last executing test programs: 3.963624851s ago: executing program 0 (id=808): unshare(0x62040200) (async, rerun: 64) unshare(0xfa1580dbbf1059a1) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0xfc, r4, 0x1, 0x0, 0x1, {0x3}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0xfc}}, 0x480c0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x164, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64a}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x453}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x18000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9c1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ec}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000002c0)={0x0, 0xea60}, 0x10) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000690e807b0566a720926d91feaac20000123000000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/202, 0xca, 0x0, &(0x7f00000001c0)=""/135, 0x87}, &(0x7f0000000340)=0x40) (rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a001000", 0x26}], 0x1}, 0x0) (async) close(r8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x0, 0x8c, 0x16, &(0x7f0000000640)="227f75a70da5a63ec523fd2097c018490cc09182193c13b0cbcd4ba93656f9ca62d388d258778e5b09315acc44cdbda4c371b0852cb8e9bd35264ba95f490f5c43389317bb9c6ae207be0d36d40435ef34725b75c6b58082865d4af44d84123e03cb8b0202a5a75bf32fa8c7d696f74066f4a199ee06aed7b33808fbf944e5e6be19962d71c7c42ee19c03a6", &(0x7f00000005c0)=""/22, 0x200, 0x0, 0x6a, 0x8c, &(0x7f0000000700)="e8bf2607df9b3ebd9466ece3288eaaf9d441710a9377fadc06d30370c111087a53917694e9872da72f7cd808b366c30503555a61a1696bc7bb809d47c89e09548639dc9cade520c9af04ea3b37cf6182db724a3a4e4168e0e225a633250a36521a72b38067092f49de65", &(0x7f0000000780)="5841492ede327b1cdfc9c7dd88612696f7ce06d61661b2b1b0be75ac240cee71a3a1eed3c6b723ef9c360204bc9ec08319cfdf786d68652c800a0f62e3c7efb18c86f500e0f5539f131461f8ad7d89d6e077f8e333a03578506961d58d4988cd8320c7decb2dff5608d50289d3d907d4a8386848ef33ed91ce9303b71a30f0cc97b72bf6d69b495b7d99b1a5", 0x1, 0x0, 0x3}, 0x50) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) 3.914934569s ago: executing program 3 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 3.852095721s ago: executing program 3 (id=810): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 3.770887722s ago: executing program 3 (id=811): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa0eb16db25350b57, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0xffffff0a}}, {0x4}}]}]}, 0x110}}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000017a450b7246e64e44c7cf4dfcc9cd39bb65a23a8a03bc5ca993a3c19a0ac63a7b7bec4881b15426fdc2ee3cb6a264bdedd84a614e4db2c1c4613a99cdf4de91d0eeb38036", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf25010000001c000180050002000d0000000800060015000000060005004e20000008000400070000000500050006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d805000600000000001300"], 0x270}}, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x202, 0xffffffff}}], 0x20, 0x4000001}, 0xe1b4bbaa77814956) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f00000002c0)=0x1, 0x4) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @empty}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 2.646772071s ago: executing program 2 (id=821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)={0x30, 0x11, 0x8, 0x70bd25, 0x0, "", [@typed={0x8, 0xc3, 0x0, 0x0, @uid}, @generic="9feacf8f8c33f1f94ec23bfc7289c3fc716d22542c"]}, 0x30}], 0x1, 0x0, 0x0, 0x2004408c}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0x53}], 0x1, 0x4, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x18, 0x4, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xb, 0xff, 0x3, 0xc8, 0x9, 0x2000}, [@RTA_UID={0x8, 0x19, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r4}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x65dc}, {}, 0xfffffffd, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x3506, 0x4, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.530776554s ago: executing program 3 (id=823): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000000000000000000004b"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x21, @fixed}, 0xe) connect$bt_sco(r6, &(0x7f0000000040), 0x8) shutdown(r6, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000001c0)={0x1f, @none}, 0x8) 2.358663276s ago: executing program 2 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x1003, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) (async) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @local}}}, 0x3a) (async) close(r7) (async) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000000)) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000028000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008c000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_misc(r11, &(0x7f0000000600)={'syz0', "f644d8c8efaaa6ff9e80d1c91771ac6a06c05e5a7b7f389b12a50ee7d9312ed7ca00b3d96b005b312a9b15ce2751f5ad78cbcc1d0d5c5b0a5da2ae6c724c44ea7950baf091644ba472a7cc3fefce4080a503cfeb3aaabaef6b73e2f87755b89f727ced3a22e6f679b3e7a20294cc557e42456fe03fafa69ee90227eb4dca714a8e016f2dfa96886b13969985f4526ae906f7cdaf8a0c6a30aec51b31608ae5bd0aa39efaf84cc598908ec6cc45f380ea6ecf0d92f8dbca234ad7e64beb1a55b254725c22ba53147920cb5218b8939ad8eee94fddab66655d15c4ea98b4521dc9bd64a98ffc51b33bec044386aee0835f31519872c31db0a4"}, 0xfc) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400010000000000000000000064"], 0x48}}, 0x0) 2.30779815s ago: executing program 0 (id=826): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x19, 0x2, 0x8, 0x802, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x805, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xa3}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f00000009c0)=""/87, 0x57}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f0000000680)=""/186, 0xba}], 0x9, 0x0, 0xfffffffffffffe5c}, 0xd}], 0x1, 0x40002000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f00000002c0)="06e0e66fc0eebf77451998058a234a05aca409d773fd2d570fc33bf09e67f6732199743596e4fbde6ff601bf3ccff2b4a8375f89ec7a716e4842db316ba7ac3f8184b995aa0d5fab505161c4224d390c4096d7e513d15a64a63b0fdeba61dfc487af2b050ceb6f21bb12455d", &(0x7f0000000040)=@tcp=r4}, 0x20) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$kcm(0x29, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@ \b\x00', @ANYRES16=r7, @ANYBLOB="08002abd7000fddbdf250400000014000600200100000000000000000000000000020800020007000000080004000200000006000b001a000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) 1.879427629s ago: executing program 0 (id=830): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a4", 0x1e}, {&(0x7f00000000c0)="61ac40af5d002df59e1813db6254dd53fc3512ea291918e9d5a122b1cc1fec675d44f5a2b2f465128b08a2f91eac8f0373b7069e37e9e01a344237f3d4f92f1162ebc5f4e3ee23c6e7dbb43bbf77b8ac613825128f5abf853b02f0554e40e71c11166cb83095d9593c9080679c0d161e4bb68b1af6e3b31dd4fc37d6b73312415b4e0b5d44eb55822a298cf7b8662c150abe547a2a8483af7e064b8049a66162eb1ba9", 0xa3}, {&(0x7f0000000fc0)="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", 0x528}], 0x6, 0x0, 0x0, 0x900}}], 0x2, 0x0) 1.756770898s ago: executing program 4 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.73275653s ago: executing program 0 (id=833): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, {{0x1c, 0x1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa0eb16db25350b57, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0xffffff0a}}, {0x4}}]}]}, 0x110}}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000017a450b7246e64e44c7cf4dfcc9cd39bb65a23a8a03bc5ca993a3c19a0ac63a7b7bec4881b15426fdc2ee3cb6a264bdedd84a614e4db2c1c4613a99cdf4de91d0eeb38036", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf25010000001c000180050002000d0000000800060015000000060005004e20000008000400070000000500050006000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d805000600000000001300"], 0x270}}, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x202, 0xffffffff}}], 0x20, 0x4000001}, 0xe1b4bbaa77814956) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f00000002c0)=0x1, 0x4) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @empty}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.651503566s ago: executing program 4 (id=834): r0 = socket(0x1, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x4, @remote, 'vlan1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x80047453, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x48f, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00'}, 0x2c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x8, 0xc, {{0x12, 0x4, 0x2, 0x37, 0x48, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x34, 0xcf, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4000000}, {@multicast2, 0xb8}, {@remote, 0x400}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x38b}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0xd, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="f902f5e325ff4f1fe9f227b1a009bdf46d272cc4ef6769968b09311430f2a1cd8584bff7339aafdc2ee1", @ANYRES64=0x0], 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0x4, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x3}, {0x1}, 0x4, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x220, 0x0, 0x7, 0x1, 0xd, 0xb8, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x16, 0x1, 0xf, 0x8000}}], 0x50, 0x4048050}, 0xc1) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="8558f5948eab3fdb34e92291797c1c193fad8983eaed", @ANYRES16=r7, @ANYBLOB="00012abd7000ffdbdf25020000000800030009000000050006001000000005000600000000000800030005000000050006000c0000001400040006000000ffffffff0300000004000000"], 0x50}}, 0x805) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r8 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r8, &(0x7f0000000040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x443, 0x0) 1.532489488s ago: executing program 3 (id=836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x0, 0xe, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x3, @empty, 0x7fffffff}, @in6={0xa, 0x4e22, 0x9, @private1, 0x718}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00', 0xfffffffd}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000400)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000059010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000d0058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800014000000000080002400000000505000300020000000900010073797a30"], 0xcc}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x6db6e559) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)={r2, r0}) close(r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @empty}, 0x1}}, 0x2e) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="6907ee5f522395dd8367a4fe29f2b8723a3867d0fd8e11037a64b8a717b81c953910adadd338b19bb8446e25f009c40e3244731f79f495caa03c1813e8691b3c257ab9e2ca79241b1d371fc247b63cda6806704bf492896167049406c7073d00c52ee6426791dfd00f571f7f788567b0a50189d054194a98249cdb39a5c35cc40f7ed324348fa14a5a6771b5dec505b74328028fa40ee251cf468778bacf601c9892bc10424ef6855fbb3a0aabde8cef4d327d64b68584b0dbc7d32a475e79fd800300000000000000433c3000"/217, @ANYRES64=0x0], 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="3f06098725ba31ad445f17050b3ec9b67c994ecb0b2b626fd9071ee9", @ANYRES64=0x0], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.429106346s ago: executing program 4 (id=837): unshare(0x6020400) r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000086471ed4458bf82438d100000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x9, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.358930782s ago: executing program 2 (id=838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delchain={0x44, 0x64, 0xf31, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xffff}, {0xfff3, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x126}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000) 1.217879333s ago: executing program 4 (id=840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x18, 0x68, 0x109}, 0x18}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@func, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r8, @ANYRESOCT=r9, @ANYRES64=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r11) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf25200000002c002d80050001000800000008000200030080000500040000000066c700030000000000305604000000000008000300", @ANYRESHEX=r12, @ANYBLOB="0c00060001"], 0x68}, 0x1, 0x0, 0x0, 0x20004804}, 0x4004000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r12, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x401) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000008ff000e61148c00000000001d430000000000007a0a00fe00581c1f61145f0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.150925889s ago: executing program 2 (id=841): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a4", 0x1e}, {&(0x7f00000000c0)="61ac40af5d002df59e1813db6254dd53fc3512ea291918e9d5a122b1cc1fec675d44f5a2b2f465128b08a2f91eac8f0373b7069e37e9e01a344237f3d4f92f1162ebc5f4e3ee23c6e7dbb43bbf77b8ac613825128f5abf853b02f0554e40e71c11166cb83095d9593c9080679c0d161e4bb68b1af6e3b31dd4fc37d6b73312415b4e0b5d44eb55822a298cf7b8662c150abe547a2a8483af7e064b8049a66162eb1ba9", 0xa3}, {&(0x7f0000000fc0)="506a723e5eb22dbc29f14b8d1aa32b6eb7f19c1d93ab32d413eacdf7ae87ebd70557c5e049deb24062e7d59266c3d9b39b68bd06363feff5d8162672117528c2d6976c491575e7c0959afc2588a43bec88548872532fe3989f34d81b53eae16dcdf759b9f0bc2e3b1794ea0aab81db25b4353ceed02b3d72a60719901814a51a01225481d8ad46a1d7a166818b673e56c863027e4f392015835047e23c7fb3d1c3735af917e17940a7606c8ddd10981f9ba5353bb98d41aad94cabeca1c4f3135032ea91e20bf203f1a7520ce33f08d8ddd33625b8afbde21e22f0dc77003f1c2c91e0cf63cfc45a3f06302679c7ffbb2d67252e859ad02f826c8975f571a13040671ddbd59a696e8a3bffe609891bd81b0328cf715b33d104ceed1ed4adcd03e2aa4ec9c722b4a27202b0aba7deadc72adf0e6a993c4b637d79484871476de2a1efab5272d621c8403528e3a566810a0554925b8a896c7ad54114e2c1bb9f71a9528ff035c6168165959735fe257b985ca1d1bd85e0118e0c2b04e078ece21b5d1d05cdefdfdb2c10f1f80032248d290eba677b1739011ed52aaa4e9b9446309795eaec076b966b363cc535bc0a190bca65d387b1934f60e4080cac3c3a10c61539be49161ce11ffdd581bdd6cbdd0cfd26d30d43af2bdf6a4fec48ae96336deb68dcd91ed65b4ce691daf67bafe9203660d417c338c8f46ba1f1f51a5db522811543d96a441289dbe3a5af8885cb61b67c6a0e3124da508a9c526c9f3a1ef4325893a9360d6849f04f857938ca918121b7a7869f7e55c6e4ce50bb09ebc9024954099b6251a2777987389cc29bccf19220f6f7d3bb7d832a2b51d2b1a422d1757892f10eb745956c20ce2e86ed2a5663466f239c689b296c328d45bde9fd81ef22811a9c37217375e2bd6ba3519f7e841b243b0dded5b44236640a755ae664c07b037cf1fef997b9d14f32f2d781ce851f073d1cea0335a00e5719209d77e602231fc444e0ce67f4ce12b72d185fc5fb51278e75548f8827176699d27be5df2e51a8acba8a500280d1d177afededfbd1eee72b123febdf9c2d7416762e80ac93905aecf83c797055d82fce06b37c50c7b750fd66abeeebd587cf46737b981c93a10d4d192428cbf8dda836aca713fcc8687d4b58f4f0866be02cfc7978e7be1201860b5564d995cc14f4ca8308a6f7696f828e35328124e403fd2e0d64cc0d59b0fbcc913c2907bf2a125a5bcc7c3dd49d47034c418949645a3ea3dc54f00c01b2103645500b0d2c1cde34246bb02860fe8c1a56e79b9eedbe2b2eb31134416d2f6d96122fa615e96b1a0970f765ecb853d68d055d78ced9cdb411ee92492b21150f3d03326c68cb3744563f9b36d487d4e1a4a5556edb92f9ae8ba40f34bde2001e176e51809f7a1f1899be5fa5f49a95ccbfe5bba8252d2a1f6d0cf51e8491bbdbef97a8ab211b62633021903a4a1267180b7f489c5d7861846c09177991898600671948cbecc15744a6115187954267ae51fc4503931be42557cde015fe64a5429c22b441d61845d7a7ab63981e1ee7184a431e584537be0a0f27382b280dad49ecd248bc5c0889b386b3d8c58389c3bf2df06b8db4a41296b1947ac1ae9568477e11b58a7999e9d3776d6ed512c4a838afb59b17efdb7cd8e71fee6dfa7c6999ef6cf95f1526255aedca7f03c761632640528fb2d1403b3dcbad93c8da644a44e4454af3e4eea8fc3afe18e9ac729038aba59e5cd89b587d023f3c1d25f609ef7ddcc6c9e4be506452dc438db8d8073c2cf64305c3d6df2a8df4a5c4666f9d12bebddf5361f77c5d12448dc4a3a498f8f7da9ade4b30737b83ce99763d6e322b5cec4eaf912c8b19b18469dc74e3b11475bba9d1f20428f11622f731b6e6eb1468db4d478464ec5bd545badce6ed4cd054dc0d93dd048c5c4ed62c102caf79d31186bd8ead1d668c10c2a489f3df5daab098c13492e3d8d027014cf559259710d951183785924c484358a776891713b49f72023bf55ac6e54df0552ce8134ab38e138f30e303d0475bf0c6e5d769fff8cf22ed1d431824546852978d5c775d2fb87d7c9772fc529599982ad09d77ab4e9026cf94573e2d4bd98eef25ea5e82c77efcb0ac88f4798da26ef0647d24832446647865b6a2e97f17641184fbe7469d4e5b9d58ef2ef0e99a8559917cb9462b171c36ad2d2fab8d4ca48db8e5b8b4d6fc294603a98275c9ba1f046dfe114fd6d0b15a29428ada16bdc1b826be7501c982c73c484b121cc1af76c7eccb4bb3aafa24847374af845a67ca633f6da2c83b67fd872faf4067bd7dde10772293c7855359231a070fa1d395273b361379e0c5c4f864aef5e9287ee27889e137c0d3e80c1e54ac5369b8a415236ea6db2e59afd653b3d9543b316e91b088734bcf2c94f7ac6cd468a10ee06f941beef284b2eccb17de4a25cdccaa0741", 