last executing test programs: 5.052515454s ago: executing program 4 (id=2585): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x100}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8000}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000080)) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 4.82184695s ago: executing program 0 (id=2587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r3) 4.708851767s ago: executing program 2 (id=2588): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40000000}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) socket$inet(0x2, 0x4, 0x6c3c) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x38, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x2, 0x40, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r7}, 0x38) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}}}, 0x24}}, 0x0) 4.290230555s ago: executing program 0 (id=2592): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x7, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, &(0x7f0000000280)={0x2000, 0x7ff, 0x2000000000005, 0xb, 0x400000000000006, 0x7, 0x8, 0x60e0}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff, 0x0, 0x80000001}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x4d3, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4.17643326s ago: executing program 2 (id=2593): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000050700000000000400", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.959940031s ago: executing program 3 (id=2595): socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x992c1000) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "96621d9d8991505a", "34c4afa1be05ad9dba301a63f6453165", "9621e2b4", "cdb3dec45dba3078"}, 0x28) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0xba01}, 0x0) 3.880500301s ago: executing program 4 (id=2596): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x4048890) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c42, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x80000001) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000000020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000003869ba025d118e1069676bcbe912653322c12e1efdf1f659480ea80d56e0dd247503b760eb6c426e07ac776a59b4001995d7d2285bda0f2691f062af3b9fedab58800f20b29645455faefe2bb80309a9959c1ef4c5dc41e504b4a8a5701e2c6e76c3179659491b1f031d7f5869684004a3ad2b40d12724d37c98aebeb6ff67edb8f4be65c29a3b369002fd7f2acb3603120dc7bab125770898db1e673b4f91acaeb75dccf84c3f1f"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000540)='ext4_read_block_bitmap_load\x00', r7, 0x0, 0x3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, 0x140f, 0x1, 0x78b929, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) 3.706100166s ago: executing program 3 (id=2597): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0xfffffffffffffe55, &(0x7f0000000000), 0x3}}], 0x40002b2, 0x2, 0x0) unshare(0x2040400) 3.493318625s ago: executing program 4 (id=2598): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000383a00fe800000000000000000000000000002ff0200000000000000000000000000010300907801000000614c4a6e000533fffe80000010000000000000000000002afe8000000000000000000000009820aa3c00040002080700"], 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="fe000005000000000c002b80080001", @ANYRES32, @ANYBLOB="08001b00000000"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000020601080000000000000000020000000c000300686173683a6970008900020073bd00000000000000000780080006400000000705000500020000000500010006000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r5, &(0x7f0000000240)=ANY=[], 0xffdd) socket$nl_route(0x10, 0x3, 0x0) 3.289000934s ago: executing program 1 (id=2599): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f0000000000)={0x11, @empty=0x11e, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffffffffffc, 0x9, 0x0, 0xffff, 0xaee3, 0x5}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={[0x2]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff8a) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, &(0x7f0000000080)="c4b33da19360b2bf9cbac674b9eeb73303927fde9113c35218bd2cec8e96288c5233e7f21dc820f06aa03b62a6010c46721dbd85d254a5bc49734fbdb05d3e39fe7a848d73391f5215bdeb6c4c2ee76c7624d8836588b2f0d999ecd624a800ce", 0x60, 0x40080, &(0x7f0000000000)={0xa, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x41}, 0xff, 0xfffffffd}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x74}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000100)={0x10000010}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.000868504s ago: executing program 4 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff2}, {0x1e, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x3000c81c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x88800) 2.843483742s ago: executing program 0 (id=2601): socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.557769891s ago: executing program 4 (id=2602): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 2.257950289s ago: executing program 2 (id=2603): socket(0x10, 0x803, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, 0x0, 0x4000) socket(0x15, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r4}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r4}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000280)="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", 0x5dd}], 0x1}}], 0x2, 0x0) 2.249537796s ago: executing program 0 (id=2604): unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x5, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @datasec={0xe81, 0x4, 0x0, 0xf, 0x2, [{0x1, 0x9b, 0x6c9e}, {0x4, 0x6, 0x9}, {0x5, 0xa, 0x8}, {0x1, 0x4}], "ed38"}, @fwd={0x6}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @union={0x10, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x2, 0xe3}, {0x4, 0x3, 0x8}, {0xa, 0x3, 0x5}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4d, 0x7}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000800)=""/206, 0xdd, 0xce, 0x0, 0x10001, 0x10000, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000002c000100000000000000000004000080450011802f"], 0x5c}], 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_mptcp(0x2, 0x1, 0x106) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x800, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.0854841s ago: executing program 1 (id=2605): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a009157e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!', 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x20008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) socket$inet(0xa, 0x801, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.985987687s ago: executing program 4 (id=2606): r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x491, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x89ab, 0x62}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x800}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_BSSID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4048044) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r8 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r8, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x24) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1c, 0x1000}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r9], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0xb, 0xfff2}, {0xa, 0x10}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40046000}, 0x8c881) 1.9585254s ago: executing program 2 (id=2607): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x880) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1.872320308s ago: executing program 3 (id=2608): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x4048890) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c42, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x80000001) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000000020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000003869ba025d118e1069676bcbe912653322c12e1efdf1f659480ea80d56e0dd247503b760eb6c426e07ac776a59b4001995d7d2285bda0f2691f062af3b9fedab58800f20b29645455faefe2bb80309a9959c1ef4c5dc41e504b4a8a5701e2c6e76c3179659491b1f031d7f5869684004a3ad2b40d12724d37c98aebeb6ff67edb8f4be65c29a3b369002fd7f2acb3603120dc7bab125770898db1e673b4f91acaeb75dccf84c3f1f"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000540)='ext4_read_block_bitmap_load\x00', r7, 0x0, 0x3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, 0x140f, 0x1, 0x78b929, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) 1.294517433s ago: executing program 3 (id=2609): unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000440)={r1, r2, 0x8, 0x0, 0x0, 0xb, 0x3, 0x46d, 0xfff9, 0x3, 0x0, 0x13f7, 'syz0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) unshare(0x68060200) 1.223890952s ago: executing program 2 (id=2610): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x8) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x7120}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) readv(r1, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/108, 0x6c}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x90) 1.155092014s ago: executing program 0 (id=2611): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008001500"], 0x34}}, 0x4040010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x100000035, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) 991.765819ms ago: executing program 1 (id=2612): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x10, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="3025c5081e431314e437c762f4813d9823940141976442757d4787dd8bbfbf1e6dcdf90654b235a198568152702e136177a7e60777126c048cba0fe44521e2606bf516c7ffce6cd9ff62a5f514eefdeb9ceeaa840fb853ef7835ac15c2f9f6ed6f9447a11700d91279b415350fd4c36c2f57656f3daa82f6ef6885fe00381b3b8306e122727be092b8c86112af6d63a6a7537167f771a5e65a0684d66ac7a045a466cdcf9ca6bef96f3490dc4ab1254a0bd24ed316c25cf7b4ab204e4239aa0c4d67fc22ee41e7d7b2b1765c749a48d46fb0eb0be65fdce283c0ce387c1aa0cffc08d0e3afd35f8cb77989a07d5e6bb0") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_LABEL={0x14}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x1e, 0x805, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r4, 0x0, 0x24000800) socket$isdn(0x22, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r5], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 869.913799ms ago: executing program 3 (id=2613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x4000044) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) sendmsg$nl_route(r2, 0x0, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806"], 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4004801) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 674.027334ms ago: executing program 1 (id=2614): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = socket$inet6(0xa, 0x806, 0x0) listen(r3, 0x3) poll(&(0x7f00000004c0)=[{r3, 0x4000}], 0x1, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/120, 0x78}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001bc0)={'ip6_vti0\x00', &(0x7f0000001b40)={'syztnl0\x00', 0x0, 0x29, 0x10, 0xfd, 0xa033, 0x2f, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x0, 0x1, 0x4, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 575.596942ms ago: executing program 3 (id=2615): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f0000000000)={0x11, @empty=0x11e, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffffffffffc, 0x9, 0x0, 0xffff, 0xaee3, 0x5}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={[0x2]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff8a) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r7, &(0x7f0000000080)="c4b33da19360b2bf9cbac674b9eeb73303927fde9113c35218bd2cec8e96288c5233e7f21dc820f06aa03b62a6010c46721dbd85d254a5bc49734fbdb05d3e39fe7a848d73391f5215bdeb6c4c2ee76c7624d8836588b2f0d999ecd624a800ce", 0x60, 0x40080, &(0x7f0000000000)={0xa, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x41}, 0xff, 0xfffffffd}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x74}}, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000100)={0x10000010}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 471.590529ms ago: executing program 1 (id=2616): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x58, 0x2c, 0xd27, 0x10000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x58}}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8c5) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) 143.057284ms ago: executing program 0 (id=2617): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010110104fe9e48f7"], 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000088a8002985000000080600000000060000000181c2000000aaaaaaaaaabb"], 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45310, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}]}}}]}, 0x44}}, 0x8080) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 142.363373ms ago: executing program 1 (id=2618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307da15, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00abe4e707a14a95aa784601b880438327a325f9e765152ea89cb0667ae3c5a5cc2d5a30f077805d8e8af6d1b6f7955f56ae86c2b4395e0ec8515b1"}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0x25, 0x148, 0x0, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xa214}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11, 0x20, 0x20]}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x560) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000000000400000001b0a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073"], 0xd8}}, 0x4000040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x10000000000000, 0x0, 0x0, 0x2, 0xfa2}, {}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x2, 0x2}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x1, 0x9}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="a43207446f7c878bdff5dedaddbe27e3a630c91f491a9717a3c624e5c334092a52fcb4aab28d32efc59f94c7899e5400d0138316bdbad7925c97a30ebd1fe406e15e7f8fd812d4c4adcf092466a9bed0272746aa24f0702a2b2abdc4145d5daad36c779ccb91c78e73dfcd9a065b70f05e2af7deced9", 0x76}], 0x1, &(0x7f0000000280)=[{0xd0, 0x29, 0x101, "13ef3ea7bac208254df9fe91ff10ae8412d58f8c6ad3c66fc532baa6fe7564844cbd0ecdafaa4181475fb47958e2888c30db49488babfd715f16592d43e6036c6a61d6040f381e788015c3a16627dfc66a049bbdc7dc7c6902d2813eda603d2d89f35a988b51291a12ee5754b38fb66d22255735a0cf9ab294965a13d941dc16f069cee5c4f3d138a577f7fd5ebb358e04cdd03228d56282478234488f25faeba67c67b560d599ccca0d0050419a9fe18007f2a327529c40b5b2"}], 0xd0}, 0x0) 0s ago: executing program 2 (id=2619): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x4048890) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c42, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x80000001) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000000020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000003869ba025d118e1069676bcbe912653322c12e1efdf1f659480ea80d56e0dd247503b760eb6c426e07ac776a59b4001995d7d2285bda0f2691f062af3b9fedab58800f20b29645455faefe2bb80309a9959c1ef4c5dc41e504b4a8a5701e2c6e76c3179659491b1f031d7f5869684004a3ad2b40d12724d37c98aebeb6ff67edb8f4be65c29a3b369002fd7f2acb3603120dc7bab125770898db1e673b4f91acaeb75dccf84c3f1f"], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r5], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000540)='ext4_read_block_bitmap_load\x00', r7, 0x0, 0x3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, 0x140f, 0x1, 0x78b929, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) kernel console output (not intermixed with test programs): tnl0: entered promiscuous mode [ 343.162085][T13004] ip6gre0: entered promiscuous mode [ 343.177245][T13004] syz_tun: entered promiscuous mode [ 343.186153][T13004] ip6gretap0: entered promiscuous mode [ 343.195402][T13004] ªªªªª: entered promiscuous mode [ 343.204096][T13004] vcan0: entered promiscuous mode [ 343.210175][T13004] bond0: entered promiscuous mode [ 343.218303][T13004] dummy0: entered promiscuous mode [ 343.225956][T13004] nlmon0: entered promiscuous mode [ 343.243133][T13004] caif0: entered promiscuous mode [ 343.246171][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 343.248183][T13004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.288861][ T908] lo speed is unknown, defaulting to 1000 [ 343.407576][T13009] syzkaller0: entered promiscuous mode [ 343.437696][T13009] syzkaller0: entered allmulticast mode [ 343.509334][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1593'. [ 343.772231][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.554688][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1607'. [ 344.602267][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1603'. [ 344.812025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.914441][T13036] dccp_close: ABORT with 128 bytes unread [ 345.098559][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 345.862162][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.419452][T13037] lo speed is unknown, defaulting to 1000 [ 346.438978][T13047] lo speed is unknown, defaulting to 1000 [ 346.892197][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.253694][T13090] lo speed is unknown, defaulting to 1000 [ 347.416088][T13095] lo speed is unknown, defaulting to 1000 [ 347.541094][T13097] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 347.598952][T13097] CPU: 1 UID: 0 PID: 13097 Comm: syz.0.1617 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 347.598976][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.598987][T13097] Call Trace: [ 347.598994][T13097] [ 347.599002][T13097] dump_stack_lvl+0x241/0x360 [ 347.599029][T13097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.599048][T13097] ? __pfx__printk+0x10/0x10 [ 347.599070][T13097] ? __kmalloc_cache_noprof+0x243/0x390 [ 347.599091][T13097] ? sysfs_warn_dup+0x51/0xa0 [ 347.599115][T13097] sysfs_warn_dup+0x8e/0xa0 [ 347.599135][T13097] sysfs_do_create_link_sd+0xbe/0x110 [ 347.599158][T13097] device_add_class_symlinks+0x1c5/0x250 [ 347.599186][T13097] device_add+0x553/0xbf0 [ 347.599216][T13097] wiphy_register+0x1922/0x2650 [ 347.599247][T13097] ? __pfx_wiphy_register+0x10/0x10 [ 347.599262][T13097] ? minstrel_ht_alloc+0x84b/0x940 [ 347.599288][T13097] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 347.599313][T13097] ieee80211_register_hw+0x35d9/0x42e0 [ 347.599346][T13097] ? ieee80211_register_hw+0x15f1/0x42e0 [ 347.599375][T13097] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 347.599406][T13097] ? __asan_memset+0x23/0x50 [ 347.599422][T13097] ? __hrtimer_init+0x170/0x250 [ 347.599462][T13097] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 347.599519][T13097] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 347.599539][T13097] ? trace_kmalloc+0x1f/0xd0 [ 347.599558][T13097] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 347.599581][T13097] ? kstrndup+0xbb/0x150 [ 347.599614][T13097] hwsim_new_radio_nl+0xece/0x2290 [ 347.599647][T13097] ? __pfx___nla_validate_parse+0x10/0x10 [ 347.599669][T13097] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.599721][T13097] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 347.599754][T13097] genl_rcv_msg+0xb1f/0xec0 [ 347.599787][T13097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.599836][T13097] ? __pfx_lock_acquire+0x10/0x10 [ 347.599860][T13097] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.599880][T13097] ? __pfx___might_resched+0x10/0x10 [ 347.599912][T13097] netlink_rcv_skb+0x206/0x480 [ 347.599932][T13097] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.599956][T13097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.600008][T13097] genl_rcv+0x28/0x40 [ 347.600028][T13097] netlink_unicast+0x7f6/0x990 [ 347.600053][T13097] ? __pfx_netlink_unicast+0x10/0x10 [ 347.600068][T13097] ? __virt_addr_valid+0x45f/0x530 [ 347.600085][T13097] ? __phys_addr_symbol+0x2f/0x70 [ 347.600108][T13097] ? __check_object_size+0x47a/0x730 [ 347.600135][T13097] netlink_sendmsg+0x8de/0xcb0 [ 347.600168][T13097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.600193][T13097] ? aa_sock_msg_perm+0x91/0x160 [ 347.600222][T13097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.600239][T13097] __sock_sendmsg+0x221/0x270 [ 347.600263][T13097] ____sys_sendmsg+0x53a/0x860 [ 347.600296][T13097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.600318][T13097] ? __fget_files+0x2a/0x410 [ 347.600344][T13097] ? __fget_files+0x2a/0x410 [ 347.600376][T13097] __sys_sendmsg+0x269/0x350 [ 347.600405][T13097] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.600481][T13097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.600511][T13097] ? do_syscall_64+0x100/0x230 [ 347.600538][T13097] ? do_syscall_64+0xb6/0x230 [ 347.600566][T13097] do_syscall_64+0xf3/0x230 [ 347.600589][T13097] ? clear_bhb_loop+0x35/0x90 [ 347.600614][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.600636][T13097] RIP: 0033:0x7fc298d8d169 [ 347.600651][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.600665][T13097] RSP: 002b:00007fc299c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.600684][T13097] RAX: ffffffffffffffda RBX: 00007fc298fa6080 RCX: 00007fc298d8d169 [ 347.600697][T13097] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 347.600708][T13097] RBP: 00007fc298e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 347.600719][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.600729][T13097] R13: 0000000000000000 R14: 00007fc298fa6080 R15: 00007ffe34740bc8 [ 347.600758][T13097] [ 347.962033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.086443][T13104] lo speed is unknown, defaulting to 1000 [ 348.519017][T13106] lo speed is unknown, defaulting to 1000 [ 348.607128][T13116] lo speed is unknown, defaulting to 1000 [ 348.809927][T13124] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1625'. [ 348.864877][T13127] syzkaller1: entered promiscuous mode [ 348.870396][T13127] syzkaller1: entered allmulticast mode [ 348.883757][T13129] lo: entered promiscuous mode [ 348.891033][T13129] tunl0: entered promiscuous mode [ 348.900415][T13129] gre0: entered promiscuous mode [ 348.909783][T13129] gretap0: entered promiscuous mode [ 348.928429][T13129] erspan0: entered promiscuous mode [ 348.945299][T13129] ip_vti0: entered promiscuous mode [ 348.951654][T13129] ip6_vti0: entered promiscuous mode [ 348.958753][T13129] sit0: entered promiscuous mode [ 348.967891][T13129] ip6tnl0: entered promiscuous mode [ 348.973223][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.985375][T13129] ip6gre0: entered promiscuous mode [ 348.991626][T13129] syz_tun: entered promiscuous mode [ 349.001554][T13129] ip6gretap0: entered promiscuous mode [ 349.011449][T13129] bridge0: entered promiscuous mode [ 349.023296][T13129] vcan0: entered promiscuous mode [ 349.028762][T13129] bond0: entered promiscuous mode [ 349.035707][T13129] dummy0: entered promiscuous mode [ 349.041371][T13129] nlmon0: entered promiscuous mode [ 349.047829][T13129] caif0: entered promiscuous mode [ 349.053483][T13129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.069623][T13118] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1625'. [ 349.083574][T13125] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 349.091434][T13125] CPU: 0 UID: 0 PID: 13125 Comm: syz.2.1623 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 349.091455][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.091467][T13125] Call Trace: [ 349.091474][T13125] [ 349.091482][T13125] dump_stack_lvl+0x241/0x360 [ 349.091508][T13125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.091528][T13125] ? __pfx__printk+0x10/0x10 [ 349.091551][T13125] ? __kmalloc_cache_noprof+0x243/0x390 [ 349.091573][T13125] ? sysfs_warn_dup+0x51/0xa0 [ 349.091598][T13125] sysfs_warn_dup+0x8e/0xa0 [ 349.091618][T13125] sysfs_do_create_link_sd+0xbe/0x110 [ 349.091640][T13125] device_add_class_symlinks+0x1c5/0x250 [ 349.091669][T13125] device_add+0x553/0xbf0 [ 349.091699][T13125] wiphy_register+0x1922/0x2650 [ 349.091730][T13125] ? __pfx_wiphy_register+0x10/0x10 [ 349.091746][T13125] ? minstrel_ht_alloc+0x84b/0x940 [ 349.091772][T13125] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 349.091798][T13125] ieee80211_register_hw+0x35d9/0x42e0 [ 349.091833][T13125] ? ieee80211_register_hw+0x15f1/0x42e0 [ 349.091862][T13125] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 349.091893][T13125] ? __asan_memset+0x23/0x50 [ 349.091915][T13125] ? __hrtimer_init+0x170/0x250 [ 349.091937][T13125] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 349.091986][T13125] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 349.092004][T13125] ? trace_kmalloc+0x1f/0xd0 [ 349.092022][T13125] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 349.092044][T13125] ? kstrndup+0xbb/0x150 [ 349.092078][T13125] hwsim_new_radio_nl+0xece/0x2290 [ 349.092111][T13125] ? __pfx___nla_validate_parse+0x10/0x10 [ 349.092133][T13125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 349.092188][T13125] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 349.092221][T13125] genl_rcv_msg+0xb1f/0xec0 [ 349.092254][T13125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.092315][T13125] ? __pfx_lock_acquire+0x10/0x10 [ 349.092339][T13125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 349.092359][T13125] ? __pfx___might_resched+0x10/0x10 [ 349.092392][T13125] netlink_rcv_skb+0x206/0x480 [ 349.092412][T13125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.092437][T13125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.092489][T13125] genl_rcv+0x28/0x40 [ 349.092510][T13125] netlink_unicast+0x7f6/0x990 [ 349.092536][T13125] ? __pfx_netlink_unicast+0x10/0x10 [ 349.092551][T13125] ? __virt_addr_valid+0x45f/0x530 [ 349.092568][T13125] ? __phys_addr_symbol+0x2f/0x70 [ 349.092591][T13125] ? __check_object_size+0x47a/0x730 [ 349.092618][T13125] netlink_sendmsg+0x8de/0xcb0 [ 349.092650][T13125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.092674][T13125] ? aa_sock_msg_perm+0x91/0x160 [ 349.092704][T13125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.092721][T13125] __sock_sendmsg+0x221/0x270 [ 349.092745][T13125] ____sys_sendmsg+0x53a/0x860 [ 349.092779][T13125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.092801][T13125] ? __fget_files+0x2a/0x410 [ 349.092828][T13125] ? __fget_files+0x2a/0x410 [ 349.092860][T13125] __sys_sendmsg+0x269/0x350 [ 349.092890][T13125] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.092962][T13125] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.092988][T13125] ? do_syscall_64+0x100/0x230 [ 349.093015][T13125] ? do_syscall_64+0xb6/0x230 [ 349.093041][T13125] do_syscall_64+0xf3/0x230 [ 349.093064][T13125] ? clear_bhb_loop+0x35/0x90 [ 349.093090][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.093112][T13125] RIP: 0033:0x7f986318d169 [ 349.093127][T13125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.093142][T13125] RSP: 002b:00007f9860ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.093160][T13125] RAX: ffffffffffffffda RBX: 00007f98633a6160 RCX: 00007f986318d169 [ 349.093173][T13125] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 349.093184][T13125] RBP: 00007f986320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.093195][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.093205][T13125] R13: 0000000000000000 R14: 00007f98633a6160 R15: 00007ffc96983a48 [ 349.093234][T13125] [ 349.598462][T13138] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1626'. [ 349.608511][T13137] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1626'. [ 349.787171][T13149] lo speed is unknown, defaulting to 1000 [ 350.012203][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.193549][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 350.624932][T13167] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 350.683464][T13167] lo speed is unknown, defaulting to 1000 [ 350.944552][T13180] xt_socket: unknown flags 0xd0 [ 351.010921][T13182] lo speed is unknown, defaulting to 1000 [ 351.052063][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.114149][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 351.130470][T13187] lo speed is unknown, defaulting to 1000 [ 351.573655][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 351.929889][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 352.092038][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.321108][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 352.406816][T13238] lo speed is unknown, defaulting to 1000 [ 352.553516][T13248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1664'. [ 352.824572][T13256] lo speed is unknown, defaulting to 1000 [ 352.932293][T13259] syzkaller1: left promiscuous mode [ 352.958460][T13259] syzkaller1: left allmulticast mode [ 353.132006][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.165002][T13269] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 353.451663][T13282] lo speed is unknown, defaulting to 1000 [ 353.594869][T13290] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 353.651879][T13290] CPU: 0 UID: 0 PID: 13290 Comm: syz.4.1675 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 353.651909][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.651920][T13290] Call Trace: [ 353.651927][T13290] [ 353.651936][T13290] dump_stack_lvl+0x241/0x360 [ 353.651964][T13290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.651982][T13290] ? __pfx__printk+0x10/0x10 [ 353.652004][T13290] ? __kmalloc_cache_noprof+0x243/0x390 [ 353.652027][T13290] ? sysfs_warn_dup+0x51/0xa0 [ 353.652051][T13290] sysfs_warn_dup+0x8e/0xa0 [ 353.652070][T13290] sysfs_do_create_link_sd+0xbe/0x110 [ 353.652092][T13290] device_add_class_symlinks+0x1c5/0x250 [ 353.652129][T13290] device_add+0x553/0xbf0 [ 353.652159][T13290] wiphy_register+0x1922/0x2650 [ 353.652191][T13290] ? __pfx_wiphy_register+0x10/0x10 [ 353.652207][T13290] ? minstrel_ht_alloc+0x84b/0x940 [ 353.652234][T13290] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 353.652260][T13290] ieee80211_register_hw+0x35d9/0x42e0 [ 353.652296][T13290] ? ieee80211_register_hw+0x15f1/0x42e0 [ 353.652327][T13290] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 353.652358][T13290] ? __asan_memset+0x23/0x50 [ 353.652376][T13290] ? __hrtimer_init+0x170/0x250 [ 353.652399][T13290] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 353.652451][T13290] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 353.652470][T13290] ? trace_kmalloc+0x1f/0xd0 [ 353.652490][T13290] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 353.652513][T13290] ? kstrndup+0xbb/0x150 [ 353.652547][T13290] hwsim_new_radio_nl+0xece/0x2290 [ 353.652581][T13290] ? __pfx___nla_validate_parse+0x10/0x10 [ 353.652604][T13290] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 353.652659][T13290] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 353.652693][T13290] genl_rcv_msg+0xb1f/0xec0 [ 353.652727][T13290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.652783][T13290] ? __pfx_lock_acquire+0x10/0x10 [ 353.652808][T13290] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 353.652828][T13290] ? __pfx___might_resched+0x10/0x10 [ 353.652862][T13290] netlink_rcv_skb+0x206/0x480 [ 353.652882][T13290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.652907][T13290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.652961][T13290] genl_rcv+0x28/0x40 [ 353.652982][T13290] netlink_unicast+0x7f6/0x990 [ 353.653009][T13290] ? __pfx_netlink_unicast+0x10/0x10 [ 353.653024][T13290] ? __virt_addr_valid+0x45f/0x530 [ 353.653041][T13290] ? __phys_addr_symbol+0x2f/0x70 [ 353.653066][T13290] ? __check_object_size+0x47a/0x730 [ 353.653094][T13290] netlink_sendmsg+0x8de/0xcb0 [ 353.653134][T13290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.653159][T13290] ? aa_sock_msg_perm+0x91/0x160 [ 353.653191][T13290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.653209][T13290] __sock_sendmsg+0x221/0x270 [ 353.653233][T13290] ____sys_sendmsg+0x53a/0x860 [ 353.653267][T13290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.653288][T13290] ? __fget_files+0x2a/0x410 [ 353.653313][T13290] ? __fget_files+0x2a/0x410 [ 353.653345][T13290] __sys_sendmsg+0x269/0x350 [ 353.653375][T13290] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.653446][T13290] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.653471][T13290] ? do_syscall_64+0x100/0x230 [ 353.653498][T13290] ? do_syscall_64+0xb6/0x230 [ 353.653524][T13290] do_syscall_64+0xf3/0x230 [ 353.653547][T13290] ? clear_bhb_loop+0x35/0x90 [ 353.653572][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.653593][T13290] RIP: 0033:0x7f67c058d169 [ 353.653609][T13290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.653624][T13290] RSP: 002b:00007f67c1446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.653643][T13290] RAX: ffffffffffffffda RBX: 00007f67c07a6160 RCX: 00007f67c058d169 [ 353.653655][T13290] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 353.653666][T13290] RBP: 00007f67c060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.653677][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.653687][T13290] R13: 0000000000000000 R14: 00007f67c07a6160 R15: 00007ffe87379098 [ 353.653718][T13290] [ 354.172060][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.305233][T13297] syzkaller1: entered promiscuous mode [ 354.343567][T13297] syzkaller1: entered allmulticast mode [ 354.410437][T13308] lo speed is unknown, defaulting to 1000 [ 354.638022][T13319] lo speed is unknown, defaulting to 1000 [ 355.126308][T13333] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 355.134717][T13333] __nla_validate_parse: 4 callbacks suppressed [ 355.134732][T13333] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1689'. [ 355.212055][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.624739][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 355.640811][T13342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1691'. [ 355.889968][T13353] lo speed is unknown, defaulting to 1000 [ 356.252065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.878492][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'. [ 357.173673][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 357.292089][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.879684][T13417] lo speed is unknown, defaulting to 1000 [ 357.925396][T13420] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 357.935388][T13420] CPU: 1 UID: 0 PID: 13420 Comm: syz.3.1717 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 357.935407][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.935413][T13420] Call Trace: [ 357.935417][T13420] [ 357.935422][T13420] dump_stack_lvl+0x241/0x360 [ 357.935439][T13420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.935450][T13420] ? __pfx__printk+0x10/0x10 [ 357.935470][T13420] ? __kmalloc_cache_noprof+0x243/0x390 [ 357.935483][T13420] ? sysfs_warn_dup+0x51/0xa0 [ 357.935497][T13420] sysfs_warn_dup+0x8e/0xa0 [ 357.935508][T13420] sysfs_do_create_link_sd+0xbe/0x110 [ 357.935521][T13420] device_add_class_symlinks+0x1c5/0x250 [ 357.935537][T13420] device_add+0x553/0xbf0 [ 357.935554][T13420] wiphy_register+0x1922/0x2650 [ 357.935572][T13420] ? __pfx_wiphy_register+0x10/0x10 [ 357.935580][T13420] ? minstrel_ht_alloc+0x84b/0x940 [ 357.935595][T13420] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 357.935609][T13420] ieee80211_register_hw+0x35d9/0x42e0 [ 357.935628][T13420] ? ieee80211_register_hw+0x15f1/0x42e0 [ 357.935644][T13420] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 357.935662][T13420] ? __asan_memset+0x23/0x50 [ 357.935671][T13420] ? __hrtimer_init+0x170/0x250 [ 357.935683][T13420] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 357.935712][T13420] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 357.935725][T13420] ? trace_kmalloc+0x1f/0xd0 [ 357.935735][T13420] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 357.935750][T13420] ? kstrndup+0xbb/0x150 [ 