last executing test programs: 1m38.104426204s ago: executing program 2 (id=67): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2, 0x0, 0x8, 0x30, 0xfffffff7, 0x2}, &(0x7f00000000c0)=0x9c) socketpair(0x2c, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x78f9, 0x30}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x4, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13008000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="ae6f7832627c718157bd817101f010b8837984f7910272458fdfd90c9123b75cd6841645727c7562950fbbeb93b604fa2441d38181907372af5f", 0x3a}, {&(0x7f0000000780)="884029e1b0b359323f9d2e0ea5d4512d04ba55a07747ad9a6313e0690c2055b1c93105deb69ef284c2dab4c57d26d1bc2376af4a56ca374e1b55a3ffd23da74f16b2089a04ab2c04f40fcbf50af5423ee4566dc026271564f276daadb40dbc158390cb267cbec1a89e5220876d86e917ba9d283d8d1fcdd192c6be4d1eac024c6ac270e4f45fb068a34b8b3d0e1483ea4128b6b8a4984b659dff23ea9c1b1317a432c8d33085090ca91315e456b00d", 0xaf}, {&(0x7f0000000840)="83e90fe6629085c9b2a268783e36e45fcce92510751adbb51d79e9eb50a8ce9b0b7a97c516c0dd1bc0de65074d80d0fec484b4358502720dc321ebbddf81f523a494ea360c428139069f799d4eea2e2cf32a3d2496082ffb291a5c747b24ffadca9365ebb0835ebc53cf0731e344ee3f00eab8e2e0351fdff630ef34bb9496599cbbd9db36125339d33dd5534b7dc811f94c54a7ae80b9e838aa03a0865c43fb142e21e995c89e1de3796c913a844d9b2a64a28cdab33a042611a7c57f7879a22edad36998960785bcd0b116535734568982f69e4d188555673dfa", 0xdb}], 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x9, &(0x7f0000000980)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9b81}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xcb}], &(0x7f0000000a00)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7fffffff, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x1, 0x9, 0x4}, {0x3, 0x1, 0xf, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c00)=r10, 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001c40), 0x4) setsockopt(r7, 0x9, 0x0, &(0x7f0000001c80)="0a52bc19765b422c7f52255f69710ab261878006248a9e2ab89b2ff21d7f2bf84156c3cfbd0667b2f6968fa68abc3cab7b58778ae6b5c1a663d7dc8aacec3e0949f91e3b4c5329c27ed9f195a0c234fcc24099e23ca3d05f06663414f930d1d0d326846a1369698c2997b4f3ff22572b47b5be79189ef902d2192a77aff3b2e6f16a865b92e97dbb02f0871a57de61d0ed8e56498047ab152e74ec735fb5dd583a1c47f30c929d50bc670143b092fe7991b99b33ba3202ac7d408cf4848c85461cbc4b5d67ec920ea2463b59c0afd8419544f9218d42009b88c830f587fbaea651a6", 0xe2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001d80)) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001e00)={r1, 0x1000, 0x4}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)=@flushsa={0x124, 0x1c, 0x300, 0x70bd26, 0x25dfdbfb, {0x32}, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@mcast2, 0x2b, 0x6, 0x0, 0x3505, 0x2}, {@in=@local, @in6=@mcast1, @in6=@loopback, @in=@loopback, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @proto={0x5, 0x19, 0xff}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x24040001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002040)={0x5, {{0xa, 0x4e23, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e24, 0x8, @private2, 0x6}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002180)={@multicast1, @local}, &(0x7f00000021c0)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r12, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002300)={0x9}, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002340)=0x2, &(0x7f0000002380)=0x2) 1m19.980413859s ago: executing program 2 (id=67): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2, 0x0, 0x8, 0x30, 0xfffffff7, 0x2}, &(0x7f00000000c0)=0x9c) socketpair(0x2c, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x78f9, 0x30}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x4, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13008000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="ae6f7832627c718157bd817101f010b8837984f7910272458fdfd90c9123b75cd6841645727c7562950fbbeb93b604fa2441d38181907372af5f", 0x3a}, {&(0x7f0000000780)="884029e1b0b359323f9d2e0ea5d4512d04ba55a07747ad9a6313e0690c2055b1c93105deb69ef284c2dab4c57d26d1bc2376af4a56ca374e1b55a3ffd23da74f16b2089a04ab2c04f40fcbf50af5423ee4566dc026271564f276daadb40dbc158390cb267cbec1a89e5220876d86e917ba9d283d8d1fcdd192c6be4d1eac024c6ac270e4f45fb068a34b8b3d0e1483ea4128b6b8a4984b659dff23ea9c1b1317a432c8d33085090ca91315e456b00d", 0xaf}, {&(0x7f0000000840)="83e90fe6629085c9b2a268783e36e45fcce92510751adbb51d79e9eb50a8ce9b0b7a97c516c0dd1bc0de65074d80d0fec484b4358502720dc321ebbddf81f523a494ea360c428139069f799d4eea2e2cf32a3d2496082ffb291a5c747b24ffadca9365ebb0835ebc53cf0731e344ee3f00eab8e2e0351fdff630ef34bb9496599cbbd9db36125339d33dd5534b7dc811f94c54a7ae80b9e838aa03a0865c43fb142e21e995c89e1de3796c913a844d9b2a64a28cdab33a042611a7c57f7879a22edad36998960785bcd0b116535734568982f69e4d188555673dfa", 0xdb}], 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x9, &(0x7f0000000980)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9b81}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xcb}], &(0x7f0000000a00)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7fffffff, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x1, 0x9, 0x4}, {0x3, 0x1, 0xf, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c00)=r10, 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001c40), 0x4) setsockopt(r7, 0x9, 0x0, &(0x7f0000001c80)="0a52bc19765b422c7f52255f69710ab261878006248a9e2ab89b2ff21d7f2bf84156c3cfbd0667b2f6968fa68abc3cab7b58778ae6b5c1a663d7dc8aacec3e0949f91e3b4c5329c27ed9f195a0c234fcc24099e23ca3d05f06663414f930d1d0d326846a1369698c2997b4f3ff22572b47b5be79189ef902d2192a77aff3b2e6f16a865b92e97dbb02f0871a57de61d0ed8e56498047ab152e74ec735fb5dd583a1c47f30c929d50bc670143b092fe7991b99b33ba3202ac7d408cf4848c85461cbc4b5d67ec920ea2463b59c0afd8419544f9218d42009b88c830f587fbaea651a6", 0xe2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001d80)) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001e00)={r1, 0x1000, 0x4}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)=@flushsa={0x124, 0x1c, 0x300, 0x70bd26, 0x25dfdbfb, {0x32}, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@mcast2, 0x2b, 0x6, 0x0, 0x3505, 0x2}, {@in=@local, @in6=@mcast1, @in6=@loopback, @in=@loopback, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @proto={0x5, 0x19, 0xff}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x24040001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002040)={0x5, {{0xa, 0x4e23, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e24, 0x8, @private2, 0x6}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002180)={@multicast1, @local}, &(0x7f00000021c0)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r12, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002300)={0x9}, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002340)=0x2, &(0x7f0000002380)=0x2) 1m3.051238772s ago: executing program 2 (id=67): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2, 0x0, 0x8, 0x30, 0xfffffff7, 0x2}, &(0x7f00000000c0)=0x9c) socketpair(0x2c, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x78f9, 0x30}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x4, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13008000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="ae6f7832627c718157bd817101f010b8837984f7910272458fdfd90c9123b75cd6841645727c7562950fbbeb93b604fa2441d38181907372af5f", 0x3a}, {&(0x7f0000000780)="884029e1b0b359323f9d2e0ea5d4512d04ba55a07747ad9a6313e0690c2055b1c93105deb69ef284c2dab4c57d26d1bc2376af4a56ca374e1b55a3ffd23da74f16b2089a04ab2c04f40fcbf50af5423ee4566dc026271564f276daadb40dbc158390cb267cbec1a89e5220876d86e917ba9d283d8d1fcdd192c6be4d1eac024c6ac270e4f45fb068a34b8b3d0e1483ea4128b6b8a4984b659dff23ea9c1b1317a432c8d33085090ca91315e456b00d", 0xaf}, {&(0x7f0000000840)="83e90fe6629085c9b2a268783e36e45fcce92510751adbb51d79e9eb50a8ce9b0b7a97c516c0dd1bc0de65074d80d0fec484b4358502720dc321ebbddf81f523a494ea360c428139069f799d4eea2e2cf32a3d2496082ffb291a5c747b24ffadca9365ebb0835ebc53cf0731e344ee3f00eab8e2e0351fdff630ef34bb9496599cbbd9db36125339d33dd5534b7dc811f94c54a7ae80b9e838aa03a0865c43fb142e21e995c89e1de3796c913a844d9b2a64a28cdab33a042611a7c57f7879a22edad36998960785bcd0b116535734568982f69e4d188555673dfa", 0xdb}], 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x9, &(0x7f0000000980)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9b81}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xcb}], &(0x7f0000000a00)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7fffffff, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x1, 0x9, 0x4}, {0x3, 0x1, 0xf, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c00)=r10, 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001c40), 0x4) setsockopt(r7, 0x9, 0x0, &(0x7f0000001c80)="0a52bc19765b422c7f52255f69710ab261878006248a9e2ab89b2ff21d7f2bf84156c3cfbd0667b2f6968fa68abc3cab7b58778ae6b5c1a663d7dc8aacec3e0949f91e3b4c5329c27ed9f195a0c234fcc24099e23ca3d05f06663414f930d1d0d326846a1369698c2997b4f3ff22572b47b5be79189ef902d2192a77aff3b2e6f16a865b92e97dbb02f0871a57de61d0ed8e56498047ab152e74ec735fb5dd583a1c47f30c929d50bc670143b092fe7991b99b33ba3202ac7d408cf4848c85461cbc4b5d67ec920ea2463b59c0afd8419544f9218d42009b88c830f587fbaea651a6", 0xe2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001d80)) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001e00)={r1, 0x1000, 0x4}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)=@flushsa={0x124, 0x1c, 0x300, 0x70bd26, 0x25dfdbfb, {0x32}, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@mcast2, 0x2b, 0x6, 0x0, 0x3505, 0x2}, {@in=@local, @in6=@mcast1, @in6=@loopback, @in=@loopback, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @proto={0x5, 0x19, 0xff}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x24040001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002040)={0x5, {{0xa, 0x4e23, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e24, 0x8, @private2, 0x6}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002180)={@multicast1, @local}, &(0x7f00000021c0)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r12, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002300)={0x9}, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002340)=0x2, &(0x7f0000002380)=0x2) 45.051342643s ago: executing program 2 (id=67): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2, 0x0, 0x8, 0x30, 0xfffffff7, 0x2}, &(0x7f00000000c0)=0x9c) socketpair(0x2c, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x78f9, 0x30}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x4, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13008000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="ae6f7832627c718157bd817101f010b8837984f7910272458fdfd90c9123b75cd6841645727c7562950fbbeb93b604fa2441d38181907372af5f", 0x3a}, {&(0x7f0000000780)="884029e1b0b359323f9d2e0ea5d4512d04ba55a07747ad9a6313e0690c2055b1c93105deb69ef284c2dab4c57d26d1bc2376af4a56ca374e1b55a3ffd23da74f16b2089a04ab2c04f40fcbf50af5423ee4566dc026271564f276daadb40dbc158390cb267cbec1a89e5220876d86e917ba9d283d8d1fcdd192c6be4d1eac024c6ac270e4f45fb068a34b8b3d0e1483ea4128b6b8a4984b659dff23ea9c1b1317a432c8d33085090ca91315e456b00d", 0xaf}, {&(0x7f0000000840)="83e90fe6629085c9b2a268783e36e45fcce92510751adbb51d79e9eb50a8ce9b0b7a97c516c0dd1bc0de65074d80d0fec484b4358502720dc321ebbddf81f523a494ea360c428139069f799d4eea2e2cf32a3d2496082ffb291a5c747b24ffadca9365ebb0835ebc53cf0731e344ee3f00eab8e2e0351fdff630ef34bb9496599cbbd9db36125339d33dd5534b7dc811f94c54a7ae80b9e838aa03a0865c43fb142e21e995c89e1de3796c913a844d9b2a64a28cdab33a042611a7c57f7879a22edad36998960785bcd0b116535734568982f69e4d188555673dfa", 0xdb}], 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x9, &(0x7f0000000980)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9b81}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xcb}], &(0x7f0000000a00)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7fffffff, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x1, 0x9, 0x4}, {0x3, 0x1, 0xf, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c00)=r10, 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001c40), 0x4) setsockopt(r7, 0x9, 0x0, &(0x7f0000001c80)="0a52bc19765b422c7f52255f69710ab261878006248a9e2ab89b2ff21d7f2bf84156c3cfbd0667b2f6968fa68abc3cab7b58778ae6b5c1a663d7dc8aacec3e0949f91e3b4c5329c27ed9f195a0c234fcc24099e23ca3d05f06663414f930d1d0d326846a1369698c2997b4f3ff22572b47b5be79189ef902d2192a77aff3b2e6f16a865b92e97dbb02f0871a57de61d0ed8e56498047ab152e74ec735fb5dd583a1c47f30c929d50bc670143b092fe7991b99b33ba3202ac7d408cf4848c85461cbc4b5d67ec920ea2463b59c0afd8419544f9218d42009b88c830f587fbaea651a6", 0xe2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001d80)) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001e00)={r1, 0x1000, 0x4}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)=@flushsa={0x124, 0x1c, 0x300, 0x70bd26, 0x25dfdbfb, {0x32}, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@mcast2, 0x2b, 0x6, 0x0, 0x3505, 0x2}, {@in=@local, @in6=@mcast1, @in6=@loopback, @in=@loopback, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @proto={0x5, 0x19, 0xff}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x24040001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002040)={0x5, {{0xa, 0x4e23, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e24, 0x8, @private2, 0x6}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002180)={@multicast1, @local}, &(0x7f00000021c0)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r12, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002300)={0x9}, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002340)=0x2, &(0x7f0000002380)=0x2) 25.606143465s ago: executing program 2 (id=67): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2, 0x0, 0x8, 0x30, 0xfffffff7, 0x2}, &(0x7f00000000c0)=0x9c) socketpair(0x2c, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x78f9, 0x30}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x4, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13008000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="ae6f7832627c718157bd817101f010b8837984f7910272458fdfd90c9123b75cd6841645727c7562950fbbeb93b604fa2441d38181907372af5f", 0x3a}, {&(0x7f0000000780)="884029e1b0b359323f9d2e0ea5d4512d04ba55a07747ad9a6313e0690c2055b1c93105deb69ef284c2dab4c57d26d1bc2376af4a56ca374e1b55a3ffd23da74f16b2089a04ab2c04f40fcbf50af5423ee4566dc026271564f276daadb40dbc158390cb267cbec1a89e5220876d86e917ba9d283d8d1fcdd192c6be4d1eac024c6ac270e4f45fb068a34b8b3d0e1483ea4128b6b8a4984b659dff23ea9c1b1317a432c8d33085090ca91315e456b00d", 0xaf}, {&(0x7f0000000840)="83e90fe6629085c9b2a268783e36e45fcce92510751adbb51d79e9eb50a8ce9b0b7a97c516c0dd1bc0de65074d80d0fec484b4358502720dc321ebbddf81f523a494ea360c428139069f799d4eea2e2cf32a3d2496082ffb291a5c747b24ffadca9365ebb0835ebc53cf0731e344ee3f00eab8e2e0351fdff630ef34bb9496599cbbd9db36125339d33dd5534b7dc811f94c54a7ae80b9e838aa03a0865c43fb142e21e995c89e1de3796c913a844d9b2a64a28cdab33a042611a7c57f7879a22edad36998960785bcd0b116535734568982f69e4d188555673dfa", 0xdb}], 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x9, &(0x7f0000000980)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9b81}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xcb}], &(0x7f0000000a00)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7fffffff, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x1, 0x9, 0x4}, {0x3, 0x1, 0xf, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c00)=r10, 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001c40), 0x4) setsockopt(r7, 0x9, 0x0, &(0x7f0000001c80)="0a52bc19765b422c7f52255f69710ab261878006248a9e2ab89b2ff21d7f2bf84156c3cfbd0667b2f6968fa68abc3cab7b58778ae6b5c1a663d7dc8aacec3e0949f91e3b4c5329c27ed9f195a0c234fcc24099e23ca3d05f06663414f930d1d0d326846a1369698c2997b4f3ff22572b47b5be79189ef902d2192a77aff3b2e6f16a865b92e97dbb02f0871a57de61d0ed8e56498047ab152e74ec735fb5dd583a1c47f30c929d50bc670143b092fe7991b99b33ba3202ac7d408cf4848c85461cbc4b5d67ec920ea2463b59c0afd8419544f9218d42009b88c830f587fbaea651a6", 0xe2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001d80)) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001e00)={r1, 0x1000, 0x4}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)=@flushsa={0x124, 0x1c, 0x300, 0x70bd26, 0x25dfdbfb, {0x32}, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@mcast2, 0x2b, 0x6, 0x0, 0x3505, 0x2}, {@in=@local, @in6=@mcast1, @in6=@loopback, @in=@loopback, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @proto={0x5, 0x19, 0xff}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x24040001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002040)={0x5, {{0xa, 0x4e23, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e24, 0x8, @private2, 0x6}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002180)={@multicast1, @local}, &(0x7f00000021c0)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r12, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002300)={0x9}, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002340)=0x2, &(0x7f0000002380)=0x2) 11.553492522s ago: executing program 2 (id=67): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2, 0x0, 0x8, 0x30, 0xfffffff7, 0x2}, &(0x7f00000000c0)=0x9c) socketpair(0x2c, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r1, 0x78f9, 0x30}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x4, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x198, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x13008000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000740)="ae6f7832627c718157bd817101f010b8837984f7910272458fdfd90c9123b75cd6841645727c7562950fbbeb93b604fa2441d38181907372af5f", 0x3a}, {&(0x7f0000000780)="884029e1b0b359323f9d2e0ea5d4512d04ba55a07747ad9a6313e0690c2055b1c93105deb69ef284c2dab4c57d26d1bc2376af4a56ca374e1b55a3ffd23da74f16b2089a04ab2c04f40fcbf50af5423ee4566dc026271564f276daadb40dbc158390cb267cbec1a89e5220876d86e917ba9d283d8d1fcdd192c6be4d1eac024c6ac270e4f45fb068a34b8b3d0e1483ea4128b6b8a4984b659dff23ea9c1b1317a432c8d33085090ca91315e456b00d", 0xaf}, {&(0x7f0000000840)="83e90fe6629085c9b2a268783e36e45fcce92510751adbb51d79e9eb50a8ce9b0b7a97c516c0dd1bc0de65074d80d0fec484b4358502720dc321ebbddf81f523a494ea360c428139069f799d4eea2e2cf32a3d2496082ffb291a5c747b24ffadca9365ebb0835ebc53cf0731e344ee3f00eab8e2e0351fdff630ef34bb9496599cbbd9db36125339d33dd5534b7dc811f94c54a7ae80b9e838aa03a0865c43fb142e21e995c89e1de3796c913a844d9b2a64a28cdab33a042611a7c57f7879a22edad36998960785bcd0b116535734568982f69e4d188555673dfa", 0xdb}], 0x3) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x9, &(0x7f0000000980)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9b81}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @alu={0x4, 0x1, 0x7, 0x2, 0x1, 0xfffffffffffffff0, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xcb}], &(0x7f0000000a00)='syzkaller\x00', 0xfffffff7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7fffffff, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x1, 0x9, 0x4}, {0x3, 0x1, 0xf, 0xa}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c00)=r10, 0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001c40), 0x4) setsockopt(r7, 0x9, 0x0, &(0x7f0000001c80)="0a52bc19765b422c7f52255f69710ab261878006248a9e2ab89b2ff21d7f2bf84156c3cfbd0667b2f6968fa68abc3cab7b58778ae6b5c1a663d7dc8aacec3e0949f91e3b4c5329c27ed9f195a0c234fcc24099e23ca3d05f06663414f930d1d0d326846a1369698c2997b4f3ff22572b47b5be79189ef902d2192a77aff3b2e6f16a865b92e97dbb02f0871a57de61d0ed8e56498047ab152e74ec735fb5dd583a1c47f30c929d50bc670143b092fe7991b99b33ba3202ac7d408cf4848c85461cbc4b5d67ec920ea2463b59c0afd8419544f9218d42009b88c830f587fbaea651a6", 0xe2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000001d80)) pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000001e00)={r1, 