0x6cd}], 0x6, 0x0, 0x0, 0x900}}], 0x2, 0x0) 1.059517579s ago: executing program 1 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x100000001, 0x1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x8, 0xf5f8, 0x3, 0xdd}, &(0x7f00000002c0)=0x98) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000000)={'wlan0\x00'}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="eb5c991d7a77d72bbf3a842d2229b9786ce99c403ebf438ba142b619a5af2b3b2dcf00914d75f041a28314c042b889b82b4e87ae49d670b3a16eb17b57200596c9112f1359726d91c16e2dcdfb8cc937b856471a4754747d7cc22ee4f6e72ab6e57ee98e24352f126528d110ba1dab65641d9d58145d5ce3d30591ecbc42a6f92adb88dd3620908ee4fb6d5c5b79140a83bc6457640a000db4", @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) (async) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000080)=0x59, &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}]}, 0x44}}, 0x0) 995.143288ms ago: executing program 2 (id=843): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a4", 0x1e}, {&(0x7f00000000c0)="61ac40af5d002df59e1813db6254dd53fc3512ea291918e9d5a122b1cc1fec675d44f5a2b2f465128b08a2f91eac8f0373b7069e37e9e01a344237f3d4f92f1162ebc5f4e3ee23c6e7dbb43bbf77b8ac613825128f5abf853b02f0554e40e71c11166cb83095d9593c9080679c0d161e4bb68b1af6e3b31dd4fc37d6b73312415b4e0b5d44eb55822a298cf7b8662c150abe547a2a8483af7e064b8049a66162eb1ba9", 0xa3}, {&(0x7f0000000fc0)="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", 0x604}], 0x6, 0x0, 0x0, 0x900}}], 0x2, 0x0) 814.956692ms ago: executing program 1 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 813.831875ms ago: executing program 4 (id=845): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @random="b0c942034375", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "94f85e", 0x14, 0x6, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 771.498299ms ago: executing program 2 (id=846): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000000000000000000004b"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x21, @fixed}, 0xe) connect$bt_sco(r6, &(0x7f0000000040), 0x8) shutdown(r6, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f00000001c0)={0x1f, @none}, 0x8) 645.302755ms ago: executing program 1 (id=847): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000200)=0x7fff, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa3dd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x933dae60}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c010}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5c9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r5, 0x5}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb100000000000800400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x1) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000400), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x4ee, 0x0, 0x0, 0x40f00, 0x44, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000540)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x5, 0xfffff996, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r10, r11, 0xffffffffffffffff, r12], 0x0, 0x10, 0x1, @void, @value}, 0x90) 446.93087ms ago: executing program 3 (id=848): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) listen(r0, 0x3a5) (async) r1 = socket$inet(0x2, 0x80001, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @remote}, 0x10) (async) listen(r1, 0x3) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) 417.731039ms ago: executing program 0 (id=849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000009c0)={'#! ', '', [{0x20, '\x86\xf3s\x1d\\\xf5\xfa\xdb\x01|h\xce\xee\vg\xe9A\x1fI[\x10\f+A-\x01\x98\x99\x88\xc1\'Txr\xb0d4\xa4 \x86\xed\xb6\r\xec\xa1\x85\x96y1\xb0\xee;v\x14\xb1\xb7\xc1k\x8e\xea\xf7w\xf0\xcf50\xdd\xa24\xd9[=\xa1\\\xbf\xdc\xc9\x1c(\xb9\xb2\xe2\xbbG:\xdf\xbc`\v\xd9\x91os\xfe\xb2\xd3\xf6\x15\x8c5H\x15\xb4\xbe\x1c)\xfc\bx\xbf,\xb8\xbc-\xe9\x03\xbek\xc7\xd5\xcf'}, {0x20, 'ts\x00\x00\x00\x00\x00\x00\x00F2\x9d\xa2\x06\x86fW \xc6\x00\x00\x00\x00\x00'}, {0x20, '#! \'\xa41l\r\xb2\x1f\xcf\xee\x9b\xb2\xa5:)A\x19\xb2\xad.\x87\x9c\xff\xfce\xed\x0e\xb81JW\x16\xdb7\xaef*\v\xe7\xc0\x80\x1f\xcf\x9d2\x02\xab\x1d\xec\xecK\x02\xf1\x86=\x06\xeb<\xdeA}\x87+0nz(Vm\x99\x02\x8c\xdb\xeb\xb0$!y\xdb\x1e\xdaM]\xa3\xd0\x18%\xb87\xef\x8eT\x0f$C}:7$wA\x9aHZ\x8c \xc4\x86\xd7\xb5\xad\x85\x02\x8fQ\x1b\x99\xcf\xd9\xf1\x83,\x01\xb5\xdf)\xee\x0eI08WM\xb0&\x8f\xa1\xa4w\xaa\x1c|>\x1c\xca[iM[\xef\xc4\x01\x87'}], 0xa, "e78b33b726dd5e2e5991e22f434ad1ffa0f784cadf2cdb87491d359708d608645a755d276781a3e221d8d335489ba45cb8e385dacbb065f368eb6f2dea60a56c8f21a503b5106267130e1411955553022134db380ab0ecfb072f93122b4ee8437724e8dcb60e85a7f3dd1e93a1c7d348d9c4ac5ea8334463ad36ec8587ce3b54203b01995ab9f2a5ed9ed690b8d74201a6715fa5f511ec895cff"}, 0x1cd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) 362.504528ms ago: executing program 4 (id=850): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x4b, &(0x7f00000001c0)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}}], 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a0000000000000060fffffffd002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) (async) write$tun(r2, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a0000000000000060fffffffd002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x6bf1c2d5adba8c32}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) (async) bind$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x84}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r7 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="b4de4643420e", 0x6}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="b4de4643420e", 0x6}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000008000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='geneve1\x00', 0x10) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r11 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) 250.674983ms ago: executing program 0 (id=851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xe, &(0x7f0000000d80)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xce}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @generic={0x4, 0x0, 0x3, 0x1000, 0xa9}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000200)=""/144, 0x2b, 0x90, 0x1, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x5, 0x8, 0xfffeffff, 0x30, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x2, @void, @value, @void, @value}, 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004f80)=""/218, 0xda}], 0x1}}], 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x12, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000640)='syzkaller\x00', 0x3ff, 0x1c, &(0x7f0000000740)=""/28, 0x40f00, 0x20, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0xa, 0x27a, 0x94}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x3, 0x7, 0xa}], 0x10, 0x3, @void, @value}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x64, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000700)=""/222, 0xde}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) write$cgroup_int(r9, &(0x7f00000001c0), 0xfffffdef) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003700), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) 141.043483ms ago: executing program 1 (id=852): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x380000000, 0x400, 0x200000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x6, 0x8000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa522}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r3, &(0x7f0000002200), 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x4f, "ff4b0d4eb9450c8c9d0433d49bf719222d72f58b7329229089b01bc01816559b903414aef70b6385148eb1228fae378fe4cfec01611ca0c576d9defa29cc2325091d95b9086da5b3c8def50970d602"}, &(0x7f0000000100)=0x57) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r4, 0x800, 0x10}, &(0x7f0000000700)=0xc) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xe}}}, {{@arp={@multicast1, @private=0xa010101, 0xff000000, 0xff, 0xe, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6531, 0x2000, 0x7f, 0x2, 0x1, 0xec0, 'lo\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x90}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @remote, 0x1, 0xffffffff}}}, {{@arp={@empty, @remote, 0xff, 0x7f800000, 0xe, 0xf, {@empty, {[0xff, 0xff, 0xff, 0x7f, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0xff]}}, 0x7, 0x8001, 0x3, 0x5, 0x4fff, 0x200, 'tunl0\x00', 'veth1\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @loopback, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x1ff) 65.031799ms ago: executing program 1 (id=853): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a4", 0x1e}, {&(0x7f00000000c0)="61ac40af5d002df59e1813db6254dd53fc3512ea291918e9d5a122b1cc1fec675d44f5a2b2f465128b08a2f91eac8f0373b7069e37e9e01a344237f3d4f92f1162ebc5f4e3ee23c6e7dbb43bbf77b8ac613825128f5abf853b02f0554e40e71c11166cb83095d9593c9080679c0d161e4bb68b1af6e3b31dd4fc37d6b73312415b4e0b5d44eb55822a298cf7b8662c150abe547a2a8483af7e064b8049a66162eb1ba9", 0xa3}, {&(0x7f0000000fc0)="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", 0x6cd}], 0x6, 0x0, 0x0, 0x900}}], 0x2, 0x0) 0s ago: executing program 1 (id=854): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="1802000000006735f24a0000000040000000000018130000", @ANYRES32=r4, @ANYBLOB="0000000000000000850000002b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r2}, 0x20) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/93, 0x5d}], 0x1}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x174, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x24, 0xb, 0x0, 0x16, 0x18, 0x60, 0xb, 0xc, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0xf17, 0x3, 0x5, 0xe2, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x0, 0x800, 0xdae, 0x7, 0x3, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x3d, 0x9, 0x6, 0xc, 0x48, 0x1b, 0x24, 0x16]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3}, {0x4, 0xa}, {0x4, 0xa}, {0x4, 0x3}, {0x2}, {0x7, 0xa}, {}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0x2}, {0x4, 0x6}, {0x7, 0x13}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4456, 0x401, 0x8f2, 0x426, 0x7, 0x1]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a16, 0x4, 0x48df, 0x24a4, 0xeec, 0x3ff, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x3}, {0x7, 0x8}, {0x6, 0x6}, {0x5, 0x1}, {0x6, 0x8}, {0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x7, 0x7ff, 0x401, 0xf414, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x4, 0x1, 0xbc5, 0x7, 0x6]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x18, 0x9, 0x6, 0x30, 0x60, 0x16, 0x16, 0x36, 0xc, 0x16, 0xb, 0x6c, 0x24, 0x6c, 0x5, 0x6c, 0x33, 0xb, 0x4, 0x3, 0x6c]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x60000010}, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001007300fe880001000000000000060000007d01ff020000000000000000000000000001"], 0xfdef) r9 = accept$netrom(0xffffffffffffffff, &(0x7f0000001140)={{0x3, @null}, [@bcast, @default, @rose, @rose, @bcast, @netrom, @remote, @rose]}, &(0x7f00000011c0)=0x48) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000001200)=0x80000001, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000035000107000020000000000007"], 0x14}}, 0x0) read(r11, &(0x7f0000000140)=""/4096, 0x1000) sendmsg$nl_generic(r10, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. [ 73.639734][ T5224] cgroup: Unknown subsys name 'net' [ 73.841042][ T5224] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.572789][ T5224] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.127177][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.137392][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.150646][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.160041][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.169108][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.177667][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.185743][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.193928][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.202806][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.216611][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.217692][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.232101][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.239595][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.263340][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.272354][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.295284][ T5251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.303715][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.312738][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.320531][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.328234][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.335232][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.342639][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.347360][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.359953][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.368742][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.377861][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.385857][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.394310][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.402946][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.422243][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.958694][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 