357.935770][T13420] hwsim_new_radio_nl+0xece/0x2290 [ 357.935788][T13420] ? __pfx___nla_validate_parse+0x10/0x10 [ 357.935801][T13420] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 357.935830][T13420] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 357.935849][T13420] genl_rcv_msg+0xb1f/0xec0 [ 357.935867][T13420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.935896][T13420] ? __pfx_lock_acquire+0x10/0x10 [ 357.935910][T13420] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 357.935921][T13420] ? __pfx___might_resched+0x10/0x10 [ 357.935940][T13420] netlink_rcv_skb+0x206/0x480 [ 357.935951][T13420] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.935965][T13420] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.935993][T13420] genl_rcv+0x28/0x40 [ 357.936005][T13420] netlink_unicast+0x7f6/0x990 [ 357.936020][T13420] ? __pfx_netlink_unicast+0x10/0x10 [ 357.936028][T13420] ? __virt_addr_valid+0x45f/0x530 [ 357.936037][T13420] ? __phys_addr_symbol+0x2f/0x70 [ 357.936051][T13420] ? __check_object_size+0x47a/0x730 [ 357.936066][T13420] netlink_sendmsg+0x8de/0xcb0 [ 357.936084][T13420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.936097][T13420] ? aa_sock_msg_perm+0x91/0x160 [ 357.936114][T13420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.936124][T13420] __sock_sendmsg+0x221/0x270 [ 357.936138][T13420] ____sys_sendmsg+0x53a/0x860 [ 357.936156][T13420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.936169][T13420] ? __fget_files+0x2a/0x410 [ 357.936184][T13420] ? __fget_files+0x2a/0x410 [ 357.936201][T13420] __sys_sendmsg+0x269/0x350 [ 357.936215][T13420] ? __pfx_futex_wake+0x10/0x10 [ 357.936230][T13420] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.936268][T13420] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.936283][T13420] ? do_syscall_64+0x100/0x230 [ 357.936298][T13420] ? do_syscall_64+0xb6/0x230 [ 357.936313][T13420] do_syscall_64+0xf3/0x230 [ 357.936326][T13420] ? clear_bhb_loop+0x35/0x90 [ 357.936341][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.936353][T13420] RIP: 0033:0x7f447d18d169 [ 357.936363][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.936371][T13420] RSP: 002b:00007f447df09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.936382][T13420] RAX: ffffffffffffffda RBX: 00007f447d3a6080 RCX: 00007f447d18d169 [ 357.936389][T13420] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 357.936395][T13420] RBP: 00007f447d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 357.936401][T13420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.936406][T13420] R13: 0000000000000000 R14: 00007f447d3a6080 R15: 00007ffd82979c68 [ 357.936422][T13420] [ 358.344019][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.353948][T13414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.434977][T13422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1719'. [ 358.533816][T13420] syzkaller1: entered promiscuous mode [ 358.539335][T13420] syzkaller1: entered allmulticast mode [ 358.690031][T13435] lo speed is unknown, defaulting to 1000 [ 358.755262][T13438] lo speed is unknown, defaulting to 1000 [ 358.859522][T13444] lo speed is unknown, defaulting to 1000 [ 359.372100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 359.488628][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 359.635203][T13468] lo speed is unknown, defaulting to 1000 [ 359.822571][T13472] bond0: (slave wlan1): Releasing backup interface [ 359.882793][T13472] netlink: 'syz.2.1732': attribute type 10 has an invalid length. [ 359.931776][T13472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 360.051844][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 360.117340][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 360.229048][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 360.412241][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.463337][T13492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1734'. [ 360.729236][T13500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1735'. [ 360.812142][T13499] syzkaller1: left promiscuous mode [ 360.827774][T13499] syzkaller1: left allmulticast mode [ 360.958097][T13503] lo speed is unknown, defaulting to 1000 [ 361.452187][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.570405][T13519] lo speed is unknown, defaulting to 1000 [ 361.813091][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1745'. [ 362.024830][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 362.102286][T13544] debugfs: Directory 'netdev:phy5-monitor' with parent 'phy5' already present! [ 362.150791][T13544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1750'. [ 362.487698][T13555] lo speed is unknown, defaulting to 1000 [ 362.495235][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.806713][T13565] lo speed is unknown, defaulting to 1000 [ 362.889511][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 363.241151][T13574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.301444][T13576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1756'. [ 363.425302][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 363.536422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.760896][T13598] bond0: (slave wlan1): Releasing backup interface [ 363.772910][T13598] tipc: Resetting bearer [ 363.782479][T13598] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 363.792534][T13598] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.804761][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 363.956960][T13602] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 364.000874][T13606] openvswitch: netlink: Flow actions attr not present in new flow. [ 364.017196][T13597] lo speed is unknown, defaulting to 1000 [ 364.071835][T13602] lo speed is unknown, defaulting to 1000 [ 364.572195][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.630573][T13626] batadv0: entered promiscuous mode [ 364.649146][T13624] batadv0: left promiscuous mode [ 365.323167][T13655] lo speed is unknown, defaulting to 1000 [ 365.600483][T13664] lo speed is unknown, defaulting to 1000 [ 365.612292][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.803112][T13674] raw_sendmsg: syz.1.1792 forgot to set AF_INET. Fix it! [ 366.400562][T13688] lo speed is unknown, defaulting to 1000 [ 366.662174][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.823190][T13711] __nla_validate_parse: 3 callbacks suppressed [ 366.823208][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 366.842349][T13713] netlink: 'syz.1.1805': attribute type 21 has an invalid length. [ 366.856584][T13713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1805'. [ 367.692116][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.997341][T13749] netlink: 'syz.3.1818': attribute type 21 has an invalid length. [ 368.005567][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1818'. [ 368.295171][T13755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.414612][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 368.424278][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 368.705385][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'. [ 368.742102][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.972993][T13774] ip6tnl2: entered promiscuous mode [ 368.978361][T13774] ip6tnl2: entered allmulticast mode [ 369.647148][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 369.772131][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.012380][T13804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.024373][T13802] lo speed is unknown, defaulting to 1000 [ 370.108346][T13808] netlink: 'syz.4.1836': attribute type 11 has an invalid length. [ 370.156683][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 370.203414][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 370.812154][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.925626][T13832] lo: left promiscuous mode [ 370.931878][T13832] tunl0: left promiscuous mode [ 370.940168][T13832] gre0: left promiscuous mode [ 370.956449][T13832] 0ªX¹¦Dö»: left promiscuous mode [ 370.963640][T13834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1844'. [ 370.984688][T13832] erspan0: left promiscuous mode [ 370.991406][T13832] ip_vti0: left promiscuous mode [ 371.006534][T13832] ip6_vti0: left promiscuous mode [ 371.014020][T13832] sit0: left promiscuous mode [ 371.037341][T13832] ip6tnl0: left promiscuous mode [ 371.043850][T13832] ip6gre0: left promiscuous mode [ 371.069019][T13832] syz_tun: left promiscuous mode [ 371.079096][T13832] ip6gretap0: left promiscuous mode [ 371.096159][T13832] ªªªªª: left promiscuous mode [ 371.107131][T13832] vcan0: left promiscuous mode [ 371.118711][T13832] bond0: left promiscuous mode [ 371.127172][T13832] dummy0: left promiscuous mode [ 371.144901][T13832] nlmon0: left promiscuous mode [ 371.150691][T13832] caif0: left promiscuous mode [ 371.156812][ T57] lo speed is unknown, defaulting to 1000 [ 371.526536][T13856] lo speed is unknown, defaulting to 1000 [ 371.852129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.061131][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 372.624370][T13888] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 372.797969][T13886] lo speed is unknown, defaulting to 1000 [ 372.856189][T13888] lo speed is unknown, defaulting to 1000 [ 372.892288][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.455470][T13910] syzkaller0: entered promiscuous mode [ 373.461000][T13910] syzkaller0: entered allmulticast mode [ 373.484555][T13920] netlink: 'syz.1.1871': attribute type 10 has an invalid length. [ 373.525677][T13914] lo speed is unknown, defaulting to 1000 [ 373.550457][T13920] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1871'. [ 373.938637][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.306602][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 374.972113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.912243][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1876'. [ 375.922414][T13947] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 375.990004][T13947] lo speed is unknown, defaulting to 1000 [ 376.012365][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.478835][T13964] netlink: 'syz.0.1883': attribute type 21 has an invalid length. [ 376.502068][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1883'. [ 376.723464][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1886'. [ 376.924969][T13976] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 377.054124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.136872][T13982] lo speed is unknown, defaulting to 1000 [ 377.312573][ T5844] Bluetooth: hci4: link tx timeout [ 377.318052][ T5844] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 377.526553][T13993] macsec1: entered promiscuous mode [ 377.545572][T13993] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 377.560445][T13997] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 377.572651][T13993] macsec1: entered allmulticast mode [ 377.582506][T13993] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 377.608275][T13999] xt_CT: No such helper "netbios-ns" [ 377.670183][T13997] lo speed is unknown, defaulting to 1000 [ 377.742384][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 378.102084][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.328930][T14023] bond0: (slave wlan1): Releasing backup interface [ 378.371610][T14023] tipc: Resetting bearer [ 378.625402][T14038] netlink: 'syz.0.1905': attribute type 21 has an invalid length. [ 378.650528][T14038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1905'. [ 378.660999][T14040] netlink: 'syz.4.1906': attribute type 21 has an invalid length. [ 378.677815][T14040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1906'. [ 379.099134][T14053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 379.140665][T14053] lo speed is unknown, defaulting to 1000 [ 379.146604][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.383003][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 379.836137][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 380.079046][T14093] netlink: 'syz.0.1920': attribute type 21 has an invalid length. [ 380.133687][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1920'. [ 380.168269][T14102] netlink: 'syz.3.1925': attribute type 21 has an invalid length. [ 380.176307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.183733][T14102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 381.212159][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.299839][T14153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1936'. [ 381.330567][T14144] IPVS: Scheduler module ip_vs_sip not found [ 381.763037][T14180] netlink: 'syz.3.1941': attribute type 21 has an invalid length. [ 381.771110][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1941'. [ 381.820400][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1927'. [ 382.252059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.409657][T14212] lo: left promiscuous mode [ 382.431368][T14212] tunl0: left promiscuous mode [ 382.441212][T14212] gre0: left promiscuous mode [ 382.465604][T14212] gretap0: left promiscuous mode [ 382.483939][T14218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1949'. [ 382.502832][T14212] erspan0: left promiscuous mode [ 382.538275][T14212] ip_vti0: left promiscuous mode [ 382.554170][T14212] ip6_vti0: left promiscuous mode [ 382.576085][T14212] sit0: left promiscuous mode [ 382.623769][T14212] ip6tnl0: left promiscuous mode [ 382.655472][T14212] ip6gre0: left promiscuous mode [ 382.752653][T14232] netlink: 'syz.4.1950': attribute type 11 has an invalid length. [ 382.769811][T14212] syz_tun: left promiscuous mode [ 382.800611][T14212] ip6gretap0: left promiscuous mode [ 382.825485][T14212] bridge0: left promiscuous mode [ 382.841686][T14212] vcan0: left promiscuous mode [ 382.862198][T14212] bond0: left promiscuous mode [ 382.875601][T14212] dummy0: left promiscuous mode [ 382.902327][T14212] nlmon0: left promiscuous mode [ 382.993207][T14212] caif0: left promiscuous mode [ 383.022853][T14212] bond2: left promiscuous mode [ 383.051742][T14212] batadv0: left promiscuous mode [ 383.078648][T14212] batadv0: left allmulticast mode [ 383.163558][T14234] lo speed is unknown, defaulting to 1000 [ 383.292119][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.376049][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'. [ 383.440847][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 383.485615][T14259] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 383.631101][T14259] lo speed is unknown, defaulting to 1000 [ 384.152389][T14283] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 384.334462][T14290] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.342120][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.392938][T14283] lo speed is unknown, defaulting to 1000 [ 384.575460][T14305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1967'. [ 384.658562][T14300] tipc: Resetting bearer [ 384.916574][T14318] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.973601][T14309] tipc: Resetting bearer [ 384.975129][T14322] netlink: 'syz.1.1971': attribute type 21 has an invalid length. [ 384.987559][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 385.076037][T14327] team0: left allmulticast mode [ 385.081042][T14327] team0: left promiscuous mode [ 385.086192][T14327] ªªªªª: port 1(team0) entered disabled state [ 385.133945][T14322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1971'. [ 385.193758][T14327] bond1: (slave batadv0): Releasing active interface [ 385.204634][T14326] netlink: 'syz.0.1970': attribute type 11 has an invalid length. [ 385.372159][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.477568][T14335] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.669272][T14348] netlink: 'syz.3.1981': attribute type 21 has an invalid length. [ 385.677381][T14348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1981'. [ 386.412151][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.434435][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 386.519653][T14377] lo speed is unknown, defaulting to 1000 [ 386.593073][T14378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1987'. [ 387.095907][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 387.452090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.487098][T14421] netlink: 'syz.2.1992': attribute type 11 has an invalid length. [ 387.522578][T14419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.638047][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1994'. [ 387.724320][T14430] netlink: 'syz.3.1998': attribute type 21 has an invalid length. [ 388.241286][T14446] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.330547][T14452] lo speed is unknown, defaulting to 1000 [ 388.385960][T14453] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 388.394334][T14453] CPU: 1 UID: 0 PID: 14453 Comm: syz.1.2006 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 388.394357][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.394380][T14453] Call Trace: [ 388.394390][T14453] [ 388.394398][T14453] dump_stack_lvl+0x241/0x360 [ 388.394426][T14453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.394445][T14453] ? __pfx__printk+0x10/0x10 [ 388.394468][T14453] ? __kmalloc_cache_noprof+0x243/0x390 [ 388.394489][T14453] ? sysfs_warn_dup+0x51/0xa0 [ 388.394514][T14453] sysfs_warn_dup+0x8e/0xa0 [ 388.394534][T14453] sysfs_do_create_link_sd+0xbe/0x110 [ 388.394558][T14453] device_add_class_symlinks+0x1c5/0x250 [ 388.394585][T14453] device_add+0x553/0xbf0 [ 388.394617][T14453] wiphy_register+0x1922/0x2650 [ 388.394649][T14453] ? __pfx_wiphy_register+0x10/0x10 [ 388.394664][T14453] ? minstrel_ht_alloc+0x84b/0x940 [ 388.394691][T14453] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 388.394716][T14453] ieee80211_register_hw+0x35d9/0x42e0 [ 388.394751][T14453] ? ieee80211_register_hw+0x15f1/0x42e0 [ 