last executing test programs: 57.071818861s ago: executing program 3 (id=2732): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@empty, @empty}) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) (async) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008040}, 0x84860) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) (async) close(r2) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000300)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r8, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000002980)=""/4098, 0x1002}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) (async, rerun: 64) r11 = getpid() (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r11, r5, 0x0, 0x43, &(0x7f0000000440)='}/\x00&\x92\xda\x150\xa1\xd6\xb8\"\xef\xedy\xbf1\xa0L\xa8\x9a\x1c\x86`%D\xf3\xfa\x1e\xc4\xc9\xf7\xc3\x89\xc0\xb0\x04\xc4\xc1\xbb\f\xb7\xa9\xa2\xc0\xcc!\xb0^\xe5\xf9\x15\xb0\x19\xee\xd0\xc9\xbd\xf1\x9f\xfb\x1b\xe0}G\xb1-'}, 0x30) (rerun: 64) 57.005185553s ago: executing program 3 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000f9ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x90) 47.345639132s ago: executing program 3 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000f9ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x90) 35.185064543s ago: executing program 3 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000f9ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x90) 25.392050519s ago: executing program 3 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000f9ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x90) 13.954910146s ago: executing program 0 (id=3176): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r3, 0x40047440, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000080)={@val={0x8, 0xf8}, @val={0x2, 0x3, 0x6, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @multicast1}, {0x4e20, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x8, 0x0, @void}}}}}, 0x2e) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="109000001c0020008b7e7a1bfddbdf25"], 0x10}, {&(0x7f00000005c0)={0x10, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x2, 0x0, 0x0, 0x4044810}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0871dd61703eefe87ff070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac00a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e40000000000000000adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54eb44affe1cd0f14d124df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1235cf309650cdf8c6cd950c477890089be400b26dedec1199479b1b5adfaf2b6e05b7f90c9098ed4accddabd802ac5dc1b436e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006b000000660000000000000016000000000000009500800000000000992e5b33961de526f9f9ccc0122eefba0ec0bd98ac30e28f0144d0287eaea2adc8e2d091f40fb9fda345dec00897a901ed0a784ad06c5cd1475d9ee2119314eb81a2b701fe178829b6699fa23f54a48dd1f23a1aaa99e03c653f5db95cb3eb5f4d98038902afaaf30d03f4bf9b0982ad98e18c4498bb5927c734a60db7f1adf846d166c1e7b06711aebc2d60ded9148605558bfc96388a88fa918836c5f0fd9f6085fd"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0xc01, 0x3, 0x460, 0x0, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r10}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c0) 12.797148493s ago: executing program 0 (id=3185): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.751966739s ago: executing program 3 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="000000f9ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x90) 3.925672883s ago: executing program 2 (id=3245): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020500000a0000000000000000000000030006002b00000002004e20ac1414bb000004000000000002000100000000004000000000000040030005000000000002"], 0x50}}, 0x0) socket(0x14, 0x0, 0x0) 3.825485881s ago: executing program 2 (id=3247): unshare(0x2000000) (async) unshare(0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000900), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000900), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, 0x0, 0x20004000) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, 0x0, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304, 0x36}, '\b\x00', "9e8ecc7bb5352776725eff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000980)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x708, 0x0, 0x0, 0xffffffff, 0x0, 0x3e0, 0x638, 0x638, 0xffffffff, 0x638, 0x638, 0x5, &(0x7f0000000100), {[{{@ipv6={@local, @mcast2, [0xffffffff, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xff000000], 'macvtap0\x00', 'geneve1\x00', {}, {}, 0x16, 0x2, 0x3, 0x8}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x7, 0x4, 0x1}}, @common=@hbh={{0x48}, {0x2, 0x4, 0x1, [0xffff, 0x3ff, 0x8, 0x1, 0x6, 0x10, 0x3d94, 0x0, 0x8, 0x2, 0x26, 0x4, 0x1, 0xb, 0x2, 0x3ff], 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@remote, @ipv4=@remote, @port=0x4e21, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@ipv6header={{0x28}, {0xcf29f652611633d7, 0x8}}, @common=@hl={{0x28}, {0x2, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffffff], 0x4e23, 0x4e20, 0x4e23, 0x4e22, 0x5, 0x1, 0x661, 0xd, 0x9}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff000000], 'gretap0\x00', 'geneve0\x00', {0xff}, {}, 0x5e, 0x80, 0x4, 0x1a}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x8, 0xe2, 0x2, 0x200, 0x8, 0x180}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@private1, @ipv4=@private=0xa010100, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@local, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00], 'rose0\x00', 'sit0\x00', {0xff}, {0xff}, 0xc, 0xa, 0x5, 0x44}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x80, [0x9, 0x6], 0x4, 0xa, 0x2, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @private1, @local, @mcast1, @dev={0xfe, 0x80, '\x00', 0xc}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2], 0xf}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x3e, 0xd, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xa, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv4=@empty, @port=0x4e24, @gre_key=0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x768) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x708, 0x0, 0x0, 0xffffffff, 0x0, 0x3e0, 0x638, 0x638, 0xffffffff, 0x638, 0x638, 0x5, &(0x7f0000000100), {[{{@ipv6={@local, @mcast2, [0xffffffff, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xff000000], 'macvtap0\x00', 'geneve1\x00', {}, {}, 0x16, 0x2, 0x3, 0x8}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x7, 0x4, 0x1}}, @common=@hbh={{0x48}, {0x2, 0x4, 0x1, [0xffff, 0x3ff, 0x8, 0x1, 0x6, 0x10, 0x3d94, 0x0, 0x8, 0x2, 0x26, 0x4, 0x1, 0xb, 0x2, 0x3ff], 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@remote, @ipv4=@remote, @port=0x4e21, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@ipv6header={{0x28}, {0xcf29f652611633d7, 0x8}}, @common=@hl={{0x28}, {0x2, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffffff], 0x4e23, 0x4e20, 0x4e23, 0x4e22, 0x5, 0x1, 0x661, 0xd, 0x9}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff000000], 'gretap0\x00', 'geneve0\x00', {0xff}, {}, 0x5e, 0x80, 0x4, 0x1a}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x8, 0xe2, 0x2, 0x200, 0x8, 0x180}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@private1, @ipv4=@private=0xa010100, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@local, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00], 'rose0\x00', 'sit0\x00', {0xff}, {0xff}, 0xc, 0xa, 0x5, 0x44}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x80, [0x9, 0x6], 0x4, 0xa, 0x2, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @private1, @local, @mcast1, @dev={0xfe, 0x80, '\x00', 0xc}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2], 0xf}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x3e, 0xd, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xa, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv4=@empty, @port=0x4e24, @gre_key=0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x768) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000009c0)=@req={0x1, 0x3, 0x3, 0x9}, 0x10) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'veth1_vlan\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x200000000000023d, &(0x7f0000000940)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140004000000010000000000000000000000000a480072b0b627d02f4b83d5c2edbdd4b5da0000030a0b040000000000000000020000001c0004701800018008001a00666962000c00028008000240000000030900010073637a30000000000900020073797a320011000000222c1303592bc20664a94cccd8443e2e29b3acae00643397c7f027319cf0e6a12e436c5f0b080ff7ac09afc0dc87771862afa78861a1"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20000044) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140004000000010000000000000000000000000a480072b0b627d02f4b83d5c2edbdd4b5da0000030a0b040000000000000000020000001c0004701800018008001a00666962000c00028008000240000000030900010073637a30000000000900020073797a320011000000222c1303592bc20664a94cccd8443e2e29b3acae00643397c7f027319cf0e6a12e436c5f0b080ff7ac09afc0dc87771862afa78861a1"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r6) pipe(&(0x7f0000000440)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0)='4', 0x1) 2.219899638s ago: executing program 2 (id=3255): unshare(0x68040200) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)={@fallback, 0xffffffffffffffff, 0x19, 0x2e, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40}}, @TCA_GACT_PROB={0xc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x5}, 0x18) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee001695"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x81, 0x8, 0x9e53, 0x3, 0x9]}, &(0x7f0000000400)=0x54) 2.213615152s ago: executing program 4 (id=3256): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x101, 0x48, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES32=r0], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, 0x1}, 0xc) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000240)) 2.007878341s ago: executing program 1 (id=3258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) unshare(0x20000400) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000000c0)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000002640)=[{&(0x7f0000000200)="adb117d5", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0x1ff, 0x96d4}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYRES8=r4], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0xa000}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f6, 0x4, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x4090, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c) openat$cgroup_ro(r5, &(0x7f0000000300)='memory.events.local\x00', 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e52", 0x24}], 0x2}}], 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) close(r8) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)) 1.464550444s ago: executing program 0 (id=3187): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000a0000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01000000000000001c0012000c"], 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.318907385s ago: executing program 0 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000540)=0x8, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x7fffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000000), 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000002000000684c00020000ff4054377caae84b725e7652be5a32557e215506f805a5203aafcc7517b22a5acc6961dfdfc4b8573de3ca274d56645c3a1ec1ece5ba2308111c42803c563f37139cb78512a364c3f1a7c4125544ca7baf6be99a5c", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r10, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1, 0x7}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 1.179628698s ago: executing program 4 (id=3260): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x1cd0, 