78.999535][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 79.105415][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 79.208898][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 79.289682][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 79.383673][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.391840][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.399448][ T5241] bridge_slave_0: entered allmulticast mode [ 79.407971][ T5241] bridge_slave_0: entered promiscuous mode [ 79.422248][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.429637][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.437570][ T5250] bridge_slave_0: entered allmulticast mode [ 79.445024][ T5250] bridge_slave_0: entered promiscuous mode [ 79.453928][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.461219][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.468506][ T5250] bridge_slave_1: entered allmulticast mode [ 79.475813][ T5250] bridge_slave_1: entered promiscuous mode [ 79.483682][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.491234][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.498460][ T5234] bridge_slave_0: entered allmulticast mode [ 79.505817][ T5234] bridge_slave_0: entered promiscuous mode [ 79.516056][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.524496][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.531849][ T5234] bridge_slave_1: entered allmulticast mode [ 79.539149][ T5234] bridge_slave_1: entered promiscuous mode [ 79.558281][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.565660][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.572997][ T5241] bridge_slave_1: entered allmulticast mode [ 79.580100][ T5241] bridge_slave_1: entered promiscuous mode [ 79.675358][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.706030][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.719822][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.745395][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.772641][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.800057][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.807767][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.815270][ T5235] bridge_slave_0: entered allmulticast mode [ 79.822907][ T5235] bridge_slave_0: entered promiscuous mode [ 79.831708][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.838925][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.846591][ T5235] bridge_slave_1: entered allmulticast mode [ 79.854618][ T5235] bridge_slave_1: entered promiscuous mode [ 79.876881][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.958322][ T5250] team0: Port device team_slave_0 added [ 79.978279][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.985957][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.993396][ T5247] bridge_slave_0: entered allmulticast mode [ 80.000939][ T5247] bridge_slave_0: entered promiscuous mode [ 80.009897][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.017798][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.025465][ T5247] bridge_slave_1: entered allmulticast mode [ 80.032777][ T5247] bridge_slave_1: entered promiscuous mode [ 80.044239][ T5241] team0: Port device team_slave_0 added [ 80.066408][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.077602][ T5250] team0: Port device team_slave_1 added [ 80.101233][ T5234] team0: Port device team_slave_0 added [ 80.121471][ T5241] team0: Port device team_slave_1 added [ 80.129610][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.154529][ T5234] team0: Port device team_slave_1 added [ 80.194913][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.229721][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.237233][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.264105][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.293395][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.321310][ T5245] Bluetooth: hci2: command tx timeout [ 80.327283][ T5240] Bluetooth: hci0: command tx timeout [ 80.349136][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.356527][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.384196][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.396879][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.401393][ T5240] Bluetooth: hci1: command tx timeout [ 80.409675][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.436208][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.462280][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.469281][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.480400][ T5240] Bluetooth: hci3: command tx timeout [ 80.501119][ T5240] Bluetooth: hci4: command tx timeout [ 80.502500][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.520840][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.527873][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.554860][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.570107][ T5235] team0: Port device team_slave_0 added [ 80.585407][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.592557][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.618510][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.636908][ T5247] team0: Port device team_slave_0 added [ 80.652264][ T5235] team0: Port device team_slave_1 added [ 80.668610][ T5247] team0: Port device team_slave_1 added [ 80.746494][ T5241] hsr_slave_0: entered promiscuous mode [ 80.753248][ T5241] hsr_slave_1: entered promiscuous mode [ 80.774036][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.785756][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.812478][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.840123][ T5250] hsr_slave_0: entered promiscuous mode [ 80.847589][ T5250] hsr_slave_1: entered promiscuous mode [ 80.855482][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.863724][ T5250] Cannot create hsr debugfs directory [ 80.904397][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.911573][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.937907][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.953943][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.961053][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.987715][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.052598][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.059606][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.086223][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.121520][ T5234] hsr_slave_0: entered promiscuous mode [ 81.128042][ T5234] hsr_slave_1: entered promiscuous mode [ 81.134399][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.142393][ T5234] Cannot create hsr debugfs directory [ 81.311293][ T5235] hsr_slave_0: entered promiscuous mode [ 81.318234][ T5235] hsr_slave_1: entered promiscuous mode [ 81.325596][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.333683][ T5235] Cannot create hsr debugfs directory [ 81.426229][ T5247] hsr_slave_0: entered promiscuous mode [ 81.432982][ T5247] hsr_slave_1: entered promiscuous mode [ 81.439645][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.447452][ T5247] Cannot create hsr debugfs directory [ 81.818882][ T5250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.850419][ T5250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.862942][ T5250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.884901][ T5250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.933327][ T5234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.947158][ T5234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.965735][ T5234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.995470][ T5234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.142535][ T5235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.195572][ T5235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.208010][ T5235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.249107][ T5235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.369511][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.400841][ T5245] Bluetooth: hci2: command tx timeout [ 82.403448][ T5247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.406448][ T5240] Bluetooth: hci0: command tx timeout [ 82.477830][ T5247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.484718][ T5240] Bluetooth: hci1: command tx timeout [ 82.518122][ T5247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.538110][ T5247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.560441][ T5245] Bluetooth: hci4: command tx timeout [ 82.563740][ T5240] Bluetooth: hci3: command tx timeout [ 82.643815][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.663946][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.758905][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.766343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.797530][ T5241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.841692][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.857056][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.864548][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.877978][ T5241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.927189][ T5241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.937745][ T5241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.975091][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.982315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.994622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.001869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.098486][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.174338][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.223823][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.255901][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.314494][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.321730][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.343689][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.350882][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.389976][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.397318][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.456023][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.463283][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.589916][ T5235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.601785][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.669264][ T5247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.726126][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.785492][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.875472][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.932249][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.958562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.965854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.977812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.985052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.125205][ T5250] veth0_vlan: entered promiscuous mode [ 84.148406][ T5250] veth1_vlan: entered promiscuous mode [ 84.183031][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.232663][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.326960][ T5234] veth0_vlan: entered promiscuous mode [ 84.392330][ T5250] veth0_macvtap: entered promiscuous mode [ 84.417800][ T5234] veth1_vlan: entered promiscuous mode [ 84.431699][ T5250] veth1_macvtap: entered promiscuous mode [ 84.480935][ T5240] Bluetooth: hci0: command tx timeout [ 84.486421][ T5245] Bluetooth: hci2: command tx timeout [ 84.562249][ T5245] Bluetooth: hci1: command tx timeout [ 84.573151][ T5247] veth0_vlan: entered promiscuous mode [ 84.619878][ T5247] veth1_vlan: entered promiscuous mode [ 84.639041][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.647640][ T5245] Bluetooth: hci4: command tx timeout [ 84.653339][ T5240] Bluetooth: hci3: command tx timeout [ 84.708762][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.719946][ T5234] veth0_macvtap: entered promiscuous mode [ 84.747034][ T5250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.756375][ T5250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.765760][ T5250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.774766][ T5250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.805378][ T5234] veth1_macvtap: entered promiscuous mode [ 84.822686][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.859828][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.871683][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.885587][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.899699][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.912898][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.925915][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.980974][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.991894][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006973][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.016201][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.028784][ T5247] veth0_macvtap: entered promiscuous mode [ 85.040055][ T5247] veth1_macvtap: entered promiscuous mode [ 85.119036][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.136058][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.138689][ T5235] veth0_vlan: entered promiscuous mode [ 85.224899][ T5235] veth1_vlan: entered promiscuous mode [ 85.254617][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.267861][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.278088][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.290004][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.303284][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.319701][ T2579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.328623][ T2579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.354104][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.364995][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.384675][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.396696][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.409103][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.424937][ T5241] veth0_vlan: entered promiscuous mode [ 85.467236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.469816][ T5247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.481449][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.496160][ T5247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.507076][ T5247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.516324][ T5247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.535146][ T5241] veth1_vlan: entered promiscuous mode [ 85.697597][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.704547][ T5235] veth0_macvtap: entered promiscuous mode [ 85.715683][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.767837][ T5235] veth1_macvtap: entered promiscuous mode [ 85.859190][ T5241] veth0_macvtap: entered promiscuous mode [ 85.871892][ T2579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.892744][ T2579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.921238][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.947258][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.965221][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.979866][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.995633][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.009909][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.023580][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.035266][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.046966][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.058407][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.073260][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.092895][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.107675][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.124181][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.182948][ T5235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.194396][ T5320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.205480][ T5235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.219892][ T5235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.231041][ T5235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.248069][ T5241] veth1_macvtap: entered promiscuous mode [ 86.295438][ T2579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.356143][ T2579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.493001][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.514803][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.525367][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.536510][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.547557][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.558925][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.560602][ T5245] Bluetooth: hci2: command tx timeout [ 86.570099][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.574444][ T5240] Bluetooth: hci0: command tx timeout [ 86.593740][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.613381][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.634413][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.640535][ T5245] Bluetooth: hci1: command tx timeout [ 86.648640][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.667952][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.707355][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.721703][ T5240] Bluetooth: hci3: command tx timeout [ 86.727380][ T5245] Bluetooth: hci4: command tx timeout [ 86.728832][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.749413][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.761665][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.781058][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.825052][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.836480][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 86.885494][ T5241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933200][ T5241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.952617][ T5241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.980218][ T5241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.028532][ T5333] netlink: 'syz.2.3': attribute type 24 has an invalid length. [ 87.160971][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.213098][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.221453][ T5343] Zero length message leads to an empty skb [ 87.362680][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.410688][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.540245][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.548140][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.631854][ T5354] dccp_invalid_packet: P.Data Offset(100) too large [ 87.658890][ T5354] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.762936][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.782160][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.991053][ T5367] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.021277][ T5366] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 88.631348][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 88.672124][ T5388] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 88.749633][ T5388] bond0: (slave netdevsim0): no link monitoring support [ 88.802030][ T5388] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 88.924490][ T5388] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 88.963238][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 89.266322][ T5410] netlink: 'syz.2.26': attribute type 7 has an invalid length. [ 89.296412][ T5411] syz.2.26[5411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.302319][ T5411] syz.2.26[5411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.365661][ T5412] syz.2.26[5412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.381029][ T5410] netlink: 'syz.2.26': attribute type 8 has an invalid length. [ 89.418509][ T5415] netlink: 'syz.0.27': attribute type 21 has an invalid length. [ 89.433073][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 89.457551][ T5410] netlink: 224 bytes leftover after parsing attributes in process `syz.2.26'. [ 89.467980][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 89.713674][ T5424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.765870][ T5426] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.30'. [ 89.847331][ T5428] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 89.919223][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 90.381661][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.647902][ T5452] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 90.662968][ T5452] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 90.675201][ T5452] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 90.694308][ T5454] netlink: 'syz.3.41': attribute type 11 has an invalid length. [ 90.714644][ T5450] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 90.724069][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 90.751994][ T5452] tun0: tun_chr_ioctl cmd 2147767517 [ 92.293475][ T939] cfg80211: failed to load regulatory.db [ 92.803934][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 93.111390][ T5482] validate_nla: 3 callbacks suppressed [ 93.111414][ T5482] netlink: 'syz.3.49': attribute type 32 has an invalid length. [ 93.432107][ T5495] __nla_validate_parse: 4 callbacks suppressed [ 93.432129][ T5495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51'. [ 93.480859][ T5495] xt_TCPMSS: Only works on TCP SYN packets [ 93.530579][ T5501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.54'. [ 93.562636][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 93.971215][ T5521] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 93.996373][ T5521] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 94.085856][ T5516] syzkaller0: entered promiscuous mode [ 94.091740][ T5516] syzkaller0: entered allmulticast mode [ 94.120294][ T5521] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 94.182405][ T5531] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 94.206625][ T5521] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 94.231453][ T5521] netlink: 'syz.3.61': attribute type 29 has an invalid length. [ 94.455105][ T5534] netlink: 644 bytes leftover after parsing attributes in process `syz.2.63'. [ 95.876129][ T5554] xt_policy: neither incoming nor outgoing policy selected [ 96.999136][ T5541] netlink: 'syz.1.64': attribute type 12 has an invalid length. [ 97.007224][ T5541] netlink: 'syz.1.64': attribute type 29 has an invalid length. [ 97.018455][ T5541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.64'. [ 97.067047][ T5556] netlink: 'syz.4.68': attribute type 2 has an invalid length. [ 97.095678][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 97.140431][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 97.569234][ T5577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'. [ 97.585170][ T5577] netlink: 52 bytes leftover after parsing attributes in process `syz.0.75'. [ 97.595225][ T5577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.75'. [ 97.605215][ T5577] vlan0: entered allmulticast mode [ 97.610896][ T5577] veth0_vlan: entered allmulticast mode [ 98.026685][ T5591] ax25_connect(): syz.4.79 uses autobind, please contact jreuter@yaina.de [ 98.158365][ T5595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.185562][ T5596] netlink: 'syz.2.81': attribute type 5 has an invalid length. [ 98.244415][ T5596] : entered promiscuous mode [ 98.417084][ T5603] netlink: 'syz.1.84': attribute type 12 has an invalid length. [ 98.428309][ T5603] netlink: 'syz.1.84': attribute type 29 has an invalid length. [ 98.921290][ T5616] __nla_validate_parse: 2 callbacks suppressed [ 98.921314][ T5616] netlink: 11 bytes leftover after parsing attributes in process `syz.2.88'. [ 99.423830][ T5632] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 99.436022][ T5632] netlink: 'syz.2.95': attribute type 2 has an invalid length. [ 99.446590][ T5629] netlink: 'syz.3.94': attribute type 8 has an invalid length. [ 99.455006][ T5629] netlink: 56 bytes leftover after parsing attributes in process `syz.3.94'. [ 99.466283][ T5629] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 99.504870][ T5634] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 99.515614][ T5634] netlink: 'syz.2.95': attribute type 2 has an invalid length. [ 99.926484][ T5650] netlink: 'syz.2.99': attribute type 4 has an invalid length. [ 99.984885][ T5651] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 100.074656][ T5651] team0: Port device netdevsim0 added [ 100.199283][ T5644] syz.2.99 (5644) used greatest stack depth: 19504 bytes left [ 100.209829][ T5658] team0: Port device netdevsim0 removed [ 100.263807][ T5658] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.534805][ T5675] netlink: 80 bytes leftover after parsing attributes in process `syz.3.107'. [ 100.713891][ T939] IPVS: starting estimator thread 0... [ 100.722751][ T5687] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 100.770517][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'. [ 100.820643][ T5690] IPVS: using max 15 ests per chain, 36000 per kthread [ 100.836563][ T5696] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 100.906656][ T5699] netlink: 128 bytes leftover after parsing attributes in process `syz.2.112'. [ 102.251717][ T5693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 102.536823][ T5759] gtp0: entered promiscuous mode [ 102.552967][ T5759] gtp0: entered allmulticast mode [ 103.156380][ T5787] netlink: 128 bytes leftover after parsing attributes in process `syz.0.134'. [ 103.512030][ T5802] dccp_invalid_packet: P.Data Offset(100) too large [ 103.898725][ T5808] tipc: Can't bind to reserved service type 2 [ 103.952047][ T5808] Bluetooth: MGMT ver 1.23 [ 104.133777][ T5822] tipc: Started in network mode [ 104.157411][ T5822] tipc: Node identity a6b785622c23, cluster identity 4711 [ 104.190688][ T5822] tipc: Enabled bearer , priority 0 [ 104.296486][ T5828] syzkaller0: MTU too low for tipc bearer [ 104.328487][ T5828] tipc: Disabling bearer [ 104.759032][ T5846] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 104.964473][ T5856] validate_nla: 7 callbacks suppressed [ 104.964497][ T5856] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 105.005145][ T5856] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 105.123437][ T5856] syz.1.155 (5856) used greatest stack depth: 19352 bytes left [ 105.184478][ T5863] netlink: 588 bytes leftover after parsing attributes in process `syz.1.156'. [ 105.539235][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 105.888477][ T5859] syz.2.154 (5859) used greatest stack depth: 19000 bytes left [ 105.899693][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.909481][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.054335][ T5904] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 106.114210][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.157172][ T5904] team0: Port device batadv0 added [ 106.223151][ T5907] syz.4.170[5907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.223396][ T5907] syz.4.170[5907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.497821][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 106.695126][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 106.714401][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 106.746319][ T5932] No such timeout policy "syz0" [ 106.915652][ T5934] warning: `syz.0.179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.205245][ T5948] FAULT_INJECTION: forcing a failure. [ 107.205245][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 107.230029][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: syz.2.184 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 107.240725][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.250931][ T5948] Call Trace: [ 107.254256][ T5948] [ 107.257321][ T5948] dump_stack_lvl+0x241/0x360 [ 107.262086][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.267536][ T5948] ? __pfx__printk+0x10/0x10 [ 107.272196][ T5948] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 107.278435][ T5948] ? __pfx___might_resched+0x10/0x10 [ 107.283813][ T5948] should_fail_ex+0x3b0/0x4e0 [ 107.288674][ T5948] should_failslab+0xac/0x100 [ 107.293864][ T5948] ? __alloc_skb+0x1c3/0x440 [ 107.298725][ T5948] kmem_cache_alloc_node_noprof+0x71/0x320 [ 107.305019][ T5948] __alloc_skb+0x1c3/0x440 [ 107.310076][ T5948] ? __pfx___alloc_skb+0x10/0x10 [ 107.315196][ T5948] ? netlink_ack_tlv_len+0x6e/0x200 [ 107.320895][ T5948] netlink_ack+0x13f/0xa30 [ 107.325418][ T5948] ? nfnetlink_rcv+0x1265/0x2ab0 [ 107.330628][ T5948] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 107.335656][ T5948] nfnetlink_rcv+0x26b6/0x2ab0 [ 107.340527][ T5948] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.345873][ T5948] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.351139][ T5948] ? skb_clone+0x240/0x390 [ 107.356374][ T5948] ? __pfx_lock_release+0x10/0x10 [ 107.361439][ T5948] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.366946][ T5948] netlink_unicast+0x7f6/0x990 [ 107.371817][ T5948] ? __pfx_netlink_unicast+0x10/0x10 [ 107.377152][ T5948] ? __virt_addr_valid+0x183/0x530 [ 107.382371][ T5948] ? __check_object_size+0x49c/0x900 [ 107.387704][ T5948] ? bpf_lsm_netlink_send+0x9/0x10 [ 107.392860][ T5948] netlink_sendmsg+0x8e4/0xcb0 [ 107.397664][ T5948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.402977][ T5948] ? __import_iovec+0x536/0x820 [ 107.407954][ T5948] ? aa_sock_msg_perm+0x91/0x160 [ 107.413088][ T5948] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.418400][ T5948] ? security_socket_sendmsg+0x87/0xb0 [ 107.423982][ T5948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.430162][ T5948] __sock_sendmsg+0x221/0x270 [ 107.434902][ T5948] ____sys_sendmsg+0x525/0x7d0 [ 107.439699][ T5948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.445023][ T5948] __sys_sendmsg+0x2b0/0x3a0 [ 107.449757][ T5948] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.454928][ T5948] ? vfs_write+0x7c4/0xc90 [ 107.459961][ T5948] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.466338][ T5948] ? do_syscall_64+0x100/0x230 [ 107.471134][ T5948] ? do_syscall_64+0xb6/0x230 [ 107.475996][ T5948] do_syscall_64+0xf3/0x230 [ 107.480550][ T5948] ? clear_bhb_loop+0x35/0x90 [ 107.485260][ T5948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.491339][ T5948] RIP: 0033:0x7fc9bd77def9 [ 107.495970][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.515612][ T5948] RSP: 002b:00007fc9be55d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.524058][ T5948] RAX: ffffffffffffffda RBX: 00007fc9bd935f80 RCX: 00007fc9bd77def9 [ 107.532050][ T5948] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 107.540040][ T5948] RBP: 00007fc9be55d090 R08: 0000000000000000 R09: 0000000000000000 [ 107.548055][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.556050][ T5948] R13: 0000000000000000 R14: 00007fc9bd935f80 R15: 00007fffbba45818 [ 107.564110][ T5948] [ 108.024376][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 108.194011][ T5970] trusted_key: syz.2.189 sent an empty control message without MSG_MORE. [ 108.197176][ T5973] sctp: [Deprecated]: syz.0.190 (pid 5973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.197176][ T5973] Use struct sctp_sack_info instead [ 108.232457][ T5970] bridge0: port 3(hsr0) entered blocking state [ 108.241002][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 108.246166][ T5970] bridge0: port 3(hsr0) entered disabled state [ 108.266377][ T5970] hsr0: entered allmulticast mode [ 108.286023][ T5970] hsr_slave_0: entered allmulticast mode [ 108.316193][ T5970] hsr_slave_1: entered allmulticast mode [ 108.354080][ T5970] hsr0: entered promiscuous mode [ 108.379525][ T5970] bridge0: port 3(hsr0) entered blocking state [ 108.386093][ T5970] bridge0: port 3(hsr0) entered forwarding state [ 108.445726][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 108.993394][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 109.145178][ T6010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.321149][ T6025] FAULT_INJECTION: forcing a failure. [ 109.321149][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 109.341239][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.4.210 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 109.352101][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 109.362207][ T6025] Call Trace: [ 109.365521][ T6025] [ 109.368488][ T6025] dump_stack_lvl+0x241/0x360 [ 109.373240][ T6025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.378531][ T6025] ? __pfx__printk+0x10/0x10 [ 109.383277][ T6025] ? ref_tracker_alloc+0x332/0x490 [ 109.388538][ T6025] should_fail_ex+0x3b0/0x4e0 [ 109.393286][ T6025] ? skb_clone+0x20c/0x390 [ 109.397783][ T6025] should_failslab+0xac/0x100 [ 109.402536][ T6025] ? skb_clone+0x20c/0x390 [ 109.407012][ T6025] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 109.412445][ T6025] skb_clone+0x20c/0x390 [ 109.416777][ T6025] __netlink_deliver_tap+0x3cc/0x7c0 [ 109.422144][ T6025] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.427567][ T6025] netlink_deliver_tap+0x19d/0x1b0 [ 109.432748][ T6025] netlink_sendskb+0x68/0x140 [ 109.437576][ T6025] netlink_unicast+0x39d/0x990 [ 109.442584][ T6025] ? __asan_memcpy+0x40/0x70 [ 109.447686][ T6025] ? __pfx_netlink_unicast+0x10/0x10 [ 109.453047][ T6025] nfnetlink_rcv+0x26b6/0x2ab0 [ 109.457889][ T6025] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 109.463068][ T6025] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.468288][ T6025] ? skb_clone+0x240/0x390 [ 109.472746][ T6025] ? __pfx_lock_release+0x10/0x10 [ 109.477929][ T6025] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.483155][ T6025] netlink_unicast+0x7f6/0x990 [ 109.487948][ T6025] ? __pfx_netlink_unicast+0x10/0x10 [ 109.493251][ T6025] ? __virt_addr_valid+0x183/0x530 [ 109.498468][ T6025] ? __check_object_size+0x49c/0x900 [ 109.503786][ T6025] ? bpf_lsm_netlink_send+0x9/0x10 [ 109.509132][ T6025] netlink_sendmsg+0x8e4/0xcb0 [ 109.513930][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.519232][ T6025] ? __import_iovec+0x536/0x820 [ 109.524099][ T6025] ? aa_sock_msg_perm+0x91/0x160 [ 109.529067][ T6025] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 109.534462][ T6025] ? security_socket_sendmsg+0x87/0xb0 [ 109.539953][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.545260][ T6025] __sock_sendmsg+0x221/0x270 [ 109.549964][ T6025] ____sys_sendmsg+0x525/0x7d0 [ 109.554852][ T6025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.560203][ T6025] __sys_sendmsg+0x2b0/0x3a0 [ 109.564836][ T6025] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.570009][ T6025] ? vfs_write+0x7c4/0xc90 [ 109.574510][ T6025] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.580874][ T6025] ? do_syscall_64+0x100/0x230 [ 109.585666][ T6025] ? do_syscall_64+0xb6/0x230 [ 109.590370][ T6025] do_syscall_64+0xf3/0x230 [ 109.594897][ T6025] ? clear_bhb_loop+0x35/0x90 [ 109.599654][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.605625][ T6025] RIP: 0033:0x7efc6897def9 [ 109.610059][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.629684][ T6025] RSP: 002b:00007efc697e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.638143][ T6025] RAX: ffffffffffffffda RBX: 00007efc68b35f80 RCX: 00007efc6897def9 [ 109.646131][ T6025] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 109.654207][ T6025] RBP: 00007efc697e5090 R08: 0000000000000000 R09: 0000000000000000 [ 109.662457][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.670443][ T6025] R13: 0000000000000000 R14: 00007efc68b35f80 R15: 00007ffd142d65b8 [ 109.678469][ T6025] [ 110.000406][ T8] IPVS: starting estimator thread 0... [ 110.010897][ T6046] tipc: Started in network mode [ 110.015939][ T6046] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.035166][ T6046] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.062111][ T6046] tipc: Enabled bearer , priority 10 [ 110.120466][ T6049] IPVS: using max 17 ests per chain, 40800 per kthread [ 110.134730][ T6052] netlink: 'syz.0.217': attribute type 39 has an invalid length. [ 110.170790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.258858][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 110.310392][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.342064][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 110.445010][ T6069] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.223'. [ 110.460234][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.610265][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.619159][ T6069] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 110.644112][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 110.750289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.795381][ T6080] netlink: 'syz.1.228': attribute type 12 has an invalid length. [ 110.834233][ T6080] netlink: 'syz.1.228': attribute type 29 has an invalid length. [ 110.865796][ T6080] netlink: 128 bytes leftover after parsing attributes in process `syz.1.228'. [ 110.890260][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.907536][ T6086] pimreg: entered allmulticast mode [ 110.924147][ T6087] pimreg: left allmulticast mode [ 111.008565][ T6091] netlink: 'syz.3.230': attribute type 22 has an invalid length. [ 111.032210][ T8] tipc: Node number set to 2886997162 [ 111.126245][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 111.161694][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 111.180320][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 111.209319][ T6099] ipvlan2: entered allmulticast mode [ 111.238944][ T6099] veth0_vlan: entered allmulticast mode [ 111.280468][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 111.381772][ T11] tipc: Subscription rejected, illegal request [ 111.450378][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 111.602554][ T6113] team0: Device vlan2 is already an upper device of the team interface [ 111.808416][ T6118] FAULT_INJECTION: forcing a failure. [ 111.808416][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.840471][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.0.237 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 111.851531][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.861634][ T6118] Call Trace: [ 111.864952][ T6118] [ 111.867924][ T6118] dump_stack_lvl+0x241/0x360 [ 111.872674][ T6118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.877938][ T6118] ? __pfx__printk+0x10/0x10 [ 111.882594][ T6118] ? snprintf+0xda/0x120 [ 111.886895][ T6118] should_fail_ex+0x3b0/0x4e0 [ 111.891655][ T6118] _copy_to_user+0x2f/0xb0 [ 111.896145][ T6118] simple_read_from_buffer+0xca/0x150 [ 111.901748][ T6118] proc_fail_nth_read+0x1ec/0x260 [ 111.906837][ T6118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.912435][ T6118] ? rw_verify_area+0x520/0x6b0 [ 111.917341][ T6118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.922935][ T6118] vfs_read+0x204/0xbc0 [ 111.927133][ T6118] ? __pfx_lock_release+0x10/0x10 [ 111.932217][ T6118] ? __pfx_vfs_read+0x10/0x10 [ 111.936946][ T6118] ? __fget_files+0x29/0x470 [ 111.941586][ T6118] ? __fget_files+0x3f6/0x470 [ 111.946418][ T6118] ksys_read+0x1a0/0x2c0 [ 111.950728][ T6118] ? __pfx_ksys_read+0x10/0x10 [ 111.955544][ T6118] ? do_syscall_64+0x100/0x230 [ 111.960377][ T6118] ? do_syscall_64+0xb6/0x230 [ 111.965105][ T6118] do_syscall_64+0xf3/0x230 [ 111.969666][ T6118] ? clear_bhb_loop+0x35/0x90 [ 111.974445][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.980407][ T6118] RIP: 0033:0x7f556eb7c93c [ 111.984962][ T6118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 112.004709][ T6118] RSP: 002b:00007f556f9d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.013292][ T6118] RAX: ffffffffffffffda RBX: 00007f556ed35f80 RCX: 00007f556eb7c93c [ 112.021312][ T6118] RDX: 000000000000000f RSI: 00007f556f9d10a0 RDI: 0000000000000004 [ 112.029324][ T6118] RBP: 00007f556f9d1090 R08: 0000000000000000 R09: 0000000000000000 [ 112.037339][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.045440][ T6118] R13: 0000000000000000 R14: 00007f556ed35f80 R15: 00007ffeb5210d38 [ 112.053483][ T6118] [ 112.603882][ T6146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.972144][ T6159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.044640][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 113.062854][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'. [ 113.318922][ T6182] netlink: 'syz.2.253': attribute type 12 has an invalid length. [ 113.335802][ T6182] netlink: 'syz.2.253': attribute type 29 has an invalid length. [ 113.344829][ T6182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.253'. [ 113.738163][ T6193] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 113.902161][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.932230][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.227778][ T6217] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 114.365081][ T6220] rdma_op ffff88805db4c1f0 conn xmit_rdma 0000000000000000 [ 114.795976][ T6237] ipt_ECN: cannot use operation on non-tcp rule [ 115.044384][ T6250] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.054614][ T6250] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.065127][ T6250] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.074762][ T6250] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.120531][ C0] net_ratelimit: 4 callbacks suppressed [ 115.120556][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 115.267280][ T6265] syz_tun: entered promiscuous mode [ 115.307700][ T6265] syz_tun: left promiscuous mode [ 115.837823][ T6284] Illegal XDP return value 4294967274 on prog (id 136) dev N/A, expect packet loss! [ 115.958521][ T6289] __nla_validate_parse: 3 callbacks suppressed [ 115.958542][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 116.170456][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 116.942165][ T6307] Bluetooth: MGMT ver 1.23 [ 117.202527][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 117.332373][ T6328] bridge0: port 3(batadv1) entered blocking state [ 117.339126][ T6328] bridge0: port 3(batadv1) entered disabled state [ 117.353587][ T6328] batadv1: entered allmulticast mode [ 117.367335][ T6328] batadv1: entered promiscuous mode [ 117.371422][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 117.386613][ T6331] vlan2: entered promiscuous mode [ 117.689047][ T6345] netlink: 9408 bytes leftover after parsing attributes in process `syz.3.303'. [ 117.743504][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 117.763181][ T6341] Cannot find del_set index 286 as target [ 117.830460][ T6345] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 117.852498][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 117.862394][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 117.917702][ T6354] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 117.949218][ T6354] team0: Port device netdevsim0 added [ 117.963939][ T6354] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 117.989151][ T6354] team0: Port device netdevsim0 removed [ 118.001275][ T6345] syz.3.303 (6345) used greatest stack depth: 18736 bytes left [ 118.015043][ T6354] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.142327][ T6362] team_slave_0: entered promiscuous mode [ 118.148464][ T6362] team_slave_1: entered promiscuous mode [ 118.176331][ T6362] macvtap1: entered promiscuous mode [ 118.199171][ T6362] team0: entered promiscuous mode [ 118.217466][ T6362] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.240547][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 118.274403][ T6367] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.283725][ T6367] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.292584][ T6367] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.301684][ T6367] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.312857][ T6367] vxlan0: entered promiscuous mode [ 118.319271][ T6367] vxlan0: entered allmulticast mode [ 118.349522][ T6367] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.358779][ T6367] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.368284][ T6367] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.377286][ T6367] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.453153][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 118.492152][ T6376] syzkaller0: entered promiscuous mode [ 118.504711][ T6376] syzkaller0: entered allmulticast mode [ 118.685942][ T46] IPVS: starting estimator thread 0... [ 118.791353][ T6388] IPVS: using max 16 ests per chain, 38400 per kthread [ 