0x1000, 0x4}, 0x8) sendmsg$nl_xfrm(r3, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)=@flushsa={0x124, 0x1c, 0x300, 0x70bd26, 0x25dfdbfb, {0x32}, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in=@local, @in6=@mcast2, 0x2b, 0x6, 0x0, 0x3505, 0x2}, {@in=@local, @in6=@mcast1, @in6=@loopback, @in=@loopback, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in=@multicast1, @in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x34ff, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @offload={0xc, 0x1c, {0x0, 0x1}}, @proto={0x5, 0x19, 0xff}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x24040001) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000002040)={0x5, {{0xa, 0x4e23, 0x3ff, @remote, 0x3}}, {{0xa, 0x4e24, 0x8, @private2, 0x6}}}, 0x108) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002180)={@multicast1, @local}, &(0x7f00000021c0)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r12, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000002300)={0x9}, 0x1) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002340)=0x2, &(0x7f0000002380)=0x2) 1.862590795s ago: executing program 3 (id=1247): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40), 0x0, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000000)="113f7db3def3960d43016ac3e3dd0dd94f1a15d65956e1235f0c48b33d6934d6e8f9ab50a1d4faf76af5a36993bf1327931048cbcf5ee6e753affb836330ed34c3c14553ee89d13865785d034a36d3", 0x4f) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="6cbd8acb000000e34aac0803eeef3bdd8385634e2a2ebb6902f0681f6860fe3301000000000000005bc8c135237982c490eef0461c20a7d91202050c0ba274beb1faffb278f04e31f2f8e1b76bf3acc0570018ef3f9a17fced4bd303f2c15476cb9f85e9707cc991f868a04cddb57c0d052e0c289c5efb907031d620514779437ba3ac907df4849edd812b5a89db80a4834e7bc177f5402b6fb377e137ab9ef30bc0ff46609ba61d7110def1ad90da7b77600c06d430a5fe7f3accb7ffa07ecfa988f44332d9ff940bcb365e945b1b4af12dd1666bfabdddb9031429bbd33822baceb91e587f23331915d8d994f125580ad5f50c10923b3d2484ef26c26782bfcb8f29ac66ddb76001a1b32fbff4c032975cdfc50e1572e1edbb6f3ae937d1e1d6f0dc10340b9b2a3b76f15e4ff0fb4d20a06e6a5c96", @ANYRESDEC=r1, @ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x44) 1.76591225s ago: executing program 0 (id=1248): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x140, 0x210, 0x2e0, 0x3f0, 0x140, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ipv6header={{0x28}, {0x34, 0x9, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@remote, 0x6, 0x3b, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xeb}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff, 0x7}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x100, 0x9, 0x9, 0x7fff, 0xd3, 0x6, 0x8]}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x89, 0x3, 0xa, 0xba, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xffffffff, 0xffff00, 0xffffffff, 0xffffffff], 0x800, 0x180}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@loopback, 0x3a, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x140, 0x210, 0x2e0, 0x3f0, 0x140, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ipv6header={{0x28}, {0x34, 0x9, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@remote, 0x6, 0x3b, 0x401}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xeb}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff, 0x7}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x100, 0x9, 0x9, 0x7fff, 0xd3, 0x6, 0x8]}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x89, 0x3, 0xa, 0xba, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xffffffff, 0xffff00, 0xffffffff, 0xffffffff], 0x800, 0x180}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@loopback, 0x3a, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) (async) 1.592474561s ago: executing program 3 (id=1249): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x22, 0x2, 0x4, &(0x7f0000005fc0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 1.450012558s ago: executing program 3 (id=1251): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000640)={0x84, @broadcast, 0x4e20, 0x3, 'none\x00', 0xc, 0x200, 0x4}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r5, @ANYBLOB="2aa1444101240c14e01afd7880f1c26f5c914af707129047508e823cc08043d25805008fb79c965eac7bbcc826fa971a24ee9cf28eef18850ff08bceddc3dc1157bcdefdfd0c3331a84b39754fb092a5da7435cfc673c90bbd47ed482b964bec1c7cf8134c01f4a2fe6fd04bf30ff7579964cda8f6e05523a9b7c16152d6867eb896f330c7ef65ba7bea0b44d4b5f2da8aff8df6474b1aeef83ca865291ea62ddf0f27d0201b129778b402a0a1d064747822d135510fb4d8da99df1306d6"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r5}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000000000000000200000008000500", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.308001539s ago: executing program 4 (id=1253): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x2, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@deltclass={0x94, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x3}, {0x8, 0x4}, {0x6, 0x9}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x0, 0x4, 0xab}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xa8f, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xb, 0x5, 0xa5f}}, @TCA_HFSC_USC={0x10, 0x3, {0xa7ae, 0x2, 0x8}}]}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xc4}}, @TCA_RATE={0x6, 0x5, {0xef, 0x4}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) mmap(&(0x7f0000312000/0x2000)=nil, 0x2000, 0x1000000, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.30772137s ago: executing program 0 (id=1254): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x13c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xa8, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x35, 0x6, "0c667158e5bd4f4c7258693ff73b6255ca1d4908fac16f226d18c88d5659578dff7cbcb14a7b44cbd8f6c32df97313956a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x36}, &(0x7f0000000540)=0x8) 1.188715134s ago: executing program 1 (id=1255): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x10001, 0x7c, &(0x7f0000000080)=""/124, 0x41000, 0x2, '\x00', r4, 0x0, r3, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x5}, 0x10, 0x22404, r2, 0x0, &(0x7f0000000300)=[r5], 0x0, 0x10, 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x1400c004) (async) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x1400c004) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1.125104022s ago: executing program 3 (id=1256): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) (async) 1.110668741s ago: executing program 0 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9e8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x40850) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5110], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0x0, &(0x7f0000000140)="d510c490f913674c5ae400000094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x50c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x19c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffbb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd47}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7499}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x12}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x886e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x36}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa1c}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x577d}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x230}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff0517}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x795}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3efa}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x13c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x300}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x999}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffff800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x99f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ec}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}]}]}, @NL80211_ATTR_REG_RULES={0x204, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x14ed}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xcf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x178d0494}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd66}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6b98}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3e7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9bd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x25db}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x50c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc7a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9e8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x40850) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="00000000060005"], 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5110], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0x0, &(0x7f0000000140)="d510c490f913674c5ae400000094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x50c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x19c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffbb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd47}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7499}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x12}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x886e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x36}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa1c}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x577d}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x230}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff0517}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x795}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3efa}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x13c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x300}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x999}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffff800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x99f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ec}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}]}]}, @NL80211_ATTR_REG_RULES={0x204, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x14ed}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xcf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x178d0494}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd66}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6b98}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3e7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9bd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x25db}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x50c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) (async) 1.028042784s ago: executing program 4 (id=1258): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x94, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x38, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 880.415211ms ago: executing program 1 (id=1259): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3a6}, &(0x7f0000000100)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) socket(0x10, 0x2, 0x0) (async) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3a6}, &(0x7f0000000100)=0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x7) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) 879.144951ms ago: executing program 3 (id=1260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write(r3, &(0x7f00000001c0)='4', 0x1) (async) tee(r2, r1, 0xffffffffffffffff, 0x2) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040005) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 780.558046ms ago: executing program 0 (id=1261): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0xffff8001, 0x5, 0x92, 0x26000, r0, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x24, 0xffffffff, 0x8, 0x6, 0x12, r2, 0x8, '\x00', 0x0, r1, 0x4, 0x4, 0x2}, 0x50) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r4, 0x1, 0x1, &(0x7f00000001c0)=""/75, &(0x7f0000000240)=0x4b) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r5) getsockopt(r4, 0x48, 0x0, &(0x7f0000000400)=""/5, &(0x7f0000000440)=0x5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x8, 0xfffff001, 0xffffff10}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000500)={r9, 0x401}, 0x8) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000580)={'veth1_to_team\x00', &(0x7f0000000540)=@ethtool_stats={0x1d, 0x1, [0x5]}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r1, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r10, &(0x7f0000000640)="497f126ac34a3265ee1978efec3ac44008d878f877aab006c119503824243ded4d48850e0e97e36c582907db449663efef2e97a62000ff37b6d75c5baed26719335111199c3ad2764be3f06c670ac6560cd0d7f611d41f2c419e7dcaf37319ad8a403e65535362c7f49602333de6a991f3c92d6cfcdf82a61b9c64354e73d5a0ad", &(0x7f0000000700)=@tcp, 0x4}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r8) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000840)={@private0, 0x0}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1ac, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000b40)={'gre0\x00', r14, 0x7888, 0x7800, 0x0, 0x7, {{0x2e, 0x4, 0x3, 0x4, 0xb8, 0x68, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x4e, 0x3, [{0x5, 0xc, "ab3b89726f5ff4442d90"}, {0x7, 0x11, "1b85984c0bbe72e9965fff93926509"}, {0x1, 0xf, "34d3ef858ecb30b60f844ec96b"}, {0x1, 0x5, 'D\n0'}, {0x5, 0x3, "dd"}, {0x2, 0xf, "0a19f08caeee11bf8723648e6f"}, {0x7, 0x5, "a207dc"}]}, @generic={0x83, 0xa, "1671883b31cab021"}, @ra={0x94, 0x4}, @generic={0x1b, 0x3, 'j'}, @ssrr={0x89, 0x1b, 0xf8, [@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @remote, @broadcast, @local, @loopback]}, @rr={0x7, 0xf, 0x5d, [@rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x41, [@multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x90, r12, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x44801) ioctl$sock_proto_private(r4, 0x89e7, &(0x7f0000000dc0)="2756d5181851326ad659a687826e90788a549e4a5f42ad90a3c5e2761064cbf8d09df6965b16243fcf6154a0a0ac50effd11e65696638ff87d2c211c94257970198bebbb1571b86e28eac843eebd36c808448febfe") r16 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r11) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x58, r16, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xffff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x58}}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x12, 0x81, 0xa, 0xfffffff7, 0x4000, 0x1, 0x340, '\x00', 0x0, r1, 0x3, 0x0, 0x5}, 0x50) sendto$inet6(r8, &(0x7f0000001040)="96c2111dbda5ca1eb2452850051437ff786f4d9f73196be451d22c60971d", 0x1e, 0x8110, &(0x7f0000001080)={0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x40}, 0xfffffb06}, 0x1c) 725.758816ms ago: executing program 4 (id=1262): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x7fe2, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0xfffffffc, 0xfffffff4, 0x20000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x579f}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r5, r4, 0x5}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x1, 0x0, 0x0, 0x5, 0x4, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 496.415898ms ago: executing program 3 (id=1263): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) shutdown(r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e000000208000100", @ANYRES8=r2], 0x34}}, 0x48044) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = accept(r1, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x2) (async) shutdown(r0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000003000000080002000000000008000400ac1414aa08000500e000000208000100", @ANYRES8=r2], 0x34}}, 0x48044) (async) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) accept(r1, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e9, 0x0, 0x0) (async) 482.510128ms ago: executing program 0 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000005ac4b96ed3f042c54f681221682d69e82aa52baa92460196c9cbd070a13dc8c6e2ebc6345c5af0ab341a2b9d213849e01e0d540acd923dfa6f6fb6b003264ab7"], 0x48}, 0x1, 0x620b}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000005ac4b96ed3f042c54f681221682d69e82aa52baa92460196c9cbd070a13dc8c6e2ebc6345c5af0ab341a2b9d213849e01e0d540acd923dfa6f6fb6b003264ab7"], 0x48}, 0x1, 0x620b}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) 457.484756ms ago: executing program 4 (id=1265): syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0xff, @remote, @mcast2, {[], {0x0, 0x22eb, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x7, 0x0, 0x7, 0x500, 0x5, 0x0, r1}) 408.670151ms ago: executing program 1 (id=1266): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000201"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) 302.490503ms ago: executing program 4 (id=1267): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x13c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xa8, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x35, 0x6, "0c667158e5bd4f4c7258693ff73b6255ca1d4908fac16f226d18c88d5659578dff7cbcb14a7b44cbd8f6c32df97313956a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x36}, &(0x7f0000000540)=0x8) 272.24283ms ago: executing program 1 (id=1268): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x2, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@deltclass={0x94, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x3}, {0x8, 0x4}, {0x6, 0x9}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x0, 0x4, 0xab}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xa8f, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0xb, 0x5, 0xa5f}}, @TCA_HFSC_USC={0x10, 0x3, {0xa7ae, 0x2, 0x8}}]}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8, 0xc4}}, @TCA_RATE={0x6, 0x5, {0xef, 0x4}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) mmap(&(0x7f0000312000/0x2000)=nil, 0x2000, 0x1000000, 0x20000000ec071, 0xffffffffffffffff, 0x0) 152.498282ms ago: executing program 0 (id=1269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xe4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3d5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x48}}, 0x100) socket$netlink(0x10, 0x3, 0x4) 151.71909ms ago: executing program 1 (id=1270): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "551f061b0ad8921730cfb0cefdcfcfb0"}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 132.898718ms ago: executing program 4 (id=1271): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x483f, 0x200, 0x8, 0xfae5, 0x9, 0x9, 0x8, 0x43, 0x3, 0x1, 0x9de, 0x8de, 0x8000, 0x54, 0x81, 0xd80, 0x9, 0x8, 0x6, 0x8, 0x6e20, 0x2, 0x6, 0xb99, 0x3, 0x3, 0x1, 0xc, 0x9, 0x5, 0x100, 0x3, 0x800, 0xfffffff9, 0x9, 0x8, 0x2, 0x7fff, 0x60000, 0x0, 0x5104, 0x3, 0xcb1, 0x9, 0x80000001, 0x5, 0x7932, 0x7, 0x2, 0x8, 0x401, 0x5, 0x800, 0x6, 0x1, 0x3, 0x8, 0x0, 0xf8000000, 0x40, 0xaa1, 0x4, 0x3, 0x4b, 0x1, 0x9, 0x8, 0x2, 0x8, 0xf8, 0x6, 0x2, 0xd1d1, 0x10001, 0x5, 0x800, 0x0, 0x7, 0x2, 0x0, 0x8, 0x389, 0x100, 0x6, 0xdc, 0x10001, 0xff, 0x5b, 0x7, 0x406, 0x10000, 0x0, 0x4, 0x40, 0x58d7, 0x6, 0x3, 0x49c4, 0x0, 0x9, 0xa4c, 0xfffffffc, 0x3, 0x88f, 0x7, 0xfffffdd1, 0x3, 0xc, 0x81, 0x3ff, 0x5, 0x0, 0x7, 0xfd2, 0x0, 0x9, 0x3, 0xf0, 0x7, 0x800, 0x80000001, 0xf383, 0x47db4311, 0x9, 0x3, 0x1ff, 0x2], "9da09e4d2ed7b2a44aefbfb7d39f0bb44583a1e456e9b09f4ce0ba31cd3ce5f652a3c87f02e67800fac0eaebb1e5f5eb3a31b8705bd1799e2b6e3fe16295fc09f80f60d212e4b556e4b7a3efe39f"}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0xa8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x0, 0x5}, {0x2, 0x3, 0x3}, {0x0, 0x2}, 0x10000, 0x8}}}, {{@ip={@empty, @remote, 0xffffff00, 0xffffff00, 'ip6gretap0\x00', 'gretap0\x00', {}, {0xef9d7dc27ebb7536}, 