0x28, 0x575ac7824d421509, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c9c, 0x2, [@TCA_MATCHALL_ACT={0x10d0, 0x2, [@m_ctinfo={0x64, 0x15, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfff7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2f80}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0xf, 0x6, "00fe1a1fd6c4111e3c3368"}, {0xc, 0x7, {0x75b44f23b92ebdb5}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x1068, 0x7, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x80}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffa}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd, 0x5, 0x7, 0xfffffe6d}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x2f8, 0x2, [@m_vlan={0xc0, 0x20, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x7b, 0x6, "de6f5e45dc04d584527ff15bf7f818fda86ff7a74cec2d2dd5d6dbba4771662e8adcc7517bb70f34fcea8a312487063e2a6b8ce0601493b75c1667949d133d7f6f341f1f825c09858d2e01169ba2cf5b6ce168f604fef3e5228522da4b589e9d931e0624ac8c7c43512d3c8993c39b679cf85277806399"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x5c, 0x19, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x1b, 0x6, "4e41882e723a0e83c77352722bc1b5e27f7a6f5964226a"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x1f, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x63, 0x6, "7c135f2816f038dfe4a4dbe68d6896da14d6963ea69d7736f3eac1fef7334d19d8c7e0693ccaaee9c96d5176fb2312f1d3ee81db80137ac48eebbc72f417223f280439187011a8bf146b7c91d015065fae0c1ce8b12f55ea2c6de8b12739ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0xcc, 0xa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ',\xba+%@}+:#\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x86, 0x6, "6ed1ef198c21c6dff3620afd155e605e467d1217f15e6ee8e674a24de752e8db876534955c28cf29ef1c6bfd49a0236c8584225a2062a246cdcff9337c770e338e986333940e5acb959880e52eac3ccd5655dd119fe0e6468acf929c24cf44ab4b5a511a6eeaa1bd0aa3df891e2357e8343d2273ee0dc233883ba7a533779783bfb1"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x1cc, 0x2, [@m_connmark={0x104, 0x18, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x200, 0x1, 0xe, 0xb97d}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x101, 0x10000000, 0x6, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd21b, 0x9, 0x3, 0x1, 0xfffffff8}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe04b, 0xe, 0x4, 0x101, 0x6}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xffffffff, 0x5, 0x3, 0x2}, 0x7}}]}, {0x47, 0x6, "bd29dbbeca0e0e7bf5590aff5ade7d19afc3992e18723b412827caee2466a30e6d75470dadea9c9c4e56bd32dbe8b82fccd0eca3df2d0ddc005f0ceef5b177c65543c9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbmod={0xc4, 0x7, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xffffff13, 0x2, 0x2, 0x1700}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb64, 0x0, 0x4, 0x7, 0xffff}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="a57f2d779942"}]}, {0x29, 0x6, "a7d6ccb7f76dc8b969e798db598f01fb8a6d73f8499430a9ede14304240a867ac8424b35de"}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_ACT={0x3f0, 0x2, [@m_vlan={0x44, 0x4, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xd, 0x6, "5ffb93653c290e2075"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x130, 0x6, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x4}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x1a0, 0x5, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x7, 0x3, 0x9, 0x1}, {0x8, 0x4, 0x2, 0x1}, {0x4, 0x1, 0x2, 0x6}, {0xab, 0x10, 0x4, 0x6}, {0x80, 0x3, 0x6, 0x4}, {0x1, 0xc, 0x9, 0x8a}, {0x5, 0x0, 0x7, 0x76f}, {0xff, 0x0, 0x1, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xffffffc0, 0x0, 0x8, 0x9}}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xf, 0x1, 0x4, 0x402}, {0x200, 0x8, 0x3}]}]}, {0xe1, 0x6, "6fd3c81309ac197f1b7feba72b42ae2634d3dbde4540c8fa2de22a5e79fa48545947b92cf0b821549c672df0ab9431f212f11a5c48a9dbc233dcdc2e1238669890a2c9afd8091da6278816f3ed82556c45662ded2b890cd52a989ef66b643c346e728c71f320f72a2dbfcacdae0baf384989ff616d77469c12b056b73cb3bb72541550deb6f1f2bf0a4e69215f7fc5832b417a0267f2d108aeeaa581d47125245ea7fa1223e5c6a917066a8506f76592c6e0cadb820c300a8a8e096c1a3e55d13bfcbdc67793aaa53b5d6294df9d286302fe090af4d147855b19af714c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xd8, 0x14, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x4, 0x3d2, 0x9}}}]}, {0x89, 0x6, "3c39d79693389d4e26f30930b31ba4c633209f3866ce7fcf888d6558cb74bccf0ce9cdab691af7009a5c3fe4f4cae87d31faef1ab22b24c965849d8791469f9ef9426fd8d7a9657f900cef051d74afe270ec98dfbf529c842eb41e2115108acfffb3fdc4dac6688518d2acec6053c2bb8e7436b53b50897513efcf268968c8a37829156df1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff9}}, @TCA_MATCHALL_ACT={0x304, 0x2, [@m_skbedit={0x44, 0x14, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff1}}]}, {0xf, 0x6, "e63f06a0aa755c9220f5fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x124, 0x1d, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x10000000, 0xb0, 0x3}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb3c, 0x3ff, 0x2, 0x1000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x6, 0xa6, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x265, 0x4d, 0x8, 0x3}, 0xc0}}]}, {0x84, 0x6, "88f26647cc831ffa88bea30c1afa2a383908317bed1802b9cd7192f15c00c834227d55f32cd08817041b92b8a9f1d1eb21c6535ba6f24dfb38c4f05c7ea978aafa3c1caafb9d5f5c9c403c7cd10fa6d6e79a1436e10ff42cf975e6b690689dcd023d12896ad4956c3790e6f1a0ff1379cfda1fb96b3b144a1b4d5507c275f312"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x6c, 0x1b, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x35a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0x4, 0x7, 0x7, 0x80000000}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa0}]}, {0xd, 0x6, "d41b421c80116779ba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_bpf={0x12c, 0x12, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0x10, 0x81, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x26f, 0x1, 0x2, 0x2, 0x1adb102f}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8c, 0xc, 0xff, 0x400}, {0xb, 0x3, 0x6, 0x2}]}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x1, 0x8, 0x9}, {0x8001, 0x80, 0x81}, {0x7, 0x81, 0x11, 0x8}, {0x8, 0x3, 0x6}]}]}, {0x7a, 0x6, "30187aa3a8a22f31fc7eee78a162a7108754fea6a3746456a51c3a7da9098fcaa7e3ca4da35b5164fd6bf0abc46e676b465d00f107ee1e070ffbc68600a44fa38dbf2a8ad9191c291c38b027a1c16e7dcf99c8bf54e841767166d5f2c20abdccb897e46e17fb422f63910986086f80d836d3c5883862"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x5}}}}]}]}}]}, 0x1cd0}, 0x1, 0x0, 0x0, 0x20048889}, 0x40) 1.106203804s ago: executing program 1 (id=3261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x9}, 0x4d) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b8408217f05"], 0xffdd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) openat$cgroup_ro(r8, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0xd4, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xfffffffffffffe70, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x0, 0xa6, 0x0, 0x1, [{0x0, 0x6, @device_b}, {0x0, 0x6, @broadcast}, {0x0, 0x6, @broadcast}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x0, 0x72, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c045}, 0x8001) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000ff0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000003acf1ec7ae70bb24"], 0x48}}, 0x0) 1.062582112s ago: executing program 0 (id=3262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xfb, &(0x7f0000000040), &(0x7f0000000080)=0x5a) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.04784154s ago: executing program 4 (id=3263): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20004804) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x11, 0x5, 0x7fffffff) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000580)=[{}, {}], &(0x7f00000005c0)=0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x47c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, [0x9, 0xc000, 0xd989, 0x3, 0x0, 0x10001, 0xf0c3, 0x8, 0x6, 0xf0, 0x4, 0x4, 0x3, 0x9, 0x274]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={r3, 0xf2c}, &(0x7f0000000540)=0x8) 819.985315ms ago: executing program 4 (id=3264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x3f) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x1, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x88800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b80)={0x4c, r9, 0x100, 0x70bd2c, 0x25dfd3ff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x84}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2d}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1ff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0xc0c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100000d0000000643b9a98e9f74cb"], &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x9, 0x0, 0x0, @void, @value}, 0x28) 815.450472ms ago: executing program 2 (id=3265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000070005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000070005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b02000000000000000001000900000001000000011578f234a48a569239b925c24fab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x7c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044045}, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r12}, 0x10) socket$kcm(0x2, 0x1, 0x106) (async) r13 = socket$kcm(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 713.787801ms ago: executing program 0 (id=3266): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000002b40)="243dd1127adaf2301110b791636f76fcb5e626f330989240827840e377084a1149cc27677075882f4123e4b69a2730dc890a077b04e906db9fc38c23107f8d84da20a7355b78", 0x46}], 0x1}, 0x4000001) socket$inet6(0xa, 0x4, 0xbd) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async, rerun: 64) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x0) 670.868635ms ago: executing program 1 (id=3267): syz_emit_ethernet(0x7b, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x0, 0x1, 0x3}}, {@llc={0x4, {@llc={0x8e, 0x7e, "b79b", "c8922587f6e3fb0ac94ee502d1a8af6db28affd7ecfb2cbb3e7b0e22e4b35dac59933f10ebcdd2f95bac64f91a346127b0d103f87ef71e59bf8376c394f2eef9be92da5f0f6f710164bd17508d2efdc697151aa31ca7f96506bb839e32c162fd2e"}}}}}, &(0x7f0000000080)={0x1, 0x1, [0x64c, 0x5ad, 0xb43, 0xee6]}) socketpair(0x26, 0xa, 0x299, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f00000011c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0x1014, 0x38, 0x100, 0x70bd2c, 0x25dfdbfd, {0x1f}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001200), &(0x7f0000001240)=0x30) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001280)={0x7f, {{0xa, 0x4e21, 0xa2c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff0001}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x2, @local, 0x6}}, {{0xa, 0x4e22, 0x984, @local, 0x4d}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}}]}, 0x210) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r3) connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e24, 0xc, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001a00)={'syztnl2\x00', &(0x7f0000001940)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x9, {{0x26, 0x4, 0x2, 0x4, 0x98, 0x68, 0x0, 0x40, 0x4, 0x0, @local, @multicast2, {[@rr={0x7, 0x1f, 0xe7, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @remote, @local]}, @cipso={0x86, 0xa, 0x3, [{0x0, 0x4, "5edf"}]}, @cipso={0x86, 0x16, 0x1, [{0x0, 0xb, "a4f56ad5f2b8bc10b9"}, {0x1, 0x5, "3a872b"}]}, @generic={0x44, 0x9, "0469243fe0ed77"}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x13, 0x80, [@private=0xa010101, @rand_addr=0x64010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x4f, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0xd1, [@broadcast, @multicast2, @empty]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001580)="8959a0a6e5ba45f20accd170cd725aac98d2846f103f85c418dcfd113028392fa0db423fafe8c2f877db347461a10205706eb4bbee07a92802c149461896408faec16c58ff66619623777414729144201a5e9ce3f4ab79592624f325ade56f7e72db17ce8dd6c90189bb720bc7dd6d952ebe9f400b3e1903", 