Only works on TCP SYN packets [ 246.550576][ T9934] lo speed is unknown, defaulting to 1000 [ 246.569728][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.579874][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.591324][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.597160][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.599527][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.619901][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.627318][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.638932][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.649497][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.660305][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.672577][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.684140][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.708059][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.719925][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.769824][ T2977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.833082][ T9650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.848985][ T9650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.861057][ T9650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.869826][ T9650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.100936][ T2977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.129565][ T9945] lo speed is unknown, defaulting to 1000 [ 247.145159][ T9961] siw: device registration error -23 [ 247.500375][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.508723][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.605031][ T2977] bridge_slave_1: left allmulticast mode [ 247.610758][ T2977] bridge_slave_1: left promiscuous mode [ 247.617688][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.637934][ T2977] bridge_slave_0: left allmulticast mode [ 247.645708][ T2977] bridge_slave_0: left promiscuous mode [ 247.652024][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.019739][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.033579][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.047183][ T2977] bond0 (unregistering): Released all slaves [ 248.116030][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.132715][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.188614][ T9945] chnl_net:caif_netlink_parms(): no params data found [ 248.330420][ T9981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1057'. [ 248.732823][ T5830] Bluetooth: hci1: command tx timeout [ 248.742418][ T9990] tipc: Enabling not permitted [ 248.748040][ T9990] tipc: Enabling of bearer rejected, failed to enable media [ 248.814237][ T2977] hsr_slave_0: left promiscuous mode [ 248.838942][ T2977] hsr_slave_1: left promiscuous mode [ 248.846775][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.854730][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.867807][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.875737][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.918684][ T2977] veth1_macvtap: left promiscuous mode [ 248.939505][ T2977] veth0_macvtap: left promiscuous mode [ 248.946818][ T2977] veth1_vlan: left promiscuous mode [ 248.958593][ T2977] veth0_vlan: left promiscuous mode [ 249.552564][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.563312][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.576689][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.586428][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.597053][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.804103][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 249.845466][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 250.290510][T10006] netlink: 'syz.4.1063': attribute type 10 has an invalid length. [ 250.330309][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.345653][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.353579][ T9945] bridge_slave_0: entered allmulticast mode [ 250.371972][ T9945] bridge_slave_0: entered promiscuous mode [ 250.428378][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.435847][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.443976][ T9945] bridge_slave_1: entered allmulticast mode [ 250.457409][ T9945] bridge_slave_1: entered promiscuous mode [ 250.493271][T10012] batadv_slave_0: entered promiscuous mode [ 250.615149][T10012] batadv_slave_0: left promiscuous mode [ 250.640301][ T9945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.736770][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.812083][ T5830] Bluetooth: hci1: command tx timeout [ 250.848226][ T9945] team0: Port device team_slave_0 added [ 250.885127][ T9945] team0: Port device team_slave_1 added [ 251.062332][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.099761][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.114239][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.151648][ T9945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.206981][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.230414][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.250048][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.286677][ T9945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.353292][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.448478][T10049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.525256][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.662633][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 251.691967][ T5830] Bluetooth: hci4: command tx timeout [ 251.721859][ T9945] hsr_slave_0: entered promiscuous mode [ 251.733714][ T9945] hsr_slave_1: entered promiscuous mode [ 251.739864][ T9945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.752201][ T9945] Cannot create hsr debugfs directory [ 251.793975][T10064] netlink: 'syz.2.1081': attribute type 2 has an invalid length. [ 252.005011][T10008] chnl_net:caif_netlink_parms(): no params data found [ 252.088781][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.088781][T10077] Use struct sctp_assoc_value instead [ 252.152072][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.152072][T10077] Use struct sctp_assoc_value instead [ 252.169778][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.169778][T10077] Use struct sctp_assoc_value instead [ 252.175213][T10080] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1085'. [ 252.186707][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.186707][T10077] Use struct sctp_assoc_value instead [ 252.209781][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.209781][T10077] Use struct sctp_assoc_value instead [ 252.238526][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.238526][T10077] Use struct sctp_assoc_value instead [ 252.255248][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.255248][T10077] Use struct sctp_assoc_value instead [ 252.270748][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.270748][T10077] Use struct sctp_assoc_value instead [ 252.286865][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.286865][T10077] Use struct sctp_assoc_value instead [ 252.303923][T10077] sctp: [Deprecated]: syz.2.1086 (pid 10077) Use of int in maxseg socket option. [ 252.303923][T10077] Use struct sctp_assoc_value instead [ 252.566595][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 252.579259][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.587957][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.602264][T10008] bridge_slave_0: entered allmulticast mode [ 252.610060][T10008] bridge_slave_0: entered promiscuous mode [ 252.624959][ T12] bridge_slave_1: left allmulticast mode [ 252.630650][ T12] bridge_slave_1: left promiscuous mode [ 252.643545][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.680741][ T12] bridge_slave_0: left allmulticast mode [ 252.686712][ T12] bridge_slave_0: left promiscuous mode [ 252.696920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.893007][ T5830] Bluetooth: hci1: command tx timeout [ 253.210070][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.221954][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.236520][ T12] bond0 (unregistering): Released all slaves [ 253.269659][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.281547][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.289058][T10008] bridge_slave_1: entered allmulticast mode [ 253.312020][T10008] bridge_slave_1: entered promiscuous mode [ 253.494859][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.508929][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.612887][T10132] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 253.629336][T10132] sctp: [Deprecated]: syz.2.1098 (pid 10132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.629336][T10132] Use struct sctp_sack_info instead [ 253.709205][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 253.772886][ T5830] Bluetooth: hci4: command tx timeout [ 253.779134][T10008] team0: Port device team_slave_0 added [ 253.798374][ T12] hsr_slave_0: left promiscuous mode [ 253.823121][ T12] hsr_slave_1: left promiscuous mode [ 253.835568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.843918][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.853834][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.920104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.950836][ T12] veth1_macvtap: left promiscuous mode [ 253.958868][ T12] veth0_macvtap: left promiscuous mode [ 253.969430][ T12] veth1_vlan: left promiscuous mode [ 253.975083][ T12] veth0_vlan: left promiscuous mode [ 254.428467][ T12] team0 (unregistering): Port device team_slave_1 removed [ 254.472987][ T12] team0 (unregistering): Port device team_slave_0 removed [ 254.897140][T10008] team0: Port device team_slave_1 added [ 254.972083][ T5830] Bluetooth: hci1: command tx timeout [ 255.080526][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.099958][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.137795][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.168763][T10163] smc: net device bond0 applied user defined pnetid SYZ0 [ 255.174001][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.183504][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.228444][T10166] smc: net device bond0 erased user defined pnetid SYZ0 [ 255.236264][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.460404][T10008] hsr_slave_0: entered promiscuous mode [ 255.472729][T10008] hsr_slave_1: entered promiscuous mode [ 255.479148][T10008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.505935][T10008] Cannot create hsr debugfs directory [ 255.590205][T10182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1108'. [ 255.683439][ T9945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.696823][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.703350][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.749829][ T9945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.851638][ T5830] Bluetooth: hci4: command tx timeout [ 255.861197][ T9945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.963738][T10189] netlink: 'syz.2.1110': attribute type 2 has an invalid length. [ 256.008085][ T9945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.237927][T10201] xt_hashlimit: size too large, truncated to 1048576 [ 256.621517][T10187] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.700528][T10207] xt_ecn: cannot match TCP bits for non-tcp packets [ 256.787564][ T9945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.826057][T10207] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.891239][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.898545][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.913272][ T9945] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.953731][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.960930][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.983225][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.990404][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.150737][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1118'. [ 257.171398][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1118'. [ 257.180583][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1118'. [ 257.231550][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1118'. [ 257.262172][T10008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.298512][T10008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.334918][T10008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.358042][T10008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.539325][T10008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.555113][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.586522][T10008] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.604626][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.611835][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.636762][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.643991][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.684447][ T9945] veth0_vlan: entered promiscuous mode [ 257.719251][ T9945] veth1_vlan: entered promiscuous mode [ 257.780015][ T9945] veth0_macvtap: entered promiscuous mode [ 257.806951][ T9945] veth1_macvtap: entered promiscuous mode [ 257.857759][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.882916][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.900129][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.911334][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.921697][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.932373][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.932483][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.947194][ T5830] Bluetooth: hci4: command tx timeout [ 257.953453][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.965639][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.983412][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.011149][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.047623][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.077832][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.088448][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.099795][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.114891][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.136248][ T9945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.149476][ T9945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.158821][ T9945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.175201][ T9945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.208873][T10245] pim6reg: entered allmulticast mode [ 258.226104][T10245] pim6reg: left allmulticast mode [ 258.300792][T10008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.465181][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.481257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.539285][T10008] veth0_vlan: entered promiscuous mode [ 258.563798][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.592504][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.610261][T10008] veth1_vlan: entered promiscuous mode [ 258.687207][T10008] veth0_macvtap: entered promiscuous mode [ 258.703148][T10008] veth1_macvtap: entered promiscuous mode [ 258.742533][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.765299][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.785546][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.811366][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.823070][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.834786][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.845649][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.856567][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.877874][T10008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.887048][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 258.916879][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.947330][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.971157][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.975011][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.978334][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.011581][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.031144][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.042336][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.075786][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.097487][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.128387][T10008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.255433][T10008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.269858][T10008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.287507][T10008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.311588][T10008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.402457][T10283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1135'. [ 