0x0, 0x1, 0x2}, 0x0, 0xe0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x8000000000000001}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x51ea, 0x0, 'pptp\x00', {0x3461}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) socket(0x2, 0xa, 0x200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180"], 0xe4}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r8, 0x44e9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r8, 0x7}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000640)=0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="01000400ffffffff00000000000000000000e00000000000"], 0x38}}, 0x20044050) 0s ago: executing program 1 (id=1272): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x94, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x38, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): T5854] Bluetooth: hci3: command tx timeout [ 146.087221][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.132803][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.140009][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.168381][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.316346][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 146.366198][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 146.392467][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 146.429712][ T7374] hsr_slave_0: entered promiscuous mode [ 146.436171][ T7374] hsr_slave_1: entered promiscuous mode [ 146.445493][ T7374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.453453][ T7374] Cannot create hsr debugfs directory [ 146.494162][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 146.588615][ T7606] FAULT_INJECTION: forcing a failure. [ 146.588615][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 146.611816][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.0.374 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 146.611846][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.611858][ T7606] Call Trace: [ 146.611866][ T7606] [ 146.611875][ T7606] dump_stack_lvl+0x189/0x250 [ 146.611904][ T7606] ? __pfx____ratelimit+0x10/0x10 [ 146.611936][ T7606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.611960][ T7606] ? __pfx__printk+0x10/0x10 [ 146.611993][ T7606] ? __pfx___might_resched+0x10/0x10 [ 146.612023][ T7606] should_fail_ex+0x414/0x560 [ 146.612058][ T7606] should_failslab+0xa8/0x100 [ 146.612087][ T7606] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 146.612114][ T7606] ? __alloc_skb+0x112/0x2d0 [ 146.612155][ T7606] __alloc_skb+0x112/0x2d0 [ 146.612175][ T7606] netlink_sendmsg+0x5c6/0xb30 [ 146.612200][ T7606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.612221][ T7606] ? aa_sock_msg_perm+0x94/0x160 [ 146.612245][ T7606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.612258][ T7606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.612282][ T7606] __sock_sendmsg+0x219/0x270 [ 146.612299][ T7606] ____sys_sendmsg+0x505/0x830 [ 146.612322][ T7606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.612348][ T7606] ? import_iovec+0x74/0xa0 [ 146.612369][ T7606] ___sys_sendmsg+0x21f/0x2a0 [ 146.612390][ T7606] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.612436][ T7606] ? __fget_files+0x2a/0x420 [ 146.612456][ T7606] ? __fget_files+0x3a0/0x420 [ 146.612483][ T7606] __x64_sys_sendmsg+0x19b/0x260 [ 146.612505][ T7606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.612533][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 146.612549][ T7606] ? rcu_is_watching+0x15/0xb0 [ 146.612571][ T7606] ? do_syscall_64+0xbe/0x3b0 [ 146.612588][ T7606] do_syscall_64+0xfa/0x3b0 [ 146.612601][ T7606] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.612624][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.612638][ T7606] ? clear_bhb_loop+0x60/0xb0 [ 146.612655][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.612669][ T7606] RIP: 0033:0x7fe99178e929 [ 146.612682][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.612694][ T7606] RSP: 002b:00007fe992643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.612709][ T7606] RAX: ffffffffffffffda RBX: 00007fe9919b5fa0 RCX: 00007fe99178e929 [ 146.612720][ T7606] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 146.612729][ T7606] RBP: 00007fe992643090 R08: 0000000000000000 R09: 0000000000000000 [ 146.612737][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.612746][ T7606] R13: 0000000000000000 R14: 00007fe9919b5fa0 R15: 00007ffe09fddc68 [ 146.612768][ T7606] [ 146.998750][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 147.043477][ T7615] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.141994][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 147.233474][ T7624] netlink: 72 bytes leftover after parsing attributes in process `syz.4.378'. [ 147.409305][ T7630] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20000 [ 147.750401][ T7650] netlink: 'syz.0.383': attribute type 4 has an invalid length. [ 147.802817][ T7652] netlink: 'syz.0.383': attribute type 4 has an invalid length. [ 147.923901][ T7661] netlink: 'syz.4.385': attribute type 21 has an invalid length. [ 148.148295][ T5854] Bluetooth: hci3: command tx timeout [ 148.173285][ T7661] __nla_validate_parse: 3 callbacks suppressed [ 148.173306][ T7661] netlink: 3 bytes leftover after parsing attributes in process `syz.4.385'. [ 148.464729][ T7675] netlink: 'syz.1.386': attribute type 13 has an invalid length. [ 148.510109][ T7674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.388'. [ 148.654981][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 148.674521][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 148.690219][ T7680] nbd: socks must be embedded in a SOCK_ITEM attr [ 148.915528][ T7675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.115495][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 149.391019][ T7700] Bluetooth: MGMT ver 1.23 [ 149.424906][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 149.739397][ T7697] team0 (unregistering): Port device team_slave_0 removed [ 149.760949][ T7697] team0 (unregistering): Port device team_slave_1 removed [ 149.844820][ T7708] netlink: 260 bytes leftover after parsing attributes in process `syz.1.394'. [ 149.884453][ T7374] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.941012][ T7374] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.985287][ T7374] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.027112][ T7374] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.085122][ T7723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.398'. [ 150.094377][ T7723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.398'. [ 150.267265][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 150.279920][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 150.322448][ T7740] netlink: 'syz.4.401': attribute type 7 has an invalid length. [ 150.354572][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 150.368811][ T7742] FAULT_INJECTION: forcing a failure. [ 150.368811][ T7742] name failslab, interval 1, probability 0, space 0, times 0 [ 150.383467][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.403'. [ 150.420828][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.0.404 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 150.420854][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.420865][ T7742] Call Trace: [ 150.420895][ T7742] [ 150.420903][ T7742] dump_stack_lvl+0x189/0x250 [ 150.420930][ T7742] ? __pfx____ratelimit+0x10/0x10 [ 150.420959][ T7742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.420981][ T7742] ? __pfx__printk+0x10/0x10 [ 150.421009][ T7742] ? __pfx___might_resched+0x10/0x10 [ 150.421030][ T7742] ? fs_reclaim_acquire+0x7d/0x100 [ 150.421062][ T7742] should_fail_ex+0x414/0x560 [ 150.421095][ T7742] should_failslab+0xa8/0x100 [ 150.421121][ T7742] __kmalloc_noprof+0xcb/0x4f0 [ 150.421143][ T7742] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 150.421179][ T7742] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 150.421215][ T7742] genl_family_rcv_msg_doit+0xb8/0x300 [ 150.421250][ T7742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 150.421280][ T7742] ? rcu_is_watching+0x15/0xb0 [ 150.421305][ T7742] ? apparmor_capable+0x137/0x1b0 [ 150.421328][ T7742] ? bpf_lsm_capable+0x9/0x20 [ 150.421349][ T7742] ? security_capable+0x7e/0x2e0 [ 150.421383][ T7742] genl_rcv_msg+0x60e/0x790 [ 150.421417][ T7742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.421443][ T7742] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 150.421482][ T7742] netlink_rcv_skb+0x205/0x470 [ 150.421505][ T7742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.421534][ T7742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.421574][ T7742] ? down_read+0x1ad/0x2e0 [ 150.421597][ T7742] genl_rcv+0x28/0x40 [ 150.421621][ T7742] netlink_unicast+0x759/0x8e0 [ 150.421659][ T7742] netlink_sendmsg+0x805/0xb30 [ 150.421691][ T7742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.421736][ T7742] ? aa_sock_msg_perm+0x94/0x160 [ 150.421768][ T7742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.421786][ T7742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.421812][ T7742] __sock_sendmsg+0x219/0x270 [ 150.421836][ T7742] ____sys_sendmsg+0x505/0x830 [ 150.421875][ T7742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.421913][ T7742] ? import_iovec+0x74/0xa0 [ 150.421942][ T7742] ___sys_sendmsg+0x21f/0x2a0 [ 150.421972][ T7742] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.422041][ T7742] ? __fget_files+0x2a/0x420 [ 150.422067][ T7742] ? __fget_files+0x3a0/0x420 [ 150.422107][ T7742] __x64_sys_sendmsg+0x19b/0x260 [ 150.422137][ T7742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.422176][ T7742] ? __pfx_ksys_write+0x10/0x10 [ 150.422197][ T7742] ? rcu_is_watching+0x15/0xb0 [ 150.422227][ T7742] ? do_syscall_64+0xbe/0x3b0 [ 150.422251][ T7742] do_syscall_64+0xfa/0x3b0 [ 150.422269][ T7742] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.422299][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.422319][ T7742] ? clear_bhb_loop+0x60/0xb0 [ 150.422344][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.422363][ T7742] RIP: 0033:0x7fe99178e929 [ 150.422380][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.422396][ T7742] RSP: 002b:00007fe992643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.422417][ T7742] RAX: ffffffffffffffda RBX: 00007fe9919b5fa0 RCX: 00007fe99178e929 [ 150.422432][ T7742] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 150.422444][ T7742] RBP: 00007fe992643090 R08: 0000000000000000 R09: 0000000000000000 [ 150.422456][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.422467][ T7742] R13: 0000000000000000 R14: 00007fe9919b5fa0 R15: 00007ffe09fddc68 [ 150.422500][ T7742] [ 150.849711][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.870473][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.043474][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.050678][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.083496][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.090712][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.136711][ T7374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.761348][ T7736] infiniband syz2: set active [ 151.774042][ T7736] infiniband syz2: added vxcan1 [ 151.788346][ T5908] vxcan1 speed is unknown, defaulting to 1000 [ 151.815126][ T7736] syz2: rxe_create_cq: returned err = -12 [ 151.862652][ T7736] infiniband syz2: Couldn't create ib_mad CQ [ 151.900492][ T7736] infiniband syz2: Couldn't open port 1 [ 151.935418][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.041384][ T7736] RDS/IB: syz2: added [ 152.088223][ T7736] smc: adding ib device syz2 with port count 1 [ 152.094647][ T7736] smc: ib device syz2 port 1 has pnetid [ 152.124525][ T7792] FAULT_INJECTION: forcing a failure. [ 152.124525][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 152.152874][ T7374] veth0_vlan: entered promiscuous mode [ 152.186369][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 152.200609][ T7374] veth1_vlan: entered promiscuous mode [ 152.208310][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: syz.3.415 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 152.208337][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.208349][ T7792] Call Trace: [ 152.208357][ T7792] [ 152.208365][ T7792] dump_stack_lvl+0x189/0x250 [ 152.208394][ T7792] ? __pfx____ratelimit+0x10/0x10 [ 152.208426][ T7792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.208450][ T7792] ? __pfx__printk+0x10/0x10 [ 152.208483][ T7792] ? __lock_acquire+0xab9/0xd20 [ 152.208512][ T7792] should_fail_ex+0x414/0x560 [ 152.208547][ T7792] should_failslab+0xa8/0x100 [ 152.208576][ T7792] __kmalloc_cache_noprof+0x70/0x3d0 [ 152.208601][ T7792] ? netlbl_unlhsh_add+0x449/0x1280 [ 152.208630][ T7792] netlbl_unlhsh_add+0x449/0x1280 [ 152.208659][ T7792] ? netlbl_unlhsh_add+0xdc/0x1280 [ 152.208683][ T7792] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 152.208708][ T7792] ? apparmor_secctx_to_secid+0x98/0x110 [ 152.208735][ T7792] netlbl_unlabel_staticadddef+0x52a/0x680 [ 152.208764][ T7792] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 152.208798][ T7792] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 152.208839][ T7792] genl_family_rcv_msg_doit+0x212/0x300 [ 152.208878][ T7792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.208924][ T7792] ? bpf_lsm_capable+0x9/0x20 [ 152.208955][ T7792] ? security_capable+0x7e/0x2e0 [ 152.208992][ T7792] genl_rcv_msg+0x60e/0x790 [ 152.209030][ T7792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.209059][ T7792] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 152.209101][ T7792] netlink_rcv_skb+0x205/0x470 [ 152.209126][ T7792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.209158][ T7792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.209201][ T7792] ? down_read+0x1ad/0x2e0 [ 152.209226][ T7792] genl_rcv+0x28/0x40 [ 152.209253][ T7792] netlink_unicast+0x759/0x8e0 [ 152.209288][ T7792] netlink_sendmsg+0x805/0xb30 [ 152.209324][ T7792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.209358][ T7792] ? aa_sock_msg_perm+0x94/0x160 [ 152.209390][ T7792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.209408][ T7792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.209452][ T7792] __sock_sendmsg+0x219/0x270 [ 152.209477][ T7792] ____sys_sendmsg+0x505/0x830 [ 152.209511][ T7792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.209549][ T7792] ? import_iovec+0x74/0xa0 [ 152.209578][ T7792] ___sys_sendmsg+0x21f/0x2a0 [ 152.209608][ T7792] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.209687][ T7792] ? __fget_files+0x2a/0x420 [ 152.209745][ T7792] ? __fget_files+0x3a0/0x420 [ 152.209786][ T7792] __x64_sys_sendmsg+0x19b/0x260 [ 152.209816][ T7792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.209855][ T7792] ? __pfx_ksys_write+0x10/0x10 [ 152.209877][ T7792] ? rcu_is_watching+0x15/0xb0 [ 152.209908][ T7792] ? do_syscall_64+0xbe/0x3b0 [ 152.209942][ T7792] do_syscall_64+0xfa/0x3b0 [ 152.209961][ T7792] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.209992][ T7792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.210012][ T7792] ? clear_bhb_loop+0x60/0xb0 [ 152.210037][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.210057][ T7792] RIP: 0033:0x7fc4b1d8e929 [ 152.210075][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.210091][ T7792] RSP: 002b:00007fc4afbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.210112][ T7792] RAX: ffffffffffffffda RBX: 00007fc4b1fb5fa0 RCX: 00007fc4b1d8e929 [ 152.210126][ T7792] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 152.210138][ T7792] RBP: 00007fc4afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.210150][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.210161][ T7792] R13: 0000000000000000 R14: 00007fc4b1fb5fa0 R15: 00007fff720e8678 [ 152.210194][ T7792] [ 152.588613][ T5973] vxcan1 speed is unknown, defaulting to 1000 [ 152.737338][ T7374] veth0_macvtap: entered promiscuous mode [ 152.747847][ T7374] veth1_macvtap: entered promiscuous mode [ 152.773553][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.785295][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.797092][ T7374] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.805943][ T7374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.814751][ T7374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.823612][ T7374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.016162][ T7811] netlink: 'syz.1.420': attribute type 7 has an invalid length. [ 153.292032][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.303219][ T7821] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 153.328093][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.425669][ T7821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.468601][ T7829] __nla_validate_parse: 3 callbacks suppressed [ 153.468621][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 153.645980][ T7826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.663159][ T7826] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.677960][ T7826] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 153.773522][ T7837] macvlan3: entered promiscuous mode [ 153.779133][ T7837] macvlan3: entered allmulticast mode [ 153.795279][ T7837] bond1: entered promiscuous mode [ 153.816622][ T7837] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 153.827210][ T7837] bond1: left promiscuous mode [ 153.869287][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 153.949084][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 153.997073][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.031588][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.269724][ T7859] FAULT_INJECTION: forcing a failure. [ 154.269724][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 154.327727][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.3.429 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 154.327756][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.327768][ T7859] Call Trace: [ 154.327776][ T7859] [ 154.327784][ T7859] dump_stack_lvl+0x189/0x250 [ 154.327813][ T7859] ? __pfx____ratelimit+0x10/0x10 [ 154.327845][ T7859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.327868][ T7859] ? __pfx__printk+0x10/0x10 [ 154.327901][ T7859] ? __pfx___might_resched+0x10/0x10 [ 154.327923][ T7859] ? fs_reclaim_acquire+0x7d/0x100 [ 154.327956][ T7859] should_fail_ex+0x414/0x560 [ 154.327991][ T7859] should_failslab+0xa8/0x100 [ 154.328019][ T7859] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 154.328044][ T7859] ? __alloc_skb+0x112/0x2d0 [ 154.328072][ T7859] __alloc_skb+0x112/0x2d0 [ 154.328100][ T7859] netlink_ack+0x146/0xa50 [ 154.328121][ T7859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.328168][ T7859] netlink_rcv_skb+0x28c/0x470 [ 154.328193][ T7859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.328224][ T7859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.328266][ T7859] ? down_read+0x1ad/0x2e0 [ 154.328290][ T7859] genl_rcv+0x28/0x40 [ 154.328317][ T7859] netlink_unicast+0x759/0x8e0 [ 154.328351][ T7859] netlink_sendmsg+0x805/0xb30 [ 154.328386][ T7859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.328414][ T7859] ? aa_sock_msg_perm+0x94/0x160 [ 154.328445][ T7859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.328463][ T7859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.328488][ T7859] __sock_sendmsg+0x219/0x270 [ 154.328511][ T7859] ____sys_sendmsg+0x505/0x830 [ 154.328543][ T7859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.328579][ T7859] ? import_iovec+0x74/0xa0 [ 154.328607][ T7859] ___sys_sendmsg+0x21f/0x2a0 [ 154.328635][ T7859] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.328708][ T7859] ? __fget_files+0x2a/0x420 [ 154.328733][ T7859] ? __fget_files+0x3a0/0x420 [ 154.328772][ T7859] __x64_sys_sendmsg+0x19b/0x260 [ 154.328800][ T7859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.328837][ T7859] ? __pfx_ksys_write+0x10/0x10 [ 154.328857][ T7859] ? rcu_is_watching+0x15/0xb0 [ 154.328886][ T7859] ? do_syscall_64+0xbe/0x3b0 [ 154.328910][ T7859] do_syscall_64+0xfa/0x3b0 [ 154.328927][ T7859] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.328957][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.328976][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 154.328999][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.329018][ T7859] RIP: 0033:0x7fc4b1d8e929 [ 154.329034][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.329050][ T7859] RSP: 002b:00007fc4afbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.329071][ T7859] RAX: ffffffffffffffda RBX: 00007fc4b1fb5fa0 RCX: 00007fc4b1d8e929 [ 154.329085][ T7859] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 154.329097][ T7859] RBP: 00007fc4afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.329108][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.329119][ T7859] R13: 0000000000000000 R14: 00007fc4b1fb5fa0 R15: 00007fff720e8678 [ 154.329151][ T7859] [ 154.761366][ T7863] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 154.805607][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 154.863480][ T7863] tunl0: entered promiscuous mode [ 154.884668][ T7863] netlink: 'syz.0.431': attribute type 3 has an invalid length. [ 154.953934][ T7863] netlink: 9 bytes leftover after parsing attributes in process `syz.0.431'. [ 154.983464][ T7869] netlink: 'syz.3.432': attribute type 13 has an invalid length. [ 155.106977][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 155.132461][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.139755][ T7869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.147355][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.154735][ T7869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.290588][ T7869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.526507][ T6383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.703130][ T6383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.926202][ T6383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.975677][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 156.031486][ T6383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.249255][ T6383] bridge_slave_1: left allmulticast mode [ 156.257171][ T6383] bridge_slave_1: left promiscuous mode [ 156.298411][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.344790][ T6383] bridge_slave_0: left allmulticast mode [ 156.364046][ T6383] bridge_slave_0: left promiscuous mode [ 156.374261][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.894769][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.903913][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.913908][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.934078][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.944397][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.068513][ T6383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.082393][ T6383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.092547][ T6383] bond0 (unregistering): Released all slaves [ 157.116965][ T7736] vxcan1 speed is unknown, defaulting to 1000 [ 157.408201][ T7916] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 157.546158][ T7918] netlink: 'syz.3.440': attribute type 32 has an invalid length. [ 157.548582][ T7921] netlink: 9 bytes leftover after parsing attributes in process `syz.0.441'. [ 157.602194][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 157.647325][ T7926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.440'. [ 158.132048][ T7938] netlink: 216 bytes leftover after parsing attributes in process `syz.0.444'. [ 158.141503][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 158.245391][ T7909] vxcan1 speed is unknown, defaulting to 1000 [ 158.521417][ T7955] xt_hashlimit: max too large, truncated to 1048576 [ 158.674152][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 158.719275][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 159.041479][ T5854] Bluetooth: hci3: command tx timeout [ 159.500983][ T6383] hsr_slave_0: left promiscuous mode [ 159.528676][ T6383] hsr_slave_1: left promiscuous mode [ 159.542326][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.550872][ T6383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.560465][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.568015][ T6383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.592599][ T6383] veth1_macvtap: left promiscuous mode [ 159.599025][ T6383] veth0_macvtap: left promiscuous mode [ 159.604685][ T6383] veth1_vlan: left promiscuous mode [ 159.612369][ T6383] veth0_vlan: left promiscuous mode [ 160.032265][ T6383] team0 (unregistering): Port device team_slave_1 removed [ 160.071512][ T6383] team0 (unregistering): Port device team_slave_0 removed [ 160.748864][ T7995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.461'. [ 160.826708][ T7909] chnl_net:caif_netlink_parms(): no params data found [ 160.884836][ T8002] netlink: 165 bytes leftover after parsing attributes in process `syz.4.458'. [ 161.003464][ T8002] veth0: entered promiscuous mode [ 161.013922][ T7994] veth0: left promiscuous mode [ 161.100224][ T5854] Bluetooth: hci3: command tx timeout [ 161.119305][ T8017] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 161.138872][ C0] Illegal XDP return value 16128 on prog (id 125) dev lo, expect packet loss! [ 161.186466][ T8007] "syz.1.462" (8007) uses obsolete ecb(arc4) skcipher [ 161.345894][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 161.362194][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.382109][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.398225][ T7909] bridge_slave_0: entered allmulticast mode [ 161.404887][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 161.415846][ T7909] bridge_slave_0: entered promiscuous mode [ 161.441033][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.456558][ T8034] netlink: 'syz.4.466': attribute type 13 has an invalid length. [ 161.461976][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.482702][ T7909] bridge_slave_1: entered allmulticast mode [ 161.502527][ T7909] bridge_slave_1: entered promiscuous mode [ 161.686789][ T8034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.847136][ T7909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.903511][ T7909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.139410][ T7909] team0: Port device team_slave_0 added [ 162.165798][ T7909] team0: Port device team_slave_1 added [ 162.399263][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.406276][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.431260][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 162.446239][ T7909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.511198][ T8061] netlink: 'syz.0.473': attribute type 4 has an invalid length. [ 162.562312][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.603351][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.724126][ T7909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.804726][ T8080] xt_connbytes: Forcing CT accounting to be enabled [ 162.843457][ T8080] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.096395][ T7909] hsr_slave_0: entered promiscuous mode [ 163.105756][ T7909] hsr_slave_1: entered promiscuous mode [ 163.124928][ T7909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.152460][ T7909] Cannot create hsr debugfs directory [ 163.177647][ T5854] Bluetooth: hci3: command tx timeout [ 163.300593][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 163.625213][ T8116] netlink: 284 bytes leftover after parsing attributes in process `syz.1.486'. [ 163.972322][ T8134] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.488'. [ 164.286141][ T8142] netlink: 'syz.3.493': attribute type 11 has an invalid length. [ 164.298688][ T8144] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 164.396941][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.486522][ T8144] team0: Port device bond0 added [ 164.517694][ T8154] netlink: 'syz.3.495': attribute type 13 has an invalid length. [ 164.606527][ T8154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.003495][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 165.033265][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 165.262250][ T5854] Bluetooth: hci3: command tx timeout [ 165.534034][ T8183] unknown channel width for channel at 909000KHz? [ 165.606079][ T8185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 165.649599][ T8192] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 165.702791][ T8193] netlink: 'syz.0.504': attribute type 4 has an invalid length. [ 165.864043][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 165.886676][ T7909] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.916660][ T7909] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.944780][ T7909] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.994135][ T7909] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.078835][ T8205] veth1_macvtap: left promiscuous mode [ 166.211279][ T8214] netlink: 256 bytes leftover after parsing attributes in process `syz.4.511'. [ 166.673512][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.783553][ T7909] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.848160][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.855485][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.917080][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.924367][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.453125][ T8269] netlink: 256 bytes leftover after parsing attributes in process `syz.1.523'. [ 167.499438][ T8269] netlink: 'syz.1.523': attribute type 9 has an invalid length. [ 167.528175][ T8273] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 167.584510][ T8275] netlink: 'syz.3.524': attribute type 4 has an invalid length. [ 167.942596][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.012999][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 168.162220][ T7909] veth0_vlan: entered promiscuous mode [ 168.244025][ T7909] veth1_vlan: entered promiscuous mode [ 168.339575][ T8303] netlink: 60 bytes leftover after parsing attributes in process `syz.1.531'. [ 168.422708][ T7909] veth0_macvtap: entered promiscuous mode [ 168.625851][ T7909] veth1_macvtap: entered promiscuous mode [ 168.744864][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.790133][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.820125][ T7909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.840070][ T7909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.856212][ T7909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.866778][ T7909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.171670][ T8339] openvswitch: netlink: IPv4 tunnel dst address is zero [ 169.184348][ T6393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.206280][ T6393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.264470][ T6393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.299295][ T6393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.592851][ T8352] netlink: 'syz.3.544': attribute type 4 has an invalid length. [ 169.613909][ T8350] netlink: 64 bytes leftover after parsing attributes in process `syz.4.543'. [ 169.641706][ T5916] IPVS: starting estimator thread 0... [ 169.646532][ T8357] netlink: 'syz.3.544': attribute type 4 has an invalid length. [ 169.700120][ T8359] netlink: 'syz.4.543': attribute type 21 has an invalid length. [ 169.737314][ T8355] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 169.754420][ T8354] IPVS: using max 32 ests per chain, 76800 per kthread [ 169.770321][ T8359] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.796843][ T8355] netlink: 228 bytes leftover after parsing attributes in process `syz.1.545'. [ 169.848068][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 170.025731][ T3007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.108872][ T8360] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 170.162927][ T8360] netlink: 232 bytes leftover after parsing attributes in process `syz.1.545'. [ 170.198578][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 170.231883][ T3007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.491903][ T3007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.650253][ T3007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.904324][ T3007] bridge_slave_1: left allmulticast mode [ 170.917856][ T3007] bridge_slave_1: left promiscuous mode [ 170.925937][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.961360][ T3007] bridge_slave_0: left allmulticast mode [ 170.969755][ T3007] bridge_slave_0: left promiscuous mode [ 170.979321][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.649270][ T8395] netlink: 'syz.0.551': attribute type 2 has an invalid length. [ 171.684522][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 172.486103][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.500952][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.512361][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.520738][ T3007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.538038][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.545830][ T3007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.557260][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.568473][ T3007] bond0 (unregistering): Released all slaves [ 172.644642][ T8396] netlink: 'syz.4.552': attribute type 4 has an invalid length. [ 172.826332][ T8414] vxcan1 speed is unknown, defaulting to 1000 [ 173.192587][ T8434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.203123][ T8434] IPv6: NLM_F_CREATE should be set when creating new route [ 173.581141][ T8439] bridge0: entered allmulticast mode [ 173.598191][ T8445] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 173.611133][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 173.622726][ T8445] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 173.651944][ T8439] bridge_slave_1: left allmulticast mode [ 173.677792][ T8439] bridge_slave_1: left promiscuous mode [ 173.705094][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.781584][ T8439] bridge_slave_0: left allmulticast mode [ 173.812390][ T8439] bridge_slave_0: left promiscuous mode [ 173.838961][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.938139][ T8439] bridge0 (unregistering): left allmulticast mode [ 174.303388][ T8465] FAULT_INJECTION: forcing a failure. [ 174.303388][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 174.331443][ T8465] CPU: 0 UID: 0 PID: 8465 Comm: syz.1.566 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 174.331475][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.331488][ T8465] Call Trace: [ 174.331496][ T8465] [ 174.331505][ T8465] dump_stack_lvl+0x189/0x250 [ 174.331535][ T8465] ? __pfx____ratelimit+0x10/0x10 [ 174.331566][ T8465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.331591][ T8465] ? __pfx__printk+0x10/0x10 [ 174.331626][ T8465] ? ref_tracker_alloc+0x318/0x460 [ 174.331649][ T8465] should_fail_ex+0x414/0x560 [ 174.331708][ T8465] should_failslab+0xa8/0x100 [ 174.331738][ T8465] kmem_cache_alloc_noprof+0x73/0x3c0 [ 174.331762][ T8465] ? skb_clone+0x212/0x3a0 [ 174.331797][ T8465] skb_clone+0x212/0x3a0 [ 174.331829][ T8465] __netlink_deliver_tap+0x404/0x850 [ 174.331869][ T8465] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.331896][ T8465] netlink_deliver_tap+0x19c/0x1b0 [ 174.331923][ T8465] netlink_unicast+0x730/0x8e0 [ 174.331958][ T8465] netlink_sendmsg+0x805/0xb30 [ 174.331994][ T8465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.332024][ T8465] ? aa_sock_msg_perm+0x94/0x160 [ 174.332057][ T8465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.332076][ T8465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.332103][ T8465] __sock_sendmsg+0x219/0x270 [ 174.332126][ T8465] ____sys_sendmsg+0x505/0x830 [ 174.332161][ T8465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.332198][ T8465] ? import_iovec+0x74/0xa0 [ 174.332227][ T8465] ___sys_sendmsg+0x21f/0x2a0 [ 174.332257][ T8465] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.332325][ T8465] ? __fget_files+0x2a/0x420 [ 174.332350][ T8465] ? __fget_files+0x3a0/0x420 [ 174.332387][ T8465] __x64_sys_sendmsg+0x19b/0x260 [ 174.332415][ T8465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.332453][ T8465] ? __pfx_ksys_write+0x10/0x10 [ 174.332474][ T8465] ? rcu_is_watching+0x15/0xb0 [ 174.332503][ T8465] ? do_syscall_64+0xbe/0x3b0 [ 174.332526][ T8465] do_syscall_64+0xfa/0x3b0 [ 174.332544][ T8465] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.332573][ T8465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.332592][ T8465] ? clear_bhb_loop+0x60/0xb0 [ 174.332617][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.332635][ T8465] RIP: 0033:0x7f3aad98e929 [ 174.332661][ T8465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.332678][ T8465] RSP: 002b:00007f3aab7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.332699][ T8465] RAX: ffffffffffffffda RBX: 00007f3aadbb5fa0 RCX: 00007f3aad98e929 [ 174.332715][ T8465] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 174.332728][ T8465] RBP: 00007f3aab7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.332741][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.332753][ T8465] R13: 0000000000000000 R14: 00007f3aadbb5fa0 R15: 00007ffd013836e8 [ 174.332787][ T8465] [ 174.689079][ T5867] Bluetooth: hci3: command tx timeout [ 174.798912][ T8469] netlink: 'syz.0.567': attribute type 64 has an invalid length. [ 174.807203][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.567'. [ 175.277745][ T3007] hsr_slave_0: left promiscuous mode [ 175.311015][ T3007] hsr_slave_1: left promiscuous mode [ 175.338888][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.378289][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.396248][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.404024][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.433395][ T3007] veth1_macvtap: left promiscuous mode [ 175.439219][ T3007] veth0_macvtap: left promiscuous mode [ 175.445501][ T3007] veth1_vlan: left promiscuous mode [ 175.451985][ T3007] veth0_vlan: left promiscuous mode [ 175.506083][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 175.930061][ T3007] team0 (unregistering): Port device team_slave_1 removed [ 175.966209][ T3007] team0 (unregistering): Port device team_slave_0 removed [ 176.690261][ T8519] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 176.697900][ T5867] Bluetooth: hci3: command tx timeout [ 176.741721][ T8521] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 177.080485][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 177.606511][ T8554] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 177.662721][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.681871][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.681898][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 177.704415][ T8414] bridge_slave_0: entered allmulticast mode [ 177.740132][ T8414] bridge_slave_0: entered promiscuous mode [ 177.764339][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.788276][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.823137][ T8414] bridge_slave_1: entered allmulticast mode [ 177.861117][ T8414] bridge_slave_1: entered promiscuous mode [ 178.030037][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.090327][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.259443][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 178.279162][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.591'. [ 178.285444][ T8574] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.296993][ T8574] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.306176][ T8574] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.315063][ T8574] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.338030][ T8582] netlink: 'syz.4.589': attribute type 13 has an invalid length. [ 178.348006][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 178.450183][ T8574] vxlan0: entered promiscuous mode [ 178.455493][ T8574] vxlan0: entered allmulticast mode [ 178.610055][ T8414] team0: Port device team_slave_0 added [ 178.646920][ T8414] team0: Port device team_slave_1 added [ 178.655038][ T8590] netlink: 8412 bytes leftover after parsing attributes in process `syz.1.590'. [ 178.699885][ T8582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.779433][ T5867] Bluetooth: hci3: command tx timeout [ 178.958478][ T8594] lo: entered promiscuous mode [ 178.966073][ T8594] netlink: 'syz.3.593': attribute type 2 has an invalid length. [ 178.994397][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.052106][ T5513] veth1_macvtap: entered promiscuous mode [ 179.153076][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.203971][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.237141][ T8610] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 179.279073][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.300022][ T8611] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 179.334508][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.343842][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.376973][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.668324][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 179.714461][ T8414] hsr_slave_0: entered promiscuous mode [ 179.753396][ T8414] hsr_slave_1: entered promiscuous mode [ 179.775674][ T8414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.800474][ T8414] Cannot create hsr debugfs directory [ 180.260858][ T8650] netlink: 'syz.4.604': attribute type 13 has an invalid length. [ 180.274553][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.306312][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.323254][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 180.343098][ T8650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.860363][ T5867] Bluetooth: hci3: command tx timeout [ 181.518217][ T8685] netlink: 'syz.1.617': attribute type 12 has an invalid length. [ 181.743693][ T8689] Bluetooth: MGMT ver 1.23 [ 181.914571][ T8695] netlink: 224 bytes leftover after parsing attributes in process `syz.3.621'. [ 181.962835][ T8695] veth0_vlan: entered allmulticast mode [ 181.995564][ T8414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.040534][ T8414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.117218][ T8414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.185005][ T8704] block nbd0: Unsupported socket: shutdown callout must be supported. [ 182.203457][ T8414] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.442059][ T8724] netlink: 'syz.4.626': attribute type 13 has an invalid length. [ 182.558497][ T8724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.606127][ T8730] openvswitch: netlink: Flow key attribute not present in set flow. [ 183.264188][ T8749] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 183.378892][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 183.440575][ T8749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.524996][ T8751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.554686][ T8751] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.579689][ T8751] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 183.594405][ T8760] xt_hashlimit: size too large, truncated to 1048576 [ 183.643487][ T8752] vlan3: entered promiscuous mode [ 183.677642][ T8752] bridge0: entered promiscuous mode [ 183.690870][ T8752] vlan3: entered allmulticast mode [ 183.707100][ T8752] bridge0: entered allmulticast mode [ 183.741854][ T8756] gretap1: entered promiscuous mode [ 183.786622][ T8756] bond3: (slave gretap1): making interface the new active one [ 183.812207][ T8756] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 183.881772][ T8749] macvlan3: entered promiscuous mode [ 183.897281][ T8749] macvlan3: entered allmulticast mode [ 183.915772][ T8749] bond3: entered promiscuous mode [ 183.934699][ T8749] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 183.985498][ T8749] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 184.008742][ T8749] bond3: left promiscuous mode [ 184.292753][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.423631][ T8414] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.464848][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.472248][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.607004][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.614298][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.040455][ T8813] x_tables: unsorted underflow at hook 4 [ 185.075027][ T8812] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 185.562053][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.652'. [ 185.674856][ T8414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.953891][ T8414] veth0_vlan: entered promiscuous mode [ 186.010869][ T8414] veth1_vlan: entered promiscuous mode [ 186.159312][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.659'. [ 186.172683][ T8414] veth0_macvtap: entered promiscuous mode [ 186.201927][ T8414] veth1_macvtap: entered promiscuous mode [ 186.237863][ T8857] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.659'. [ 186.296953][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.351779][ T8414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.484325][ T8414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.560110][ T8414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.578896][ T8414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.590624][ T8414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.899323][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.921871][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.067766][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.125222][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.384354][ T8893] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 187.401383][ T8894] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 187.492554][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 187.505017][ T8899] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 187.845729][ T8906] netlink: 64 bytes leftover after parsing attributes in process `syz.3.668'. [ 188.086302][ T1098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.320477][ T1098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.434161][ T1098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.562406][ T1098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.940041][ T1098] bridge_slave_1: left allmulticast mode [ 188.960224][ T1098] bridge_slave_1: left promiscuous mode [ 188.966114][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.013911][ T1098] bridge_slave_0: left allmulticast mode [ 189.025419][ T1098] bridge_slave_0: left promiscuous mode [ 189.033628][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.735470][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.750166][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.759135][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.784725][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.807954][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.177245][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.265032][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.310883][ T1098] bond0 (unregistering): Released all slaves [ 190.407089][ T3007] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.447029][ T8916] netlink: 176 bytes leftover after parsing attributes in process `syz.3.670'. [ 190.468347][ T8916] ip6gretap0: entered promiscuous mode [ 190.643687][ T8923] vxcan1 speed is unknown, defaulting to 1000 [ 190.900682][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 191.205492][ T8938] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 191.240340][ T8938] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 191.257236][ T8938] gretap2: entered promiscuous mode [ 191.279981][ T8938] gretap2: entered allmulticast mode [ 191.907864][ T5854] Bluetooth: hci3: command tx timeout [ 192.026411][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 192.064321][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 192.139766][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 192.371240][ T8986] FAULT_INJECTION: forcing a failure. [ 192.371240][ T8986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.385907][ T8986] CPU: 1 UID: 0 PID: 8986 Comm: syz.4.682 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 192.385953][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.385974][ T8986] Call Trace: [ 192.385989][ T8986] [ 192.386004][ T8986] dump_stack_lvl+0x189/0x250 [ 192.386035][ T8986] ? __pfx____ratelimit+0x10/0x10 [ 192.386068][ T8986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.386092][ T8986] ? __pfx__printk+0x10/0x10 [ 192.386125][ T8986] ? __might_fault+0xb0/0x130 [ 192.386163][ T8986] should_fail_ex+0x414/0x560 [ 192.386199][ T8986] _copy_from_user+0x2d/0xb0 [ 192.386226][ T8986] ___sys_sendmsg+0x158/0x2a0 [ 192.386256][ T8986] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.386324][ T8986] ? __fget_files+0x2a/0x420 [ 192.386352][ T8986] ? __fget_files+0x3a0/0x420 [ 192.386392][ T8986] __x64_sys_sendmsg+0x19b/0x260 [ 192.386422][ T8986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.386460][ T8986] ? __pfx_ksys_write+0x10/0x10 [ 192.386482][ T8986] ? rcu_is_watching+0x15/0xb0 [ 192.386511][ T8986] ? do_syscall_64+0xbe/0x3b0 [ 192.386537][ T8986] do_syscall_64+0xfa/0x3b0 [ 192.386556][ T8986] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.386587][ T8986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.386607][ T8986] ? clear_bhb_loop+0x60/0xb0 [ 192.386633][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.386652][ T8986] RIP: 0033:0x7fd776f8e929 [ 192.386671][ T8986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.386688][ T8986] RSP: 002b:00007fd777e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.386710][ T8986] RAX: ffffffffffffffda RBX: 00007fd7771b5fa0 RCX: 00007fd776f8e929 [ 192.386725][ T8986] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 192.386738][ T8986] RBP: 00007fd777e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.386750][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.386770][ T8986] R13: 0000000000000000 R14: 00007fd7771b5fa0 R15: 00007ffcd8207a38 [ 192.386803][ T8986] [ 192.619267][ T5854] Bluetooth: hci2: command tx timeout [ 192.831584][ T1098] hsr_slave_0: left promiscuous mode [ 192.855164][ T1098] hsr_slave_1: left promiscuous mode [ 192.882840][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.913270][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.963405][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.987694][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.093675][ T1098] veth1_macvtap: left promiscuous mode [ 193.105850][ T1098] veth0_macvtap: left promiscuous mode [ 193.118052][ T1098] veth1_vlan: left promiscuous mode [ 193.123498][ T1098] veth0_vlan: left promiscuous mode [ 193.494727][ T8843] Set syz1 is full, maxelem 65536 reached [ 193.522892][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 193.985057][ T5854] Bluetooth: hci3: command tx timeout [ 194.119746][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 194.137775][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.183739][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 194.223243][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.701950][ T5854] Bluetooth: hci2: command tx timeout [ 194.809312][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 195.096335][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 195.116803][ T9037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.697'. [ 195.293349][ T9046] netlink: 388 bytes leftover after parsing attributes in process `syz.1.698'. [ 195.549527][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.556868][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.582604][ T8923] bridge_slave_0: entered allmulticast mode [ 195.619772][ T8923] bridge_slave_0: entered promiscuous mode [ 195.687412][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.718353][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.725722][ T8923] bridge_slave_1: entered allmulticast mode [ 195.772521][ T8923] bridge_slave_1: entered promiscuous mode [ 195.781790][ T9058] netlink: 'syz.0.702': attribute type 14 has an invalid length. [ 195.857260][ T9071] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 195.912633][ T9072] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 196.003103][ T9078] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.013703][ T9078] netlink: 'syz.0.705': attribute type 13 has an invalid length. [ 196.063215][ T5854] Bluetooth: hci3: command tx timeout [ 196.102252][ T9078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.193271][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.234997][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.609685][ T8923] team0: Port device team_slave_0 added [ 196.650339][ T8923] team0: Port device team_slave_1 added [ 196.723535][ T9106] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 196.771328][ T9106] netlink: 244 bytes leftover after parsing attributes in process `syz.3.715'. [ 196.922346][ T9116] netlink: 'syz.4.716': attribute type 13 has an invalid length. [ 197.083327][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.107323][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.231182][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.276549][ T9116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.354347][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.364346][ T9126] netlink: 'syz.3.719': attribute type 17 has an invalid length. [ 197.384831][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.462754][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.877121][ T8923] hsr_slave_0: entered promiscuous mode [ 197.910003][ T8923] hsr_slave_1: entered promiscuous mode [ 197.925726][ T8923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.971896][ T8923] Cannot create hsr debugfs directory [ 198.138707][ T5854] Bluetooth: hci3: command tx timeout [ 198.228763][ T9154] netlink: 'syz.0.726': attribute type 4 has an invalid length. [ 198.284663][ T9156] netlink: 'syz.0.726': attribute type 4 has an invalid length. [ 198.935499][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 199.435908][ T9197] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 199.454074][ T9197] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 199.787448][ T8923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.838171][ T8923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.894745][ T8923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.945407][ T8923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.026240][ T9218] FAULT_INJECTION: forcing a failure. [ 200.026240][ T9218] name failslab, interval 1, probability 0, space 0, times 0 [ 200.072947][ T9220] netlink: 'syz.3.744': attribute type 4 has an invalid length. [ 200.085336][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.4.743 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 200.085369][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.085383][ T9218] Call Trace: [ 200.085392][ T9218] [ 200.085401][ T9218] dump_stack_lvl+0x189/0x250 [ 200.085433][ T9218] ? __pfx____ratelimit+0x10/0x10 [ 200.085467][ T9218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.085492][ T9218] ? __pfx__printk+0x10/0x10 [ 200.085526][ T9218] ? __pfx___might_resched+0x10/0x10 [ 200.085551][ T9218] ? fs_reclaim_acquire+0x7d/0x100 [ 200.085588][ T9218] should_fail_ex+0x414/0x560 [ 200.085626][ T9218] should_failslab+0xa8/0x100 [ 200.085657][ T9218] __kmalloc_cache_noprof+0x70/0x3d0 [ 200.085684][ T9218] ? rtm_new_nexthop+0x192a/0x7eb0 [ 200.085719][ T9218] rtm_new_nexthop+0x192a/0x7eb0 [ 200.085782][ T9218] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 200.085830][ T9218] ? kasan_quarantine_put+0xdd/0x220 [ 200.085853][ T9218] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.085893][ T9218] ? nlmon_xmit+0xb0/0x100 [ 200.085914][ T9218] ? kmem_cache_free+0x18f/0x400 [ 200.085949][ T9218] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.085974][ T9218] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.086007][ T9218] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.086031][ T9218] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 200.086078][ T9218] ? __lock_acquire+0xab9/0xd20 [ 200.086129][ T9218] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 200.086160][ T9218] rtnetlink_rcv_msg+0x7cc/0xb70 [ 200.086189][ T9218] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 200.086211][ T9218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.086232][ T9218] ? ref_tracker_free+0x63a/0x7d0 [ 200.086250][ T9218] ? __copy_skb_header+0xa7/0x550 [ 200.086281][ T9218] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.086301][ T9218] ? __skb_clone+0x63/0x7a0 [ 200.086339][ T9218] netlink_rcv_skb+0x205/0x470 [ 200.086367][ T9218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.086392][ T9218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.086433][ T9218] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.086459][ T9218] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.086499][ T9218] netlink_unicast+0x759/0x8e0 [ 200.086558][ T9218] netlink_sendmsg+0x805/0xb30 [ 200.086596][ T9218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.086627][ T9218] ? aa_sock_msg_perm+0x94/0x160 [ 200.086661][ T9218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.086680][ T9218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.086707][ T9218] __sock_sendmsg+0x219/0x270 [ 200.086737][ T9218] ____sys_sendmsg+0x505/0x830 [ 200.086772][ T9218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.086811][ T9218] ? import_iovec+0x74/0xa0 [ 200.086842][ T9218] ___sys_sendmsg+0x21f/0x2a0 [ 200.086873][ T9218] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.086945][ T9218] ? __fget_files+0x2a/0x420 [ 200.086973][ T9218] ? __fget_files+0x3a0/0x420 [ 200.087015][ T9218] __x64_sys_sendmsg+0x19b/0x260 [ 200.087047][ T9218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.087087][ T9218] ? __pfx_ksys_write+0x10/0x10 [ 200.087119][ T9218] ? do_syscall_64+0xbe/0x3b0 [ 200.087146][ T9218] do_syscall_64+0xfa/0x3b0 [ 200.087168][ T9218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.087187][ T9218] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 200.087208][ T9218] ? clear_bhb_loop+0x60/0xb0 [ 200.087234][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.087254][ T9218] RIP: 0033:0x7fd776f8e929 [ 200.087274][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.087292][ T9218] RSP: 002b:00007fd777e1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.087314][ T9218] RAX: ffffffffffffffda RBX: 00007fd7771b5fa0 RCX: 00007fd776f8e929 [ 200.087330][ T9218] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.087343][ T9218] RBP: 00007fd777e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.087356][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.087369][ T9218] R13: 0000000000000000 R14: 00007fd7771b5fa0 R15: 00007ffcd8207a38 [ 200.087403][ T9218] [ 201.029564][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.109294][ T5867] Bluetooth: hci3: command tx timeout [ 201.145112][ T9255] ip6t_srh: unknown srh match flags 536B [ 201.171522][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.243231][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.250555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.344640][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.351932][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.420331][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.752'. [ 201.711484][ T9267] veth0_macvtap: left promiscuous mode [ 201.897761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 202.343917][ T9297] validate_nla: 1 callbacks suppressed [ 202.343942][ T9297] netlink: 'syz.0.762': attribute type 4 has an invalid length. [ 202.412153][ T9300] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 202.483272][ T9300] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 202.576021][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.583625][ T9300] netlink: 'syz.1.764': attribute type 2 has an invalid length. [ 202.620006][ T9300] No such timeout policy "syz0" [ 202.849824][ T8923] veth0_vlan: entered promiscuous mode [ 202.936526][ T8923] veth1_vlan: entered promiscuous mode [ 203.160887][ T8923] veth0_macvtap: entered promiscuous mode [ 203.187095][ T5867] Bluetooth: hci3: command 0x0405 tx timeout [ 203.207151][ T8923] veth1_macvtap: entered promiscuous mode [ 203.245908][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.291646][ T8923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.332821][ T8923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.407738][ T8923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.424109][ T9327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.771'. [ 203.457661][ T8923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.466724][ T8923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.898945][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.939871][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.211686][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.247818][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.089289][ T6385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.292076][ T6385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.434402][ T6385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.611390][ T6385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.033914][ T6385] bridge_slave_1: left allmulticast mode [ 206.041555][ T6385] bridge_slave_1: left promiscuous mode [ 206.047456][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.071704][ T6385] bridge_slave_0: left allmulticast mode [ 206.079351][ T6385] bridge_slave_0: left promiscuous mode [ 206.086519][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.307079][ T9401] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 206.811543][ T9418] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 206.863135][ T9419] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 207.241360][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.251809][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.262304][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.271039][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.279461][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.578116][ T6385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.639238][ T6385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.679738][ T6385] bond0 (unregistering): Released all slaves [ 207.874257][ T9423] vxcan1 speed is unknown, defaulting to 1000 [ 207.877725][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 208.395935][ T9447] xt_l2tp: v2 tid > 0xffff: 150994944 [ 209.272186][ T9472] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 209.412718][ T9474] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 209.434384][ T5867] Bluetooth: hci3: command tx timeout [ 209.724925][ T6385] hsr_slave_0: left promiscuous mode [ 209.783630][ T6385] hsr_slave_1: left promiscuous mode [ 209.792313][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.838600][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.878702][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.886225][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.956267][ T6385] veth1_macvtap: left promiscuous mode [ 209.980985][ T6385] veth0_macvtap: left promiscuous mode [ 210.002293][ T6385] veth1_vlan: left promiscuous mode [ 210.022185][ T6385] veth0_vlan: left promiscuous mode [ 210.704201][ T9496] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 210.737691][ T9496] netlink: 224 bytes leftover after parsing attributes in process `syz.0.808'. [ 210.765402][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 210.985073][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 211.165169][ T6385] team0 (unregistering): Port device team_slave_1 removed [ 211.222270][ T6385] team0 (unregistering): Port device team_slave_0 removed [ 211.320870][ T9273] Set syz1 is full, maxelem 65536 reached [ 211.500824][ T5858] Bluetooth: hci3: command tx timeout [ 211.662491][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 211.662539][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 212.003741][ T9504] bond0: Device is already in use. [ 212.236877][ T9511] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 212.273222][ T9511] netlink: 224 bytes leftover after parsing attributes in process `syz.4.814'. [ 212.292265][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'. [ 212.645636][ T9423] chnl_net:caif_netlink_parms(): no params data found [ 212.810282][ T9543] netlink: 'syz.1.819': attribute type 4 has an invalid length. [ 212.877112][ T9544] netlink: 'syz.1.819': attribute type 4 has an invalid length. [ 213.356229][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 213.480916][ T9423] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.531323][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.580956][ T5854] Bluetooth: hci3: command tx timeout [ 213.603097][ T9423] bridge_slave_0: entered allmulticast mode [ 213.646529][ T9423] bridge_slave_0: entered promiscuous mode [ 213.685580][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.722840][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.763696][ T9423] bridge_slave_1: entered allmulticast mode [ 213.809877][ T9423] bridge_slave_1: entered promiscuous mode [ 213.824894][ T9580] netlink: 'syz.4.824': attribute type 13 has an invalid length. [ 214.284834][ T9580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.325693][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 214.372428][ T9423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.448538][ T24] syz_tun: tun_net_xmit 110 [ 214.470650][ T9423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.774315][ T9423] team0: Port device team_slave_0 added [ 214.813305][ T9423] team0: Port device team_slave_1 added [ 214.873904][ T9601] pim6reg527: entered allmulticast mode [ 214.958265][ T5908] syz_tun: tun_net_xmit 110 [ 214.975603][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 214.983383][ T9602] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 214.993515][ T9602] netlink: 244 bytes leftover after parsing attributes in process `syz.4.831'. [ 215.050094][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.057121][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.114606][ T9423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.147372][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.165400][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.198135][ T5908] syz_tun: tun_net_xmit 130 [ 215.229499][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 215.250261][ T9423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.312597][ T24] syz_tun: tun_net_xmit 130 [ 215.359112][ T5908] syz_tun: tun_net_xmit 130 [ 215.583025][ T9423] hsr_slave_0: entered promiscuous mode [ 215.602496][ T9423] hsr_slave_1: entered promiscuous mode [ 215.609931][ T9423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.637946][ T9423] Cannot create hsr debugfs directory [ 215.658319][ T5854] Bluetooth: hci3: command tx timeout [ 216.065583][ T24] syz_tun: tun_net_xmit 90 [ 216.394173][ T9659] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 216.557263][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 216.806228][ T9675] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 217.022152][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 217.202544][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 217.733272][ T9714] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 217.814255][ T9714] netlink: 172 bytes leftover after parsing attributes in process `syz.4.863'. [ 217.897859][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 218.117089][ T9423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.141778][ T9423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.190327][ T9423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.343926][ T9423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.377317][ T9743] sctp: [Deprecated]: syz.3.871 (pid 9743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.377317][ T9743] Use struct sctp_sack_info instead [ 218.411700][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 218.468875][ T5854] Bluetooth: hci0: command tx timeout [ 218.872293][ T9423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.931416][ T9768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.964617][ T9423] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.051456][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.058670][ T6393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.189784][ T9776] netlink: 72 bytes leftover after parsing attributes in process `syz.3.877'. [ 219.233377][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.240769][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.390366][ T9785] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 219.466050][ T9423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.664839][ T9791] team0: No ports can be present during mode change [ 219.985018][ T9804] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.885'. [ 220.117355][ T9811] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 220.181352][ T9813] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 220.250491][ T9817] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.888'. [ 220.287417][ T9820] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.888'. [ 220.435827][ T9824] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 220.465690][ T9824] netlink: 'syz.4.890': attribute type 3 has an invalid length. [ 220.486054][ T9824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.890'. [ 220.538988][ T9423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.812314][ T9423] veth0_vlan: entered promiscuous mode [ 220.861968][ T9423] veth1_vlan: entered promiscuous mode [ 221.035672][ T9423] veth0_macvtap: entered promiscuous mode [ 221.057404][ T9847] netlink: 'syz.4.896': attribute type 1 has an invalid length. [ 221.091020][ T9423] veth1_macvtap: entered promiscuous mode [ 221.152201][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.249768][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.322111][ T9423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.347703][ T9423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.356520][ T9423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.417300][ T9423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.623077][ T9870] vxcan1 speed is unknown, defaulting to 1000 [ 221.780957][ T6393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.800590][ T6393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.854159][ T9877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.915203][ T6389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.941091][ T6389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.233467][ T9892] netlink: 'syz.4.907': attribute type 13 has an invalid length. [ 222.373900][ T9892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.476107][ T9899] netlink: 'syz.1.909': attribute type 4 has an invalid length. [ 222.529251][ T9900] netlink: 'syz.1.909': attribute type 4 has an invalid length. [ 222.825329][ T9907] __nla_validate_parse: 1 callbacks suppressed [ 222.825349][ T9907] netlink: 64 bytes leftover after parsing attributes in process `syz.3.911'. [ 222.850474][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 223.071469][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 223.254670][ T9910] team1: entered promiscuous mode [ 223.318298][ T9918] ipt_rpfilter: unknown options [ 223.318644][ T9910] team1: entered allmulticast mode [ 223.797339][ T6393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.866902][ T6393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.957120][ T6393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.015919][ T6393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.150500][ T6393] bridge_slave_1: left allmulticast mode [ 224.156329][ T6393] bridge_slave_1: left promiscuous mode [ 224.162312][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.173601][ T6393] bridge_slave_0: left allmulticast mode [ 224.179847][ T6393] bridge_slave_0: left promiscuous mode [ 224.185596][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.541484][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 224.578974][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 224.603303][ T9927] xt_CT: No such helper "snmp" [ 224.835745][ T6393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.849631][ T6393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.861926][ T6393] bond0 (unregistering): Released all slaves [ 224.908529][ T9932] bridge0: port 3(vlan3) entered blocking state [ 224.933194][ T9932] bridge0: port 3(vlan3) entered disabled state [ 224.961537][ T9932] vlan3: entered allmulticast mode [ 224.966764][ T9932] bridge0: entered allmulticast mode [ 224.993324][ T9932] vlan3: left allmulticast mode [ 225.013162][ T9932] bridge0: left allmulticast mode [ 225.033790][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.045947][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.054827][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.065958][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.074336][ T9936] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.074447][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.560057][ T5933] IPVS: starting estimator thread 0... [ 225.595036][ T9942] vxcan1 speed is unknown, defaulting to 1000 [ 225.667991][ T9961] IPVS: using max 24 ests per chain, 57600 per kthread [ 225.909638][ T9974] netlink: 'syz.4.926': attribute type 4 has an invalid length. [ 225.946311][ T9975] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.976202][ T9974] netlink: 'syz.4.926': attribute type 4 has an invalid length. [ 225.978795][ T9975] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20001 [ 226.022710][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 226.403707][ T9991] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.927775][ T6393] hsr_slave_0: left promiscuous mode [ 226.965419][ T6393] hsr_slave_1: left promiscuous mode [ 226.990815][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.024696][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.041158][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.062026][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.089433][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'. [ 227.099315][ T5867] Bluetooth: hci3: command tx timeout [ 227.126725][ T6393] veth1_macvtap: left promiscuous mode [ 227.133614][ T6393] veth0_macvtap: left promiscuous mode [ 227.139739][ T6393] veth1_vlan: left promiscuous mode [ 227.146209][ T6393] veth0_vlan: left promiscuous mode [ 227.338740][T10014] can: request_module (can-proto-3) failed. [ 227.842639][ T6393] team0 (unregistering): Port device team_slave_1 removed [ 227.893813][ T6393] team0 (unregistering): Port device team_slave_0 removed [ 228.684217][T10033] netlink: 'syz.1.939': attribute type 13 has an invalid length. [ 228.732867][T10037] FAULT_INJECTION: forcing a failure. [ 228.732867][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.873253][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.0.942 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 228.873289][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.873303][T10037] Call Trace: [ 228.873312][T10037] [ 228.873322][T10037] dump_stack_lvl+0x189/0x250 [ 228.873357][T10037] ? __pfx____ratelimit+0x10/0x10 [ 228.873394][T10037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.873420][T10037] ? __pfx__printk+0x10/0x10 [ 228.873450][T10037] ? __might_fault+0xb0/0x130 [ 228.873488][T10037] should_fail_ex+0x414/0x560 [ 228.873529][T10037] _copy_from_iter+0x1db/0x16f0 [ 228.873558][T10037] ? rcu_is_watching+0x15/0xb0 [ 228.873584][T10037] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 228.873614][T10037] ? __pfx__copy_from_iter+0x10/0x10 [ 228.873661][T10037] ? __build_skb_around+0x257/0x3e0 [ 228.873694][T10037] ? netlink_sendmsg+0x642/0xb30 [ 228.873721][T10037] ? skb_put+0x11b/0x210 [ 228.873754][T10037] netlink_sendmsg+0x6b2/0xb30 [ 228.873795][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.873829][T10037] ? aa_sock_msg_perm+0x94/0x160 [ 228.873866][T10037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.873901][T10037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.873930][T10037] __sock_sendmsg+0x219/0x270 [ 228.873955][T10037] ____sys_sendmsg+0x505/0x830 [ 228.873992][T10037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.874033][T10037] ? import_iovec+0x74/0xa0 [ 228.874063][T10037] ___sys_sendmsg+0x21f/0x2a0 [ 228.874096][T10037] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.874168][T10037] ? __fget_files+0x2a/0x420 [ 228.874197][T10037] ? __fget_files+0x3a0/0x420 [ 228.874241][T10037] __x64_sys_sendmsg+0x19b/0x260 [ 228.874274][T10037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.874316][T10037] ? __pfx_ksys_write+0x10/0x10 [ 228.874340][T10037] ? rcu_is_watching+0x15/0xb0 [ 228.874372][T10037] ? do_syscall_64+0xbe/0x3b0 [ 228.874399][T10037] do_syscall_64+0xfa/0x3b0 [ 228.874419][T10037] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.874452][T10037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.874474][T10037] ? clear_bhb_loop+0x60/0xb0 [ 228.874501][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.874522][T10037] RIP: 0033:0x7fe99178e929 [ 228.874542][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.874561][T10037] RSP: 002b:00007fe992643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.874586][T10037] RAX: ffffffffffffffda RBX: 00007fe9919b5fa0 RCX: 00007fe99178e929 [ 228.874602][T10037] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 228.874616][T10037] RBP: 00007fe992643090 R08: 0000000000000000 R09: 0000000000000000 [ 228.874639][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.874652][T10037] R13: 0000000000000000 R14: 00007fe9919b5fa0 R15: 00007ffe09fddc68 [ 228.874688][T10037] [ 229.237010][ T5867] Bluetooth: hci3: command tx timeout [ 229.296207][T10033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.334485][T10045] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 229.388284][T10048] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 