0x78}], 0x1, &(0x7f0000001640)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001680)="43ce067382f439310e9907f8c3a1b0879c9921ffddce15b3aa295a08d693d30d71408c111ab41cb46dcc54bdb41d0daabde70d628b87e955bad317401ee216e90e88141644b3c38917c5fb8b11ba7ffbe51a459d9e0a7ba98a1d881453d60af21f218a80f16fbf76d23efa7880fb8c01a6b507acb402e8e579fb46dac242d3a7aa65d29be5c6c1f8ab65cef07f7e2d3497dd97b18d", 0x95}, {&(0x7f0000001740)="e4466730627f8b2454068c494497a8eb06dc247414303a97f8c53af13049c55d95075db0a5a5b55b1d789863d0b36543c809f63f1d1c60771894629d3cc70480883bdb2efb15ea9fb64d75a5b07f265abeb5e74372536049342bfb53e1e07720d152474cab5d61a93eef4ab61d249f76645bd7820639593ab2c5ef0aa76d7514f2b23f8fdeaa4a31f2bc61be8923da61b580e00a2639e7a14725d9ee6c6d3439eac47bb1ed90cdc7dda2b3e839ddd3a769d173bdd14edb857d8d5172a2306d479bbabc700ccbcdd7", 0xc8}], 0x2}}, {{&(0x7f0000001880)={0xa, 0x4e23, 0x9, @loopback, 0x80000001}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000018c0)="07021423412634838f87d0e9f4315b0609c5755d2ffd48e7", 0x18}], 0x1, &(0x7f0000001a40)=[@rthdr={{0x48, 0x29, 0x39, {0x3b, 0x6, 0x3, 0x6, 0x0, [@mcast2, @empty, @empty]}}}, @dstopts={{0x1030, 0x29, 0x37, {0x3b, 0x202, '\x00', [@generic={0x0, 0x1000, "17c7fd1a4a7e8839cb65c1c8222cee9c69afdbfa630f6a43e904301096749d530cabec6d81da027bb45fa5ceeaafc63600f5972c344cd824699f5df5e3e6e78e850d35535585636a8836634d5db44d38d1b4d6e867cf7cb126d9629beb8d8f738f96343b58037156e6e20ea3f9a14d3ccc4f6de1f03a705db930a0cbda0262f7890586f006949a9af9e1a60b0f9d0ab538457d79ade31f548301d367dc617ce1a2b28011bd536a71fdf214ee17d78e4b11b108636eccd7741d7bfb1911faa0771909cd2510bfe02833960e177025a4c7499c24ecdb5e6bb7125f2b09b77ef072fe1371187a1cdc11fc528180fb320ac11c46b31ab500d544ec78f608471fc4857afc52c2758ca66fc5b91d7b7ae790f685f18a3fedf229ee0c674b88891ad7536b5a2f5a2798a648db9a9290925f58e3ba3d0e6cf9a52e0808fda43d76d5b6a25b7409c766cc459d5f5acfa6ba407ceeec36b2db09b1a3db03eb0717b2a17c572e11d2f349dfe71114c4162a9f6c16cb4ebd914a25f7babfcc8b928eca535f022410c2c142396f9c590d128043fbd3b53ed5b0e451b0d389e5b0fecbab8602658cba4bb6d2e896e5438da841dcf0542e2132912a5cef4526d3bb7c37c8788c0f2b1bd7414b1013fc4e0ce8694d4ae464f2cbf75ef2d79c83db1cd0ebea178f753b066d73c860dcf90984025b76fe19aa2f6e1f3de652f8d0481c53a6641ceab2f4ece17280ea913f26506d3b3bf2e4109e81ff67e5b7b2daf25540ed646e19ecfd8fb7ff9d1cf071d5625a4061351c5fb3c95550511e4f5b2b521a1b0f37f28a43ffe81b221c07270da1854d2fbe543974225d94c7208a5206d8ecd2bdb67f93b5e950fd5991eb6f41c5b42943a03ee606090b3502b423d11644d5ad9e3dbf22773a2b132428736e1f725a7d3d908a5ff7bb3cf70e1a5ed83cb602f6672a8a59c27329056ab51b5bc048fd5c7ff8bfd31a62a2b3864f9abdbea62994cf6c64e3c4566de92dce462b08e25f76d915b4595e99fdc87cbc6dcd2deed8c36bb0416e6979bbfef28c7296648228e089f4ccc7bbb97f1b57e8b45ffaddecdebdf3e0bb5daf80dd9050c4f5c35d0a6a7df367fb64fc50503f575eaebb22697e36db69fd1a6ba60f26c6e0e671016cb01209366289227b925e08d402d1016b11bf52a81b7224e2d06c2d304badadd2154e19f90ed0f6199e1bf860f3a003a9cd6df344ce36c7e5d3216d90500b235466ba4dad04853f293ef0827ff7d68d4d3d441af4a940366433cda8fdfe6ca8d5670cf7207a6085a624b952317b6bc3afd053f433e5d40182a3c353b8bd320c5dbd37e319768f754e32b70e911e47c760affefb4fede4ec56ec926e60af81d4d0c800e538b2a056a093e0e78e12b79b7029ca3818d86a215a4001ec59c6db406f1bbe3f6580431a5e0daec6165846634dd3678b5a598106705204edcdf8eda31ec8ce122101edeed9dcccd67798b13f95d3e20a0293173c3e9b605354adbaa48bb6c81a405cc911c999e7c249bb0342ec56c8a27f7268f69543f33b02de87d35de210d8fdd7899261c92365fe79670153373238ccedfab1699988ac3887430d3fe4bf5104e350352ecb8bd44883a54c10b9d4d339aa933c3fc65be0f4555931ceaf73617aa8739686b5521d04285186c4e49ffe81637949a1c941c07a3e1cf111df8fa82ea807329649c44ea5be961ede1a73b677cf60e073a8c3a27dd3e3fbf0a3503ce256f7f02258a0b53f77f356826f06c008afedcb69c4bc5456ad841118aeba54980f93a618685a5fc4957ddd36d646489828f46c20c8c2c921d6a144c0cccc265e74bc24baf6a19eaa8c9e1637ed3533f5e6575bd707ab13027f7a10b56ee89764612c1404bb58ce20819b9267f6670a88aad5840fbc265959ae3e2b22764b94693a2be812ec2ca89afdbb74b11bd5f0945b86096ff219e75bc1d6726bd12b993330ea4b02a8f0e65bf4a9ac8b75c0294f1e4ef74554926bbab98412fd23c20b35c3cc0fcf9ecf30e3c556c5428d011b7ceccd5666f3e38268b1d6249c12fe980d525a93e7bcc1a2b31a41c6bf7ed3d477646fed06b7b7549eb1e1ea85986721bbfc0f8a1e632b43995460313835be45e6228d5b24f0019db4ac1fc8be8e66263a683593f02217edcfc17034e26ba2ed396c11164adbbc121df7a1da9b6eba5fbf279e439fd7d754e7699e01f4bec81c13426112104c65024d2c616edf38d36ee5963cf7efb8ee3925b91beb3980a6006fce82875405a7b195fbc10bae2635cd8bccc43492bd833db2a0118cfe8901a5eeeb419b3a16daf9a088a0da3c802df7f2824a60e63cc8907f0c006b454edc2d2d4a6c29e662fb449415983463548f0085183018912c17db26befc7069c5c5417e9eb96253c2d9d10e6a99b3a75366fff3057f2f1f8959e1fcd0b3295bce4bcb860704c42d6f69fa29f72780ab7fcfd7b7c79a9eb9918bffd744fdf2a3596ba1cb4f394f5179431f98f2852fe0ac9638ee5ab91411770d05c60533e4ad5d8ce88ab4b1d75d31e3912becb381147213d096419fa7600e2a62d1b4157ff40f25312f200811ec62795427cb648fa445fbab720a33846ab102a57a4183e3dee5f8db1ed262a6bcab0c45e6aacb3499f3d43e1003759aefaf656c4712d9f8e2f46fcef57f39e4fd5586a51453e4d158caaf5f1aaa10fb92dcb585863f9fd8c872b323dd49de2267924fcb10f91cb6d92de5418e5a5f70e53f311cc62fa8002bcb5f18aa5b9d3fd5b786718a65e91ee6b45a2f7ca986cc4e7f6a74cecade4ace7d43fb5a7a0fee223871b4a2d2421efb86687ffb7153066c1d56c4eed2a3b3f66ba81ff606bedff24bfc46b95b57fa156665a064985e08ed21a926e5eeb7c8bce2c81225bbb01f07f5fa76b79c29cff6acf6993be44898931fd397ab6db273ffe7468a35062ea55f1762c813b29f9a185c30e02e3eaa267417a513a988fc9dc4628ae1ce006657746b4eb6519a0a4171440c3343536652c9d399dc0757dfae9f3ce10dab2219c076acc28363e8ed75669c542ef693c3d8bcd4a96e0eb255d89021e6c3a27cbc2147f7df03b2e7ae7f109be099b91a41cdda56cb75852be555367f2e550f11e1b4768cf1c618883a56276198eae46f8f2ffc58f538119bf1e8a8e85a481bbd45c1e329780afd6fa51bcbfc74357da5daf62bebc9f0c0a33d886dd7b495c9689a3a696862eada87070708866b2e37261e500b0a272304b5ccc0c0dba8e33f1efab1cac7f2b8917fa25f1b23e1bb17a4ebd0a961d7f6476ac5859d42777ca13fa87507fd19fc8ed2ee5df2cfbffd52cfa4e737ea163a0d11a543f483fefc30678dfca0b8373d062fb7dd495a9b793c871478cf827114bb847eb89ffe2d96e8f52ac484ac64c4c8bad9f320b30d774e4ac979cea00e93377968e1858bce834ffea5af3b3528d03a7242f91d8bcc59ced60026d24a9c594435ca8c650977fe6c1cc0fe78e79bb21f505f7e490bbe3f5885acd063dcf938d9f2801d4b962f8e6a1e548c8483fd098cf56d4ab2584775f22cb8d79d99afff4a9c476d8e7e1f517f5bc742887ab6d9eadd5a17b6521843ef29d97f799a852919828732d2679e1689d466f307917bb188eed4b3751a0b248dc5eb4930353bc18370c971dc5f1e3c3627930d091a157ac88989c00c05c173edf44615925ec108cf3286e4c89beeb50311ae97333331cf95640cbba95a2463948e6f7b1d4ade1d2cbef774bf126cc035eda71c6dc9f829b0e55375649598687b308ebee357440f327a2dd9da663e427d7df0289130692246d614803eb56cfcc2fa2419c6e148d258370f065ca86d9a5a342e75922100eef34f773cd0713dba52d26e8ad112c3a209fefeffbb2a1869617245227c265f5c21c667e6b99fc525212ef610602ef20bbce1cefe6c991beaf1af4d00cf7c9c61e6f81c58096f18d96cc128a29953f03b04cf329196e4a72854d0de500c6a619db154d9ae936b5283861804634cfdca8c4d7ad67c9bcf6326e1d286cf73a9403830288b956d51949be1111dbff8d20bd61d0612f698c09b8adc882eaf7ef5489b8fd6398e6b34c926dc2261baa15a5636846225cc96513e63828f403a421002709cce1d1397a0ce846520bd507d44bf4093766af1b7dc113aa724a595bbfd54d2e220d820a89963911222652713a76a7733eb1909043db29c634ff6c5d1fe1f4e010f145961f721aa226eacfdf70436bc727107173bfe0825b07d96f23735d68c5de3f11fb3c8a267b42bec14c38bb996d589a8ec7288231424c6dd324689fe2c7dfedbec8938f3eac0f1d6204a6cd5e097b1848162806d84f52dbfa18934060f8c644e7c9c552400ae01a1422c06a33a8f31712545c3f9bda2daa589e649065682bbc489d5e34556539aaa246822a88ad578961a148ca314f7a953a53aafabf6b3781dc849b0038bb4b508a84a031f621e17080cf6094b52fa4216694c1d0bdf2459159ae7a276cb286ed8716f7ed186e0663ffa72b5dd04abf92ec66b93be87c91c3776f77850ff2fee3938f47d0523046805a0bb974f67a2c1b9985a457700dc3fa6c36328a0472bd3cb140fb01b4b0cf883d36bceb85697c98a1ac6f02de7a1c6e66cacd36683563e3c7a4a7b4509078bbccc85f10b20e5a5537d442dadff6dea0ae6a2de84e50f49e0a4138e5b56638d053795f7d34d1eee6669424b5ac92f0fee54f29f3bc05663b790b34dd70f0e8b6309a6b5bf8573f4231e688b62c401f7182bc50be91beb98ea05b7d855c33851b93023f0cd3605a19b79a004848f82f1d0a0892c660fd5204bedf92aebb0c6e609b4adf1d9585c92051513aca1d0b6f7c59c77488dd16bffa5626617aa5959fbd5b06a4ac9589eaf3d4b1bafb701ae6cfbac4b0751bf15c9b827987769dc8edc13cf3792032c875e9eb82e3c1994fa3ef770d585bd2b89047b5bf3b17bfc62010c3d15a18c23d66b0d0d241220b7192a0c1b743a521e77541a085e8530c05d0cb79d48be0e0ea8fbd4f8779f4d272adfac6565e9831d424acd6725afa5e0eb86f30e23557ae835060eb2a232dd5c6678e7662fb7a2f5bbcbeb5e6d7807cd3a37262953fbc5ec3eed56efc68ad935f300aa16d2491d74b05f08e7aa2122384ea9e48ab3e8200de1c9cb308eb505d3c1133e436916da8d28dbc1e6e676e51c4106723221f7b05b3c95c2d521ff3977141562a609d1f18759fdd4311bb6e63102281c0b6071062fab10888cac6d6d2c141e84aa93afa11cf348d3a56ec3398d7945860f39ee1b4868696ef2d6446e1c54aba45c803b1db7e19006e8bb4d9e37ab024bed7a21d8b86ea06ec878fe919f55779cf4df8b6db591afdc7d8cf698001d59247ed0523efe17a51b869b1c0dfadd9582ae1598be3dfce234c8757dc252902f8067fcb55025defbe327ac9cb08120924a5737c49ca5bb001a1e62bd7eea55ea4c5334e80d39bf46e5b24f9a5fa89321a3d3fdb97f1b2a7a68a16b0b94e0c0afcc3008dd69021904dd4d1557218f22588f866938cd2f56c26edebfea0c6961c74ad33a3d63f97c8f440331403f152b2f5b65d25db707bff4267622f90f4803771f095cc957657b7d1c3dbc7d7ae8281a54e116498cf2c896153f650230a57ecd4fa79b60e6a6bd8ec274aaf253bb7e4ae60f3c9ffdf169b356671cc1f435035e5f524d5994794ae7a51a945c1e552f719fc33508f243b81302d4df2258eb9a2a28063fa8e40b64cefbf72c43f8476d19066f86221153c7cfccb4fe04f89bd6f065ba4119c5469c9a"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r4}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x0, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0xf}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x10f8}}], 0x3, 0x4044000) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c40), r3) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x6c, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) recvfrom$llc(r1, &(0x7f0000002d80)=""/161, 0xa1, 0xd0867babc5a5b7d2, &(0x7f0000002e40)={0x1a, 0x104, 0x5, 0x1, 0x0, 0x1, @local}, 0x10) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002e80)=0x0) (async) r8 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002ec0)={r7, 0x0, r8}, 0xc) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000003f00)={&(0x7f0000002f00)=""/4096, 0x1206000, 0x800, 0xffff}, 0x20) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000003f40)={'wpan0\x00'}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004080)={@cgroup, 0x35, 0x0, 0x3e, &(0x7f0000003f80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000003fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000004000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004040)=[0x0]}, 0x40) (async, rerun: 64) bind$rds(r1, &(0x7f00000040c0)={0x2, 0x4e23, @multicast2}, 0x10) (rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004100)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004140)={{{@in=@local, @in=@multicast2, 0x4e24, 0x3, 0x4e21, 0x0, 0xa, 0x10, 0xa0, 0x1, r4, r9}, {0x100000000, 0x9, 0xffffffff00000001, 0x6, 0xf, 0x8, 0x6, 0x5189}, {0xc, 0x4, 0x4, 0x800}, 0x1000, 0x6e6bb7, 0x1, 0x1, 0x1}, {{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in=@local, 0x3504, 0x0, 0x0, 0x0, 0x2, 0x68b980f6, 0xdb}}, 0xe8) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004240)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e24, 0x1, 0x4e22, 0x3, 0xa, 0x80, 0x0, 0x2f, r4, r9}, {0xe, 0x8, 0x5c6, 0x8001, 0x8000000000000000, 0x401, 0x6, 0xffffffffffff9561}, {0x9, 0x1ff, 0x8001, 0x1}, 0x4, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x2b}, 0xa, @in6=@remote, 0x3503, 0x0, 0x0, 0x1, 0x81c5, 0x10000, 0x3cd}}, 0xe8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000004340), &(0x7f0000004380)=0x8) 