259.462901][T10283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1135'. [ 259.597101][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.747203][T10286] syzkaller0: entered promiscuous mode [ 259.788244][T10286] syzkaller0: entered allmulticast mode [ 259.795975][T10295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1137'. [ 259.811664][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.820169][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.889372][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.992778][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 260.011225][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.018481][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.039386][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.090839][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.190843][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 260.191434][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.270372][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 260.457352][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.460891][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.501254][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.516456][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.525362][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.533376][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.189735][ T12] bridge_slave_1: left allmulticast mode [ 261.196155][ T12] bridge_slave_1: left promiscuous mode [ 261.207430][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.222806][ T12] bridge_slave_0: left allmulticast mode [ 261.228606][ T12] bridge_slave_0: left promiscuous mode [ 261.234735][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.537346][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.549325][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.560779][ T12] bond0 (unregistering): Released all slaves [ 261.658843][T10315] chnl_net:caif_netlink_parms(): no params data found [ 261.751822][T10351] net_ratelimit: 2 callbacks suppressed [ 261.751843][T10351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.091151][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.098255][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.106873][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.115603][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.123527][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.132205][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.140333][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.198361][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1156'. [ 262.445564][T10389] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1158'. [ 262.577525][T10379] team0 (unregistering): Port device team_slave_0 removed [ 262.607336][T10379] team0 (unregistering): Port device team_slave_1 removed [ 262.636400][T10379] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.648454][T10379] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.658715][ T5830] Bluetooth: hci1: command tx timeout [ 262.661297][T10379] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.673634][T10379] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.703420][T10379] team0 (unregistering): Port device geneve0 removed [ 262.791332][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.798482][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.810361][T10315] bridge_slave_0: entered allmulticast mode [ 262.835924][T10315] bridge_slave_0: entered promiscuous mode [ 262.865020][ T12] hsr_slave_0: left promiscuous mode [ 262.885628][ T12] hsr_slave_1: left promiscuous mode [ 262.892818][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.900366][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.910194][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.918105][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.940550][ T12] veth1_macvtap: left promiscuous mode [ 262.946625][ T12] veth0_macvtap: left promiscuous mode [ 262.952457][ T12] veth1_vlan: left promiscuous mode [ 262.957843][ T12] veth0_vlan: left promiscuous mode [ 263.135229][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.142326][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.431779][T10406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1166'. [ 263.582731][ T12] team0 (unregistering): Port device team_slave_1 removed [ 263.672235][ T12] team0 (unregistering): Port device team_slave_0 removed [ 264.059808][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.067211][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.081500][T10315] bridge_slave_1: entered allmulticast mode [ 264.090347][T10315] bridge_slave_1: entered promiscuous mode [ 264.105501][T10399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.171172][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 264.171743][ T5830] Bluetooth: hci4: command tx timeout [ 264.178391][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 264.250365][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1169'. [ 264.361034][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.376914][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.530322][T10315] team0: Port device team_slave_0 added [ 264.545263][T10432] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 264.593904][T10315] team0: Port device team_slave_1 added [ 