118.838419][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'. [ 119.051396][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 119.096245][ T6412] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 119.277554][ T6412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.288801][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 119.338638][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 119.347650][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'. [ 119.374837][ T6425] gtp0: entered promiscuous mode [ 119.387906][ T6425] gtp0: entered allmulticast mode [ 119.453915][ T6412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.550001][ T6430] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.598440][ T6412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.619765][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'. [ 119.637761][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'. [ 119.748571][ T6412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.036138][ T6412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.079477][ T6412] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.093466][ T6436] infiniband syz1: set active [ 120.107555][ T6436] infiniband syz1: added syzkaller0 [ 120.138693][ T6412] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.194097][ T6412] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.205448][ T6436] RDS/IB: syz1: added [ 120.211187][ T6436] smc: adding ib device syz1 with port count 1 [ 120.217944][ T6436] smc: ib device syz1 port 1 has pnetid [ 120.320593][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 120.836055][ T6468] syz.2.334 (6468) used greatest stack depth: 18272 bytes left [ 120.946951][ T6480] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 120.978587][ T6480] __nla_validate_parse: 2 callbacks suppressed [ 120.978612][ T6480] netlink: 224 bytes leftover after parsing attributes in process `syz.1.335'. [ 121.031255][ T6475] netlink: 'syz.3.337': attribute type 3 has an invalid length. [ 121.083050][ T6483] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 121.269592][ T6492] netlink: 256 bytes leftover after parsing attributes in process `syz.0.342'. [ 121.281785][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 121.305941][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'. [ 121.360363][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 121.522828][ T6500] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 121.550398][ T6501] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 121.999926][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 122.140699][ T6520] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.350'. [ 122.158972][ T6520] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 122.159402][ T6522] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.350'. [ 122.194867][ T6522] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 122.400356][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 122.633055][ T6531] FAULT_INJECTION: forcing a failure. [ 122.633055][ T6531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.647923][ T6531] CPU: 0 UID: 0 PID: 6531 Comm: syz.4.353 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 122.658671][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.668861][ T6531] Call Trace: [ 122.672185][ T6531] [ 122.675158][ T6531] dump_stack_lvl+0x241/0x360 [ 122.679905][ T6531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.685214][ T6531] ? __pfx__printk+0x10/0x10 [ 122.689843][ T6531] ? __pfx_lock_release+0x10/0x10 [ 122.694990][ T6531] should_fail_ex+0x3b0/0x4e0 [ 122.699892][ T6531] _copy_from_user+0x2f/0xe0 [ 122.704507][ T6531] copy_msghdr_from_user+0xae/0x680 [ 122.709731][ T6531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 122.715567][ T6531] __sys_sendmsg+0x23d/0x3a0 [ 122.720187][ T6531] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.725325][ T6531] ? vfs_write+0x7c4/0xc90 [ 122.729885][ T6531] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.736237][ T6531] ? do_syscall_64+0x100/0x230 [ 122.741031][ T6531] ? do_syscall_64+0xb6/0x230 [ 122.745736][ T6531] do_syscall_64+0xf3/0x230 [ 122.750272][ T6531] ? clear_bhb_loop+0x35/0x90 [ 122.754989][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.760912][ T6531] RIP: 0033:0x7efc6897def9 [ 122.765357][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.785072][ T6531] RSP: 002b:00007efc697e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.793514][ T6531] RAX: ffffffffffffffda RBX: 00007efc68b35f80 RCX: 00007efc6897def9 [ 122.801500][ T6531] RDX: 0000000000000000 RSI: 0000000020001340 RDI: 0000000000000003 [ 122.809480][ T6531] RBP: 00007efc697e5090 R08: 0000000000000000 R09: 0000000000000000 [ 122.817461][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.825442][ T6531] R13: 0000000000000000 R14: 00007efc68b35f80 R15: 00007ffd142d65b8 [ 122.833445][ T6531] [ 122.880086][ T6533] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 123.094128][ T6538] netlink: 'syz.1.356': attribute type 12 has an invalid length. [ 123.126044][ T6538] netlink: 'syz.1.356': attribute type 29 has an invalid length. [ 123.164363][ T6538] netlink: 128 bytes leftover after parsing attributes in process `syz.1.356'. [ 123.215473][ T6534] dccp_close: ABORT with 384 bytes unread [ 123.440315][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 123.469122][ T6551] syzkaller0: left promiscuous mode [ 123.480455][ T6551] syzkaller0: left allmulticast mode [ 123.486638][ T6551] infiniband syz1: set active [ 123.932576][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 124.480411][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 124.879007][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.372'. [ 124.892224][ T5240] Bluetooth: hci0: command tx timeout [ 125.520442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.743000][ T6623] Â: renamed from pim6reg1 [ 125.774734][ T6623] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 125.825207][ T6623] batman_adv: batadv0: Adding interface: team0 [ 125.851256][ T6623] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.893970][ T6623] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.961625][ T6641] netlink: 'syz.3.388': attribute type 7 has an invalid length. [ 126.136260][ T6648] __nla_validate_parse: 4 callbacks suppressed [ 126.136281][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 126.169161][ T6648] netlink: 'syz.3.389': attribute type 7 has an invalid length. [ 126.190475][ T6648] netlink: 'syz.3.389': attribute type 8 has an invalid length. [ 126.218682][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 126.257941][ T6658] IPVS: persistence engine module ip_vs_pe_@ not found [ 126.268403][ T6648] ip6gretap0: entered promiscuous mode [ 126.278746][ T6648] batadv_slave_1: entered promiscuous mode [ 126.296074][ T6648] ip6gretap0: left promiscuous mode [ 126.304708][ T6648] batadv_slave_1: left promiscuous mode [ 126.516929][ T6670] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.394'. [ 126.534351][ T6672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.560332][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 126.777401][ T6676] sctp: [Deprecated]: syz.1.396 (pid 6676) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.777401][ T6676] Use struct sctp_sack_info instead [ 126.816156][ T6683] xt_SECMARK: invalid mode: 0 [ 126.892179][ T6688] netem: change failed [ 127.036251][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 127.247139][ T6699] IPVS: Error joining to the multicast group [ 127.268323][ T6699] IPv6: addrconf: prefix option has invalid lifetime [ 127.382979][ T6706] Dead loop on virtual device ipvlan0, fix it urgently! [ 127.415654][ T6706] syz.0.405 (6706) used greatest stack depth: 5880 bytes left [ 127.600399][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 127.803171][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.410'. [ 127.847399][ T6724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.411'. [ 128.083905][ C0] Dead loop on virtual device ipvlan0, fix it urgently! [ 128.268681][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 128.309170][ T6740] netlink: 'syz.3.418': attribute type 15 has an invalid length. [ 128.385896][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.418'. [ 128.392235][ T6740] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 128.404520][ T6740] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 128.413832][ T6740] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 128.422711][ T6740] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 128.509187][ T6740] vxlan0: entered promiscuous mode [ 128.650430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.659627][ T6758] netlink: 64 bytes leftover after parsing attributes in process `syz.0.421'. [ 128.698298][ T6758] netlink: 'syz.0.421': attribute type 5 has an invalid length. [ 129.243131][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'. [ 129.273297][ T6771] tipc: Enabling of bearer rejected, already enabled [ 129.339628][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 129.437411][ T6779] netlink: 'syz.4.429': attribute type 12 has an invalid length. [ 129.466095][ T6779] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 129.680330][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.199162][ T6797] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 130.241842][ T6797] team0: Port device netdevsim0 added [ 130.270429][ T6797] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 130.335978][ T6797] team0: Port device netdevsim0 removed [ 130.348308][ T6797] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 130.720437][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.852010][ T6811] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 131.087771][ T6825] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 131.138634][ T6825] netlink: 'syz.3.440': attribute type 4 has an invalid length. [ 131.204837][ T6825] __nla_validate_parse: 2 callbacks suppressed [ 131.204859][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.440'. [ 131.241019][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.443'. [ 131.266647][ T6836] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 131.328554][ T6837] netlink: 'syz.0.444': attribute type 12 has an invalid length. [ 131.355544][ T6837] netlink: 'syz.0.444': attribute type 29 has an invalid length. [ 131.378580][ T6837] netlink: 128 bytes leftover after parsing attributes in process `syz.0.444'. [ 131.760305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 131.843175][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 132.082157][ T6862] x_tables: duplicate underflow at hook 1 [ 132.097459][ T6862] x_tables: duplicate underflow at hook 1 [ 132.121584][ T6862] sctp: [Deprecated]: syz.1.452 (pid 6862) Use of int in max_burst socket option. [ 132.121584][ T6862] Use struct sctp_assoc_value instead [ 132.369860][ T6873] tipc: Started in network mode [ 132.380922][ T6873] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 132.409695][ T6873] tipc: Enabled bearer , priority 10 [ 132.475790][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 132.501904][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 132.810420][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 133.022477][ T6904] netlink: 128 bytes leftover after parsing attributes in process `syz.2.467'. [ 133.209030][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.217741][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.295770][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 133.338046][ T6917] validate_nla: 2 callbacks suppressed [ 133.338068][ T6917] netlink: 'syz.1.471': attribute type 3 has an invalid length. [ 133.353872][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 133.420524][ T6919] FAULT_INJECTION: forcing a failure. [ 133.420524][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 133.450379][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.4.472 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 133.461069][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 133.471226][ T6919] Call Trace: [ 133.474542][ T6919] [ 133.477501][ T6919] dump_stack_lvl+0x241/0x360 [ 133.482236][ T6919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.487488][ T6919] ? __pfx__printk+0x10/0x10 [ 133.492129][ T6919] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 133.498163][ T6919] ? __pfx___might_resched+0x10/0x10 [ 133.503515][ T6919] should_fail_ex+0x3b0/0x4e0 [ 133.508250][ T6919] should_failslab+0xac/0x100 [ 133.512988][ T6919] ? __alloc_skb+0x1c3/0x440 [ 133.517628][ T6919] kmem_cache_alloc_node_noprof+0x71/0x320 [ 133.523655][ T6919] __alloc_skb+0x1c3/0x440 [ 133.528100][ T6919] ? __pfx___alloc_skb+0x10/0x10 [ 133.533060][ T6919] ? netlink_ack_tlv_len+0x6e/0x200 [ 133.538274][ T6919] netlink_ack+0x13f/0xa30 [ 133.542725][ T6919] netlink_rcv_skb+0x262/0x430 [ 133.547506][ T6919] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 133.552982][ T6919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.558307][ T6919] xfrm_netlink_rcv+0x79/0x90 [ 133.563002][ T6919] netlink_unicast+0x7f6/0x990 [ 133.567794][ T6919] ? __pfx_netlink_unicast+0x10/0x10 [ 133.573178][ T6919] ? __virt_addr_valid+0x183/0x530 [ 133.578303][ T6919] ? __check_object_size+0x49c/0x900 [ 133.583619][ T6919] ? bpf_lsm_netlink_send+0x9/0x10 [ 133.588845][ T6919] netlink_sendmsg+0x8e4/0xcb0 [ 133.593647][ T6919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.598954][ T6919] ? __import_iovec+0x536/0x820 [ 133.603823][ T6919] ? aa_sock_msg_perm+0x91/0x160 [ 133.608784][ T6919] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 133.614090][ T6919] ? security_socket_sendmsg+0x87/0xb0 [ 133.619578][ T6919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.624885][ T6919] __sock_sendmsg+0x221/0x270 [ 133.629580][ T6919] ____sys_sendmsg+0x525/0x7d0 [ 133.634393][ T6919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.639729][ T6919] __sys_sendmsg+0x2b0/0x3a0 [ 133.644340][ T6919] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.649464][ T6919] ? vfs_write+0x7c4/0xc90 [ 133.654110][ T6919] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.660558][ T6919] ? do_syscall_64+0x100/0x230 [ 133.665352][ T6919] ? do_syscall_64+0xb6/0x230 [ 133.670052][ T6919] do_syscall_64+0xf3/0x230 [ 133.674581][ T6919] ? clear_bhb_loop+0x35/0x90 [ 133.679302][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.685243][ T6919] RIP: 0033:0x7efc6897def9 [ 133.689680][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.709307][ T6919] RSP: 002b:00007efc697e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.717757][ T6919] RAX: ffffffffffffffda RBX: 00007efc68b35f80 RCX: 00007efc6897def9 [ 133.725840][ T6919] RDX: 0000000000000000 RSI: 0000000020001340 RDI: 0000000000000003 [ 133.733827][ T6919] RBP: 00007efc697e5090 R08: 0000000000000000 R09: 0000000000000000 [ 133.741812][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.749998][ T6919] R13: 0000000000000000 