296.086033ms ago: executing program 1 (id=3268): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r3, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 293.36934ms ago: executing program 2 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80000, 0x200) bpf$MAP_CREATE(0x15, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) 292.948949ms ago: executing program 4 (id=3270): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}, {&(0x7f0000001240)="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", 0x234}], 0x2}, 0x9cdc2384056b48b8) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8c291c6ba507affa323b89c9aea596797c746b9635fc9d3b"}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240048c0) 208.565163ms ago: executing program 2 (id=3271): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={0x0, 0x7f, 0x3}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r7, r7, 0x2f, 0x0, 0x0, @void, @value}, 0x20) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 183.25442ms ago: executing program 1 (id=3272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005000000c4c056717afe4ba064cd250345760051d87e924edeeb55f953a2b8b8656b20aeed6cb6b1fcc590bc99f31bf404d6a6fa503c6ce807e285c135fe427baa7f0b99106b066569336b9c5a5daf4436e99ba47289fcd341eab4cebd157af5d1acb1598d1370c23b76713f1228b458289335852b55f3db26c67546ca88cc0fbbc108d57b1ffeef5a38", @ANYRES32, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40821) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x2) (async) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet6(r3, &(0x7f0000000100)="ea", 0x1, 0x40000, &(0x7f00000000c0)={0xa, 0x4ea3, 0x10000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000100)="0c80a508b7fcc1286355914f06d7b732c5377635847209c23e432858d3a9dbaec2d5be9be6ce1325eb74efcdb1a8befd4e23067b9d4914be7cb959b7506a7d2f7e42e5b9ceac3c9c", 0x48, 0x20000084, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000000), 0x728a, r0}, 0x38) 111.961312ms ago: executing program 4 (id=3273): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000140)={r3}, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) read(r0, &(0x7f00000001c0)=""/99, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r7, 0x5, 0x40000, 0x25dfdbfe, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x50}}, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000005c0)={r5, r5, 0x8, 0x3e, &(0x7f0000000540)="eef779b8637a41dcb93e3b10f2c196def5ae58d10f3127c0d3c676b8f8bd1a8193fce12b964ee538698b309ceb0ef733f7a8b002b2de985b9a5bcc9764ff", 0x70, 0x1, 0x10cf, 0x1, 0x8b, 0x2, 0x7, 'syz1\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x30) 0s ago: executing program 1 (id=3274): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @private}, &(0x7f0000000280)=0xc) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x4, 0xb072, 0x10000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffce8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x7, 0xdd, &(0x7f0000000140)=""/221, 0x40f00, 0x2e, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r2, r3, 0xffffffffffffffff, r4, r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000540)=[{0x4, 0x5, 0xe, 0x4}], 0x10, 0x622, @void, @value}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, r10, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9210419}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50cac88b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x642515c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a16b1fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4877d10f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}]}]}, 0xd4}}, 0x8000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xb, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x9a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000000900)='GPL\x00', 0x792ee0ff, 0xb8, &(0x7f0000000940)=""/184, 0x41100, 0x4a, '\x00', r1, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x4, &(0x7f0000000a00)=[r6, r0, r5], &(0x7f0000000a40)=[{0x4, 0x5, 0x1, 0x5}, {0x4, 0x5, 0xe, 0x8}, {0x4, 0x4, 0x4}, {0x1, 0x3, 0xa, 0x8}], 0x10, 0xfffff001, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000b40)=r11}, 0x20) sendmsg$kcm(r5, &(0x7f0000001d80)={&(0x7f0000000bc0)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x8, 0xf, "2edda5f8f827529b0b685e1c4d2d96c5c3ab771621f692c5ea92d599aeca1b77a5a495f95b193a6b26595ae2f9842a792f4ebfb7190078d9ada586ab3b62f7", 0x37}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)="d0ab613c33fe533b2a22bd167425d492b679c77bdbfe018a1af09b33d3170b7d0c920eff477be3de8ff4aae0e479db22a3011b391d2fa1385c6c658d8b1cffba4fc1f1a2bad3a59f4f2541bab5cd3b1f97089acd98c4d607a782860d87e007fd9c7a3ccf3802645193e31b2377c2ef02295a2e71933d5c0b8932ffd1cdf9308c56d66b5b3652072511195c135029f3c8153c7dfe0e039545f400252734999ccb486227bf178966c9e381db36be242b7743d905e00dc8f73edc026c5a9244a5610c4b43a6a066e59bd25ad4aa53d764e66fc948ca5f1e241b680f13ecc00e5164db7355a5d40b5dfa5ece057f1201de1602d0829ac876242d8ef00d50efa05863a9b53fe9bb84da1440f09db7e5858f4df616afca08c784bce974ea0ca5af6b8aa5163fc630be56d91dadb534dd1d51959b09e972455e2302a54a3a79f72f4e6651206514c14ff3f79aba401366a31b068e26cce078c1b9b6fced3938b7fc5d0694372afe79742d89bb72b3217431264d66eefc8012eef5153442d408061cad9ba80584d0b5f08ae8ac7a5f97438995d03044a76e24528407ead57acacd1ad8a0c65a955a683791bb2770f20fedc178383b79069517fa131baf997c64caddc729b885d74cd4f420ea90a9db09657e42069da8eea2297561d375f1c614d56e84c5eadc496f71c34ce700ccc508a95817d7a419e408677a7a6c74eff7035dd5a8de2d3db870522f4e526235d37ffa00dae36cfae41c8eb47c0266dbfc051602d2bde3bcda5a411ee97a4faf5f7ce13f5e36a61cbbe35b2a196f1388d40e8ebf16d5c014393831fd78247b7ff8df00a26bb15ef1b8265d6b7c1086cc5780e8d9d5ecb1f06300dfccfce3d8b904ad5e8b8e147f5bb305fd7bfe477956a586387faf33df74ed44fcf6cc8509de22b982e23f519dc33fa2005729e6551207ebb44244e49221e66242c9f2d42c2b902f98083a70a860272d1e3e3e393eae7d79f0f5bf15b278483f987c4ba6ffcbbdf327b9e0f084e7f66a8a3100aa1c8f7ba803960a98dc090324f5309b73edd105163ec936990168db5773060840e826f3f9a24623603accd8fb91ce435eed5025b628894cecb7321ec638496d2a54ce8f65c3a062e72fafa18482744f4e5c3b854fdd7be841862c863a78653a5189639b1f8b33a439a9fcc28fefb924783d1908e70f6dd519a542af01ae562a061589cfe780580614669dda73ab387fbc0024843c057826cc0360ba6bc76388e658c2c6aa5dca16342abe22e3c353541cf52f8a83a389154a3cc9e733a220f972cf44581ae9d149907103d700f1f34fc4a196256e8ed048d30b5e015f23fb7fefc26664472bf50ecea7d25fa1a14bc7f9abf2cff2ab16432503aff95b2d8e917fe8d3d4c410d45589f608b7ac5b141aac247c27be3198663add8477277779388548679cd3311769fdf397c2438e04c230b0db35e1bb1a7e5fda4062f0f5a5e9f3f869b4f094efb304718f7ef3ba5933fed42fd8f5e406a6008f1d51cafae448c54022505bbe6140d31ecf9bf8fdc44d3b1e4e6b4577a30b49528d042a0a69259868351d66bcb84b03565eb20131fca88d3ce808cae85b3c720f4aba6927283ae698fd299b3fd8350a89debafc8ab0ddd795b73fa8e9bb00bd51e5a27e0eddc368a5ca3d1943ba5fd55f750119311b4474f2c82459bd5482a8822929356c6d04d591f8170e4764bcfac36e5ee02b1fdf58a9c614c2d3ba098e2a5ad75c1ca0934150517808725a49229af1f3f552fa139b5e0b8c57a74f25f24d35aab70485fb70bf2c67db00757cf95cc4e6baf06a4e65b1d99634db6b87125d1bc4e181cd3d01de2e5425d67a2f31d82380fa6c414ce8bfb55cdba974e037ec68f90824bb044f8d4fd8db8bee9f8309924146fb9557359646398f24f5fa423bf9270fff0505366111480d8b9b0445152b8996f84ec713e88eec45ef08a403357524eb4b9e27fd5bcc4ecb6a4b426b21b1cf3cdd777796221e4c0716271abc3610183362c402673a31d7cbdb8ef5aab91375913732560182adb14d8719d305180f77b06f5c225afec2afa4b2c369e9455c9dd56eec2a04f915351c866d30c05a7ed92644b406381b6f70718ce9ee344c4c3e9bb071bc8870dbd41c9287a585ec812596154c6de3dfb7267528f0e096f525369bab534a9c06e59af5ab494987575e230ab6705911cb1520c22aea3a2fe4bcbc662c49c6e9f3ad21003c1aa033e1d17fae89fec135bc937a6daffefed73fa415551d3f6729cbb40e0973f2297c0781bab9c0331ba09c33196aa68df2eed9fe3db513c136b61196f204270afade86771b7f3be141bf7c9d7e8035a30d1692b468df447e9dfc2c33c232d1104bd188737cc921263cb7b972790a6956fb388bd10815f7afff20b6a6774f6fe7d74838bd3e80fb5dcbbe379f136d05d31c2a63cb11a8ad18e95f42068c98ffee357934ffc6c5fda8d3c30223b074f5bc77ba9e157b64d6218c9cf05b175a2d8da63f1aefca4c7874da6153adf517d7f15d05fbee9a56b15ac15fab0310e4caab9963bf1f5ba309af29db951df3e15a68440cf6b63f4f2996c802d7dfd7f37d34786489bc19d806c08a173a6cb6935a853d3a24d4c7d1a99c99204148ea21bdd5f14b0cea5c19da18af275533900f7ff0eb8640ee3bab230f99cc793368f5d62da04f099edfbf8351c314e566bcc97e563bd201067287c188ca0175d97827f515dafa7f8cbc8d9a49ce2a4c050f4e2171945464caba785f785bd3fef2019eff63993632b2e1071bfde66131feb302eb732cec73c15436cec270b44c23e40376aad6519f87b65c47d515452b91d1f6e34259572a033ca43c743ff5e14e2ac79c0f79adcab648dd29d888c7cdc726f3e822375f538f81027fcf755c0e04fa7c30aaf67614739e0ab2d4b4bf215ba8c2a73494dec05df5c98f34b423f1ca3a7a4f8b299e8bcfdc830430cee372485164dd6c68c5b0c858ca4ac249fbf20f89481bff0b29bb4a6bdc1e168079d767be13129d6ce7714386076d24b5b50cef283c59c87843e464f8f11b7c2064e19af693df105d850cc6040c084a3bb7c20666f8e31e8a1ca480b5fb8682bd8694f0462826f3ec1a9e94e1dacc02729adf5a0e83414bed9bd51f837bab7a18f807185da72cf25273357068f4c951b3f7f72403da0de552b3638e4190181082ed51cba319a684c169050766fbdbe4d14279eec4a3072e14e2caa7cd5dca792cf9675b59931e9748047fd2cc408d29f83e6d441796dbbf6a6f1d91107c5f4a8eacfb2271004f4cd45941261b4c229c33f7c5aef3a8b1ddadc8de8622f27263f7b647a23f2f37c645c7b40634b3a491ccbe3e8aa27ef183ab82b47b15d13e24249ca9e72760397904061756a01d37df762b7de84b88beab002b06cce68fb697004ad3ffd183a59dd56efa23b42287e37ff844b98e73c75775e641269f0acc93617624799ac17d2059aef16b525e981fa3ffcf7f1203fd173ff904faaebcf37b29c7cd706a8e732dd12e8910caa78a4446912c6f0d33d5cc415c11142fec468c66995db4ee813148b854b9d6160318e211f7c6caf2982f817e40f5c2940144a90f1d47883ce5159b8379ad851f2cd6264d2aec69fa59f7b7ce7ab760d9e83e738a2a3d2147020a08abde3171c8de3fd0ffdbd0e025e8aa269e73e1f882632137e25e8897a4d7ea0a35d8cb1b2a5f66b158d9047169dc3fb0740f7efde35d8c2d589a86657e8aa129e3ff12367d94a0b48032a0a464570b30ef1979b66053f1ec9e988726abf3bc528ac189fb9576c46bbaf1150d7a200ece3c613ed7a6b85256c6f140951e6bdf301c25af9af0e9cd158f5485adc1b5c0894a14f85c48707418997b668d9224a169feb03c8b021ce1a83135b7f6acc357eb71b5928102e623aba9282b2302ec4432514e22152038368144299fc4acd1a0bb655dd56ed19c86d669a6e70cf2198c1c9b1dd5d79c6003b644ef78550b7e30023758983100cba6ee1e54434910264b4a2b03ea2055a33af26a814e40fc54e85cbb0f6c7302e0efc1be51a674facb6d6b90a37b48f45e47f2795b4d4c3bac06ffed007f9979f5d993abbf355e05877387b5f4e14b3e7086846bc6df9efb594a0c98019122b3dddf2f607c5412a4b4a4df8a313f950283f024e464467bce5cd16a1b6947abee07d9bc210193553db1e75396f067728a4b491e15057ce21410ef8bb2d1a0c46b2e0df1b1383cac0efa2ec58f626b99798050eb441763b21651d0a295057c231ab8b3e1f30535897952602c596bd946a38ac9a3a3eee2ba96ca44b9199374c120eccb98f768a239852af2fa6a56c828cd69bc29d53825f910f030cb15a01784948fdc2c7e125fe2e47fab0230c06963d88b10ed804bc4507de6f28da63c171a0c9c30a18bc8353cc22d9da1b174e583761ac300b9841b990c2a4decac8666104938075710c1e48a32504789789a859fc54f1b26be97282fb7fd3f41026c55bb337ce410afa9e727a00561f6eaca735901f2adde0a315d7afa4edb42536b2ac2f923bbd2836dfbeb52b9670642e785720a55b931962673fd317d625c6215ed4bcf1778a2b99c6afa6db639d38bc5081e580be28d2352dca004192b1ede0918cced6a6cee83cb3d0ea6d2a45b631e011199df246dd20913afaa87219c8d97437ffef6e19094e483012576fa61dfc92d65aaed025aec7d1664ef46b33d0e63b31198418255a43cc5b81eb15a2f7b522b1aa075380e6136080ca53b6a1cb7c3426c49fc36b916ac6ec73dc11944dbc9523852431d74ca2b8ce20e63e903fe86e3b71ffcf02ca6a1910db29946e809815d03714cef4c468817f00863537ee210cc856a6c3e397b01e0395603486a45ed8dab5f6d6e4e92feeae37c89621c05573d753af0b46b2fb0a5574668ba6be6cfb31e204016342ed0ba379759b85406c280ff67e3e864f1cb847984a504175044602bbb559ce468983a6653b7c2d1d41de7bbfb383a430a78648055a9f9b54f1e9f1b4fdd8f5053c9460b6b773cbfc5aacaef18729b456f665f516191dab78cf509cecb4815f69511c798111402ad327f8d9894b8deb3932929245f1e0b439f7afd2d91e92cc66c08eedb09ef53f034f87546d253562c1496c0825e0568c4889109e6f6129fdaa7f9660492827a33d7508a72251edb15dd6d65120c015d545ac6aeb021dc25c565cc9ba1fee3645c892105f1934d786e5ea56afb6fb465833f4b73a4107a5abe843f525d204990eea65c079a478f0ef917c83bac11192a1391ebdab38ffef06ef04a4ab281935466f14ddffd57289726f6125aec87dee330ef8b61464f820aa6fb1afb3c77c4e70684a5ff93a89f654b8d50c0db6cb5adac9b4876e8aea916457567f25fcf30ec4d217ae0983f0ab012bd4fb499c4d27e7fa74a1dd444d2a4316ce26390cec3ee3dcc7a40d9e543eace93000b354e4ae78d723a9ee6a4774602066fca2e3d8a3cea4cb746ea98fdd8af92aa1795aead4bb60f35090f25f7c1293627466a0a7fa2f55bcb1108dcd7a334bf2bfa8b7b8ce359fc05b5355f2778c892f3d15458c03e6cb70dd747f2a331c9012a84ba525812e0afb43ba567cb5cdaa567b10f36dad01d4681b7bda04734706af307901f3a8d6cb8f99559dd6503d924a4aa4a10fb1c289975a3faaf802a97108158fc4bc87b5de74f5050494674deae0d03634fda5dc541bb11cbb28dbc85a7dc54523fbf2e2cf311505f0016eef84977333c64ced2b304d9bdb1d9631546f61abf38c7899bd21cd5", 