264.692027][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.699356][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.725996][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.739256][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.746930][ T5830] Bluetooth: hci1: command tx timeout [ 264.753090][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.780351][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.211598][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 266.251872][ T5830] Bluetooth: hci4: command tx timeout [ 266.288904][T10315] hsr_slave_0: entered promiscuous mode [ 266.307046][T10315] hsr_slave_1: entered promiscuous mode [ 266.315574][T10315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.323870][T10315] Cannot create hsr debugfs directory [ 266.475926][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.665783][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.805506][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.816024][ T5830] Bluetooth: hci1: command tx timeout [ 266.863752][T10371] chnl_net:caif_netlink_parms(): no params data found [ 266.933644][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.291329][ C1] net_ratelimit: 6 callbacks suppressed [ 267.291349][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.304016][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.353232][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 267.448775][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.464170][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.473005][T10371] bridge_slave_0: entered allmulticast mode [ 267.481025][T10371] bridge_slave_0: entered promiscuous mode [ 267.621832][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.629033][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.642276][T10371] bridge_slave_1: entered allmulticast mode [ 267.649601][T10371] bridge_slave_1: entered promiscuous mode [ 267.830006][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.870955][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.927788][T10493] batadv1: entered allmulticast mode [ 267.943964][T10493] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.966496][T10500] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1191'. [ 267.969891][T10493] bridge0: port 1(batadv1) entered blocking state [ 267.976498][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 267.992488][T10493] bridge0: port 1(batadv1) entered disabled state [ 268.000756][T10493] batadv1: entered promiscuous mode [ 268.019268][ T12] bridge_slave_1: left allmulticast mode [ 268.038944][ T12] bridge_slave_1: left promiscuous mode [ 268.046473][T10503] netlink: 'syz.0.1192': attribute type 1 has an invalid length. [ 268.054904][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.071979][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 268.084573][ T12] bridge_slave_0: left allmulticast mode [ 268.093745][ T12] bridge_slave_0: left promiscuous mode [ 268.099492][T10505] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1193'. [ 268.103434][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.331267][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.338365][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.345441][ T5830] Bluetooth: hci4: command tx timeout [ 268.437051][ T2999] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 268.446560][ T2999] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 268.476115][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.487648][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.498635][ T12] bond0 (unregistering): Released all slaves [ 268.568659][T10503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.600152][T10505] veth7: entered promiscuous mode [ 268.623673][T10511] bond2: (slave veth0_to_bond): making interface the new active one [ 268.650671][T10511] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.742634][T10371] team0: Port device team_slave_0 added [ 268.832820][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 268.878268][T10371] team0: Port device team_slave_1 added [ 268.891668][ T5830] Bluetooth: hci1: command tx timeout [ 269.025764][T10526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1197'. [ 269.069921][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.090886][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.117599][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.130635][T10315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.155402][T10315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.280011][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.291724][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.318473][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.371162][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.378267][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.408876][T10315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.443679][ T12] hsr_slave_0: left promiscuous mode [ 269.449840][ T12] hsr_slave_1: left promiscuous mode [ 269.458574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.467621][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1201'. [ 269.469343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.490650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.499128][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.527181][ T12] veth1_macvtap: left promiscuous mode [ 269.532933][ T12] veth0_macvtap: left promiscuous mode [ 269.539656][ T12] veth1_vlan: left promiscuous mode [ 269.545263][ T12] veth0_vlan: left promiscuous mode [ 270.055404][ T12] team0 (unregistering): Port device team_slave_1 removed [ 270.129999][ T12] team0 (unregistering): Port device team_slave_0 removed [ 270.412695][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.419797][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.421564][ T5830] Bluetooth: hci4: command tx timeout [ 270.565360][T10371] hsr_slave_0: entered promiscuous mode [ 270.592418][T10371] hsr_slave_1: entered promiscuous mode [ 270.600132][T10371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.609345][T10371] Cannot create hsr debugfs directory [ 270.615151][T10315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.670277][T10545] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 270.709886][T10545] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 270.719139][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 270.993892][T10550] netlink: 'syz.4.1204': attribute type 2 has an invalid length. [ 271.012414][T10550] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1204'. [ 271.451162][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.897448][T10569] pim6reg: entered allmulticast mode [ 271.947492][T10571] team0: entered allmulticast mode [ 271.956840][T10571] team_slave_0: entered allmulticast mode [ 271.966893][T10571] team_slave_1: entered allmulticast mode [ 271.986363][T10569] pim6reg: left allmulticast mode [ 272.009580][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 272.052266][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'. [ 272.096848][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.167369][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.211151][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.218415][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.275091][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.282316][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.392948][T10371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.423868][T10371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.443806][T10589] FAULT_INJECTION: forcing a failure. [ 272.443806][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.457385][T10589] CPU: 1 UID: 0 PID: 10589 Comm: syz.2.1217 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 272.457412][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.457434][T10589] Call Trace: [ 272.457442][T10589] [ 272.457470][T10589] dump_stack_lvl+0x189/0x250 [ 272.457503][T10589] ? __lock_acquire+0xaac/0xd20 [ 272.457535][T10589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.457563][T10589] ? __pfx__printk+0x10/0x10 [ 272.457584][T10589] ? __might_fault+0xb0/0x130 [ 272.457630][T10589] should_fail_ex+0x414/0x560 [ 272.457667][T10589] _copy_from_user+0x2d/0xb0 [ 272.457694][T10589] ___sys_sendmsg+0x158/0x2a0 [ 272.457722][T10589] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.457786][T10589] ? __fget_files+0x2a/0x420 [ 272.457811][T10589] ? __fget_files+0x3a0/0x420 [ 272.457847][T10589] __x64_sys_sendmsg+0x19b/0x260 [ 272.457875][T10589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.457918][T10589] ? do_syscall_64+0xba/0x210 [ 272.457951][T10589] do_syscall_64+0xf6/0x210 [ 272.457980][T10589] ? clear_bhb_loop+0x45/0xa0 [ 272.458006][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.458025][T10589] RIP: 0033:0x7faa8bb8e969 [ 272.458043][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.458061][T10589] RSP: 002b:00007faa8c9c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.458082][T10589] RAX: ffffffffffffffda RBX: 00007faa8bdb5fa0 RCX: 00007faa8bb8e969 [ 272.458096][T10589] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 272.458109][T10589] RBP: 00007faa8c9c4090 R08: 0000000000000000 R09: 0000000000000000 [ 272.458121][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.458133][T10589] R13: 0000000000000000 R14: 00007faa8bdb5fa0 R15: 00007ffd02612cf8 [ 272.458165][T10589] [ 272.458914][T10371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.492759][ C1] net_ratelimit: 2 callbacks suppressed [ 272.492777][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.492841][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.686653][T10371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.808711][T10597] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1219'. [ 272.877180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.891316][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.017004][T10371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.090064][T10371] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.135518][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.142741][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.286287][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.293596][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.397741][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.531189][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.538278][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.553500][T10619] af_packet: tpacket_rcv: packet too big, clamped from 3390 to 4294967272. macoff=96 [ 273.601674][T10315] veth0_vlan: entered promiscuous mode [ 273.650231][T10315] veth1_vlan: entered promiscuous mode [ 273.734808][T10315] veth0_macvtap: entered promiscuous mode [ 273.782684][T10315] veth1_macvtap: entered promiscuous mode [ 273.824222][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.861856][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.896117][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.916070][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.933467][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.954312][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.971225][T10628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1227'. [ 