388.394781][T14453] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 388.394812][T14453] ? __asan_memset+0x23/0x50 [ 388.394830][T14453] ? __hrtimer_init+0x170/0x250 [ 388.394860][T14453] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 388.394912][T14453] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 388.394932][T14453] ? trace_kmalloc+0x1f/0xd0 [ 388.394951][T14453] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 388.394974][T14453] ? kstrndup+0xbb/0x150 [ 388.395008][T14453] hwsim_new_radio_nl+0xece/0x2290 [ 388.395041][T14453] ? __pfx___nla_validate_parse+0x10/0x10 [ 388.395064][T14453] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 388.395119][T14453] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 388.395153][T14453] genl_rcv_msg+0xb1f/0xec0 [ 388.395186][T14453] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.395244][T14453] ? __pfx_lock_acquire+0x10/0x10 [ 388.395268][T14453] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 388.395288][T14453] ? __pfx___might_resched+0x10/0x10 [ 388.395323][T14453] netlink_rcv_skb+0x206/0x480 [ 388.395343][T14453] ? __pfx_genl_rcv_msg+0x10/0x10 [ 388.395366][T14453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.395413][T14453] genl_rcv+0x28/0x40 [ 388.395433][T14453] netlink_unicast+0x7f6/0x990 [ 388.395459][T14453] ? __pfx_netlink_unicast+0x10/0x10 [ 388.395474][T14453] ? __virt_addr_valid+0x45f/0x530 [ 388.395492][T14453] ? __phys_addr_symbol+0x2f/0x70 [ 388.395516][T14453] ? __check_object_size+0x47a/0x730 [ 388.395544][T14453] netlink_sendmsg+0x8de/0xcb0 [ 388.395576][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.395614][T14453] ? aa_sock_msg_perm+0x91/0x160 [ 388.395644][T14453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.395663][T14453] __sock_sendmsg+0x221/0x270 [ 388.395687][T14453] ____sys_sendmsg+0x53a/0x860 [ 388.395721][T14453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.395744][T14453] ? __fget_files+0x2a/0x410 [ 388.395770][T14453] ? __fget_files+0x2a/0x410 [ 388.395801][T14453] __sys_sendmsg+0x269/0x350 [ 388.395832][T14453] ? __pfx___sys_sendmsg+0x10/0x10 [ 388.395912][T14453] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.395938][T14453] ? do_syscall_64+0x100/0x230 [ 388.395966][T14453] ? do_syscall_64+0xb6/0x230 [ 388.395992][T14453] do_syscall_64+0xf3/0x230 [ 388.396015][T14453] ? clear_bhb_loop+0x35/0x90 [ 388.396041][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.396061][T14453] RIP: 0033:0x7fe4aa58d169 [ 388.396078][T14453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.396093][T14453] RSP: 002b:00007fe4ab48b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.396112][T14453] RAX: ffffffffffffffda RBX: 00007fe4aa7a6080 RCX: 00007fe4aa58d169 [ 388.396125][T14453] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 388.396137][T14453] RBP: 00007fe4aa60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.396148][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.396158][T14453] R13: 0000000000000000 R14: 00007fe4aa7a6080 R15: 00007ffd381ae178 [ 388.396187][T14453] [ 388.502177][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.737585][T14453] syzkaller1: entered promiscuous mode [ 388.854894][T14453] syzkaller1: entered allmulticast mode [ 389.172541][T14472] netlink: 'syz.3.2011': attribute type 11 has an invalid length. [ 389.313451][T14476] bond0: (slave wlan1): Releasing backup interface [ 389.332572][T14469] netlink: 'syz.2.2010': attribute type 10 has an invalid length. [ 389.378330][T14477] tipc: Resetting bearer [ 389.399362][T14469] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 389.531982][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.557304][T14469] __nla_validate_parse: 4 callbacks suppressed [ 389.557321][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 389.694395][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 389.770861][T14486] tipc: Resetting bearer [ 389.822550][T14487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2015'. [ 389.922657][T14486] tipc: Resetting bearer [ 390.081621][T14495] lo speed is unknown, defaulting to 1000 [ 390.532526][T14520] bond0: (slave wlan1): Releasing backup interface [ 390.571989][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.598687][T14520] debugfs: Directory 'netdev:phy5-monitor' with parent 'phy5' already present! [ 390.652800][T14523] netlink: 'syz.2.2027': attribute type 10 has an invalid length. [ 390.723181][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2027'. [ 390.746335][T14527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2031'. [ 390.768990][T14523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 390.949307][T14535] netlink: 'syz.3.2032': attribute type 21 has an invalid length. [ 390.954270][T14536] netlink: 'syz.0.2028': attribute type 11 has an invalid length. [ 390.958033][T14535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2032'. [ 391.389043][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 391.478342][T14551] nftables ruleset with unbound chain [ 391.612019][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.818291][T14561] lo speed is unknown, defaulting to 1000 [ 391.861329][T14562] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 391.869453][T14562] CPU: 0 UID: 0 PID: 14562 Comm: syz.3.2038 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 391.869476][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.869487][T14562] Call Trace: [ 391.869494][T14562] [ 391.869501][T14562] dump_stack_lvl+0x241/0x360 [ 391.869530][T14562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.869550][T14562] ? __pfx__printk+0x10/0x10 [ 391.869573][T14562] ? __kmalloc_cache_noprof+0x243/0x390 [ 391.869596][T14562] ? sysfs_warn_dup+0x51/0xa0 [ 391.869621][T14562] sysfs_warn_dup+0x8e/0xa0 [ 391.869641][T14562] sysfs_do_create_link_sd+0xbe/0x110 [ 391.869664][T14562] device_add_class_symlinks+0x1c5/0x250 [ 391.869692][T14562] device_add+0x553/0xbf0 [ 391.869721][T14562] wiphy_register+0x1922/0x2650 [ 391.869750][T14562] ? __pfx_wiphy_register+0x10/0x10 [ 391.869765][T14562] ? minstrel_ht_alloc+0x84b/0x940 [ 391.869790][T14562] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 391.869816][T14562] ieee80211_register_hw+0x35d9/0x42e0 [ 391.869851][T14562] ? ieee80211_register_hw+0x15f1/0x42e0 [ 391.869881][T14562] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 391.869912][T14562] ? __asan_memset+0x23/0x50 [ 391.869929][T14562] ? __hrtimer_init+0x170/0x250 [ 391.869952][T14562] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 391.870003][T14562] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 391.870020][T14562] ? trace_kmalloc+0x1f/0xd0 [ 391.870038][T14562] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 391.870060][T14562] ? kstrndup+0xbb/0x150 [ 391.870095][T14562] hwsim_new_radio_nl+0xece/0x2290 [ 391.870128][T14562] ? __pfx___nla_validate_parse+0x10/0x10 [ 391.870150][T14562] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 391.870206][T14562] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 391.870239][T14562] genl_rcv_msg+0xb1f/0xec0 [ 391.870278][T14562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.870334][T14562] ? __pfx_lock_acquire+0x10/0x10 [ 391.870357][T14562] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 391.870378][T14562] ? __pfx___might_resched+0x10/0x10 [ 391.870413][T14562] netlink_rcv_skb+0x206/0x480 [ 391.870434][T14562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.870460][T14562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.870513][T14562] genl_rcv+0x28/0x40 [ 391.870533][T14562] netlink_unicast+0x7f6/0x990 [ 391.870561][T14562] ? __pfx_netlink_unicast+0x10/0x10 [ 391.870575][T14562] ? __virt_addr_valid+0x45f/0x530 [ 391.870593][T14562] ? __phys_addr_symbol+0x2f/0x70 [ 391.870616][T14562] ? __check_object_size+0x47a/0x730 [ 391.870643][T14562] netlink_sendmsg+0x8de/0xcb0 [ 391.870676][T14562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.870701][T14562] ? aa_sock_msg_perm+0x91/0x160 [ 391.870731][T14562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.870748][T14562] __sock_sendmsg+0x221/0x270 [ 391.870772][T14562] ____sys_sendmsg+0x53a/0x860 [ 391.870806][T14562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.870828][T14562] ? __fget_files+0x2a/0x410 [ 391.870854][T14562] ? __fget_files+0x2a/0x410 [ 391.870886][T14562] __sys_sendmsg+0x269/0x350 [ 391.870917][T14562] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.870989][T14562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.871014][T14562] ? do_syscall_64+0x100/0x230 [ 391.871041][T14562] ? do_syscall_64+0xb6/0x230 [ 391.871067][T14562] do_syscall_64+0xf3/0x230 [ 391.871090][T14562] ? clear_bhb_loop+0x35/0x90 [ 391.871115][T14562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.871136][T14562] RIP: 0033:0x7f447d18d169 [ 391.871151][T14562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.871166][T14562] RSP: 002b:00007f447df09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.871185][T14562] RAX: ffffffffffffffda RBX: 00007f447d3a6080 RCX: 00007f447d18d169 [ 391.871197][T14562] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 391.871208][T14562] RBP: 00007f447d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.871219][T14562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.871230][T14562] R13: 0000000000000000 R14: 00007f447d3a6080 R15: 00007ffd82979c68 [ 391.871266][T14562] [ 392.292980][T14561] syzkaller1: entered promiscuous mode [ 392.299227][T14561] syzkaller1: entered allmulticast mode [ 392.392636][T14569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.538987][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 392.548812][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 392.612392][T14578] debugfs: Directory 'netdev:phy5-monitor' with parent 'phy5' already present! [ 392.636368][T14583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2042'. [ 392.652059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.671538][T14578] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 392.679486][T14578] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 392.686901][T14578] macsec1: left promiscuous mode [ 392.692196][T14578] macsec1: left allmulticast mode [ 392.966138][T14593] netlink: 'syz.1.2046': attribute type 11 has an invalid length. [ 393.486607][T14615] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 393.495520][T14615] bond0: (slave wlan1): refused to change device type [ 393.692045][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.571675][T14661] tipc: Resetting bearer [ 394.578696][T14661] netlink: 'syz.4.2068': attribute type 10 has an invalid length. [ 394.589288][T14661] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 394.608376][T14661] __nla_validate_parse: 2 callbacks suppressed [ 394.608394][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2068'. [ 394.742055][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.882811][T14670] lo speed is unknown, defaulting to 1000 [ 394.939811][T14672] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 394.955835][T14672] CPU: 1 UID: 0 PID: 14672 Comm: syz.4.2073 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 394.955861][T14672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.955872][T14672] Call Trace: [ 394.955878][T14672] [ 394.955886][T14672] dump_stack_lvl+0x241/0x360 [ 394.955914][T14672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.955933][T14672] ? __pfx__printk+0x10/0x10 [ 394.955956][T14672] ? __kmalloc_cache_noprof+0x243/0x390 [ 394.955978][T14672] ? sysfs_warn_dup+0x51/0xa0 [ 394.956004][T14672] sysfs_warn_dup+0x8e/0xa0 [ 394.956023][T14672] sysfs_do_create_link_sd+0xbe/0x110 [ 394.956047][T14672] device_add_class_symlinks+0x1c5/0x250 [ 394.956074][T14672] device_add+0x553/0xbf0 [ 394.956104][T14672] wiphy_register+0x1922/0x2650 [ 394.956136][T14672] ? __pfx_wiphy_register+0x10/0x10 [ 394.956150][T14672] ? minstrel_ht_alloc+0x84b/0x940 [ 394.956177][T14672] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 394.956202][T14672] ieee80211_register_hw+0x35d9/0x42e0 [ 394.956247][T14672] ? ieee80211_register_hw+0x15f1/0x42e0 [ 394.956277][T14672] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 394.956309][T14672] ? __asan_memset+0x23/0x50 [ 394.956325][T14672] ? __hrtimer_init+0x170/0x250 [ 394.956348][T14672] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 394.956399][T14672] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 394.956417][T14672] ? trace_kmalloc+0x1f/0xd0 [ 394.956437][T14672] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 394.956460][T14672] ? kstrndup+0xbb/0x150 [ 394.956494][T14672] hwsim_new_radio_nl+0xece/0x2290 [ 394.956526][T14672] ? __pfx___nla_validate_parse+0x10/0x10 [ 394.956548][T14672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 394.956602][T14672] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 394.956635][T14672] genl_rcv_msg+0xb1f/0xec0 [ 394.956669][T14672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.956723][T14672] ? __pfx_lock_acquire+0x10/0x10 [ 394.956746][T14672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 394.956766][T14672] ? __pfx___might_resched+0x10/0x10 [ 394.956799][T14672] netlink_rcv_skb+0x206/0x480 [ 394.956820][T14672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.956845][T14672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.956898][T14672] genl_rcv+0x28/0x40 [ 394.956918][T14672] netlink_unicast+0x7f6/0x990 [ 394.956945][T14672] ? __pfx_netlink_unicast+0x10/0x10 [ 394.956960][T14672] ? __virt_addr_valid+0x45f/0x530 [ 394.956977][T14672] ? __phys_addr_symbol+0x2f/0x70 [ 394.957000][T14672] ? __check_object_size+0x47a/0x730 [ 394.957027][T14672] netlink_sendmsg+0x8de/0xcb0 [ 394.957060][T14672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.957084][T14672] ? aa_sock_msg_perm+0x91/0x160 [ 394.957114][T14672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.957131][T14672] __sock_sendmsg+0x221/0x270 [ 394.957156][T14672] ____sys_sendmsg+0x53a/0x860 [ 394.957189][T14672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.957211][T14672] ? __fget_files+0x2a/0x410 [ 394.957242][T14672] ? __fget_files+0x2a/0x410 [ 394.957275][T14672] __sys_sendmsg+0x269/0x350 [ 394.957306][T14672] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.957380][T14672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 394.957406][T14672] ? do_syscall_64+0x100/0x230 [ 394.957433][T14672] ? do_syscall_64+0xb6/0x230 [ 394.957459][T14672] do_syscall_64+0xf3/0x230 [ 394.957483][T14672] ? clear_bhb_loop+0x35/0x90 [ 394.957512][T14672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.957534][T14672] RIP: 0033:0x7f67c058d169 [ 394.957549][T14672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.957564][T14672] RSP: 002b:00007f67c1467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.957582][T14672] RAX: ffffffffffffffda RBX: 00007f67c07a6080 RCX: 00007f67c058d169 [ 394.957595][T14672] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 394.957606][T14672] RBP: 00007f67c060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 394.957617][T14672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.957628][T14672] R13: 0000000000000000 R14: 00007f67c07a6080 R15: 00007ffe87379098 [ 394.957657][T14672] [ 395.521443][T14670] syzkaller1: entered promiscuous mode [ 395.527655][T14670] syzkaller1: entered allmulticast mode [ 395.562218][T14681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2075'. [ 395.666604][T14682] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 395.698749][T14679] netlink: 'syz.1.2072': attribute type 11 has an invalid length. [ 395.733269][T14682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.780803][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.056476][T14691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2079'. [ 396.237041][T14697] syzkaller1: entered promiscuous mode [ 396.238473][T14686] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.242583][T14697] syzkaller1: entered allmulticast mode [ 396.810635][T14712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.822063][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.965146][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'. [ 397.010049][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 397.025577][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 397.225655][T14728] netlink: 'syz.3.2093': attribute type 2 has an invalid length. [ 397.235398][T14728] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2093'. [ 397.368020][T14734] netlink: 'syz.4.2090': attribute type 11 has an invalid length. [ 397.852050][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.267074][T14756] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.417344][T14761] netlink: 'syz.3.2102': attribute type 21 has an invalid length. [ 398.425446][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2102'. [ 398.450984][T14763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2100'. [ 398.785971][T14771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.869453][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 398.873964][T14775] lo speed is unknown, defaulting to 1000 [ 398.892101][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.463079][T14788] netlink: 'syz.3.2110': attribute type 11 has an invalid length. [ 399.752974][T14791] batadv_slave_1: entered promiscuous mode [ 399.932098][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.958612][T14794] __nla_validate_parse: 1 callbacks suppressed [ 399.958632][T14794] netlink: 1243 bytes leftover after parsing attributes in process `syz.1.2112'. [ 400.317637][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 400.470478][T14790] batadv_slave_1: left promiscuous mode [ 400.704226][T14815] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.883922][T14826] netlink: 'syz.3.2119': attribute type 21 has an invalid length. [ 400.891803][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2119'. [ 