0x1000}, {&(0x7f0000001c40)="553fdee277864bf27d278441274a84b82c3695fdf15ce836d2db3e812ca6fc2e81285367ce665fec101cbcaa5af6991edfbb507a6aef1fd7373f8c08ecd295c8274e2b79d8b5820deb6d1061d9252282c03c318f9578a7fce5372eea6599dc50f1ce394586c30ba07d3a15d98a9d4aed3ddb0bf1bc1731726403dde6b43b69301f6a9ed2f0068ea9a54847d824fb0ef9bdf8707165ea10159e9e59ae5067aed04021dc6ad0f799129a6d65bc436bba77b97ae04689b6b74b6d4f76ef4826c4d6d5459063ab2256dfb024047eed41e49ec1b5d38319087217b5", 0xd9}], 0x2}, 0x850) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), r5) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, r13, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x8880) r14 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000002080), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x8c, r15, 0x10, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x10}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10048040}, 0x1) bind$can_j1939(r14, &(0x7f0000002200)={0x1d, r1, 0x3, {0x2, 0x0, 0x2}, 0x2}, 0x18) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000002280), r5) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x4c, r16, 0x300, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10008001}, 0x4040800) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002400), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x50, r17, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002580)={&(0x7f0000002540)='fsi_master_gpio_in\x00', r8, 0x0, 0x5}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000002880)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002840)={&(0x7f0000002600)=@flushpolicy={0x218, 0x1d, 0x2, 0x70bd25, 0x25dfdbfb, "", [@lastused={0xc, 0xf, 0x5}, @algo_aead={0x73, 0x12, {{'aegis128l-aesni\x00'}, 0x138, 0x100, "e823c5ae1f0e583cfc9cf82cd4946742bdcc65ce73e36d713335d664c3c1174406b1034e8fe32c"}}, @algo_comp={0xea, 0x3, {{'lzjh\x00'}, 0x510, "bb0bab68f3ac3f60f8b5cda672181db292e1291fe142385144aff1ab703d2db8fa064047a3249ac2847045457110e1a0fbe0d10d3e05731de787bbcb0138cab316a256f36afb1f01eae20b78ce003a190765afc38e4cfd50a5edc54f175c0a3682584fe3b70f33c29a14235ef39cddf24726ddf800526370d32abcdf91ed9cb57aff29890b77b839509391ece4140d3d522ea01450435e2291e725043ae848c2fabb"}}, @coaddr={0x14, 0xe, @in=@broadcast}, @extra_flags={0x8, 0x18, 0x8}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@private0, 0x0, 0x2}}, @lifetime_val={0x24, 0x9, {0x0, 0xffffffffffffffbd, 0x8, 0x2}}, @etimer_thresh={0x8, 0xc, 0x2}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@local, 0x2, 0x8, 0x9}}]}, 0x218}}, 0x4804) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d00)=@bpf_ext={0x1c, 0x1d, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x3, 0xffffffffffffffe0, 0x8}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @alu={0x7, 0x1, 0x5, 0x8, 0xb, 0x10, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0xc, 0x7, 0xb, 0x80, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe1e5, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000029c0)='syzkaller\x00', 0xffffffff, 0xbd, &(0x7f0000002a00)=""/189, 0x40f00, 0x30, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000002b40)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x17203, r11, 0x6, &(0x7f0000002c40)=[r7, r12, r4, 0xffffffffffffffff, r3, r12, r6, r6, r14], &(0x7f0000002c80)=[{0x2, 0x2, 0xc}, {0x5, 0x2, 0xc, 0x2}, {0x2, 0x5, 0x10}, {0x3, 0x2, 0x6, 0x5}, {0x4, 0x5, 0x2, 0xc}, {0x5, 0x2, 0xb, 0x6}], 0x10, 0x5, @void, @value}, 0x94) kernel console output (not intermixed with test programs): BSSID 50:50:50:50:50:50 [ 221.005487][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 221.032749][T12609] pim6reg: entered allmulticast mode [ 221.040264][T12609] pim6reg: left allmulticast mode [ 221.145984][T12619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1822'. [ 221.420328][T12635] batadv_slave_1: entered allmulticast mode [ 222.067824][T12664] delete_channel: no stack [ 222.143165][T12626] batadv_slave_1: left allmulticast mode [ 222.427910][T12687] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1848'. [ 223.873176][T12750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.933196][T12750] __nla_validate_parse: 1 callbacks suppressed [ 223.933214][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 224.718050][T12801] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1871'. [ 224.771296][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 224.921570][T12794] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1872'. [ 224.959734][T12794] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1872'. [ 224.992672][T12802] syzkaller0: entered allmulticast mode [ 225.011920][T12800] bridge_slave_0: default FDB implementation only supports local addresses [ 225.245017][T12831] sctp: [Deprecated]: syz.0.1879 (pid 12831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.245017][T12831] Use struct sctp_sack_info instead [ 225.335217][T12834] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 225.464587][T12843] syzkaller1: entered promiscuous mode [ 225.494426][T12843] syzkaller1: entered allmulticast mode [ 225.767116][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1886'. [ 225.857074][T12865] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 225.897885][T12865] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 225.909644][T12872] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1891'. [ 225.932002][T12872] syzkaller1: entered promiscuous mode [ 225.937632][T12872] syzkaller1: entered allmulticast mode [ 225.948987][T12876] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 225.965043][T12865] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1889'. [ 225.974126][T12865] NCSI netlink: No device for ifindex 0 [ 226.033697][T12855] netlink: 'syz.3.1886': attribute type 10 has an invalid length. [ 226.680600][T12901] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1900'. [ 226.691378][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1899'. [ 228.008260][T12948] vlan3: entered promiscuous mode [ 228.013418][T12948] dummy0: entered promiscuous mode [ 228.029949][T12948] dummy0: left promiscuous mode [ 228.133070][T12954] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 228.563351][T12963] sctp: [Deprecated]: syz.0.1919 (pid 12963) Use of int in max_burst socket option deprecated. [ 228.563351][T12963] Use struct sctp_assoc_value instead [ 228.942731][T12985] bridge0: entered promiscuous mode [ 228.955007][T12985] __nla_validate_parse: 11 callbacks suppressed [ 228.955025][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 228.974658][T12985] hsr0: left allmulticast mode [ 228.979623][T12985] hsr_slave_0: left allmulticast mode [ 228.985498][T12985] hsr_slave_1: left allmulticast mode [ 229.014581][T12985] hsr0: left promiscuous mode [ 229.034944][T12985] bridge0: port 1(hsr0) entered disabled state [ 229.104051][T12985] bridge0 (unregistering): left promiscuous mode [ 229.174591][T12993] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1927'. [ 229.195667][T12993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1927'. [ 229.376252][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1928'. [ 229.906923][T13007] xt_CT: No such helper "snmp" [ 229.925178][T13019] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1932'. [ 230.176859][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1936'. [ 230.234908][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 230.395525][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1937'. [ 230.437138][T13034] tc_dump_action: action bad kind [ 230.499760][T13038] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1939'. [ 230.525341][T13038] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1939'. [ 232.430469][T13120] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.445013][T13120] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.461140][T13120] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.470947][T13120] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.474939][T13122] netlink: 'syz.0.1966': attribute type 11 has an invalid length. [ 232.515288][T13120] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.523807][T13120] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.532412][T13120] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.540863][T13120] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.562343][T13120] dummy0: left allmulticast mode [ 232.573696][T13120] dummy0: left promiscuous mode [ 232.701861][T13128] xt_hashlimit: size too large, truncated to 1048576 [ 233.202298][T13145] netpci0: tun_chr_ioctl cmd 1074812118 [ 233.631434][T13168] netlink: 'syz.4.1979': attribute type 20 has an invalid length. [ 234.102751][T13198] pim6reg: entered allmulticast mode [ 234.131675][T13198] pim6reg: left allmulticast mode [ 234.175505][T13200] sch_fq: defrate 2048 ignored. [ 234.546207][T13223] __nla_validate_parse: 17 callbacks suppressed [ 234.546226][T13223] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1998'. [ 234.595227][T13223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1998'. [ 235.079236][T13247] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2003'. [ 235.094914][T13247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.162766][T13249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.195964][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2004'. [ 235.220095][T13249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.298235][T13256] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2006'. [ 235.756098][T13269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 237.421111][T13342] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2030'. [ 237.449131][T13342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2030'. [ 237.521581][T13345] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.596792][T13350] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 237.632489][T13349] bond3: entered promiscuous mode [ 237.656181][T13349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.701224][T13345] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.817891][T13345] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.896208][T13345] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.961834][T13367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2037'. [ 238.074381][T13345] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.092200][T13371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2039'. [ 238.114164][T13345] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.127444][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 238.164609][T13345] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.189263][T13374] bond0: entered promiscuous mode [ 238.213028][T13374] bond_slave_1: entered promiscuous mode [ 238.219249][T13374] batadv0: entered promiscuous mode [ 238.255339][T13374] macvlan0: entered promiscuous mode [ 238.274933][T13374] macvlan0: entered allmulticast mode [ 238.294858][T13374] bond0: entered allmulticast mode [ 238.314948][T13374] bond_slave_1: entered allmulticast mode [ 238.332561][T13374] batadv0: entered allmulticast mode [ 