273.982200][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.075008][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.118948][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.130289][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.152806][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.163864][T10315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.175289][T10315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.193688][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.229385][T10315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.246336][T10315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.269199][T10315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.283888][T10315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.571236][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 274.578290][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.611258][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.618454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 276.238690][T10641] pim6reg: entered allmulticast mode [ 276.252228][T10642] pim6reg: left allmulticast mode [ 276.302682][T10371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.357573][T10645] ------------[ cut here ]------------ [ 276.363302][T10645] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 276.370826][T10645] index 148 is out of range for type 'const int[12]' [ 276.377587][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.4.1230 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 276.377617][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 276.377632][T10645] Call Trace: [ 276.377642][T10645] [ 276.377651][T10645] dump_stack_lvl+0x189/0x250 [ 276.377692][T10645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.377724][T10645] ? __pfx__printk+0x10/0x10 [ 276.377741][T10645] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 276.377767][T10645] ? sctp_assoc_add_peer+0x657/0x13b0 [ 276.377790][T10645] ? sctp_sendmsg+0x155c/0x2810 [ 276.377810][T10645] ? __sock_sendmsg+0x19c/0x270 [ 276.377837][T10645] ? __sys_sendto+0x3bd/0x520 [ 276.377865][T10645] ubsan_epilogue+0xa/0x40 [ 276.377885][T10645] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 276.377919][T10645] ip6_rt_copy_init+0x8e7/0x970 [ 276.377956][T10645] ip6_pol_route+0xbac/0x1180 [ 276.377974][T10645] ? ip6_pol_route+0x162/0x1180 [ 276.377999][T10645] ? __pfx_ip6_pol_route+0x10/0x10 [ 276.378026][T10645] ? fib6_get_table+0x39/0x270 [ 276.378046][T10645] ? fib6_get_table+0x39/0x270 [ 276.378066][T10645] ? fib6_get_table+0x251/0x270 [ 276.378086][T10645] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 276.378106][T10645] fib6_rule_action+0x206/0x7d0 [ 276.378127][T10645] ? __pfx_fib6_rule_action+0x10/0x10 [ 276.378150][T10645] fib_rules_lookup+0x767/0xe90 [ 276.378183][T10645] ? fib_rules_lookup+0x96/0xe90 [ 276.378207][T10645] ? __pfx_fib_rules_lookup+0x10/0x10 [ 276.378228][T10645] ? l3mdev_update_flow+0x29/0x640 [ 276.378249][T10645] ? l3mdev_update_flow+0x4d1/0x640 [ 276.378268][T10645] ? l3mdev_update_flow+0x29/0x640 [ 276.378290][T10645] fib6_rule_lookup+0x18e/0x6f0 [ 276.378311][T10645] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 276.378332][T10645] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 276.378359][T10645] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 276.378386][T10645] ? dev_get_by_index_rcu+0xf4/0x110 [ 276.378424][T10645] ip6_route_output_flags+0x364/0x5d0 [ 276.378444][T10645] ? ip6_route_output_flags+0x2e/0x5d0 [ 276.378476][T10645] ip6_dst_lookup_tail+0x1ae/0x1510 [ 276.378516][T10645] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 276.378538][T10645] ? __lock_acquire+0xaac/0xd20 [ 276.378590][T10645] ip6_dst_lookup_flow+0x47/0xe0 [ 276.378615][T10645] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 276.378636][T10645] sctp_v6_get_dst+0x7cc/0x1bc0 [ 276.378655][T10645] ? crng_make_state+0x13a/0x700 [ 276.378682][T10645] ? __pfx_crng_make_state+0x10/0x10 [ 276.378720][T10645] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 276.378737][T10645] ? __asan_memset+0x22/0x50 [ 276.378788][T10645] ? dst_release+0x72/0x1b0 [ 276.378817][T10645] sctp_transport_route+0x115/0x2f0 [ 276.378854][T10645] sctp_assoc_add_peer+0x657/0x13b0 [ 276.378893][T10645] sctp_connect_new_asoc+0x30a/0x690 [ 276.378921][T10645] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 276.378943][T10645] ? __local_bh_enable_ip+0x12d/0x1c0 [ 276.378984][T10645] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 276.379009][T10645] ? security_sctp_bind_connect+0x7e/0x2e0 [ 276.379043][T10645] sctp_sendmsg+0x155c/0x2810 [ 276.379080][T10645] ? __pfx_sctp_sendmsg+0x10/0x10 [ 276.379108][T10645] ? aa_sk_perm+0x81e/0x950 [ 276.379145][T10645] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.379181][T10645] ? sock_rps_record_flow+0x19/0x410 [ 276.379215][T10645] ? inet_sendmsg+0x2f4/0x370 [ 276.379249][T10645] __sock_sendmsg+0x19c/0x270 [ 276.379284][T10645] __sys_sendto+0x3bd/0x520 [ 276.379310][T10645] ? __pfx___sys_sendto+0x10/0x10 [ 276.379329][T10645] ? do_futex+0x395/0x420 [ 276.379383][T10645] ? rcu_is_watching+0x15/0xb0 [ 276.379424][T10645] __x64_sys_sendto+0xde/0x100 [ 276.379450][T10645] do_syscall_64+0xf6/0x210 [ 276.379489][T10645] ? clear_bhb_loop+0x45/0xa0 [ 276.379516][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.379535][T10645] RIP: 0033:0x7f11fa58e969 [ 276.379555][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.379573][T10645] RSP: 