400.972065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.256195][T14833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.343312][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 401.380123][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 401.827866][T14845] syzkaller1: entered promiscuous mode [ 401.834937][T14845] syzkaller1: entered allmulticast mode [ 402.012088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.068545][T14856] lo speed is unknown, defaulting to 1000 [ 402.233903][T14867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.586982][T14879] netlink: 'syz.4.2136': attribute type 21 has an invalid length. [ 402.599859][T14879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2136'. [ 402.759844][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 403.052082][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.052975][T14884] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.194948][T14884] lo speed is unknown, defaulting to 1000 [ 403.316585][T14891] lo speed is unknown, defaulting to 1000 [ 403.425988][T14895] wireguard0: entered promiscuous mode [ 403.441327][T14895] wireguard0: entered allmulticast mode [ 403.566070][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 404.035087][T14914] netlink: 'syz.0.2147': attribute type 4 has an invalid length. [ 404.079717][T14914] netlink: 'syz.0.2147': attribute type 4 has an invalid length. [ 404.092060][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.140773][T14917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.387524][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'. [ 404.426038][T14932] netlink: 'syz.1.2152': attribute type 21 has an invalid length. [ 404.459709][T14932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2152'. [ 405.059021][T14949] lo speed is unknown, defaulting to 1000 [ 405.082937][T14951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.132127][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.242752][T14959] netlink: 'syz.3.2163': attribute type 11 has an invalid length. [ 405.865396][T14967] netlink: 'syz.1.2167': attribute type 10 has an invalid length. [ 405.875379][T14967] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2167'. [ 406.172076][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.246755][T14980] netlink: 'syz.3.2171': attribute type 21 has an invalid length. [ 406.255222][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2171'. [ 406.460696][T14988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.481808][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'. [ 406.522455][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 406.730763][T15002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.898938][T15010] netlink: 'syz.0.2182': attribute type 4 has an invalid length. [ 407.076586][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2186'. [ 407.222031][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.235607][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.326973][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 407.340824][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 407.956200][T15065] lo speed is unknown, defaulting to 1000 [ 408.124232][T15069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.195874][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'. [ 408.205474][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2199'. [ 408.252036][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.513465][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 409.068583][T15089] ip6gretap1: entered allmulticast mode [ 409.122511][T15094] lo speed is unknown, defaulting to 1000 [ 409.292038][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.977471][T15115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.332009][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.401701][T15131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.470410][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.873490][T15141] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 410.897915][T15141] lo speed is unknown, defaulting to 1000 [ 411.040709][T15145] batadv_slave_1: entered promiscuous mode [ 411.354247][T15144] batadv_slave_1: left promiscuous mode [ 411.372015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.377485][T15157] __nla_validate_parse: 6 callbacks suppressed [ 411.377503][T15157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2220'. [ 411.421293][T15157] netlink: 'syz.1.2220': attribute type 7 has an invalid length. [ 411.451688][T15157] netlink: 'syz.1.2220': attribute type 8 has an invalid length. [ 411.470004][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 411.912768][T15175] netlink: 'syz.3.2226': attribute type 11 has an invalid length. [ 412.272190][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 412.324067][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 412.407310][T15182] lo speed is unknown, defaulting to 1000 [ 412.413215][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.628663][T15194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.731418][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 412.733508][T15197] lo speed is unknown, defaulting to 1000 [ 412.741128][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 412.840689][T15202] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 413.008590][T15205] bond3: (slave gretap1): making interface the new active one [ 413.030272][T15205] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 413.134744][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 413.452011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.503490][T15210] syzkaller0: entered promiscuous mode [ 413.528844][T15210] syzkaller0: entered allmulticast mode [ 413.587667][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2236'. [ 413.728452][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 413.869738][T15233] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 414.440878][T15254] netlink: 'syz.4.2244': attribute type 11 has an invalid length. [ 414.495939][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.542028][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.352802][T15233] lo speed is unknown, defaulting to 1000 [ 416.486384][T15260] lo speed is unknown, defaulting to 1000 [ 416.582257][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.757080][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2251'. [ 416.919555][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 417.468817][T15293] netlink: 'syz.3.2255': attribute type 11 has an invalid length. [ 417.622026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.165703][T15304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.215643][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'. [ 418.276099][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'. [ 418.628309][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2262'. [ 418.652013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.672860][T15319] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2263'. [ 418.916469][T15327] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 418.979821][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'. [ 419.094922][T15336] lo speed is unknown, defaulting to 1000 [ 419.227046][T15336] netlink: 'syz.3.2270': attribute type 4 has an invalid length. [ 419.381246][T15343] netlink: 'syz.4.2271': attribute type 21 has an invalid length. [ 419.414580][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2271'. [ 419.487491][T15348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2274'. [ 419.692058][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.908058][T15363] lo speed is unknown, defaulting to 1000 [ 420.475869][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 420.732064][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.229890][T15396] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 421.394926][T15396] lo speed is unknown, defaulting to 1000 [ 421.494274][T15410] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 421.567313][T15412] lo speed is unknown, defaulting to 1000 [ 421.772011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.788435][T15427] netlink: 'syz.3.2298': attribute type 21 has an invalid length. [ 421.796565][T15427] __nla_validate_parse: 4 callbacks suppressed [ 421.796579][T15427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2298'. [ 421.812950][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2299'. [ 422.578564][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 422.637118][T15448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2305'. [ 422.735273][T15453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2304'. [ 422.812069][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.043224][T15461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2310'. [ 423.387610][T15473] netlink: 'syz.3.2313': attribute type 11 has an invalid length. [ 423.607784][T15476] netlink: 'syz.0.2314': attribute type 10 has an invalid length. [ 423.646073][T15470] lo speed is unknown, defaulting to 1000 [ 423.712393][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 423.852011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.399465][T15495] lo speed is unknown, defaulting to 1000 [ 424.892049][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.983426][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'. [ 425.528799][T15520] lo speed is unknown, defaulting to 1000 [ 425.562982][T15519] lo speed is unknown, defaulting to 1000 [ 425.932102][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.981296][T15534] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 425.989266][T15534] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2329'. [ 425.999186][T15534] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 426.007143][T15534] netlink: 'syz.3.2329': attribute type 2 has an invalid length. [ 426.283895][T15540] netlink: 'syz.3.2333': attribute type 1 has an invalid length. [ 426.325255][T15542] netlink: 'syz.0.2328': attribute type 11 has an invalid length. [ 426.765492][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 426.905088][T15554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2335'. [ 426.972099][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.101544][T15558] syzkaller0: entered promiscuous mode [ 427.110038][T15558] syzkaller0: entered allmulticast mode [ 427.347220][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2337'. [ 427.506159][T15568] netlink: 'syz.2.2339': attribute type 21 has an invalid length. [ 427.514191][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2339'. [ 428.022098][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.062042][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.218080][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 429.372037][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 429.422559][T15575] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2342'. [ 429.621139][T15584] syzkaller0: entered promiscuous mode [ 429.626839][T15584] syzkaller0: entered allmulticast mode [ 429.701670][T15591] lo speed is unknown, defaulting to 1000 [ 429.766896][T15596] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.782550][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2346'. [ 430.053645][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 430.092309][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.632756][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 431.142138][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.180292][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.222136][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.255800][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.296824][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.351024][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 435.538151][T15627] lo speed is unknown, defaulting to 1000 [ 435.541133][T15628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 435.599241][T15628] lo speed is unknown, defaulting to 1000 [ 436.103158][T15640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2355'. [ 436.228059][T15650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2357'. [ 436.332162][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.630704][T15662] ªªªªªªo]Uü.ž: renamed from lo [ 436.655217][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'. [ 436.699252][T15664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2361'. [ 436.743823][T15668] batadv_slave_1: entered promiscuous mode [ 436.854648][T15667] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.982188][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.057469][T15675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2365'. [ 437.101288][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 437.175502][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 437.226062][T15665] batadv_slave_1: left promiscuous mode [ 437.246322][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 437.372101][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.464144][T15676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2366'. [ 437.475760][T15684] IPVS: stopping backup sync thread 7885 ... [ 437.513841][T15688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.543808][T15689] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 437.993268][T15705] netlink: 'syz.3.2374': attribute type 10 has an invalid length. [ 438.027408][T15705] team0: entered promiscuous mode [ 438.033926][T15705] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.040794][T15705] ªªªªª: port 1(team0) entered blocking state [ 438.048309][T15705] ªªªªª: port 1(team0) entered disabled state [ 438.054724][T15705] team0: entered allmulticast mode [ 438.412071][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.504735][T15711] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.898598][T15723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.950401][T15730] netlink: 'syz.1.2380': attribute type 21 has an invalid length. [ 438.983384][T15728] dvmrp0: left allmulticast mode [ 439.227244][T15741] team0: left allmulticast mode [ 439.233484][T15741] ªªªªª: port 1(team0) entered disabled state [ 439.452294][ C0] net_ratelimit: 1 callbacks suppressed [ 439.452307][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.744109][T15752] team0: left promiscuous mode [ 439.960514][T15762] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 439.992676][T15764] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 440.119562][T15764] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.154498][T15770] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 440.253049][T15768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.284848][T15768] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 440.368368][T15768] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 440.458551][T15770] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 440.492205][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.531185][T15765] __nla_validate_parse: 13 callbacks suppressed [ 440.531202][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 440.888708][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2397'. [ 440.961228][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2397'. [ 441.001215][T15793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.086636][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 441.096967][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 441.268505][T15800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2404'. [ 441.516414][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 441.532066][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.541780][T15807] tipc: Enabled bearer , priority 0 [ 441.552332][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 441.579505][T15807] syzkaller0: entered promiscuous mode [ 441.595106][T15807] syzkaller0: entered allmulticast mode [ 441.601525][T15807] tipc: Resetting bearer [ 441.633262][T15805] tipc: Resetting bearer [ 442.575780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.740851][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 443.613534][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.683079][T15805] tipc: Disabling bearer [ 443.703362][T15814] syz.0.2402: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 443.721404][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.0.2402 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 443.721425][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.721434][T15814] Call Trace: [ 443.721440][T15814] [ 443.721447][T15814] dump_stack_lvl+0x241/0x360 [ 443.721472][T15814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.721490][T15814] ? __pfx__printk+0x10/0x10 [ 443.721510][T15814] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 443.721531][T15814] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 443.721551][T15814] warn_alloc+0x278/0x410 [ 443.721572][T15814] ? __pfx_warn_alloc+0x10/0x10 [ 443.721595][T15814] ? xp_create_and_assign_umem+0x17b/0xc50 [ 443.721617][T15814] ? __get_vm_area_node+0x1c8/0x2d0 [ 443.721640][T15814] ? __get_vm_area_node+0x25c/0x2d0 [ 443.721671][T15814] __vmalloc_node_range_noprof+0x62f/0x1380 [ 443.721698][T15814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.721743][T15814] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 443.721770][T15814] ? rcu_is_watching+0x15/0xb0 [ 443.721786][T15814] ? trace_kmalloc+0x1f/0xd0 [ 443.721803][T15814] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 443.721822][T15814] ? __kvmalloc_node_noprof+0x72/0x190 [ 443.721845][T15814] __kvmalloc_node_noprof+0x142/0x190 [ 443.721867][T15814] ? xp_create_and_assign_umem+0x17b/0xc50 [ 443.721889][T15814] xp_create_and_assign_umem+0x17b/0xc50 [ 443.721927][T15814] ? dev_get_by_index+0x23/0x2d0 [ 443.721950][T15814] xsk_bind+0x388/0xfe0 [ 443.721978][T15814] __sys_bind+0x1e4/0x290 [ 443.722002][T15814] ? __pfx___sys_bind+0x10/0x10 [ 