229.735282][ T9942] chnl_net:caif_netlink_parms(): no params data found [ 230.338845][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.391266][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.408097][ T9942] bridge_slave_0: entered allmulticast mode [ 230.426482][ T9942] bridge_slave_0: entered promiscuous mode [ 230.445995][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 230.456242][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 230.531387][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.540650][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.548049][ T9942] bridge_slave_1: entered allmulticast mode [ 230.557197][ T9942] bridge_slave_1: entered promiscuous mode [ 230.580187][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.615265][T10090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.632241][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 230.650350][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 230.662370][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.687747][T10090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.020960][ T9942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.080431][ T9942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.217186][ T9942] team0: Port device team_slave_0 added [ 231.254106][ T9942] team0: Port device team_slave_1 added [ 231.268848][ T5867] Bluetooth: hci3: command tx timeout [ 231.395823][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.965'. [ 231.427571][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.965'. [ 231.461580][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.481680][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.537589][ T9942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.594136][ T9942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.620440][ T9942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.697301][ T9942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.948469][T10157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 232.122854][ T9942] hsr_slave_0: entered promiscuous mode [ 232.141927][ T9942] hsr_slave_1: entered promiscuous mode [ 232.158685][ T9942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.176033][ T9942] Cannot create hsr debugfs directory [ 233.009451][T10203] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 233.061071][T10203] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 233.125955][T10205] lo: left promiscuous mode [ 233.140286][T10205] lo: left allmulticast mode [ 233.162079][T10205] tunl0: left promiscuous mode [ 233.166953][T10205] tunl0: left allmulticast mode [ 233.177268][T10205] gre0: left promiscuous mode [ 233.184892][T10205] gre0: left allmulticast mode [ 233.225554][T10205] gretap0: left promiscuous mode [ 233.231119][T10205] gretap0: left allmulticast mode [ 233.252125][T10205] sit0: left promiscuous mode [ 233.306468][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.313930][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.337949][ T5867] Bluetooth: hci3: command tx timeout [ 233.345948][T10205] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.668029][T10216] FAULT_INJECTION: forcing a failure. [ 233.668029][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 233.704852][T10216] CPU: 1 UID: 0 PID: 10216 Comm: syz.3.986 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 233.704884][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.704897][T10216] Call Trace: [ 233.704905][T10216] [ 233.704914][T10216] dump_stack_lvl+0x189/0x250 [ 233.704947][T10216] ? __pfx____ratelimit+0x10/0x10 [ 233.704980][T10216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.705005][T10216] ? __pfx__printk+0x10/0x10 [ 233.705050][T10216] should_fail_ex+0x414/0x560 [ 233.705088][T10216] should_failslab+0xa8/0x100 [ 233.705144][T10216] kmem_cache_alloc_noprof+0x73/0x3c0 [ 233.705169][T10216] ? skb_clone+0x212/0x3a0 [ 233.705202][T10216] skb_clone+0x212/0x3a0 [ 233.705232][T10216] __netlink_deliver_tap+0x404/0x850 [ 233.705271][T10216] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.705295][T10216] netlink_deliver_tap+0x19c/0x1b0 [ 233.705322][T10216] netlink_sendskb+0x68/0x140 [ 233.705348][T10216] netlink_rcv_skb+0x28c/0x470 [ 233.705373][T10216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.705397][T10216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.705434][T10216] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.705470][T10216] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.705500][T10216] netlink_unicast+0x759/0x8e0 [ 233.705532][T10216] netlink_sendmsg+0x805/0xb30 [ 233.705567][T10216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.705595][T10216] ? aa_sock_msg_perm+0x94/0x160 [ 233.705628][T10216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.705647][T10216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.705673][T10216] __sock_sendmsg+0x219/0x270 [ 233.705696][T10216] ____sys_sendmsg+0x505/0x830 [ 233.705729][T10216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.705767][T10216] ? import_iovec+0x74/0xa0 [ 233.705797][T10216] ___sys_sendmsg+0x21f/0x2a0 [ 233.705826][T10216] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.705896][T10216] ? __fget_files+0x2a/0x420 [ 233.705922][T10216] ? __fget_files+0x3a0/0x420 [ 233.705961][T10216] __x64_sys_sendmsg+0x19b/0x260 [ 233.705990][T10216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.706029][T10216] ? __pfx_ksys_write+0x10/0x10 [ 233.706050][T10216] ? rcu_is_watching+0x15/0xb0 [ 233.706079][T10216] ? do_syscall_64+0xbe/0x3b0 [ 233.706104][T10216] do_syscall_64+0xfa/0x3b0 [ 233.706122][T10216] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.706152][T10216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.706172][T10216] ? clear_bhb_loop+0x60/0xb0 [ 233.706197][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.706216][T10216] RIP: 0033:0x7fc4b1d8e929 [ 233.706235][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.706253][T10216] RSP: 002b:00007fc4afbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.706275][T10216] RAX: ffffffffffffffda RBX: 00007fc4b1fb5fa0 RCX: 00007fc4b1d8e929 [ 233.706290][T10216] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 233.706303][T10216] RBP: 00007fc4afbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.706316][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.706328][T10216] R13: 0000000000000000 R14: 00007fc4b1fb5fa0 R15: 00007fff720e8678 [ 233.706361][T10216] [ 234.034035][ T5973] syz_tun: tun_net_xmit 110 [ 234.144752][T10220] pimreg: entered allmulticast mode [ 234.455057][T10242] pimreg: left allmulticast mode [ 234.777855][ T5973] syz_tun: tun_net_xmit 110 [ 234.832963][ T9942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.902547][ T9942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.968178][ T9942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.022604][ T9942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.156613][T10278] FAULT_INJECTION: forcing a failure. [ 235.156613][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.171317][T10280] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 235.211238][T10278] CPU: 0 UID: 0 PID: 10278 Comm: syz.0.1001 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 235.211269][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.211282][T10278] Call Trace: [ 235.211289][T10278] [ 235.211298][T10278] dump_stack_lvl+0x189/0x250 [ 235.211329][T10278] ? __pfx____ratelimit+0x10/0x10 [ 235.211361][T10278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.211386][T10278] ? __pfx__printk+0x10/0x10 [ 235.211427][T10278] should_fail_ex+0x414/0x560 [ 235.211465][T10278] _copy_to_user+0x31/0xb0 [ 235.211493][T10278] simple_read_from_buffer+0xe1/0x170 [ 235.211527][T10278] proc_fail_nth_read+0x1df/0x250 [ 235.211562][T10278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.211596][T10278] ? rw_verify_area+0x258/0x650 [ 235.211620][T10278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.211651][T10278] vfs_read+0x200/0x980 [ 235.211682][T10278] ? __pfx___mutex_lock+0x10/0x10 [ 235.211704][T10278] ? __pfx_vfs_read+0x10/0x10 [ 235.211730][T10278] ? __fget_files+0x2a/0x420 [ 235.211764][T10278] ? __fget_files+0x3a0/0x420 [ 235.211790][T10278] ? __fget_files+0x2a/0x420 [ 235.211829][T10278] ksys_read+0x145/0x250 [ 235.211856][T10278] ? __pfx_ksys_read+0x10/0x10 [ 235.211877][T10278] ? rcu_is_watching+0x15/0xb0 [ 235.211908][T10278] ? do_syscall_64+0xbe/0x3b0 [ 235.211934][T10278] do_syscall_64+0xfa/0x3b0 [ 235.211952][T10278] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.211983][T10278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.212015][T10278] ? clear_bhb_loop+0x60/0xb0 [ 235.212040][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.212060][T10278] RIP: 0033:0x7fe99178d33c [ 235.212078][T10278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 235.212096][T10278] RSP: 002b:00007fe992643030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.212117][T10278] RAX: ffffffffffffffda RBX: 00007fe9919b5fa0 RCX: 00007fe99178d33c [ 235.212132][T10278] RDX: 000000000000000f RSI: 00007fe9926430a0 RDI: 0000000000000004 [ 235.212145][T10278] RBP: 00007fe992643090 R08: 0000000000000000 R09: 0000000000000000 [ 235.212158][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.212170][T10278] R13: 0000000000000000 R14: 00007fe9919b5fa0 R15: 00007ffe09fddc68 [ 235.212204][T10278] [ 235.231566][T10281] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 235.425088][ T5867] Bluetooth: hci3: command tx timeout [ 235.736123][ T9942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.820639][ T9942] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.870810][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 235.885189][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.892420][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.981936][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.989169][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.753719][T10343] netlink: 'syz.3.1018': attribute type 13 has an invalid length. [ 236.766041][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.806021][T10343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.995391][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1019'. [ 237.048998][ T9942] veth0_vlan: entered promiscuous mode [ 237.079025][T10354] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20003 [ 237.092525][ T9942] veth1_vlan: entered promiscuous mode [ 237.110319][T10359] netlink: 'syz.1.1021': attribute type 4 has an invalid length. [ 237.162017][T10360] netlink: 'syz.1.1021': attribute type 4 has an invalid length. [ 240.622445][T10435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.707237][ T9942] veth0_macvtap: entered promiscuous mode [ 240.761383][ T9942] veth1_macvtap: entered promiscuous mode [ 240.862064][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.899943][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.935780][ T9942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.961878][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 240.999013][ T9942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.050197][ T9942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.073522][ T9942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.383010][ T6383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.428573][ T6383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.616968][ T6383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.667990][ T6383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.673884][T10471] netlink: 'syz.4.1033': attribute type 13 has an invalid length. [ 241.708841][T10472] tipc: Failed to remove unknown binding: 66,1,1/0:3819083467/3819083469 [ 242.023987][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.031318][T10471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.039022][T10471] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.046257][T10471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.081316][T10471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.096601][T10471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.456898][ T2981] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.676111][ T2981] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.790106][ T2981] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.873210][ T2981] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.023776][ T2981] bridge_slave_1: left allmulticast mode [ 243.032603][ T2981] bridge_slave_1: left promiscuous mode [ 243.045424][ T2981] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.057325][ T2981] bridge_slave_0: left allmulticast mode [ 243.066867][ T2981] bridge_slave_0: left promiscuous mode [ 243.074158][ T2981] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.626450][ T2981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.642696][ T2981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.654726][ T2981] bond0 (unregistering): Released all slaves [ 244.093238][T10522] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3380 [ 244.174457][T10525] netlink: 'syz.3.1048': attribute type 16 has an invalid length. [ 244.193999][T10525] netlink: 'syz.3.1048': attribute type 3 has an invalid length. [ 244.217224][T10525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1048'. [ 244.305385][T10533] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 244.377358][T10533] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 244.596936][T10540] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.644364][T10540] netlink: 'syz.0.1050': attribute type 13 has an invalid length. [ 244.724744][ T5940] syz_tun: tun_net_xmit 110 [ 244.753444][T10540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.894915][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.918008][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.927957][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.937374][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.948767][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.306825][T10558] macvtap1: entered promiscuous mode [ 245.307825][ T5940] syz_tun: tun_net_xmit 110 [ 245.317157][T10558] vlan0: entered promiscuous mode [ 245.330263][T10558] macvtap1: entered allmulticast mode [ 245.344433][T10558] vlan0: entered allmulticast mode [ 245.393016][T10558] vlan0: left allmulticast mode [ 245.435604][T10558] vlan0: left promiscuous mode [ 245.565010][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 245.600782][T10566] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 245.617697][T10566] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1059'. [ 245.684589][ T2981] hsr_slave_0: left promiscuous mode [ 245.690784][ T2981] hsr_slave_1: left promiscuous mode [ 245.709069][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.729408][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.769766][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.795776][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.835681][ T2981] veth1_macvtap: left promiscuous mode [ 245.848784][ T2981] veth0_macvtap: left promiscuous mode [ 245.854418][ T2981] veth1_vlan: left promiscuous mode [ 245.871031][ T2981] veth0_vlan: left promiscuous mode [ 245.881673][T10590] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1063'. [ 246.334540][ T2981] team0 (unregistering): Port device team_slave_1 removed [ 246.373930][ T2981] team0 (unregistering): Port device team_slave_0 removed [ 246.747633][T10545] vxcan1 speed is unknown, defaulting to 1000 [ 246.766283][T10591] pimreg: entered allmulticast mode [ 247.027636][ T5867] Bluetooth: hci3: command tx timeout [ 247.454736][T10620] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 247.523682][T10620] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1071'. [ 247.970703][T10633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1075'. [ 248.024206][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 248.206566][T10651] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1079'. [ 248.226843][T10650] netlink: 'syz.1.1080': attribute type 8 has an invalid length. [ 248.474251][T10545] chnl_net:caif_netlink_parms(): no params data found [ 248.658275][T10668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1085'. [ 248.962201][T10545] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.988872][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.021156][T10545] bridge_slave_0: entered allmulticast mode [ 249.049689][T10545] bridge_slave_0: entered promiscuous mode [ 249.076893][T10545] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.094011][T10545] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.101886][ T5867] Bluetooth: hci3: command tx timeout [ 249.108315][T10545] bridge_slave_1: entered allmulticast mode [ 249.116031][T10545] bridge_slave_1: entered promiscuous mode [ 249.174798][T10545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.210443][T10545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.402955][T10545] team0: Port device team_slave_0 added [ 249.445888][T10545] team0: Port device team_slave_1 added [ 249.614975][T10545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.634877][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.683755][T10545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.719707][T10545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.726712][T10545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.794150][T10545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.897670][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 250.063624][T10545] hsr_slave_0: entered promiscuous mode [ 250.093837][T10545] hsr_slave_1: entered promiscuous mode [ 250.094267][T10738] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 250.114222][T10545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.144477][T10545] Cannot create hsr debugfs directory [ 250.195866][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 250.377758][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 250.577096][T10743] sit0: entered promiscuous mode [ 250.585589][T10754] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1109'. [ 250.662738][T10743] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 250.677724][T10743] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1105'. [ 250.736155][T10759] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 250.747637][T10759] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 251.041645][T10768] IPVS: length: 8 != 1152 [ 251.179212][ T5867] Bluetooth: hci3: command tx timeout [ 251.305515][T10778] netlink: 'syz.0.1118': attribute type 2 has an invalid length. [ 251.340057][T10778] netlink: 'syz.0.1118': attribute type 3 has an invalid length. [ 251.712993][T10794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1122'. [ 251.870635][T10801] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.099788][T10545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.139376][T10545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.173864][T10545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.196305][T10545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.421913][T10833] netlink: 'syz.0.1129': attribute type 2 has an invalid length. [ 252.519506][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.615297][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.673361][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.680649][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.724561][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.731826][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.803427][T10842] __nla_validate_parse: 4 