R14: 00007efc68b35f80 R15: 00007ffd142d65b8 [ 133.757998][ T6919] [ 133.769926][ T9] tipc: Node number set to 15444650 [ 133.840339][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 134.170066][ T6930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.475'. [ 134.533416][ T6942] Êü: entered promiscuous mode [ 134.880425][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 134.908529][ T6955] netlink: 'syz.1.483': attribute type 7 has an invalid length. [ 135.105572][ T6958] gtp1: entered promiscuous mode [ 135.123870][ T6958] gtp1: entered allmulticast mode [ 135.496982][ T6974] netlink: 'syz.4.490': attribute type 12 has an invalid length. [ 135.521222][ T6974] netlink: 'syz.4.490': attribute type 29 has an invalid length. [ 135.920321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.101077][ T6991] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 136.220314][ T6994] __nla_validate_parse: 10 callbacks suppressed [ 136.220339][ T6994] netlink: 196 bytes leftover after parsing attributes in process `syz.2.494'. [ 136.489133][ T7007] FAULT_INJECTION: forcing a failure. [ 136.489133][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 136.542286][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.0.498 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 136.552974][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.563086][ T7007] Call Trace: [ 136.566411][ T7007] [ 136.569386][ T7007] dump_stack_lvl+0x241/0x360 [ 136.574127][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.579389][ T7007] ? __pfx__printk+0x10/0x10 [ 136.584062][ T7007] ? ref_tracker_alloc+0x332/0x490 [ 136.589249][ T7007] should_fail_ex+0x3b0/0x4e0 [ 136.592673][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 136.593978][ T7007] ? skb_clone+0x20c/0x390 [ 136.607220][ T7007] should_failslab+0xac/0x100 [ 136.611954][ T7007] ? skb_clone+0x20c/0x390 [ 136.616422][ T7007] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 136.621856][ T7007] skb_clone+0x20c/0x390 [ 136.626175][ T7007] __netlink_deliver_tap+0x3cc/0x7c0 [ 136.631530][ T7007] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.636782][ T7007] netlink_deliver_tap+0x19d/0x1b0 [ 136.641954][ T7007] netlink_sendskb+0x68/0x140 [ 136.646734][ T7007] netlink_unicast+0x39d/0x990 [ 136.651545][ T7007] ? __asan_memcpy+0x40/0x70 [ 136.656204][ T7007] ? __pfx_netlink_unicast+0x10/0x10 [ 136.661557][ T7007] netlink_rcv_skb+0x262/0x430 [ 136.666388][ T7007] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 136.670444][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 136.671878][ T7007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.686036][ T7007] xfrm_netlink_rcv+0x79/0x90 [ 136.690764][ T7007] netlink_unicast+0x7f6/0x990 [ 136.695677][ T7007] ? __pfx_netlink_unicast+0x10/0x10 [ 136.701012][ T7007] ? __virt_addr_valid+0x183/0x530 [ 136.706187][ T7007] ? __check_object_size+0x49c/0x900 [ 136.711525][ T7007] ? bpf_lsm_netlink_send+0x9/0x10 [ 136.716699][ T7007] netlink_sendmsg+0x8e4/0xcb0 [ 136.721531][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.726920][ T7007] ? __import_iovec+0x536/0x820 [ 136.731822][ T7007] ? aa_sock_msg_perm+0x91/0x160 [ 136.736824][ T7007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 136.742178][ T7007] ? security_socket_sendmsg+0x87/0xb0 [ 136.747716][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.753058][ T7007] __sock_sendmsg+0x221/0x270 [ 136.757788][ T7007] ____sys_sendmsg+0x525/0x7d0 [ 136.762624][ T7007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.767988][ T7007] __sys_sendmsg+0x2b0/0x3a0 [ 136.772645][ T7007] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.777819][ T7007] ? vfs_write+0x7c4/0xc90 [ 136.782328][ T7007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.788693][ T7007] ? do_syscall_64+0x100/0x230 [ 136.793624][ T7007] ? do_syscall_64+0xb6/0x230 [ 136.798346][ T7007] do_syscall_64+0xf3/0x230 [ 136.802968][ T7007] ? clear_bhb_loop+0x35/0x90 [ 136.807668][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.813672][ T7007] RIP: 0033:0x7f556eb7def9 [ 136.818099][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.837803][ T7007] RSP: 002b:00007f556f9d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.846236][ T7007] RAX: ffffffffffffffda RBX: 00007f556ed35f80 RCX: 00007f556eb7def9 [ 136.854393][ T7007] RDX: 0000000000000000 RSI: 0000000020001340 RDI: 0000000000000003 [ 136.862376][ T7007] RBP: 00007f556f9d1090 R08: 0000000000000000 R09: 0000000000000000 [ 136.870362][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.878345][ T7007] R13: 0000000000000000 R14: 00007f556ed35f80 R15: 00007ffeb5210d38 [ 136.886437][ T7007] [ 136.970330][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.163520][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 137.509984][ T7035] netlink: 47 bytes leftover after parsing attributes in process `syz.0.506'. [ 137.657705][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 137.919308][ T7050] netlink: 'syz.4.511': attribute type 12 has an invalid length. [ 137.936825][ T7050] netlink: 'syz.4.511': attribute type 29 has an invalid length. [ 137.945855][ T7050] netlink: 128 bytes leftover after parsing attributes in process `syz.4.511'. [ 138.010359][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 138.025195][ T7049] batadv0: entered promiscuous mode [ 138.045505][ T7049] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.076146][ T7049] batadv0: left promiscuous mode [ 138.167670][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 138.392018][ T7059] FAULT_INJECTION: forcing a failure. [ 138.392018][ T7059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.419889][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.3.514 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 138.430713][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 138.440823][ T7059] Call Trace: [ 138.444143][ T7059] [ 138.447109][ T7059] dump_stack_lvl+0x241/0x360 [ 138.451854][ T7059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.457124][ T7059] ? __pfx__printk+0x10/0x10 [ 138.461796][ T7059] ? snprintf+0xda/0x120 [ 138.466102][ T7059] should_fail_ex+0x3b0/0x4e0 [ 138.470860][ T7059] _copy_to_user+0x2f/0xb0 [ 138.475352][ T7059] simple_read_from_buffer+0xca/0x150 [ 138.480879][ T7059] proc_fail_nth_read+0x1ec/0x260 [ 138.485939][ T7059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.491503][ T7059] ? rw_verify_area+0x520/0x6b0 [ 138.496371][ T7059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.501939][ T7059] vfs_read+0x204/0xbc0 [ 138.506117][ T7059] ? __pfx_lock_release+0x10/0x10 [ 138.511166][ T7059] ? __pfx_vfs_read+0x10/0x10 [ 138.515862][ T7059] ? __fget_files+0x29/0x470 [ 138.520483][ T7059] ? __fget_files+0x3f6/0x470 [ 138.525213][ T7059] ksys_read+0x1a0/0x2c0 [ 138.529569][ T7059] ? __pfx_ksys_read+0x10/0x10 [ 138.534369][ T7059] ? do_syscall_64+0x100/0x230 [ 138.539152][ T7059] ? do_syscall_64+0xb6/0x230 [ 138.543848][ T7059] do_syscall_64+0xf3/0x230 [ 138.548543][ T7059] ? clear_bhb_loop+0x35/0x90 [ 138.553237][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.559189][ T7059] RIP: 0033:0x7f850117c93c [ 138.563704][ T7059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 138.583428][ T7059] RSP: 002b:00007f8501ebc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.591872][ T7059] RAX: ffffffffffffffda RBX: 00007f8501335f80 RCX: 00007f850117c93c [ 138.599887][ T7059] RDX: 000000000000000f RSI: 00007f8501ebc0a0 RDI: 0000000000000004 [ 138.607871][ T7059] RBP: 00007f8501ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 138.615857][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.623846][ T7059] R13: 0000000000000000 R14: 00007f8501335f80 R15: 00007ffda4bff758 [ 138.631859][ T7059] [ 139.040337][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 139.824901][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 139.924829][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.526'. [ 140.080324][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 140.099108][ T7109] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 140.235710][ T7113] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 140.545171][ T7122] raw_sendmsg: syz.4.532 forgot to set AF_INET. Fix it! [ 140.576615][ T7123] netlink: 'syz.0.531': attribute type 12 has an invalid length. [ 140.592711][ T7123] netlink: 'syz.0.531': attribute type 29 has an invalid length. [ 141.059236][ T7139] Cannot find set identified by id 4 to match [ 141.120316][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 141.644085][ T7166] __nla_validate_parse: 8 callbacks suppressed [ 141.644110][ T7166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.773653][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 141.862706][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 141.880943][ T7174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.908833][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 141.919963][ T7174] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 141.978130][ T7179] netlink: 'syz.3.551': attribute type 9 has an invalid length. [ 141.990871][ T7179] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.551'. [ 142.073577][ T7181] netlink: 'syz.3.551': attribute type 9 has an invalid length. [ 142.084385][ T7181] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.551'. [ 142.162881][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 142.434924][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 142.471075][ T7203] netlink: 'syz.4.556': attribute type 12 has an invalid length. [ 142.491612][ T7203] netlink: 'syz.4.556': attribute type 29 has an invalid length. [ 142.511488][ T7203] netlink: 128 bytes leftover after parsing attributes in process `syz.4.556'. [ 142.528154][ T7204] netlink: 'syz.3.557': attribute type 30 has an invalid length. [ 142.917518][ T7225] netlink: 19 bytes leftover after parsing attributes in process `syz.3.563'. [ 142.973267][ T7225] caif0: entered allmulticast mode [ 142.991355][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 143.085801][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.131240][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.148821][ T7235] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 143.159637][ T7232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.192632][ T7232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.200355][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 143.591925][ T7248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.672376][ T7248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.081558][ C1] Dead loop on virtual device ipvlan0, fix it urgently! [ 144.126344][ T7273] vlan2: entered promiscuous mode [ 144.148404][ T7276] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 144.165155][ T7273] vlan2: entered allmulticast mode [ 144.240361][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 145.025956][ T7322] dccp_close: ABORT with 96 bytes unread [ 145.201947][ T5245] Bluetooth: hci0: command tx timeout [ 145.356011][ T7338] syz.4.594[7338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.356208][ T7338] syz.4.594[7338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.917983][ T7360] validate_nla: 35 callbacks suppressed [ 145.918009][ T7360] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 146.320441][ C0] net_ratelimit: 5 callbacks suppressed [ 146.320463][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.431162][ T7389] infiniband syz1: set active [ 146.444900][ T7394] netlink: 'syz.2.612': attribute type 12 has an invalid length. [ 146.461196][ T7394] netlink: 'syz.2.612': attribute type 29 has an invalid length. [ 147.370554][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.849005][ T7449] Dead loop on virtual device ipvlan0, fix it urgently! [ 147.912252][ T7454] netlink: 'syz.2.631': attribute type 12 has an invalid length. [ 147.923526][ T7454] netlink: 'syz.2.631': attribute type 29 has an invalid length. [ 147.931708][ T7454] __nla_validate_parse: 9 callbacks suppressed [ 147.931726][ T7454] netlink: 128 bytes leftover after parsing attributes in process `syz.2.631'. [ 148.410370][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.895277][ T7472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.927832][ T7474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.636'. [ 148.987376][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 149.294966][ T7497] tap0: tun_chr_ioctl cmd 35108 [ 149.311766][ T7497] tap0: tun_chr_ioctl cmd 1074025677 [ 149.317338][ T7497] tap0: linktype set to 65534 [ 149.334755][ T7502] netem: unknown loss type 0 [ 149.336784][ T7497] netlink: 'syz.0.642': attribute type 4 has an invalid length. [ 149.348416][ T7502] netem: change failed [ 149.353608][ T7497] netlink: 'syz.0.642': attribute type 2 has an invalid length. [ 149.440396][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 149.927720][ T7513] syzkaller0: entered promiscuous mode [ 149.934116][ T7513] syzkaller0: entered allmulticast mode [ 149.958531][ T7515] netlink: 'syz.1.649': attribute type 12 has an invalid length. [ 149.970542][ T7515] netlink: 'syz.1.649': attribute type 29 has an invalid length. [ 149.978370][ T7515] netlink: 128 bytes leftover after parsing attributes in process `syz.1.649'. [ 150.005214][ T7513] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 150.031774][ T7513] netlink: 216 bytes leftover after parsing attributes in process `syz.3.648'. [ 150.481074][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.530350][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.535824][ T7524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.543880][ T7524] IPv6: NLM_F_CREATE should be set when creating new route [ 152.560637][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.730923][ T7533] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 152.757655][ T7533] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.653'. [ 152.824742][ T7535] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.051013][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 153.217013][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 153.298819][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 153.600321][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.638279][ T7571] netlink: 'syz.4.668': attribute type 12 has an invalid length. [ 153.660321][ T7571] netlink: 'syz.4.668': attribute type 29 has an invalid length. [ 153.683505][ T7571] netlink: 128 bytes leftover after parsing attributes in process `syz.4.668'. [ 153.999118][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 154.650313][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.787877][ T7622] team0: entered promiscuous mode [ 154.804010][ T7622] team_slave_0: entered promiscuous mode [ 154.832679][ T7622] team_slave_1: entered promiscuous mode [ 154.848836][ T7622] batadv0: entered promiscuous mode [ 155.051900][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'. [ 155.083472][ T7629] bridge0: entered promiscuous mode [ 155.097570][ T7629] macvtap0: entered promiscuous mode [ 155.108404][ T7633] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 155.128392][ T7629] macvtap0: entered allmulticast mode [ 155.138788][ T7629] bridge0: entered allmulticast mode [ 155.268969][ T7637] netlink: 'syz.4.686': attribute type 12 has an invalid length. [ 155.283339][ T7637] netlink: 'syz.4.686': attribute type 29 has an invalid length. [ 155.291956][ T7637] netlink: 128 bytes leftover after parsing attributes in process `syz.4.686'. [ 155.314032][ T7621] team0: left promiscuous mode [ 155.333920][ T7621] team_slave_0: left promiscuous mode [ 155.348247][ T7621] team_slave_1: left promiscuous mode [ 155.371027][ T7621] batadv0: left promiscuous mode [ 155.680632][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.787610][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 155.799009][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 155.816151][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 156.406762][ T7684] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 156.442361][ T7684] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 156.464676][ T7684] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 156.477877][ T7684] netlink: 'syz.4.700': attribute type 2 has an invalid length. [ 156.488082][ T7684] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 156.640678][ T7693] bond0: (slave netdevsim0): Releasing backup interface [ 156.720433][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.785463][ T7704] veth1_virt_wifi: entered promiscuous mode [ 157.105188][ T7717] tipc: Invalid UDP bearer configuration [ 157.105255][ T7717] tipc: Enabling of bearer rejected, failed to enable media [ 157.770300][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.328917][ T7777] __nla_validate_parse: 6 callbacks suppressed [ 158.328940][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 158.390826][ T7777] netlink: 76 bytes leftover after parsing attributes in process `syz.0.730'. [ 158.800545][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.731973][ T7840] netlink: 732 bytes leftover after parsing attributes in process `syz.2.746'. [ 159.751234][ T7840] netlink: 732 bytes leftover after parsing attributes in process `syz.2.746'. [ 159.850668][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.929419][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 159.939492][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 160.104972][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.751'. [ 160.298983][ T7862] IPVS: persistence engine module ip_vs_pe_@ not found [ 160.475579][ T7875] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 160.509207][ T7875] macsec1: entered promiscuous mode [ 160.565945][ T7875] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 160.880397][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.920308][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.768815][ T7931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.803769][ T5240] Bluetooth: hci4: command 0x0405 tx timeout [ 162.972352][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.558056][ T7942] netlink: 104 bytes leftover after parsing attributes in process `syz.4.777'. [ 163.608795][ T7951] pim6reg: entered allmulticast mode [ 163.808955][ T7960] validate_nla: 2 callbacks suppressed [ 163.808980][ T7960] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 163.845486][ T7960] netlink: 224 bytes leftover after parsing attributes in process `syz.1.778'. [ 163.898014][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'. [ 163.939909][ T7960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.778'. [ 164.000323][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.127130][ T7969] syzkaller0: entered promiscuous mode [ 164.140733][ T7969] syzkaller0: entered allmulticast mode [ 164.147401][ T7969] infiniband syz1: set active [ 164.182638][ T7969] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.786'. [ 164.347544][ T7976] bridge_slave_0: left allmulticast mode [ 164.366525][ T7976] bridge_slave_0: left promiscuous mode [ 164.380217][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.415085][ T7976] bridge_slave_1: left allmulticast mode [ 164.438845][ T7976] bridge_slave_1: left promiscuous mode [ 164.455413][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.489311][ T7976] bond0: (slave bond_slave_0): Releasing backup interface [ 164.531102][ T7976] bond0: (slave bond_slave_1): Releasing backup interface [ 164.588492][ T7976] team0: Port device team_slave_0 removed [ 164.626946][ T7983] netlink: 104 bytes leftover after parsing attributes in process `syz.4.790'. [ 164.628590][ T7976] team0: Port device team_slave_1 removed [ 164.669143][ T7976] bond0: (slave netdevsim0): Releasing backup interface [ 164.786085][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.823390][ T7977] team0: Port device bond0 added [ 164.979646][ T7949] pim6reg: left allmulticast mode [ 165.041525][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.054233][ T7996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.793'. [ 165.196439][ T8004] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 165.912942][ T8036] netlink: 256 bytes leftover after parsing attributes in process `syz.1.806'. [ 165.936915][ T8036] netlink: 'syz.1.806': attribute type 9 has an invalid length. [ 166.006862][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.806'. [ 166.090451][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.414775][ T8053] netlink: 'syz.3.811': attribute type 12 has an invalid length. [ 166.427381][ T8053] netlink: 'syz.3.811': attribute type 29 has an invalid length. [ 166.437799][ T8053] netlink: 128 bytes leftover after parsing attributes in process `syz.3.811'. [ 167.029760][ T8065] pim6reg: entered allmulticast mode [ 167.122359][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.997943][ T8107] netlink: 'syz.0.826': attribute type 11 has an invalid length. [ 168.160399][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.497546][ T8135] netlink: 'syz.0.833': attribute type 12 has an invalid length. [ 168.508953][ T8135] netlink: 'syz.0.833': attribute type 29 has an invalid length. [ 168.637742][ T8141] __nla_validate_parse: 2 callbacks suppressed [ 168.637765][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.835'. [ 168.840732][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 169.110229][ T8161] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.170498][ T8161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.840'. [ 169.200506][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.622305][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 170.250453][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.275119][ T8176] ------------[ cut here ]------------ [ 170.281128][ T8176] WARNING: CPU: 0 PID: 8176 at kernel/workqueue.c:2259 __queue_work+0xcd3/0xf50 [ 170.290198][ T8176] Modules linked in: [ 170.294118][ T8176] CPU: 0 UID: 0 PID: 8176 Comm: syz.2.846 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 170.304732][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 170.315150][ T8176] RIP: 0010:__queue_work+0xcd3/0xf50 [ 170.320499][ T8176] Code: ff e8 91 89 36 00 90 0f 0b 90 e9 1e fd ff ff e8 83 89 36 00 eb 13 e8 7c 89 36 00 eb 0c e8 75 89 36 00 eb 05 e8 6e 89 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 170.340133][ T8176] RSP: 0018:ffffc900090d78a8 EFLAGS: 00010087 [ 170.346232][ T8176] RAX: ffffffff815d0334 RBX: ffff888061c15a00 RCX: 0000000000040000 [ 170.354306][ T8176] RDX: ffffc90009489000 RSI: 00000000000005cb RDI: 00000000000005cc [ 170.362303][ T8176] RBP: 0000000000000000 R08: ffffffff815cf794 R09: 0000000000000000 [ 170.370318][ T8176] R10: ffffc900090d7980 R11: fffff5200121af31 R12: ffff888025805800 [ 170.378322][ T8176] R13: ffff8880258059c0 R14: dffffc0000000000 R15: 0000000000000008 [ 170.386401][ T8176] FS: 00007fc9be55d6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 170.395412][ T8176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.402015][ T8176] CR2: 000055558dbaf000 CR3: 000000006245e000 CR4: 00000000003506f0 [ 170.410091][ T8176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.418117][ T8176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.426118][ T8176] Call Trace: [ 170.429432][ T8176] [ 170.432405][ T8176] ? __warn+0x163/0x4e0 [ 170.436682][ T8176] ? __queue_work+0xcd3/0xf50 [ 170.441425][ T8176] ? report_bug+0x2b3/0x500 [ 170.445982][ T8176] ? __queue_work+0xcd3/0xf50 [ 170.450689][ T8176] ? handle_bug+0x3e/0x70 [ 170.455044][ T8176] ? exc_invalid_op+0x1a/0x50 [ 170.459745][ T8176] ? asm_exc_invalid_op+0x1a/0x20 [ 170.464799][ T8176] ? __queue_work+0x124/0xf50 [ 170.469514][ T8176] ? __queue_work+0xcc4/0xf50 [ 170.474225][ T8176] ? __queue_work+0xcd3/0xf50 [ 170.478933][ T8176] ? __queue_work+0xcc4/0xf50 [ 170.483652][ T8176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.490009][ T8176] ? __queue_delayed_work+0x17e/0x250 [ 170.495414][ T8176] queue_delayed_work_on+0x1ca/0x390 [ 170.500725][ T8176] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 170.506555][ T8176] ? do_raw_spin_unlock+0x13c/0x8b0 [ 170.511782][ T8176] ? hci_conn_drop+0x152/0x280 [ 170.516573][ T8176] sco_chan_del+0xeb/0x1e0 [ 170.521029][ T8176] sco_sock_release+0xb3/0x320 [ 170.525819][ T8176] sock_close+0xbc/0x240 [ 170.530096][ T8176] ? __pfx_sock_close+0x10/0x10 [ 170.535074][ T8176] __fput+0x24a/0x8a0 [ 170.539096][ T8176] task_work_run+0x24f/0x310 [ 170.543717][ T8176] ? __pfx_task_work_run+0x10/0x10 [ 170.548859][ T8176] get_signal+0x15e6/0x1740 [ 170.553395][ T8176] ? __pfx_task_work_add+0x10/0x10 [ 170.558529][ T8176] ? sco_sock_connect+0x68c/0x990 [ 170.563593][ T8176] ? __pfx_get_signal+0x10/0x10 [ 170.568481][ T8176] ? fput+0x19a/0x210 [ 170.572498][ T8176] arch_do_signal_or_restart+0x96/0x860 [ 170.578074][ T8176] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.584245][ T8176] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.590261][ T8176] ? syscall_exit_to_user_mode+0xa3/0x370 [ 170.596002][ T8176] syscall_exit_to_user_mode+0xc9/0x370 [ 170.601574][ T8176] do_syscall_64+0x100/0x230 [ 170.606191][ T8176] ? clear_bhb_loop+0x35/0x90 [ 170.610884][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.616808][ T8176] RIP: 0033:0x7fc9bd77def9 [ 170.621286][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.640911][ T8176] RSP: 002b:00007fc9be55d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 170.649357][ T8176] RAX: fffffffffffffffc RBX: 00007fc9bd935f80 RCX: 00007fc9bd77def9 [ 170.657343][ T8176] RDX: 0000000000000008 RSI: 00000000200001c0 RDI: 000000000000000f [ 170.665344][ T8176] RBP: 00007fc9bd7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 170.673778][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.681762][ T8176] R13: 0000000000000000 R14: 00007fc9bd935f80 R15: 00007fffbba45818 [ 170.689766][ T8176] [ 170.692800][ T8176] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.700085][ T8176] CPU: 0 UID: 0 PID: 8176 Comm: syz.2.846 Not tainted 6.11.0-rc6-syzkaller-01487-g3cfb5aa10cb7 #0 [ 170.710950][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 170.721105][ T8176] Call Trace: [ 170.724399][ T8176] [ 170.727338][ T8176] dump_stack_lvl+0x241/0x360 [ 170.732048][ T8176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.737283][ T8176] ? __pfx__printk+0x10/0x10 [ 170.741898][ T8176] ? vscnprintf+0x5d/0x90 [ 170.746240][ T8176] panic+0x349/0x860 [ 170.750165][ T8176] ? __warn+0x172/0x4e0 [ 170.754445][ T8176] ? __pfx_panic+0x10/0x10 [ 170.758895][ T8176] __warn+0x346/0x4e0 [ 170.762893][ T8176] ? __queue_work+0xcd3/0xf50 [ 170.767594][ T8176] report_bug+0x2b3/0x500 [ 170.771948][ T8176] ? __queue_work+0xcd3/0xf50 [ 170.776665][ T8176] handle_bug+0x3e/0x70 [ 170.780848][ T8176] exc_invalid_op+0x1a/0x50 [ 170.785376][ T8176] asm_exc_invalid_op+0x1a/0x20 [ 170.790246][ T8176] RIP: 0010:__queue_work+0xcd3/0xf50 [ 170.795555][ T8176] Code: ff e8 91 89 36 00 90 0f 0b 90 e9 1e fd ff ff e8 83 89 36 00 eb 13 e8 7c 89 36 00 eb 0c e8 75 89 36 00 eb 05 e8 6e 89 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 170.815177][ T8176] RSP: 0018:ffffc900090d78a8 EFLAGS: 00010087 [ 170.821287][ T8176] RAX: ffffffff815d0334 RBX: ffff888061c15a00 RCX: 0000000000040000 [ 170.829322][ T8176] RDX: ffffc90009489000 RSI: 00000000000005cb RDI: 00000000000005cc [ 170.837311][ T8176] RBP: 0000000000000000 R08: ffffffff815cf794 R09: 0000000000000000 [ 170.845300][ T8176] R10: ffffc900090d7980 R11: fffff5200121af31 R12: ffff888025805800 [ 170.853299][ T8176] R13: ffff8880258059c0 R14: dffffc0000000000 R15: 0000000000000008 [ 170.861294][ T8176] ? __queue_work+0x124/0xf50 [ 170.866279][ T8176] ? __queue_work+0xcc4/0xf50 [ 170.870992][ T8176] ? __queue_work+0xcc4/0xf50 [ 170.875789][ T8176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.882152][ T8176] ? __queue_delayed_work+0x17e/0x250 [ 170.887555][ T8176] queue_delayed_work_on+0x1ca/0x390 [ 170.892876][ T8176] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 170.898718][ T8176] ? do_raw_spin_unlock+0x13c/0x8b0 [ 170.903941][ T8176] ? hci_conn_drop+0x152/0x280 [ 170.908743][ T8176] sco_chan_del+0xeb/0x1e0 [ 170.913197][ T8176] sco_sock_release+0xb3/0x320 [ 170.917995][ T8176] sock_close+0xbc/0x240 [ 170.922250][ T8176] ? __pfx_sock_close+0x10/0x10 [ 170.927114][ T8176] __fput+0x24a/0x8a0 [ 170.931230][ T8176] task_work_run+0x24f/0x310 [ 170.935843][ T8176] ? __pfx_task_work_run+0x10/0x10 [ 170.941067][ T8176] get_signal+0x15e6/0x1740 [ 170.945599][ T8176] ? __pfx_task_work_add+0x10/0x10 [ 170.950733][ T8176] ? sco_sock_connect+0x68c/0x990 [ 170.955784][ T8176] ? __pfx_get_signal+0x10/0x10 [ 170.960753][ T8176] ? fput+0x19a/0x210 [ 170.964788][ T8176] arch_do_signal_or_restart+0x96/0x860 [ 170.970427][ T8176] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.976628][ T8176] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.982660][ T8176] ? syscall_exit_to_user_mode+0xa3/0x370 [ 170.988412][ T8176] syscall_exit_to_user_mode+0xc9/0x370 [ 170.993996][ T8176] do_syscall_64+0x100/0x230 [ 170.998784][ T8176] ? clear_bhb_loop+0x35/0x90 [ 171.003487][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.009418][ T8176] RIP: 0033:0x7fc9bd77def9 [ 171.014031][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.033685][ T8176] RSP: 002b:00007fc9be55d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 171.042132][ T8176] RAX: fffffffffffffffc RBX: 00007fc9bd935f80 RCX: 00007fc9bd77def9 [ 171.050123][ T8176] RDX: 0000000000000008 RSI: 00000000200001c0 RDI: 000000000000000f [ 171.058127][ T8176] RBP: 00007fc9bd7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 171.066120][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.074110][ T8176] R13: 0000000000000000 R14: 00007fc9bd935f80 R15: 00007fffbba45818 [ 171.082121][ T8176] [ 171.085518][ T8176] Kernel Offset: disabled [ 171.089967][ T8176] Rebooting in 86400 seconds..