443.722034][T15814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.722059][T15814] ? exc_page_fault+0x590/0x8b0 [ 443.722084][T15814] __x64_sys_bind+0x7a/0x90 [ 443.722105][T15814] do_syscall_64+0xf3/0x230 [ 443.722127][T15814] ? clear_bhb_loop+0x35/0x90 [ 443.722151][T15814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.722171][T15814] RIP: 0033:0x7fc298d8d169 [ 443.722186][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.722200][T15814] RSP: 002b:00007fc299c31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 443.722218][T15814] RAX: ffffffffffffffda RBX: 00007fc298fa6240 RCX: 00007fc298d8d169 [ 443.722229][T15814] RDX: 0000000000000010 RSI: 0000400000000100 RDI: 0000000000000003 [ 443.722239][T15814] RBP: 00007fc298e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 443.722250][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.722260][T15814] R13: 0000000000000001 R14: 00007fc298fa6240 R15: 00007ffe34740bc8 [ 443.722288][T15814] [ 443.983438][T15814] Mem-Info: [ 443.986577][T15814] active_anon:7802 inactive_anon:0 isolated_anon:0 [ 443.986577][T15814] active_file:1437 inactive_file:38448 isolated_file:0 [ 443.986577][T15814] unevictable:768 dirty:276 writeback:0 [ 443.986577][T15814] slab_reclaimable:10986 slab_unreclaimable:108641 [ 443.986577][T15814] mapped:40844 shmem:3142 pagetables:845 [ 443.986577][T15814] sec_pagetables:0 bounce:0 [ 443.986577][T15814] kernel_misc_reclaimable:0 [ 443.986577][T15814] free:1306801 free_pcp:1130 free_cma:0 [ 444.037060][T15814] Node 0 active_anon:31208kB inactive_anon:0kB active_file:5748kB inactive_file:153716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163376kB dirty:1104kB writeback:0kB shmem:11032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:3380kB sec_pagetables:0kB all_unreclaimable? no [ 444.071066][T15814] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 444.109507][T15814] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.142552][T15814] lowmem_reserve[]: 0 2490 2490 0 0 [ 444.148165][T15814] Node 0 DMA32 free:1310484kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:31116kB inactive_anon:0kB active_file:5748kB inactive_file:153388kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2549820kB mlocked:0kB bounce:0kB free_pcp:2232kB local_pcp:1044kB free_cma:0kB [ 444.186970][T15814] lowmem_reserve[]: 0 0 0 0 0 [ 444.191794][T15814] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.221508][T15814] lowmem_reserve[]: 0 0 0 0 0 [ 444.226408][T15814] Node 1 Normal free:3904764kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB [ 444.256940][T15814] lowmem_reserve[]: 0 0 0 0 0 [ 444.261659][T15814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.275157][T15814] Node 0 DMA32: 141*4kB (ME) 439*8kB (ME) 333*16kB (UME) 279*32kB (UME) 103*64kB (UME) 381*128kB (UME) 175*256kB (UM) 84*512kB (UM) 38*1024kB (UM) 14*2048kB (UME) 264*4096kB (UM) = 1310428kB [ 444.294682][T15814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 444.309953][T15814] Node 1 Normal: 211*4kB (UE) 52*8kB (UME) 43*16kB (UME) 211*32kB (UME) 100*64kB (UME) 36*128kB (UME) 18*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3904764kB [ 444.335305][T15814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.335321][T15841] netlink: 'syz.3.2410': attribute type 10 has an invalid length. [ 444.356175][T15814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.365763][T15814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.375595][T15814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.385192][T15814] 43028 total pagecache pages [ 444.389955][T15814] 0 pages in swap cache [ 444.394474][T15814] Free swap = 124996kB [ 444.398972][T15814] Total swap = 124996kB [ 444.403570][T15814] 2097051 pages RAM [ 444.407391][T15814] 0 pages HighMem/MovableOnly [ 444.412303][T15814] 427874 pages reserved [ 444.416455][T15814] 0 pages cma reserved [ 444.495795][T15816] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 444.519040][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 444.539969][T15825] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 444.568060][T15841] bond0: (slave wlan1): refused to change device type [ 444.584491][T15823] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 444.602154][T15823] CPU: 0 UID: 0 PID: 15823 Comm: syz.1.2408 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 444.602179][T15823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.602190][T15823] Call Trace: [ 444.602198][T15823] [ 444.602205][T15823] dump_stack_lvl+0x241/0x360 [ 444.602233][T15823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.602252][T15823] ? __pfx__printk+0x10/0x10 [ 444.602275][T15823] ? __kmalloc_cache_noprof+0x243/0x390 [ 444.602297][T15823] ? sysfs_warn_dup+0x51/0xa0 [ 444.602322][T15823] sysfs_warn_dup+0x8e/0xa0 [ 444.602347][T15823] sysfs_do_create_link_sd+0xbe/0x110 [ 444.602383][T15823] device_add_class_symlinks+0x1c5/0x250 [ 444.602411][T15823] device_add+0x553/0xbf0 [ 444.602441][T15823] wiphy_register+0x1922/0x2650 [ 444.602477][T15823] ? __pfx_wiphy_register+0x10/0x10 [ 444.602491][T15823] ? minstrel_ht_alloc+0x84b/0x940 [ 444.602518][T15823] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 444.602544][T15823] ieee80211_register_hw+0x35d9/0x42e0 [ 444.602579][T15823] ? ieee80211_register_hw+0x15f1/0x42e0 [ 444.602608][T15823] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 444.602639][T15823] ? __asan_memset+0x23/0x50 [ 444.602657][T15823] ? __hrtimer_init+0x170/0x250 [ 444.602679][T15823] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 444.602730][T15823] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 444.602748][T15823] ? trace_kmalloc+0x1f/0xd0 [ 444.602766][T15823] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 444.602789][T15823] ? kstrndup+0xbb/0x150 [ 444.602825][T15823] hwsim_new_radio_nl+0xece/0x2290 [ 444.602857][T15823] ? __pfx___nla_validate_parse+0x10/0x10 [ 444.602879][T15823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 444.602934][T15823] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 444.602967][T15823] genl_rcv_msg+0xb1f/0xec0 [ 444.603000][T15823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.603053][T15823] ? __pfx_lock_acquire+0x10/0x10 [ 444.603076][T15823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 444.603097][T15823] ? __pfx___might_resched+0x10/0x10 [ 444.603129][T15823] netlink_rcv_skb+0x206/0x480 [ 444.603150][T15823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.603173][T15823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.603230][T15823] genl_rcv+0x28/0x40 [ 444.603251][T15823] netlink_unicast+0x7f6/0x990 [ 444.603279][T15823] ? __pfx_netlink_unicast+0x10/0x10 [ 444.603294][T15823] ? __virt_addr_valid+0x45f/0x530 [ 444.603312][T15823] ? __phys_addr_symbol+0x2f/0x70 [ 444.603336][T15823] ? __check_object_size+0x47a/0x730 [ 444.603371][T15823] netlink_sendmsg+0x8de/0xcb0 [ 444.603406][T15823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.603432][T15823] ? aa_sock_msg_perm+0x91/0x160 [ 444.603464][T15823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.603483][T15823] __sock_sendmsg+0x221/0x270 [ 444.603505][T15823] ____sys_sendmsg+0x53a/0x860 [ 444.603540][T15823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.603561][T15823] ? __fget_files+0x2a/0x410 [ 444.603588][T15823] ? __fget_files+0x2a/0x410 [ 444.603620][T15823] __sys_sendmsg+0x269/0x350 [ 444.603651][T15823] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.603724][T15823] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.603749][T15823] ? do_syscall_64+0x100/0x230 [ 444.603776][T15823] ? do_syscall_64+0xb6/0x230 [ 444.603803][T15823] do_syscall_64+0xf3/0x230 [ 444.603826][T15823] ? clear_bhb_loop+0x35/0x90 [ 444.603851][T15823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.603873][T15823] RIP: 0033:0x7fe4aa58d169 [ 444.603889][T15823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.603903][T15823] RSP: 002b:00007fe4ab46a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.603923][T15823] RAX: ffffffffffffffda RBX: 00007fe4aa7a6160 RCX: 00007fe4aa58d169 [ 444.603935][T15823] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 444.603947][T15823] RBP: 00007fe4aa60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 444.603957][T15823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.603968][T15823] R13: 0000000000000000 R14: 00007fe4aa7a6160 R15: 00007ffd381ae178 [ 444.603998][T15823] [ 445.009188][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.536155][T15856] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2413'. [ 445.714877][T15859] syzkaller0: entered promiscuous mode [ 445.720495][T15859] syzkaller0: entered allmulticast mode [ 445.770330][T15859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2412'. [ 446.012064][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.098382][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 447.055812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.889841][T15876] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2415'. [ 448.102080][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.137449][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 448.148371][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2418'. [ 448.291111][T15888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2419'. [ 448.322432][T15888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2419'. [ 448.439107][T15896] syzkaller0: entered promiscuous mode [ 448.445419][T15896] syzkaller0: entered allmulticast mode [ 449.132205][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.369957][T15916] netlink: 'syz.4.2426': attribute type 21 has an invalid length. [ 449.422092][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2426'. [ 450.182001][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.761675][T15918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2424'. [ 450.774697][T15919] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 451.080185][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 451.090174][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2432'. [ 451.212047][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.256994][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2434'. [ 451.663670][T15948] syzkaller1: entered promiscuous mode [ 451.669186][T15948] syzkaller1: entered allmulticast mode [ 451.963362][T15972] tipc: Enabling of bearer rejected, already enabled [ 451.979260][T15967] netlink: 'syz.1.2441': attribute type 4 has an invalid length. [ 452.002320][T15967] netlink: 'syz.1.2441': attribute type 11 has an invalid length. [ 452.010316][T15967] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2441'. [ 452.020125][T15972] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 452.030243][T15972] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 452.055162][T15972] tipc: Resetting bearer [ 452.103669][T15981] batadv_slave_1: entered promiscuous mode [ 452.252152][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.286403][T15985] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 452.402583][T15985] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 452.483174][T15980] batadv_slave_1: left promiscuous mode [ 452.816009][T16007] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 452.828434][T16003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2453'. [ 453.183970][T16018] syzkaller0: entered promiscuous mode [ 453.189496][T16018] syzkaller0: entered allmulticast mode [ 453.292273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.344799][T15995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2449'. [ 453.962668][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 454.337911][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.375188][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.814256][T16042] batadv_slave_1: entered promiscuous mode [ 455.976546][T16051] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 456.106723][T16051] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 456.175136][T16041] batadv_slave_1: left promiscuous mode [ 456.250963][T16058] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 456.264807][T16056] bond0: (slave wlan1): Releasing backup interface [ 456.281493][T16056] tipc: Resetting bearer [ 456.412108][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.495636][ T7654] IPVS: starting estimator thread 0... [ 456.592671][T16063] IPVS: using max 21 ests per chain, 50400 per kthread [ 457.452016][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.646106][T13486] IPVS: stop unused estimator thread 0... [ 457.724099][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 457.918378][T16101] netlink: 'syz.1.2475': attribute type 10 has an invalid length. [ 457.957890][T16101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2475'. [ 457.982399][T16104] batadv_slave_1: entered promiscuous mode [ 458.352607][T16103] batadv_slave_1: left promiscuous mode [ 458.502059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.697355][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 458.847557][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2478'. [ 459.011052][T16128] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 459.532071][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.826501][T16147] bridge0: port 1(vxlan0) entered blocking state [ 459.856099][T16147] bridge0: port 1(vxlan0) entered disabled state [ 459.892371][T16147] vxlan0: entered allmulticast mode [ 459.916329][T16147] vxlan0: entered promiscuous mode [ 460.013250][T16156] batadv_slave_1: entered promiscuous mode [ 460.028316][T16154] sctp: [Deprecated]: syz.0.2488 (pid 16154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.028316][T16154] Use struct sctp_sack_info instead [ 460.575312][T16155] batadv_slave_1: left promiscuous mode [ 460.582249][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.669415][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2492'. [ 460.702855][T16165] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2492'. [ 460.824171][T16171] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2493'. [ 460.909165][T16173] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 460.986672][T16173] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 460.994486][T16173] CPU: 1 UID: 0 PID: 16173 Comm: syz.3.2495 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 460.994507][T16173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.994517][T16173] Call Trace: [ 460.994523][T16173] [ 460.994530][T16173] dump_stack_lvl+0x241/0x360 [ 460.994559][T16173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.994579][T16173] ? __pfx__printk+0x10/0x10 [ 460.994601][T16173] ? __kmalloc_cache_noprof+0x243/0x390 [ 460.994624][T16173] ? sysfs_warn_dup+0x51/0xa0 [ 460.994648][T16173] sysfs_warn_dup+0x8e/0xa0 [ 460.994668][T16173] sysfs_do_create_link_sd+0xbe/0x110 [ 460.994691][T16173] device_add_class_symlinks+0x1c5/0x250 [ 460.994720][T16173] device_add+0x553/0xbf0 [ 460.994749][T16173] wiphy_register+0x1922/0x2650 [ 460.994782][T16173] ? __pfx_wiphy_register+0x10/0x10 [ 460.994797][T16173] ? minstrel_ht_alloc+0x84b/0x940 [ 460.994823][T16173] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 460.994847][T16173] ieee80211_register_hw+0x35d9/0x42e0 [ 460.994881][T16173] ? ieee80211_register_hw+0x15f1/0x42e0 [ 460.994909][T16173] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 460.994941][T16173] ? __asan_memset+0x23/0x50 [ 460.994958][T16173] ? __hrtimer_init+0x170/0x250 [ 460.994991][T16173] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 460.995043][T16173] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 460.995062][T16173] ? trace_kmalloc+0x1f/0xd0 [ 460.995081][T16173] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 460.995105][T16173] ? kstrndup+0xbb/0x150 [ 460.995140][T16173] hwsim_new_radio_nl+0xece/0x2290 [ 460.995174][T16173] ? __pfx___nla_validate_parse+0x10/0x10 [ 460.995196][T16173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 460.995251][T16173] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 460.995285][T16173] genl_rcv_msg+0xb1f/0xec0 [ 460.995316][T16173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.995364][T16173] ? __pfx_lock_acquire+0x10/0x10 [ 460.995388][T16173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 460.995409][T16173] ? __pfx___might_resched+0x10/0x10 [ 460.995442][T16173] netlink_rcv_skb+0x206/0x480 [ 460.995463][T16173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.995488][T16173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.995541][T16173] genl_rcv+0x28/0x40 [ 460.995561][T16173] netlink_unicast+0x7f6/0x990 [ 460.995588][T16173] ? __pfx_netlink_unicast+0x10/0x10 [ 460.995603][T16173] ? __virt_addr_valid+0x45f/0x530 [ 460.995620][T16173] ? __phys_addr_symbol+0x2f/0x70 [ 460.995644][T16173] ? __check_object_size+0x47a/0x730 [ 460.995669][T16173] netlink_sendmsg+0x8de/0xcb0 [ 460.995701][T16173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.995725][T16173] ? aa_sock_msg_perm+0x91/0x160 [ 460.995755][T16173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.995773][T16173] __sock_sendmsg+0x221/0x270 [ 460.995797][T16173] ____sys_sendmsg+0x53a/0x860 [ 460.995831][T16173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.995854][T16173] ? __fget_files+0x2a/0x410 [ 460.995880][T16173] ? __fget_files+0x2a/0x410 [ 460.995913][T16173] __sys_sendmsg+0x269/0x350 [ 460.995937][T16173] ? __pfx_futex_wake+0x10/0x10 [ 460.995964][T16173] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.996044][T16173] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.996071][T16173] ? do_syscall_64+0x100/0x230 [ 460.996099][T16173] ? do_syscall_64+0xb6/0x230 [ 460.996126][T16173] do_syscall_64+0xf3/0x230 [ 460.996150][T16173] ? clear_bhb_loop+0x35/0x90 [ 460.996177][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.996198][T16173] RIP: 0033:0x7f447d18d169 [ 460.996214][T16173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.996229][T16173] RSP: 