238.339410][T13374] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 238.351728][T13345] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.386518][T13379] netlink: 'syz.2.2041': attribute type 9 has an invalid length. [ 238.476086][T13379] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 238.755643][T13389] netlink: 'syz.3.2046': attribute type 5 has an invalid length. [ 239.370808][T13414] vlan3: entered promiscuous mode [ 239.387810][T13414] vlan3: entered allmulticast mode [ 239.518685][T13418] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 239.672920][T13426] __nla_validate_parse: 4 callbacks suppressed [ 239.672940][T13426] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2057'. [ 239.689827][T13426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2057'. [ 239.895077][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'. [ 240.699241][T13460] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 240.714107][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 240.806831][T13470] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2067'. [ 240.842054][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 240.872806][T13472] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2068'. [ 240.892497][T13469] bridge0: entered promiscuous mode [ 240.911315][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2068'. [ 240.920800][T13476] netlink: 'syz.4.2069': attribute type 11 has an invalid length. [ 240.977252][T13460] bond0: (slave bond_slave_0): Releasing backup interface [ 241.043808][T13460] bond0: (slave bond_slave_1): Releasing backup interface [ 241.073396][T13460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.086340][T13460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.112155][T13460] bond0: (slave wlan1): Releasing backup interface [ 241.133620][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 241.134518][T13460] batman_adv: batadv0: Removing interface: macsec1 [ 241.145250][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'. [ 241.403377][T13490] batadv0: entered promiscuous mode [ 241.418895][T13490] vlan0: entered promiscuous mode [ 241.431028][T13490] batadv0: left promiscuous mode [ 241.806826][T13516] vti0: entered promiscuous mode [ 241.937997][T13529] nbd: must specify at least one socket [ 241.966341][T13529] netlink: 'syz.2.2085': attribute type 8 has an invalid length. [ 242.063598][T13532] netlink: 'syz.3.2088': attribute type 11 has an invalid length. [ 243.864145][T13525] syzkaller0: left promiscuous mode [ 243.870670][T13525] syzkaller0: left allmulticast mode [ 244.937537][T13608] netlink: 'syz.4.2113': attribute type 1 has an invalid length. [ 244.955731][T13608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.328090][T13636] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 245.346167][T13639] __nla_validate_parse: 12 callbacks suppressed [ 245.346185][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 245.469369][T13642] bond26: (slave gretap3): making interface the new active one [ 245.517073][T13642] bond26: (slave gretap3): Enslaving as an active interface with an up link [ 245.651030][T13642] syz.2.2122 (13642) used greatest stack depth: 16560 bytes left [ 245.719806][T13660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2129'. [ 246.074986][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2139'. [ 246.121134][T13687] IPv6: Can't replace route, no match found [ 246.143092][T13687] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 246.155304][T13687] macvlan2: entered allmulticast mode [ 246.167264][T13687] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 246.210624][T13687] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 246.239516][T13701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2142'. [ 246.279596][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 246.450798][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 246.594298][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 246.661274][T13721] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 247.006649][T13718] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.047126][T13755] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 247.071226][T13752] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.197742][T13762] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2160'. [ 247.204904][T13763] nft_compat: unsupported protocol 0 [ 247.275546][T13762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2160'. [ 247.521650][T13766] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2159'. [ 247.958520][T13789] x_tables: duplicate entry at hook 2 [ 248.038104][T13794] xt_HMARK: spi-set and port-set can't be combined [ 248.143350][T13799] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 248.556863][T13814] ip6gretap0: left allmulticast mode [ 249.383497][T13849] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 250.375084][T13879] netlink: zone id is out of range [ 250.380254][T13879] netlink: zone id is out of range [ 250.394880][T13879] netlink: zone id is out of range [ 250.414920][T13879] netlink: zone id is out of range [ 250.420396][T13879] netlink: zone id is out of range [ 250.467366][T13879] netlink: del zone limit has 4 unknown bytes [ 250.486842][T13885] netlink: 'syz.4.2196': attribute type 1 has an invalid length. [ 250.560421][T13885] ip6gretap2: entered promiscuous mode [ 250.596536][T13885] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 250.709491][T13885] veth7: entered promiscuous mode [ 250.717490][T13885] bond0: (slave veth7): Enslaving as an active interface with an up link [ 250.932860][T13907] __nla_validate_parse: 11 callbacks suppressed [ 250.932878][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 250.976444][T13908] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 250.997568][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2203'. [ 251.019821][T13908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.031732][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 251.032657][T13908] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 251.092277][T13914] bond0: (slave batadv0): Releasing backup interface [ 251.271978][T13920] tap0: tun_chr_ioctl cmd 1074025677 [ 251.285244][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2209'. [ 251.287715][T13920] tap0: linktype set to 804 [ 251.294571][T13929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2209'. [ 251.539686][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2213'. [ 251.555675][T13941] vlan3: entered allmulticast mode [ 251.561200][T13941] veth0_to_batadv: entered allmulticast mode [ 251.619010][T13944] netlink: 'syz.2.2214': attribute type 3 has an invalid length. [ 251.700141][T13944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2214'. [ 251.961488][T13958] netlink: 'syz.1.2218': attribute type 3 has an invalid length. [ 252.022788][T13958] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 252.032142][T13963] netlink: 'syz.3.2221': attribute type 2 has an invalid length. [ 252.040077][T13963] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 252.055361][T13959] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 252.098638][T13958] bond5: entered promiscuous mode [ 252.106071][T13958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.271435][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 252.439832][T13991] bridge0: port 1(wlan1) entered blocking state [ 252.466522][T13991] bridge0: port 1(wlan1) entered disabled state [ 252.494530][T13991] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 252.498097][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 252.743732][T14016] netlink: 'syz.0.2235': attribute type 8 has an invalid length. [ 252.911724][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2241'. [ 252.961563][T14024] IPv6: Can't replace route, no match found [ 252.992770][T14027] netlink: 'syz.1.2243': attribute type 4 has an invalid length. [ 253.519386][T14050] bridge0: port 1(hsr0) entered blocking state [ 253.558212][T14050] bridge0: port 1(hsr0) entered disabled state [ 253.564609][T14050] hsr0: entered allmulticast mode [ 253.604976][T14050] hsr_slave_0: entered allmulticast mode [ 253.613974][T14050] hsr_slave_1: entered allmulticast mode [ 253.624600][T14050] hsr0: entered promiscuous mode [ 253.790843][T14066] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.875022][T14038] tipc: Enabling of bearer rejected, already enabled [ 253.922802][T14066] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.016224][T14066] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.064959][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.117203][T14066] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.210894][T14066] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.226292][T14066] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.241213][T14066] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.255806][T14066] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.931924][T14136] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 255.104867][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.560705][T14176] lo speed is unknown, defaulting to 1000 [ 255.569077][T14176] lo speed is unknown, defaulting to 1000 [ 255.576627][T14176] lo speed is unknown, defaulting to 1000 [ 255.809409][T14176] infiniband syz0: set down [ 255.814428][ T5948] lo speed is unknown, defaulting to 1000 [ 255.820565][T14176] infiniband syz0: added lo [ 255.890595][T14176] RDS/IB: syz0: added [ 255.896500][T14176] smc: adding ib device syz0 with port count 1 [ 255.902710][T14176] smc: ib device syz0 port 1 has pnetid [ 255.988900][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.009238][T14176] lo speed is unknown, defaulting to 1000 [ 256.066275][T14197] __nla_validate_parse: 9 callbacks suppressed [ 256.066293][T14197] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2289'. [ 256.120231][T14176] lo speed is unknown, defaulting to 1000 [ 256.133836][T14199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 256.154845][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.195251][ T5948] lo speed is unknown, defaulting to 1000 [ 256.237863][T14176] lo speed is unknown, defaulting to 1000 [ 256.391491][T14213] validate_nla: 1 callbacks suppressed [ 256.391508][T14213] netlink: 'syz.0.2293': attribute type 21 has an invalid length. [ 256.414992][T14213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2293'. [ 256.495818][T14176] lo speed is unknown, defaulting to 1000 [ 256.576007][T14219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2294'. [ 256.648701][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2295'. [ 256.665570][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 256.728053][T14221] netlink: 'syz.3.2295': attribute type 39 has an invalid length. [ 256.784971][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 256.863883][T14176] lo speed is unknown, defaulting to 1000 [ 257.037272][T14244] netlink: 'syz.2.2299': attribute type 10 has an invalid length. [ 257.047466][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'. [ 257.066422][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 257.125668][T14241] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 257.194830][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.216525][ T53] wlan0: Trigger new scan to find an IBSS to join [ 257.285717][T14176] lo speed is unknown, defaulting to 1000 [ 257.360691][T14249] batadv_slave_1: entered promiscuous mode [ 257.377982][T14248] batadv_slave_1: left promiscuous mode [ 257.405610][T14252] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2304'. [ 257.931371][T14273] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2313'. [ 257.963923][T14273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2313'. [ 257.996598][T14282] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 