002b:00007f11fb491038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.379595][T10645] RAX: ffffffffffffffda RBX: 00007f11fa7b5fa0 RCX: 00007f11fa58e969 [ 276.379610][T10645] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 276.379622][T10645] RBP: 00007f11fa610ab1 R08: 0000200000000280 R09: 000000000000001c [ 276.379635][T10645] R10: 0000000000008910 R11: 0000000000000246 R12: 0000000000000000 [ 276.379647][T10645] R13: 0000000000000000 R14: 00007f11fa7b5fa0 R15: 00007ffd6edc0618 [ 276.379680][T10645] [ 276.379688][T10645] ---[ end trace ]--- [ 276.460824][T10315] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 276.463085][T10645] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 276.463105][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.4.1230 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 276.463131][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 276.463144][T10645] Call Trace: [ 276.463154][T10645] [ 276.463164][T10645] dump_stack_lvl+0x99/0x250 [ 276.463200][T10645] ? __asan_memcpy+0x40/0x70 [ 276.463223][T10645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.463251][T10645] ? __pfx__printk+0x10/0x10 [ 276.463288][T10645] panic+0x2db/0x790 [ 276.463324][T10645] ? __pfx_panic+0x10/0x10 [ 276.463349][T10645] ? _printk+0xcf/0x120 [ 276.463376][T10645] ? __pfx__printk+0x10/0x10 [ 276.463394][T10645] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 276.463421][T10645] ? sctp_assoc_add_peer+0x657/0x13b0 [ 276.463444][T10645] ? sctp_sendmsg+0x155c/0x2810 [ 276.463477][T10645] ? __sock_sendmsg+0x19c/0x270 [ 276.463506][T10645] ? __sys_sendto+0x3bd/0x520 [ 276.463530][T10645] check_panic_on_warn+0x89/0xb0 [ 276.463572][T10645] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 276.463601][T10645] ip6_rt_copy_init+0x8e7/0x970 [ 276.463634][T10645] ip6_pol_route+0xbac/0x1180 [ 276.463653][T10645] ? ip6_pol_route+0x162/0x1180 [ 276.463674][T10645] ? __pfx_ip6_pol_route+0x10/0x10 [ 276.463701][T10645] ? fib6_get_table+0x39/0x270 [ 276.463723][T10645] ? fib6_get_table+0x39/0x270 [ 276.463746][T10645] ? fib6_get_table+0x251/0x270 [ 276.463766][T10645] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 276.463786][T10645] fib6_rule_action+0x206/0x7d0 [ 276.463809][T10645] ? __pfx_fib6_rule_action+0x10/0x10 [ 276.463833][T10645] fib_rules_lookup+0x767/0xe90 [ 276.463866][T10645] ? fib_rules_lookup+0x96/0xe90 [ 276.463889][T10645] ? __pfx_fib_rules_lookup+0x10/0x10 [ 276.463911][T10645] ? l3mdev_update_flow+0x29/0x640 [ 276.463933][T10645] ? l3mdev_update_flow+0x4d1/0x640 [ 276.463952][T10645] ? l3mdev_update_flow+0x29/0x640 [ 276.463974][T10645] fib6_rule_lookup+0x18e/0x6f0 [ 276.463995][T10645] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 276.464016][T10645] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 276.464043][T10645] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 276.464069][T10645] ? dev_get_by_index_rcu+0xf4/0x110 [ 276.464106][T10645] ip6_route_output_flags+0x364/0x5d0 [ 276.464127][T10645] ? ip6_route_output_flags+0x2e/0x5d0 [ 276.464152][T10645] ip6_dst_lookup_tail+0x1ae/0x1510 [ 276.464191][T10645] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 276.464212][T10645] ? __lock_acquire+0xaac/0xd20 [ 276.464263][T10645] ip6_dst_lookup_flow+0x47/0xe0 [ 276.464287][T10645] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 276.464308][T10645] sctp_v6_get_dst+0x7cc/0x1bc0 [ 276.464327][T10645] ? crng_make_state+0x13a/0x700 [ 276.464354][T10645] ? __pfx_crng_make_state+0x10/0x10 [ 276.464391][T10645] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 276.464408][T10645] ? __asan_memset+0x22/0x50 [ 276.464464][T10645] ? dst_release+0x72/0x1b0 [ 276.464495][T10645] sctp_transport_route+0x115/0x2f0 [ 276.464529][T10645] sctp_assoc_add_peer+0x657/0x13b0 [ 276.464569][T10645] sctp_connect_new_asoc+0x30a/0x690 [ 276.464598][T10645] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 276.464619][T10645] ? __local_bh_enable_ip+0x12d/0x1c0 [ 276.464660][T10645] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 276.464685][T10645] ? security_sctp_bind_connect+0x7e/0x2e0 [ 276.464720][T10645] sctp_sendmsg+0x155c/0x2810 [ 276.464756][T10645] ? __pfx_sctp_sendmsg+0x10/0x10 [ 276.464782][T10645] ? aa_sk_perm+0x81e/0x950 [ 276.464820][T10645] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.464854][T10645] ? sock_rps_record_flow+0x19/0x410 [ 276.464891][T10645] ? inet_sendmsg+0x2f4/0x370 [ 276.464924][T10645] __sock_sendmsg+0x19c/0x270 [ 276.464959][T10645] __sys_sendto+0x3bd/0x520 [ 276.464985][T10645] ? __pfx___sys_sendto+0x10/0x10 [ 276.465004][T10645] ? do_futex+0x395/0x420 [ 276.465057][T10645] ? rcu_is_watching+0x15/0xb0 [ 276.465098][T10645] __x64_sys_sendto+0xde/0x100 [ 276.465126][T10645] do_syscall_64+0xf6/0x210 [ 276.465159][T10645] ? clear_bhb_loop+0x45/0xa0 [ 276.465186][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.465207][T10645] RIP: 0033:0x7f11fa58e969 [ 276.465227][T10645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.465246][T10645] RSP: 002b:00007f11fb491038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.465269][T10645] RAX: ffffffffffffffda RBX: 00007f11fa7b5fa0 RCX: 00007f11fa58e969 [ 276.465286][T10645] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 276.465300][T10645] RBP: 00007f11fa610ab1 R08: 0000200000000280 R09: 000000000000001c [ 276.465315][T10645] R10: 0000000000008910 R11: 0000000000000246 R12: 0000000000000000 [ 276.465329][T10645] R13: 0000000000000000 R14: 00007f11fa7b5fa0 R15: 00007ffd6edc0618 [ 276.465364][T10645] [ 276.468441][T10645] Kernel Offset: disabled