callbacks suppressed [ 252.803446][T10842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1132'. [ 253.119831][T10857] bridge_slave_0: left allmulticast mode [ 253.140637][T10857] bridge_slave_0: left promiscuous mode [ 253.159544][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.257437][T10857] bridge_slave_1: left allmulticast mode [ 253.262400][ T5867] Bluetooth: hci3: command tx timeout [ 253.273905][T10857] bridge_slave_1: left promiscuous mode [ 253.324510][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.377256][T10857] bond0: (slave bond_slave_0): Releasing backup interface [ 253.434381][T10857] bond0: (slave bond_slave_1): Releasing backup interface [ 253.473603][T10874] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 253.516640][T10857] team0: Port device team_slave_0 removed [ 253.545807][T10857] team0: Port device team_slave_1 removed [ 253.553016][T10857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.563060][T10857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.575614][T10857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.593048][T10857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.624133][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'. [ 253.812976][T10891] netlink: 'syz.3.1145': attribute type 13 has an invalid length. [ 253.867222][T10874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.974473][T10876] bond2: (slave veth5): Enslaving as an active interface with a down link [ 254.001582][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'. [ 254.040619][T10872] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 254.113422][T10892] vlan3: entered allmulticast mode [ 254.139220][T10892] veth1: entered allmulticast mode [ 254.150237][T10892] veth1: entered promiscuous mode [ 254.180241][T10892] veth1: left promiscuous mode [ 254.191023][T10892] bond2: (slave vlan3): making interface the new active one [ 254.206598][T10892] veth1: entered promiscuous mode [ 254.223292][T10892] vlan3: entered promiscuous mode [ 254.230059][T10892] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 254.254306][T10891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.372436][T10545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.457944][T10907] x_tables: duplicate underflow at hook 1 [ 254.601220][T10545] veth0_vlan: entered promiscuous mode [ 254.643217][T10919] x_tables: duplicate underflow at hook 2 [ 254.678880][T10921] x_tables: duplicate underflow at hook 2 [ 254.734579][T10545] veth1_vlan: entered promiscuous mode [ 254.893771][T10545] veth0_macvtap: entered promiscuous mode [ 254.924094][T10545] veth1_macvtap: entered promiscuous mode [ 255.029521][T10545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.093232][T10545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.143204][T10930] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 255.229721][T10545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.264650][T10545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.294461][T10545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.324788][T10545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.338825][T10940] netlink: 'syz.3.1157': attribute type 7 has an invalid length. [ 255.600147][T10951] netlink: 'syz.3.1160': attribute type 13 has an invalid length. [ 255.665279][T10951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.682780][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.714535][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.754100][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.858951][ T6393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.866869][ T6393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.525744][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.667142][T10989] 8021q: VLANs not supported on ip6_vti0 [ 256.829845][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.989449][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.269822][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.465895][ T36] bridge_slave_1: left allmulticast mode [ 257.471750][ T36] bridge_slave_1: left promiscuous mode [ 257.478573][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.491729][ T36] bridge_slave_0: left allmulticast mode [ 257.497995][ T36] bridge_slave_0: left promiscuous mode [ 257.503784][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.098354][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.117411][T11028] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.148405][T11028] netlink: 'syz.1.1173': attribute type 13 has an invalid length. [ 258.198054][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.244610][ T36] bond0 (unregistering): Released all slaves [ 258.352138][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 258.377231][T11028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.722567][T11052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.058131][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1183'. [ 259.123878][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.136871][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.146177][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.157258][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.173225][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.416634][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 259.503597][T11084] netlink: 'syz.4.1189': attribute type 13 has an invalid length. [ 259.810407][T11084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.835283][T11072] vxcan1 speed is unknown, defaulting to 1000 [ 259.988141][ T36] hsr_slave_0: left promiscuous mode [ 260.031149][ T36] hsr_slave_1: left promiscuous mode [ 260.042149][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.097707][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.126488][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.145049][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.225451][ T36] veth1_macvtap: left promiscuous mode [ 260.263236][ T36] veth0_macvtap: left promiscuous mode [ 260.283225][ T36] veth1_vlan: left promiscuous mode [ 260.311053][ T36] veth0_vlan: left promiscuous mode [ 260.452834][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1198'. [ 260.498588][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 260.525467][T11123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'. [ 261.175056][ T36] team0 (unregistering): Port device team_slave_1 removed [ 261.223691][ T36] team0 (unregistering): Port device team_slave_0 removed [ 261.269401][ T5854] Bluetooth: hci3: command tx timeout [ 262.350108][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1206'. [ 262.385799][T11072] chnl_net:caif_netlink_parms(): no params data found [ 262.961836][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.993203][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.022753][T11072] bridge_slave_0: entered allmulticast mode [ 263.051490][T11072] bridge_slave_0: entered promiscuous mode [ 263.075599][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.099380][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.122824][T11072] bridge_slave_1: entered allmulticast mode [ 263.143088][T11072] bridge_slave_1: entered promiscuous mode [ 263.338032][ T5854] Bluetooth: hci3: command tx timeout [ 263.381549][T11204] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20003 [ 263.442101][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.467019][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.593546][T11072] team0: Port device team_slave_0 added [ 263.621038][T11072] team0: Port device team_slave_1 added [ 263.704194][T11228] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.729372][T11228] netlink: 'syz.1.1219': attribute type 13 has an invalid length. [ 263.771669][T11228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.831961][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.847591][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.910705][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.970018][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.977033][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.017223][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.162644][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 264.221793][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 264.236452][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 264.275729][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 264.317549][T11249] netlink: 'syz.1.1223': attribute type 20 has an invalid length. [ 264.371099][T11072] hsr_slave_0: entered promiscuous mode [ 264.377117][T11248] netlink: 'syz.1.1223': attribute type 20 has an invalid length. [ 264.393715][T11072] hsr_slave_1: entered promiscuous mode [ 264.407340][T11072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.429976][T11072] Cannot create hsr debugfs directory [ 265.148937][T11293] erspan0: entered promiscuous mode [ 265.178976][T11293] vlan4: entered promiscuous mode [ 265.285777][T11298] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 265.310845][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 265.353592][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'. [ 265.418884][ T5854] Bluetooth: hci3: command tx timeout [ 265.887425][T11324] netlink: 'syz.3.1244': attribute type 21 has an invalid length. [ 265.972503][T11324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1244'. [ 266.057833][ T6385] vlan3: left promiscuous mode [ 266.371907][T11339] netlink: 'syz.0.1248': attribute type 4 has an invalid length. [ 266.453994][T11072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.472146][T11342] netlink: 'syz.0.1248': attribute type 4 has an invalid length. [ 266.517902][T11072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.561927][T11072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.624519][T11072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.701802][T11349] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 267.050338][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.123782][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.175105][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.182354][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.258614][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.265977][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.512699][ T5854] Bluetooth: hci3: command tx timeout [ 267.518407][T11072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.665537][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 267.879878][T11415] openvswitch: netlink: IPv4 tun info is not correct [ 267.949477][ C1] hrtimer: interrupt took 75173163 ns [ 268.036513][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.346891][T11072] veth0_vlan: entered promiscuous mode [ 272.360239][T11072] veth1_vlan: entered promiscuous mode [ 272.391945][T11072] veth0_macvtap: entered promiscuous mode [ 317.122776][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 376.748322][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.417443][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 377.424473][ C0] rcu: 1-....: (1 ticks this GP) idle=cb44/1/0x4000000000000000 softirq=56469/56469 fqs=2 [ 377.435230][ C0] rcu: hardirqs softirqs csw/system [ 377.441668][ C0] rcu: number: 9 10 7 [ 377.448101][ C0] rcu: cputime: 0 1 0 ==> 700(ms) [ 377.455748][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5908/1:b..l [ 377.463683][ C0] rcu: (detected by 0, t=10505 jiffies, g=41517, q=1274 ncpus=2) [ 377.471546][ C0] Sending NMI from CPU 0 to CPUs 1: [ 377.471583][ C1] NMI backtrace for cpu 1 [ 377.471606][ C1] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 377.471636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.471657][ C1] RIP: 0010:mark_lock+0x9b/0x190 [ 377.471682][ C1] Code: 00 75 19 90 48 c7 c7 54 35 b8 8d 48 c7 c6 e6 a5 a7 8d e8 d8 a4 e5 ff 90 0f 0b 90 90 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 <85> 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 377.471697][ C1] RSP: 0018:ffffc90000a08a98 EFLAGS: 00000006 [ 377.471712][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff9348e330 [ 377.471723][ C1] RDX: 0000000000000000 RSI: ffff88807c74e590 RDI: ffff88807c74da00 [ 377.471735][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff84c801ea [ 377.471746][ C1] R10: ffffc90000a08cb0 R11: fffff52000141198 R12: 0000000000000002 [ 377.471758][ C1] R13: 0000000000000002 R14: ffff88807c74e590 R15: 0000000000000000 [ 377.471769][ C1] FS: 0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 377.471782][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.471811][ C1] CR2: 0000556c3651f5a0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 377.471827][ C1] Call Trace: [ 377.471836][ C1] [ 377.471847][ C1] __lock_acquire+0x65a/0xd20 [ 377.471869][ C1] ? debug_object_deactivate+0x9a/0x250 [ 377.471892][ C1] lock_acquire+0x120/0x360 [ 377.471909][ C1] ? debug_object_deactivate+0x9a/0x250 [ 377.471935][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 377.471962][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 377.471988][ C1] ? debug_object_deactivate+0x9a/0x250 [ 377.472010][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 377.472041][ C1] debug_object_deactivate+0x9a/0x250 [ 377.472068][ C1] debug_deactivate+0x1d/0x200 [ 377.472090][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 377.472119][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 377.472138][ C1] ? read_tsc+0x9/0x20 [ 377.472157][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 377.472189][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 377.472212][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 377.472245][ C1] [ 377.472251][ C1] [ 377.472258][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.472276][ C1] RIP: 0010:vm_normal_page+0x3e/0x230 [ 377.472302][ C1] Code: 49 89 fc e8 a4 6f b6 ff 31 ff 4c 89 fe e8 7a 74 b6 ff 4d 85 ff 0f 95 c3 4c 89 fe 48 83 e6 01 40 0f 94 c5 31 ff e8 62 74 b6 ff <40> 20 dd 40 0f b6 c5 48 f7 d8 4c 31 f8 48 c1 e8 0c 48 bb ff ff ff [ 377.472315][ C1] RSP: 0018:ffffc9000433f368 EFLAGS: 00000293 [ 377.472329][ C1] RAX: ffffffff8209ef1e RBX: ffffc9000433f801 RCX: ffff88807c74da00 [ 377.472342][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 377.472352][ C1] RBP: ffffc9000433f600 R08: ffffea0001b44233 R09: 1ffffd4000368846 [ 377.472365][ C1] R10: dffffc0000000000 R11: fffff94000368847 R12: ffff888029553a00 [ 377.472378][ C1] R13: dffffc0000000000 R14: 00007fe990b2d000 R15: 800000006d109027 [ 377.472395][ C1] ? vm_normal_page+0x3e/0x230 [ 377.472423][ C1] ? vm_normal_page+0x3e/0x230 [ 377.472447][ C1] unmap_page_range+0xe80/0x41c0 [ 377.472496][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 377.472526][ C1] ? unmap_vmas+0x144/0x580 [ 377.472552][ C1] unmap_vmas+0x399/0x580 [ 377.472581][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 377.472618][ C1] exit_mmap+0x248/0xb50 [ 377.472639][ C1] ? uprobe_clear_state+0x20f/0x290 [ 377.472657][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 377.472677][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 377.472699][ C1] ? __pfx_exit_aio+0x10/0x10 [ 377.472725][ C1] ? uprobe_clear_state+0x274/0x290 [ 377.472743][ C1] __mmput+0x118/0x420 [ 377.472763][ C1] exit_mm+0x1da/0x2c0 [ 377.472787][ C1] ? __pfx_exit_mm+0x10/0x10 [ 377.472809][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 377.472829][ C1] ? rcu_is_watching+0x15/0xb0 [ 377.472851][ C1] do_exit+0x648/0x22e0 [ 377.472877][ C1] ? do_raw_spin_lock+0x121/0x290 [ 377.472902][ C1] ? __pfx_do_exit+0x10/0x10 [ 377.472932][ C1] do_group_exit+0x21c/0x2d0 [ 377.472957][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.472985][ C1] get_signal+0x1286/0x1340 [ 377.473025][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 377.473052][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 377.473068][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 377.473101][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 377.473120][ C1] exit_to_user_mode_loop+0x75/0x110 [ 377.473137][ C1] do_syscall_64+0x2bd/0x3b0 [ 377.473153][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.473177][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.473193][ C1] ? clear_bhb_loop+0x60/0xb0 [ 377.473211][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.473235][ C1] RIP: 0033:0x7fe991784b53 [ 377.473248][ C1] Code: Unable to access opcode bytes at 0x7fe991784b29. [ 377.473257][ C1] RSP: 002b:00007ffe09fde1b8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 377.473273][ C1] RAX: fffffffffffffe00 RBX: 00000000000016db RCX: 00007fe991784b53 [ 377.473284][ C1] RDX: 0000000040000000 RSI: 00007ffe09fde1cc RDI: 00000000ffffffff [ 377.473296][ C1] RBP: 00007ffe09fde1cc R08: 0000000000000000 R09: 0000000000000000 [ 377.473306][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 377.473316][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 377.473333][ C1] [ 377.473573][ C0] task:kworker/1:4 state:R running task stack:23368 pid:5908 tgid:5908 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 378.016832][ C0] Workqueue: events_power_efficient gc_worker [ 378.022968][ C0] Call Trace: [ 378.026271][ C0] [ 378.029225][ C0] __schedule+0x16f5/0x4d00 [ 378.033802][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 378.039130][ C0] ? __pfx___schedule+0x10/0x10 [ 378.044022][ C0] ? __lock_acquire+0xab9/0xd20 [ 378.048906][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 378.054230][ C0] preempt_schedule_irq+0xb5/0x150 [ 378.059381][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 378.065138][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 378.070992][ C0] irqentry_exit+0x6f/0x90 [ 378.075429][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 378.081428][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 378.088225][ C0] Code: 7c 11 10 48 89 74 11 18 48 89 44 11 20 e9 d8 9f b1 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 30 a0 92 65 8b 0d 38 cd [ 378.107872][ C0] RSP: 0018:ffffc90004f1f918 EFLAGS: 00000246 [ 378.113962][ C0] RAX: 0000000000000001 RBX: ffff888023e00000 RCX: ffff88802fc68000 [ 378.121953][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 378.129944][ C0] RBP: ffffc90004f1fa70 R08: ffffffff8fa1dcf7 R09: 1ffffffff1f43b9e [ 378.137936][ C0] R10: dffffc0000000000 R11: fffffbfff1f43b9f R12: 1ffff11005edb039 [ 378.145933][ C0] R13: ffff88802f6d81c8 R14: 0000000000000001 R15: 000000000001fc83 [ 378.153949][ C0] gc_worker+0xb2c/0x1380 [ 378.158331][ C0] ? gc_worker+0x264/0x1380 [ 378.162884][ C0] ? __pfx_gc_worker+0x10/0x10 [ 378.167691][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.172921][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 378.178688][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 378.184434][ C0] process_scheduled_works+0xade/0x17b0 [ 378.190041][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.196067][ C0] worker_thread+0x8a0/0xda0 [ 378.200690][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.207057][ C0] ? __kthread_parkme+0x7b/0x200 [ 378.212037][ C0] kthread+0x70e/0x8a0 [ 378.216145][ C0] ? __pfx_worker_thread+0x10/0x10 [ 378.221287][ C0] ? __pfx_kthread+0x10/0x10 [ 378.225911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.231175][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.236454][ C0] ? __pfx_kthread+0x10/0x10 [ 378.241112][ C0] ret_from_fork+0x3fc/0x770 [ 378.245768][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 378.251032][ C0] ? __switch_to_asm+0x39/0x70 [ 378.255848][ C0] ? __switch_to_asm+0x33/0x70 [ 378.260682][ C0] ? __pfx_kthread+0x10/0x10 [ 378.265328][ C0] ret_from_fork_asm+0x1a/0x30 [ 378.270166][ C0]