258.141758][T14282] bond5: entered promiscuous mode [ 258.174032][T14282] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.206510][T14281] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 258.224804][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.571371][T14316] xt_TCPMSS: Only works on TCP SYN packets [ 258.707575][T14330] netlink: 'syz.1.2328': attribute type 3 has an invalid length. [ 259.264872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.633664][T14345] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.645352][T14345] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.656260][T14345] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.665069][T14345] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.699330][T14345] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 259.720841][T14345] ip6gretap1: left promiscuous mode [ 259.726910][T14345] ip6gretap1: left allmulticast mode [ 259.763292][T14345] bridge2: left promiscuous mode [ 259.772863][T14345] bridge2: left allmulticast mode [ 259.788110][T14345] bond3: left promiscuous mode [ 260.105489][T14383] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 260.126201][T14383] macvlan0: entered allmulticast mode [ 260.133412][T14383] veth1_vlan: entered allmulticast mode [ 260.156307][T14383] macvlan0: entered promiscuous mode [ 260.167377][T14383] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 260.202773][T14384] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.304824][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.345954][T14400] bridge0: port 1(batadv1) entered blocking state [ 260.446308][T14404] netlink: 'syz.1.2348': attribute type 10 has an invalid length. [ 260.465261][T14400] bridge0: port 1(batadv1) entered disabled state [ 260.471894][T14400] batadv1: entered allmulticast mode [ 260.535917][T14400] batadv1: entered promiscuous mode [ 260.603778][T14398] lo speed is unknown, defaulting to 1000 [ 260.685040][T14408] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 260.961202][ T62] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 260.971117][ T62] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 261.069609][T14409] smc: net device bond0 applied user defined pnetid SYZ2 [ 261.212687][T14406] netlink: 'syz.3.2349': attribute type 30 has an invalid length. [ 261.344860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.095647][T14465] lo speed is unknown, defaulting to 1000 [ 262.156102][ T3484] wlan0: Trigger new scan to find an IBSS to join [ 262.237017][T14474] __nla_validate_parse: 92 callbacks suppressed [ 262.237036][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2365'. [ 262.285166][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 262.394814][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.732277][T14493] netlink: 'syz.3.2372': attribute type 2 has an invalid length. [ 262.758343][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 263.168905][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.262170][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 263.288997][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 263.302093][T14519] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 263.324872][T14521] gre0: entered promiscuous mode [ 263.424804][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.483871][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 263.522403][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 263.594551][T14534] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2384'. [ 263.609585][T14534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2384'. [ 263.665192][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 263.731054][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'. [ 264.016384][T14558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19996 - 0 [ 264.025610][T14558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19996 - 0 [ 264.034427][T14558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19996 - 0 [ 264.043387][T14558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19996 - 0 [ 264.052484][T14558] geneve2: entered allmulticast mode [ 264.415494][T14586] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 264.474806][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.238172][T14619] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 265.255706][T14619] macsec3: entered promiscuous mode [ 265.323493][T14619] macsec3: entered allmulticast mode [ 265.334679][T14619] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 265.465123][T14632] netlink: 'syz.1.2416': attribute type 2 has an invalid length. [ 265.504791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.544812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.247942][T14744] __nla_validate_parse: 16 callbacks suppressed [ 267.247972][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 267.305570][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 267.315670][T14749] lo: left promiscuous mode [ 267.379442][T14757] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2453'. [ 267.381811][T14749] tunl0: left promiscuous mode [ 267.457536][T14749] gre0: left promiscuous mode [ 267.482433][T14749] gretap0: left promiscuous mode [ 267.525251][T14749] erspan0: left promiscuous mode [ 267.541109][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 267.551588][T14749] ip_vti0: left promiscuous mode [ 267.574667][T14749] ip6_vti0: left promiscuous mode [ 267.593576][T14749] sit0: left promiscuous mode [ 267.598387][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.629703][T14749] ip6tnl0: left promiscuous mode [ 267.642868][T14749] ip6gre0: left promiscuous mode [ 267.653738][T14749] ip6gretap0: left promiscuous mode [ 267.663031][T14749] bond0: left promiscuous mode [ 267.668338][T14749] ip6gretap2: left promiscuous mode [ 267.673744][T14749] macvlan0: left promiscuous mode [ 267.681494][T14749] dummy0: left promiscuous mode [ 267.688958][T14749] nlmon0: left promiscuous mode [ 267.694587][T14749] caif0: left promiscuous mode [ 267.703973][T14749] veth1_vlan: left allmulticast mode [ 267.709700][T14749] macvlan0: left allmulticast mode [ 267.724435][T14749] veth7: left promiscuous mode [ 267.730442][T14749] veth0_to_batadv: left allmulticast mode [ 267.736441][T14749] vlan3: left allmulticast mode [ 267.742780][T14749] bond5: left promiscuous mode [ 268.029604][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2462'. [ 268.351418][T14799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2469'. [ 268.361812][T14799] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 268.374000][T14799] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2469'. [ 268.464046][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2471'. [ 268.473485][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2471'. [ 268.634871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.084057][T14831] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2481'. [ 269.674862][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.761429][T14870] lo speed is unknown, defaulting to 1000 [ 270.155442][T14879] netlink: 'syz.0.2494': attribute type 30 has an invalid length. [ 270.704825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.744795][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.215807][T14984] netlink: 'syz.4.2523': attribute type 5 has an invalid length. [ 272.479910][T14994] ieee802154 phy0 wpan0: encryption failed: -90 [ 272.541757][T14996] __nla_validate_parse: 4 callbacks suppressed [ 272.541778][T14996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2531'. [ 272.735341][T15006] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2534'. [ 272.794815][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.028040][T15019] lo speed is unknown, defaulting to 1000 [ 273.450202][T15044] lo speed is unknown, defaulting to 1000 [ 273.713552][T15058] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2550'. [ 273.723181][T15058] gretap0: entered promiscuous mode [ 273.732991][T15058] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2550'. [ 273.764970][T15058] 0ªX¹¦D: renamed from gretap0 [ 273.792755][T15058] 0ªX¹¦D: left promiscuous mode [ 273.809864][T15063] netlink: 'syz.3.2552': attribute type 10 has an invalid length. [ 273.811321][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2550'. [ 273.827073][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.835048][T15058] 0ªX¹¦D: entered allmulticast mode [ 273.852101][T15058] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 273.861588][T15060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2550'. [ 273.915066][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2550'. [ 273.935078][T15060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2550'. [ 273.982417][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 274.049696][T15074] syz.1.2553 uses old SIOCAX25GETINFO [ 274.065262][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 274.523861][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 274.864800][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.443940][T15126] lo speed is unknown, defaulting to 1000 [ 275.904804][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.537184][T15189] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 276.925128][T15208] batadv_slave_1: entered promiscuous mode [ 276.944808][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.957197][T15208] IPv6: Can't replace route, no match found [ 277.036161][T15205] batadv_slave_1: left promiscuous mode [ 277.481601][T15242] lo speed is unknown, defaulting to 1000 [ 277.496292][T15245] netlink: 'syz.4.2613': attribute type 1 has an invalid length. [ 277.550913][T15245] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.607063][T15245] bond6: (slave ip6gretap3): making interface the new active one [ 277.622681][T15245] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link [ 277.658985][T15245] vlan4: entered promiscuous mode [ 277.670956][T15245] bond6: entered promiscuous mode [ 277.678925][T15245] ip6gretap3: entered promiscuous mode [ 277.690927][T15245] vlan4: entered allmulticast mode [ 277.699505][T15245] bond6: entered allmulticast mode [ 277.710825][T15245] ip6gretap3: entered allmulticast mode [ 277.875683][T15254] tipc: Can't bind to reserved service type 2 [ 277.984848][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.010197][T15259] __nla_validate_parse: 13 callbacks suppressed [ 278.010216][T15259] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2617'. [ 278.677998][T15280] sctp: [Deprecated]: syz.2.2625 (pid 15280) Use of int in max_burst socket option. [ 278.677998][T15280] Use struct sctp_assoc_value instead [ 278.698293][T15280] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2625'. [ 278.836950][T15287] netlink: 'syz.2.2626': attribute type 1 has an invalid length. [ 278.908277][T15287] 8021q: adding VLAN 0 to HW filter on device bond27 [ 278.952093][T15290] bond27: (slave veth5): Enslaving as an active interface with a down link [ 278.967874][T15287] bond27: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.990692][T15287] bond27: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 279.003551][T15287] bond27: (slave ipvlan2): Error -95 calling set_mac_address [ 279.024865][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.439620][T15321] openvswitch: netlink: IP tunnel attribute has 10 unknown bytes. [ 280.062646][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 280.071706][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.172061][T15369] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 280.195438][T15363] netlink: 'syz.4.2651': attribute type 10 has an invalid length. [ 280.249367][T15369] bond0 (unregistering): Released all slaves [ 280.436637][ C0] Unknown status report in ack skb [ 280.596799][T15387] pim6reg1: entered promiscuous mode [ 