002b:00007f447df2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.996247][T16173] RAX: ffffffffffffffda RBX: 00007f447d3a5fa0 RCX: 00007f447d18d169 [ 460.996260][T16173] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 460.996271][T16173] RBP: 00007f447d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 460.996281][T16173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.996292][T16173] R13: 0000000000000000 R14: 00007f447d3a5fa0 R15: 00007ffd82979c68 [ 460.996322][T16173] [ 461.568766][T16173] syzkaller1: entered promiscuous mode [ 461.581228][T16173] syzkaller1: entered allmulticast mode [ 461.612104][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.743426][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2491'. [ 462.278162][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 462.363992][T16194] bond2: entered promiscuous mode [ 462.369321][T16194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.662067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.923320][T16209] netlink: 'syz.3.2504': attribute type 39 has an invalid length. [ 462.984455][T16194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.991724][T16194] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 463.004024][T16194] bond2: (slave vti0): Error -95 calling set_mac_address [ 463.021064][T16203] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 463.311001][T16215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2505'. [ 463.363224][T16217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2505'. [ 463.692081][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.789990][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 463.835202][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 463.992594][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2508'. [ 464.338647][T16240] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 464.732006][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.910358][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 465.688791][T16265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'. [ 465.742686][T16267] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 465.748754][T16265] bond5: entered promiscuous mode [ 465.772117][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.775677][T16265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.841167][T16267] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 466.572712][T16284] bond3: (slave gretap1): Releasing active interface [ 466.588323][T16284] vxlan0: left allmulticast mode [ 466.596308][T16284] vxlan0: left promiscuous mode [ 466.610937][T16284] bridge0: port 1(vxlan0) entered disabled state [ 466.813472][T16288] tipc: Started in network mode [ 466.818353][T16288] tipc: Node identity b2d029af1a03, cluster identity 4711 [ 466.822025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.842134][T16288] tipc: Enabled bearer , priority 0 [ 466.905200][T16288] syzkaller0: entered promiscuous mode [ 466.910715][T16288] syzkaller0: entered allmulticast mode [ 466.926018][T16288] tipc: Resetting bearer [ 466.933862][T16290] netlink: 'syz.4.2528': attribute type 10 has an invalid length. [ 466.941705][T16290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2528'. [ 466.980970][T16287] tipc: Resetting bearer [ 467.855756][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.863366][ T7654] tipc: Node number set to 2832411055 [ 468.053121][T16312] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 468.894485][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.079110][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 469.669141][T16287] tipc: Disabling bearer [ 469.689929][T16299] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 469.701126][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.4.2529 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 469.701142][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.701148][T16299] Call Trace: [ 469.701154][T16299] [ 469.701159][T16299] dump_stack_lvl+0x241/0x360 [ 469.701176][T16299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.701187][T16299] ? __pfx__printk+0x10/0x10 [ 469.701200][T16299] ? __kmalloc_cache_noprof+0x243/0x390 [ 469.701215][T16299] ? sysfs_warn_dup+0x51/0xa0 [ 469.701229][T16299] sysfs_warn_dup+0x8e/0xa0 [ 469.701241][T16299] sysfs_do_create_link_sd+0xbe/0x110 [ 469.701254][T16299] device_add_class_symlinks+0x1c5/0x250 [ 469.701270][T16299] device_add+0x553/0xbf0 [ 469.701287][T16299] wiphy_register+0x1922/0x2650 [ 469.701304][T16299] ? __pfx_wiphy_register+0x10/0x10 [ 469.701313][T16299] ? minstrel_ht_alloc+0x84b/0x940 [ 469.701327][T16299] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 469.701341][T16299] ieee80211_register_hw+0x35d9/0x42e0 [ 469.701361][T16299] ? ieee80211_register_hw+0x15f1/0x42e0 [ 469.701378][T16299] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 469.701395][T16299] ? __asan_memset+0x23/0x50 [ 469.701404][T16299] ? __hrtimer_init+0x170/0x250 [ 469.701417][T16299] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 469.701444][T16299] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 469.701455][T16299] ? trace_kmalloc+0x1f/0xd0 [ 469.701465][T16299] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 469.701479][T16299] ? kstrndup+0xbb/0x150 [ 469.701498][T16299] hwsim_new_radio_nl+0xece/0x2290 [ 469.701515][T16299] ? __pfx___nla_validate_parse+0x10/0x10 [ 469.701528][T16299] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 469.701556][T16299] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 469.701575][T16299] genl_rcv_msg+0xb1f/0xec0 [ 469.701593][T16299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.701621][T16299] ? __pfx_lock_acquire+0x10/0x10 [ 469.701637][T16299] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 469.701654][T16299] ? __pfx___might_resched+0x10/0x10 [ 469.701684][T16299] netlink_rcv_skb+0x206/0x480 [ 469.701704][T16299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.701729][T16299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.701764][T16299] genl_rcv+0x28/0x40 [ 469.701776][T16299] netlink_unicast+0x7f6/0x990 [ 469.701791][T16299] ? __pfx_netlink_unicast+0x10/0x10 [ 469.701799][T16299] ? __virt_addr_valid+0x45f/0x530 [ 469.701814][T16299] ? __phys_addr_symbol+0x2f/0x70 [ 469.701828][T16299] ? __check_object_size+0x47a/0x730 [ 469.701845][T16299] netlink_sendmsg+0x8de/0xcb0 [ 469.701863][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.701877][T16299] ? aa_sock_msg_perm+0x91/0x160 [ 469.701895][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.701912][T16299] __sock_sendmsg+0x221/0x270 [ 469.701935][T16299] ____sys_sendmsg+0x53a/0x860 [ 469.701974][T16299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.701996][T16299] ? __fget_files+0x2a/0x410 [ 469.702023][T16299] ? __fget_files+0x2a/0x410 [ 469.702054][T16299] __sys_sendmsg+0x269/0x350 [ 469.702077][T16299] ? __pfx_futex_wake+0x10/0x10 [ 469.702103][T16299] ? __pfx___sys_sendmsg+0x10/0x10 [ 469.702168][T16299] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.702194][T16299] ? do_syscall_64+0x100/0x230 [ 469.702223][T16299] ? do_syscall_64+0xb6/0x230 [ 469.702249][T16299] do_syscall_64+0xf3/0x230 [ 469.702272][T16299] ? clear_bhb_loop+0x35/0x90 [ 469.702298][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.702319][T16299] RIP: 0033:0x7f67c058d169 [ 469.702335][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.702350][T16299] RSP: 002b:00007f67c1446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.702368][T16299] RAX: ffffffffffffffda RBX: 00007f67c07a6160 RCX: 00007f67c058d169 [ 469.702381][T16299] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 469.702391][T16299] RBP: 00007f67c060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 469.702402][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.702413][T16299] R13: 0000000000000000 R14: 00007f67c07a6160 R15: 00007ffe87379098 [ 469.702443][T16299] [ 469.962103][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.118550][T16312] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 470.329829][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'. [ 470.499762][T16332] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 470.551896][T16332] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 470.590066][T16327] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 470.721042][T16337] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 470.728279][T16341] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 470.736425][T16341] CPU: 1 UID: 0 PID: 16341 Comm: syz.3.2543 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 470.736446][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.736458][T16341] Call Trace: [ 470.736465][T16341] [ 470.736472][T16341] dump_stack_lvl+0x241/0x360 [ 470.736499][T16341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.736519][T16341] ? __pfx__printk+0x10/0x10 [ 470.736540][T16341] ? __kmalloc_cache_noprof+0x243/0x390 [ 470.736560][T16341] ? sysfs_warn_dup+0x51/0xa0 [ 470.736585][T16341] sysfs_warn_dup+0x8e/0xa0 [ 470.736605][T16341] sysfs_do_create_link_sd+0xbe/0x110 [ 470.736626][T16341] device_add_class_symlinks+0x1c5/0x250 [ 470.736654][T16341] device_add+0x553/0xbf0 [ 470.736684][T16341] wiphy_register+0x1922/0x2650 [ 470.736716][T16341] ? __pfx_wiphy_register+0x10/0x10 [ 470.736732][T16341] ? minstrel_ht_alloc+0x84b/0x940 [ 470.736759][T16341] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 470.736784][T16341] ieee80211_register_hw+0x35d9/0x42e0 [ 470.736817][T16341] ? ieee80211_register_hw+0x15f1/0x42e0 [ 470.736856][T16341] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 470.736887][T16341] ? __asan_memset+0x23/0x50 [ 470.736904][T16341] ? __hrtimer_init+0x170/0x250 [ 470.736926][T16341] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 470.736975][T16341] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 470.736993][T16341] ? trace_kmalloc+0x1f/0xd0 [ 470.737012][T16341] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 470.737034][T16341] ? kstrndup+0xbb/0x150 [ 470.737066][T16341] hwsim_new_radio_nl+0xece/0x2290 [ 470.737095][T16341] ? __pfx___nla_validate_parse+0x10/0x10 [ 470.737116][T16341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 470.737167][T16341] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 470.737201][T16341] genl_rcv_msg+0xb1f/0xec0 [ 470.737233][T16341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.737284][T16341] ? __pfx_lock_acquire+0x10/0x10 [ 470.737306][T16341] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 470.737325][T16341] ? __pfx___might_resched+0x10/0x10 [ 470.737356][T16341] netlink_rcv_skb+0x206/0x480 [ 470.737376][T16341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.737402][T16341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.737454][T16341] genl_rcv+0x28/0x40 [ 470.737475][T16341] netlink_unicast+0x7f6/0x990 [ 470.737502][T16341] ? __pfx_netlink_unicast+0x10/0x10 [ 470.737517][T16341] ? __virt_addr_valid+0x45f/0x530 [ 470.737534][T16341] ? __phys_addr_symbol+0x2f/0x70 [ 470.737558][T16341] ? __check_object_size+0x47a/0x730 [ 470.737585][T16341] netlink_sendmsg+0x8de/0xcb0 [ 470.737618][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.737643][T16341] ? aa_sock_msg_perm+0x91/0x160 [ 470.737674][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.737691][T16341] __sock_sendmsg+0x221/0x270 [ 470.737714][T16341] ____sys_sendmsg+0x53a/0x860 [ 470.737747][T16341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.737768][T16341] ? __fget_files+0x2a/0x410 [ 470.737792][T16341] ? __fget_files+0x2a/0x410 [ 470.737831][T16341] __sys_sendmsg+0x269/0x350 [ 470.737855][T16341] ? __pfx_futex_wake+0x10/0x10 [ 470.737883][T16341] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.737955][T16341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.737988][T16341] ? do_syscall_64+0x100/0x230 [ 470.738016][T16341] ? do_syscall_64+0xb6/0x230 [ 470.738042][T16341] do_syscall_64+0xf3/0x230 [ 470.738066][T16341] ? clear_bhb_loop+0x35/0x90 [ 470.738091][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.738112][T16341] RIP: 0033:0x7f447d18d169 [ 470.738128][T16341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.738142][T16341] RSP: 002b:00007f447df09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.738160][T16341] RAX: ffffffffffffffda RBX: 00007f447d3a6080 RCX: 00007f447d18d169 [ 470.738173][T16341] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 470.738183][T16341] RBP: 00007f447d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 470.738194][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.738204][T16341] R13: 0000000000000000 R14: 00007f447d3a6080 R15: 00007ffd82979c68 [ 470.738231][T16341] [ 470.992273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.244299][T16341] syzkaller1: entered promiscuous mode [ 471.250072][T16341] syzkaller1: entered allmulticast mode [ 471.277589][T16343] macsec1: entered promiscuous mode [ 471.294533][T16343] gretap0: entered promiscuous mode [ 471.307064][T16343] gretap0: left promiscuous mode [ 471.599171][T16360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2547'. [ 471.609658][T16360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2547'. [ 471.739110][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 471.821533][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2551'. [ 472.012054][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.560691][T16392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 472.579559][T16392] batman_adv: batadv0: Adding interface: gretap2 [ 472.602329][T16392] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.661712][T16392] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 472.806079][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2548'. [ 473.051992][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.132244][T16409] netlink: 'syz.3.2559': attribute type 10 has an invalid length. [ 473.150408][T16409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2559'. [ 473.165866][T16409] veth0_vlan: left promiscuous mode [ 473.171188][T16409] veth0_vlan: entered promiscuous mode [ 473.176903][T16409] veth0_vlan: entered allmulticast mode [ 473.185043][T16409] ªªªªª: port 1(veth0_vlan) entered blocking state [ 473.191710][T16409] ªªªªª: port 1(veth0_vlan) entered disabled state [ 473.200353][T16409] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 473.442329][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 473.566870][T16421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2563'. [ 473.603547][T16422] sctp: [Deprecated]: syz.0.2564 (pid 16422) Use of int in max_burst socket option. [ 473.603547][T16422] Use struct sctp_assoc_value instead [ 474.092056][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.130888][T16442] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 474.402338][T16453] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 474.432633][T16454] __nla_validate_parse: 4 callbacks suppressed [ 474.432651][T16454] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2572'. [ 475.093674][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'. [ 475.131993][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.190570][T16470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2576'. [ 475.223178][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2577'. [ 475.241019][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 475.290221][T16467] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.360067][T16470] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 475.385774][T16470] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 475.412319][T16470] tipc: Resetting bearer [ 475.688849][T16495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2583'. [ 475.699862][T16495] batadv_slave_1: entered promiscuous mode [ 475.750942][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2581'. [ 475.841294][T16500] netlink: 'syz.0.2584': attribute type 13 has an invalid length. [ 475.895254][T16500] vlan2: entered allmulticast mode [ 475.907963][T16502] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 475.920260][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'. [ 475.945064][T16504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2586'. [ 476.060670][T16509] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 476.172100][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.236055][T16509] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 476.396510][T16502] ip6gre1: entered promiscuous mode [ 476.411478][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2588'. [ 476.710685][T16532] batadv_slave_1: entered promiscuous mode [ 477.222090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.356491][T16530] batadv_slave_1: left promiscuous mode [ 478.219996][T16564] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.228727][T16564] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.237055][T16564] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.245366][T16564] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.262007][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.395567][T16564] team0: Port device vxlan0 added [ 478.928047][T16572] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 479.015408][T16573] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 479.025232][T16573] CPU: 1 UID: 0 PID: 16573 Comm: syz.0.2604 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 479.025257][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 479.025268][T16573] Call Trace: [ 479.025274][T16573] [ 479.025282][T16573] dump_stack_lvl+0x241/0x360 [ 479.025312][T16573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.025332][T16573] ? __pfx__printk+0x10/0x10 [ 479.025355][T16573] ? __kmalloc_cache_noprof+0x243/0x390 [ 479.025377][T16573] ? sysfs_warn_dup+0x51/0xa0 [ 479.025401][T16573] sysfs_warn_dup+0x8e/0xa0 [ 479.025421][T16573] sysfs_do_create_link_sd+0xbe/0x110 [ 479.025443][T16573] device_add_class_symlinks+0x1c5/0x250 [ 479.025471][T16573] device_add+0x553/0xbf0 [ 479.025501][T16573] wiphy_register+0x1922/0x2650 [ 479.025532][T16573] ? __pfx_wiphy_register+0x10/0x10 [ 479.025547][T16573] ? minstrel_ht_alloc+0x84b/0x940 [ 479.025573][T16573] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 479.025598][T16573] ieee80211_register_hw+0x35d9/0x42e0 [ 479.025632][T16573] ? ieee80211_register_hw+0x15f1/0x42e0 [ 479.025663][T16573] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 479.025695][T16573] ? __asan_memset+0x23/0x50 [ 479.025712][T16573] ? __hrtimer_init+0x170/0x250 [ 479.025736][T16573] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 479.025786][T16573] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 479.025804][T16573] ? trace_kmalloc+0x1f/0xd0 [ 479.025823][T16573] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 479.025845][T16573] ? kstrndup+0xbb/0x150 [ 479.025877][T16573] hwsim_new_radio_nl+0xece/0x2290 [ 479.025910][T16573] ? __pfx___nla_validate_parse+0x10/0x10 [ 479.025933][T16573] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 479.025986][T16573] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 479.026020][T16573] genl_rcv_msg+0xb1f/0xec0 [ 479.026059][T16573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.026113][T16573] ? __pfx_lock_acquire+0x10/0x10 [ 479.026138][T16573] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 479.026159][T16573] ? __pfx___might_resched+0x10/0x10 [ 479.026192][T16573] netlink_rcv_skb+0x206/0x480 [ 479.026211][T16573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.026234][T16573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.026286][T16573] genl_rcv+0x28/0x40 [ 479.026306][T16573] netlink_unicast+0x7f6/0x990 [ 479.026333][T16573] ? __pfx_netlink_unicast+0x10/0x10 [ 479.026348][T16573] ? __virt_addr_valid+0x45f/0x530 [ 479.026365][T16573] ? __phys_addr_symbol+0x2f/0x70 [ 479.026389][T16573] ? __check_object_size+0x47a/0x730 [ 479.026415][T16573] netlink_sendmsg+0x8de/0xcb0 [ 479.026448][T16573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.026472][T16573] ? aa_sock_msg_perm+0x91/0x160 [ 479.026503][T16573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.026520][T16573] __sock_sendmsg+0x221/0x270 [ 479.026544][T16573] ____sys_sendmsg+0x53a/0x860 [ 479.026578][T16573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.026600][T16573] ? __fget_files+0x2a/0x410 [ 479.026626][T16573] ? __fget_files+0x2a/0x410 [ 479.026658][T16573] __sys_sendmsg+0x269/0x350 [ 479.026688][T16573] ? __pfx___sys_sendmsg+0x10/0x10 [ 479.026760][T16573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.026786][T16573] ? do_syscall_64+0x100/0x230 [ 479.026813][T16573] ? do_syscall_64+0xb6/0x230 [ 479.026839][T16573] do_syscall_64+0xf3/0x230 [ 479.026863][T16573] ? clear_bhb_loop+0x35/0x90 [ 479.026888][T16573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.026909][T16573] RIP: 0033:0x7fc298d8d169 [ 479.026925][T16573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.026939][T16573] RSP: 002b:00007fc299c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.026958][T16573] RAX: ffffffffffffffda RBX: 00007fc298fa6080 RCX: 00007fc298d8d169 [ 479.026970][T16573] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000005 [ 479.026981][T16573] RBP: 00007fc298e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 479.026992][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.027004][T16573] R13: 0000000000000000 R14: 00007fc298fa6080 R15: 00007ffe34740bc8 [ 479.027056][T16573] [ 479.033840][T16575] netlink: 'syz.1.2605': attribute type 10 has an invalid length. [ 479.054044][T16580] ip6gretap0: entered promiscuous mode [ 479.302010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.349464][T16580] batadv_slave_0: entered promiscuous mode [ 479.463992][T16580] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 479.471581][T16580] Cannot create hsr debugfs directory [ 479.509715][T16573] syzkaller1: entered promiscuous mode [ 479.518925][T16573] syzkaller1: entered allmulticast mode [ 479.593621][T16592] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 479.809317][T16602] netlink: 'syz.0.2611': attribute type 21 has an invalid length. [ 479.824636][T16602] __nla_validate_parse: 5 callbacks suppressed [ 479.824651][T16602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2611'. [ 479.826497][T16601] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 480.202852][T16615] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2614'. [ 480.224980][T16615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2614'. [ 480.291127][T16615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2614'. [ 480.342095][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.618171][T16626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2606'. [ 480.816956][T16634] SET target dimension over the limit! [ 480.831707][T16632] syzkaller0: entered promiscuous mode [ 480.845088][T16634] netlink: 'syz.1.2618': attribute type 11 has an invalid length. [ 480.862112][T16634] [ 480.864458][T16634] ===================================== [ 480.869996][T16634] WARNING: bad unlock balance detected! [ 480.875538][T16634] 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 Not tainted [ 480.882643][T16634] ------------------------------------- [ 480.888178][T16634] syz.1.2618/16634 is trying to release lock (rtnl_mutex) at: [ 480.893759][T16632] syzkaller0: entered allmulticast mode [ 480.895615][T16634] [] __rtnl_unlock+0x6c/0xf0 [ 480.895647][T16634] but there are no more locks to release! [ 480.912998][T16634] [ 480.912998][T16634] other info that might help us debug this: [ 480.921041][T16634] no locks held by syz.1.2618/16634. [ 480.926306][T16634] [ 480.926306][T16634] stack backtrace: [ 480.932177][T16634] CPU: 1 UID: 0 PID: 16634 Comm: syz.1.2618 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 480.932195][T16634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 480.932204][T16634] Call Trace: [ 480.932210][T16634] [ 480.932216][T16634] dump_stack_lvl+0x241/0x360 [ 480.932234][T16634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.932249][T16634] ? __pfx__printk+0x10/0x10 [ 480.932264][T16634] ? __rtnl_unlock+0x6c/0xf0 [ 480.932282][T16634] print_unlock_imbalance_bug+0x25b/0x2d0 [ 480.932299][T16634] ? __pfx_print_unlock_imbalance_bug+0x10/0x10 [ 480.932312][T16634] ? preempt_schedule+0xe1/0xf0 [ 480.932344][T16634] ? _printk+0xd5/0x120 [ 480.932357][T16634] lock_release+0x47e/0xa30 [ 480.932375][T16634] ? __lock_acquire+0x1397/0x2100 [ 480.932393][T16634] ? __rtnl_unlock+0x6c/0xf0 [ 480.932409][T16634] ? __pfx_lock_release+0x10/0x10 [ 480.932430][T16634] ? __rtnl_unlock+0x6c/0xf0 [ 480.932447][T16634] __mutex_unlock_slowpath+0xec/0x800 [ 480.932469][T16634] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 480.932488][T16634] ? __pfx_lock_release+0x10/0x10 [ 480.932504][T16634] ? validate_chain+0x11e/0x5920 [ 480.932521][T16634] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 480.932538][T16634] __rtnl_unlock+0x6c/0xf0 [ 480.932555][T16634] lwtunnel_valid_encap_type+0x38a/0x5f0 [ 480.932572][T16634] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 480.932590][T16634] lwtunnel_valid_encap_type_attr+0x113/0x270 [ 480.932609][T16634] rtm_to_fib_config+0x949/0x14e0 [ 480.932634][T16634] inet_rtm_newroute+0xf6/0x2a0 [ 480.932652][T16634] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 480.932675][T16634] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 480.932693][T16634] rtnetlink_rcv_msg+0x791/0xcf0 [ 480.932707][T16634] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 480.932721][T16634] ? __lock_acquire+0x1397/0x2100 [ 480.932739][T16634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.932758][T16634] netlink_rcv_skb+0x206/0x480 [ 480.932772][T16634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.932787][T16634] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.932807][T16634] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.932822][T16634] netlink_unicast+0x7f6/0x990 [ 480.932837][T16634] ? __pfx_netlink_unicast+0x10/0x10 [ 480.932848][T16634] ? __virt_addr_valid+0x45f/0x530 [ 480.932860][T16634] ? __phys_addr_symbol+0x2f/0x70 [ 480.932878][T16634] ? __check_object_size+0x47a/0x730 [ 480.932895][T16634] netlink_sendmsg+0x8de/0xcb0 [ 480.932913][T16634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.932935][T16634] ? aa_sock_msg_perm+0x91/0x160 [ 480.932958][T16634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.932972][T16634] __sock_sendmsg+0x221/0x270 [ 480.932990][T16634] ____sys_sendmsg+0x53a/0x860 [ 480.933011][T16634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.933029][T16634] ? __fget_files+0x2a/0x410 [ 480.933047][T16634] ? __fget_files+0x2a/0x410 [ 480.933066][T16634] __sys_sendmsg+0x269/0x350 [ 480.933084][T16634] ? __pfx_futex_wake+0x10/0x10 [ 480.933102][T16634] ? __pfx___sys_sendmsg+0x10/0x10 [ 480.933133][T16634] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 480.933151][T16634] ? do_syscall_64+0x100/0x230 [ 480.933169][T16634] ? do_syscall_64+0xb6/0x230 [ 480.933188][T16634] do_syscall_64+0xf3/0x230 [ 480.933206][T16634] ? clear_bhb_loop+0x35/0x90 [ 480.933224][T16634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.933241][T16634] RIP: 0033:0x7fe4aa58d169 [ 480.933252][T16634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.933264][T16634] RSP: 002b:00007fe4ab4ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.933278][T16634] RAX: ffffffffffffffda RBX: 00007fe4aa7a5fa0 RCX: 00007fe4aa58d169 [ 480.933288][T16634] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 480.933297][T16634] RBP: 00007fe4aa60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 480.933305][T16634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.933314][T16634] R13: 0000000000000000 R14: 00007fe4aa7a5fa0 R15: 00007ffd381ae178 [ 480.933328][T16634] [ 481.338245][T16632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2617'. [ 481.372378][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.446130][T16631] ------------[ cut here ]------------ [ 481.451631][T16631] RTNL: assertion failed at net/sched/sch_api.c (294) [ 481.459367][T16631] WARNING: CPU: 1 PID: 16631 at net/sched/sch_api.c:294 qdisc_hash_del+0x19d/0x1e0 [ 481.468733][T16631] Modules linked in: [ 481.472972][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.0.2617 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 481.483932][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.494257][T16631] RIP: 0010:qdisc_hash_del+0x19d/0x1e0 [ 481.499736][T16631] Code: 75 ce eb d4 e8 54 5f d4 f7 c6 05 2e ba 39 06 01 90 48 c7 c7 60 45 31 8d 48 c7 c6 00 45 31 8d ba 26 01 00 00 e8 94 1b 94 f7 90 <0f> 0b 90 90 e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 [ 481.519614][T16631] RSP: 0018:ffffc9001ca87930 EFLAGS: 00010246 [ 481.525927][T16631] RAX: 0bbc675585af1600 RBX: 0000000000000000 RCX: ffff88804ed68000 [ 481.534126][T16631] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 481.542418][T16631] RBP: 0000000000000068 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 481.550388][T16631] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff8880516a8000 [ 481.558593][T16631] R13: dffffc0000000000 R14: ffff8880516a8000 R15: ffffffff903d7bc0 [ 481.566762][T16631] FS: 000055557c54e500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 481.575949][T16631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.582743][T16631] CR2: 0000001b3031cff6 CR3: 000000002a758000 CR4: 00000000003526f0 [ 481.590735][T16631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 481.598909][T16631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 481.607017][T16631] Call Trace: [ 481.610285][T16631] [ 481.613427][T16631] ? __warn+0x165/0x4d0 [ 481.617595][T16631] ? qdisc_hash_del+0x19d/0x1e0 [ 481.622674][T16631] ? report_bug+0x2b3/0x500 [ 481.627183][T16631] ? qdisc_hash_del+0x19d/0x1e0 [ 481.632210][T16631] ? handle_bug+0x60/0x90 [ 481.636545][T16631] ? exc_invalid_op+0x1a/0x50 [ 481.641208][T16631] ? asm_exc_invalid_op+0x1a/0x20 [ 481.646416][T16631] ? __warn_printk+0x292/0x360 [ 481.651188][T16631] ? qdisc_hash_del+0x19d/0x1e0 [ 481.656239][T16631] __qdisc_destroy+0x75/0x410 [ 481.660904][T16631] dev_shutdown+0x9b/0x450 [ 481.665350][T16631] unregister_netdevice_many_notify+0xad0/0x2070 [ 481.671690][T16631] ? __asan_memset+0x23/0x50 [ 481.676325][T16631] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 481.683099][T16631] ? rcu_is_watching+0x15/0xb0 [ 481.687847][T16631] ? lock_release+0xbf/0xa30 [ 481.692598][T16631] ? __asan_memset+0x23/0x50 [ 481.697186][T16631] ? skb_queue_purge_reason+0x2de/0x500 [ 481.702798][T16631] unregister_netdevice_queue+0x303/0x370 [ 481.708525][T16631] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 481.714845][T16631] ? netif_set_real_num_tx_queues+0xb1/0x8d0 [ 481.720839][T16631] __tun_detach+0x6d9/0x15d0 [ 481.725480][T16631] tun_chr_close+0x105/0x1b0 [ 481.730063][T16631] ? __pfx_tun_chr_close+0x10/0x10 [ 481.735193][T16631] __fput+0x3e9/0x9f0 [ 481.739194][T16631] task_work_run+0x24f/0x310 [ 481.743817][T16631] ? _raw_spin_unlock+0x28/0x50 [ 481.748668][T16631] ? __pfx_task_work_run+0x10/0x10 [ 481.753845][T16631] ? rcu_is_watching+0x15/0xb0 [ 481.758609][T16631] syscall_exit_to_user_mode+0x13f/0x340 [ 481.764304][T16631] do_syscall_64+0x100/0x230 [ 481.768899][T16631] ? clear_bhb_loop+0x35/0x90 [ 481.773666][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.779565][T16631] RIP: 0033:0x7fc298d8d169 [ 481.784008][T16631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.803639][T16631] RSP: 002b:00007ffe34740d28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 481.812090][T16631] RAX: 0000000000000000 RBX: 00000000000755bf RCX: 00007fc298d8d169 [ 481.820059][T16631] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 481.828068][T16631] RBP: 00007fc298fa7ba0 R08: 0000000000000001 R09: 0000001d3474101f [ 481.836181][T16631] R10: 00007fc298c00000 R11: 0000000000000246 R12: 00007fc298fa5fac [ 481.844192][T16631] R13: 00007fc298fa5fa0 R14: ffffffffffffffff R15: 00007ffe34740e40 [ 481.852210][T16631] [ 481.855240][T16631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.862517][T16631] CPU: 1 UID: 0 PID: 16631 Comm: syz.0.2617 Not tainted 6.14.0-rc4-syzkaller-00873-g3424291dd242 #0 [ 481.873269][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.883303][T16631] Call Trace: [ 481.886587][T16631] [ 481.889512][T16631] dump_stack_lvl+0x241/0x360 [ 481.894174][T16631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.899351][T16631] ? __pfx__printk+0x10/0x10 [ 481.903922][T16631] ? vscnprintf+0x5d/0x90 [ 481.908234][T16631] panic+0x349/0x880 [ 481.912121][T16631] ? __warn+0x174/0x4d0 [ 481.916275][T16631] ? __pfx_panic+0x10/0x10 [ 481.920675][T16631] __warn+0x344/0x4d0 [ 481.924641][T16631] ? qdisc_hash_del+0x19d/0x1e0 [ 481.929476][T16631] report_bug+0x2b3/0x500 [ 481.933794][T16631] ? qdisc_hash_del+0x19d/0x1e0 [ 481.938646][T16631] handle_bug+0x60/0x90 [ 481.942792][T16631] exc_invalid_op+0x1a/0x50 [ 481.947280][T16631] asm_exc_invalid_op+0x1a/0x20 [ 481.952115][T16631] RIP: 0010:qdisc_hash_del+0x19d/0x1e0 [ 481.957559][T16631] Code: 75 ce eb d4 e8 54 5f d4 f7 c6 05 2e ba 39 06 01 90 48 c7 c7 60 45 31 8d 48 c7 c6 00 45 31 8d ba 26 01 00 00 e8 94 1b 94 f7 90 <0f> 0b 90 90 e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 83 [ 481.977159][T16631] RSP: 0018:ffffc9001ca87930 EFLAGS: 00010246 [ 481.983218][T16631] RAX: 0bbc675585af1600 RBX: 0000000000000000 RCX: ffff88804ed68000 [ 481.991173][T16631] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 481.999129][T16631] RBP: 0000000000000068 R08: ffffffff81817e32 R09: fffffbfff1d3a614 [ 482.007085][T16631] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff8880516a8000 [ 482.015043][T16631] R13: dffffc0000000000 R14: ffff8880516a8000 R15: ffffffff903d7bc0 [ 482.023006][T16631] ? __warn_printk+0x292/0x360 [ 482.027769][T16631] __qdisc_destroy+0x75/0x410 [ 482.032453][T16631] dev_shutdown+0x9b/0x450 [ 482.036869][T16631] unregister_netdevice_many_notify+0xad0/0x2070 [ 482.043198][T16631] ? __asan_memset+0x23/0x50 [ 482.047791][T16631] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 482.054562][T16631] ? rcu_is_watching+0x15/0xb0 [ 482.059329][T16631] ? lock_release+0xbf/0xa30 [ 482.063924][T16631] ? __asan_memset+0x23/0x50 [ 482.068511][T16631] ? skb_queue_purge_reason+0x2de/0x500 [ 482.074064][T16631] unregister_netdevice_queue+0x303/0x370 [ 482.079773][T16631] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 482.086001][T16631] ? netif_set_real_num_tx_queues+0xb1/0x8d0 [ 482.091979][T16631] __tun_detach+0x6d9/0x15d0 [ 482.096563][T16631] tun_chr_close+0x105/0x1b0 [ 482.101143][T16631] ? __pfx_tun_chr_close+0x10/0x10 [ 482.106245][T16631] __fput+0x3e9/0x9f0 [ 482.110232][T16631] task_work_run+0x24f/0x310 [ 482.114812][T16631] ? _raw_spin_unlock+0x28/0x50 [ 482.119653][T16631] ? __pfx_task_work_run+0x10/0x10 [ 482.124751][T16631] ? rcu_is_watching+0x15/0xb0 [ 482.129508][T16631] syscall_exit_to_user_mode+0x13f/0x340 [ 482.135133][T16631] do_syscall_64+0x100/0x230 [ 482.139715][T16631] ? clear_bhb_loop+0x35/0x90 [ 482.144383][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.150265][T16631] RIP: 0033:0x7fc298d8d169 [ 482.154668][T16631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.174259][T16631] RSP: 002b:00007ffe34740d28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 482.182662][T16631] RAX: 0000000000000000 RBX: 00000000000755bf RCX: 00007fc298d8d169 [ 482.190617][T16631] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 482.198572][T16631] RBP: 00007fc298fa7ba0 R08: 0000000000000001 R09: 0000001d3474101f [ 482.206529][T16631] R10: 00007fc298c00000 R11: 0000000000000246 R12: 00007fc298fa5fac [ 482.214485][T16631] R13: 00007fc298fa5fa0 R14: ffffffffffffffff R15: 00007ffe34740e40 [ 482.222450][T16631] [ 482.225696][T16631] Kernel Offset: disabled [ 482.230000][T16631] Rebooting in 86400 seconds..