280.614832][T15387] pim6reg1: entered allmulticast mode [ 280.810273][T15401] openvswitch: netlink: IPv4 tunnel dst address is zero [ 280.836375][T15405] ax25_connect(): syz.2.2669 uses autobind, please contact jreuter@yaina.de [ 280.851378][T15399] lo speed is unknown, defaulting to 1000 [ 280.906506][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 280.972902][T15411] FAULT_INJECTION: forcing a failure. [ 280.972902][T15411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.009890][T15418] set match dimension is over the limit! [ 281.016963][T15411] CPU: 0 UID: 0 PID: 15411 Comm: syz.3.2670 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 281.016987][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.016998][T15411] Call Trace: [ 281.017004][T15411] [ 281.017012][T15411] dump_stack_lvl+0x241/0x360 [ 281.017046][T15411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.017060][T15411] ? __pfx__printk+0x10/0x10 [ 281.017078][T15411] ? snprintf+0xda/0x120 [ 281.017093][T15411] should_fail_ex+0x40a/0x550 [ 281.017113][T15411] _copy_to_user+0x31/0xb0 [ 281.017132][T15411] simple_read_from_buffer+0xca/0x150 [ 281.017151][T15411] proc_fail_nth_read+0x1e9/0x250 [ 281.017173][T15411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.017195][T15411] ? rw_verify_area+0x243/0x630 [ 281.017209][T15411] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.017228][T15411] vfs_read+0x1f8/0xb40 [ 281.017242][T15411] ? fdget_pos+0x254/0x320 [ 281.017262][T15411] ? __pfx___mutex_lock+0x10/0x10 [ 281.017280][T15411] ? __pfx_vfs_read+0x10/0x10 [ 281.017297][T15411] ? __fget_files+0x2a/0x410 [ 281.017314][T15411] ? __fget_files+0x395/0x410 [ 281.017330][T15411] ? __fget_files+0x2a/0x410 [ 281.017353][T15411] ksys_read+0x18f/0x2b0 [ 281.017368][T15411] ? __pfx_ksys_read+0x10/0x10 [ 281.017382][T15411] ? do_syscall_64+0x100/0x230 [ 281.017403][T15411] ? do_syscall_64+0xb6/0x230 [ 281.017422][T15411] do_syscall_64+0xf3/0x230 [ 281.017438][T15411] ? clear_bhb_loop+0x35/0x90 [ 281.017458][T15411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.017475][T15411] RIP: 0033:0x7f2547d8bb7c [ 281.017494][T15411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.017505][T15411] RSP: 002b:00007f2548b4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.017525][T15411] RAX: ffffffffffffffda RBX: 00007f2547fa5fa0 RCX: 00007f2547d8bb7c [ 281.017535][T15411] RDX: 000000000000000f RSI: 00007f2548b4a0a0 RDI: 0000000000000006 [ 281.017544][T15411] RBP: 00007f2548b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 281.017554][T15411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.017561][T15411] R13: 0000000000000000 R14: 00007f2547fa5fa0 R15: 00007fffda6722c8 [ 281.017586][T15411] [ 281.025397][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 281.114883][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.544199][T15436] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 281.567284][T15436] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 281.896542][T15448] tipc: Enabling of bearer rejected, failed to enable media [ 282.119995][T15460] lo speed is unknown, defaulting to 1000 [ 282.144805][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.368757][T15476] netlink: 'syz.1.2692': attribute type 1 has an invalid length. [ 282.447067][T15464] lo speed is unknown, defaulting to 1000 [ 282.661855][T15491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 282.728060][T15492] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 282.756925][T15492] CPU: 1 UID: 0 PID: 15492 Comm: syz.4.2697 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 282.756952][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.756964][T15492] Call Trace: [ 282.756970][T15492] [ 282.756978][T15492] dump_stack_lvl+0x241/0x360 [ 282.757008][T15492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.757028][T15492] ? __pfx__printk+0x10/0x10 [ 282.757051][T15492] ? __kmalloc_cache_noprof+0x243/0x390 [ 282.757074][T15492] ? sysfs_warn_dup+0x51/0xa0 [ 282.757099][T15492] sysfs_warn_dup+0x8e/0xa0 [ 282.757119][T15492] sysfs_do_create_link_sd+0xbe/0x110 [ 282.757141][T15492] device_add_class_symlinks+0x1c5/0x250 [ 282.757169][T15492] device_add+0x553/0xbf0 [ 282.757197][T15492] wiphy_register+0x1922/0x2650 [ 282.757237][T15492] ? __pfx_wiphy_register+0x10/0x10 [ 282.757258][T15492] ? minstrel_ht_alloc+0x84b/0x940 [ 282.757292][T15492] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 282.757321][T15492] ieee80211_register_hw+0x35d9/0x42e0 [ 282.757353][T15492] ? ieee80211_register_hw+0x15e1/0x42e0 [ 282.757380][T15492] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 282.757410][T15492] ? __asan_memset+0x23/0x50 [ 282.757428][T15492] ? __hrtimer_init+0x170/0x250 [ 282.757451][T15492] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 282.757505][T15492] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 282.757523][T15492] ? trace_kmalloc+0x1f/0xd0 [ 282.757542][T15492] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 282.757565][T15492] ? kstrndup+0xbb/0x150 [ 282.757598][T15492] hwsim_new_radio_nl+0xece/0x2290 [ 282.757632][T15492] ? __pfx___nla_validate_parse+0x10/0x10 [ 282.757655][T15492] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.757721][T15492] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 282.757754][T15492] genl_rcv_msg+0xb1f/0xec0 [ 282.757788][T15492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.757842][T15492] ? __pfx_lock_acquire+0x10/0x10 [ 282.757865][T15492] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.757885][T15492] ? __pfx___might_resched+0x10/0x10 [ 282.757918][T15492] netlink_rcv_skb+0x206/0x480 [ 282.757938][T15492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.757962][T15492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.758015][T15492] genl_rcv+0x28/0x40 [ 282.758034][T15492] netlink_unicast+0x7f6/0x990 [ 282.758067][T15492] ? __pfx_netlink_unicast+0x10/0x10 [ 282.758089][T15492] ? __virt_addr_valid+0x45f/0x530 [ 282.758111][T15492] ? __phys_addr_symbol+0x2f/0x70 [ 282.758133][T15492] ? __check_object_size+0x47a/0x730 [ 282.758161][T15492] netlink_sendmsg+0x8de/0xcb0 [ 282.758195][T15492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.758219][T15492] ? aa_sock_msg_perm+0x91/0x160 [ 282.758248][T15492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.758265][T15492] __sock_sendmsg+0x221/0x270 [ 282.758288][T15492] ____sys_sendmsg+0x53a/0x860 [ 282.758322][T15492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.758343][T15492] ? __fget_files+0x2a/0x410 [ 282.758369][T15492] ? __fget_files+0x2a/0x410 [ 282.758401][T15492] __sys_sendmsg+0x269/0x350 [ 282.758422][T15492] ? __pfx_futex_wake+0x10/0x10 [ 282.758447][T15492] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.758512][T15492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.758536][T15492] ? do_syscall_64+0x100/0x230 [ 282.758562][T15492] ? do_syscall_64+0xb6/0x230 [ 282.758588][T15492] do_syscall_64+0xf3/0x230 [ 282.758610][T15492] ? clear_bhb_loop+0x35/0x90 [ 282.758636][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.758656][T15492] RIP: 0033:0x7f0d73f8d169 [ 282.758673][T15492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.758688][T15492] RSP: 002b:00007f0d74df3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.758715][T15492] RAX: ffffffffffffffda RBX: 00007f0d741a6080 RCX: 00007f0d73f8d169 [ 282.758728][T15492] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 000000000000000c [ 282.758740][T15492] RBP: 00007f0d7400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 282.758751][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.758761][T15492] R13: 0000000000000000 R14: 00007f0d741a6080 R15: 00007ffdabf3e9e8 [ 282.758793][T15492] [ 283.184847][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.221919][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 283.438422][T15505] netlink: 'syz.1.2703': attribute type 3 has an invalid length. [ 283.468235][T15505] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2703'. [ 283.754004][T15522] bond0: option resend_igmp: invalid value (7540) [ 283.815496][T15522] bond0: option resend_igmp: allowed values 0 - 255 [ 284.168654][T15545] lo speed is unknown, defaulting to 1000 [ 284.234772][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.300316][T15554] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2719'. [ 284.408182][T15564] xt_hashlimit: size too large, truncated to 1048576 [ 284.478310][T15567] : renamed from bond0 [ 284.775378][T15562] lo speed is unknown, defaulting to 1000 [ 285.042529][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 285.267972][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.326477][T15596] x_tables: duplicate underflow at hook 3 [ 285.334426][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 285.343463][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 285.839299][T15612] lo speed is unknown, defaulting to 1000 [ 285.984533][ T29] audit: type=1107 audit(1740563225.815:10): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 285.985233][T15619] IPVS: stopping backup sync thread 9285 ... [ 286.038175][T15621] netlink: 'syz.1.2741': attribute type 4 has an invalid length. [ 286.082318][T15621] netlink: 'syz.1.2741': attribute type 4 has an invalid length. [ 286.136295][ T5948] lo speed is unknown, defaulting to 1000 [ 286.156576][ T25] lo speed is unknown, defaulting to 1000 [ 286.165412][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2740'. [ 286.201887][T15619] Bluetooth: MGMT ver 1.23 [ 286.208729][T15614] lo speed is unknown, defaulting to 1000 [ 286.314850][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.498077][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.508808][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.522687][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.549268][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.561082][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.569044][T15632] netlink: 'syz.0.2744': attribute type 4 has an invalid length. [ 286.577773][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.635070][T15632] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2744'. [ 286.645260][T15629] lo speed is unknown, defaulting to 1000 [ 286.664638][T15636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2745'. [ 286.717804][T15638] netlink: 'syz.4.2746': attribute type 2 has an invalid length. [ 286.754926][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 286.778591][T15636] 0ªX¹¦D: left allmulticast mode [ 286.868319][T15636] macsec1: left allmulticast mode [ 286.909409][T15636] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19996 - 0 [ 286.949050][T15636] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 19996 - 0 [ 286.965381][T15636] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 19996 - 0 [ 286.974557][T15636] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 19996 - 0 [ 286.988067][T15636] geneve2: left allmulticast mode [ 287.157455][T15649] €Â: renamed from vlan1 [ 287.298788][T15661] netlink: 'syz.0.2753': attribute type 1 has an invalid length. [ 287.344892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.450496][T15666] bond4: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 287.572289][T15661] veth7: entered promiscuous mode [ 287.638974][T15678] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 287.741017][T15661] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 288.066133][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2762'. [ 288.249217][T15629] chnl_net:caif_netlink_parms(): no params data found [ 288.394822][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.592197][T15629] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.611673][T15629] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.624950][ T5147] Bluetooth: hci0: command tx timeout [ 288.628669][T15629] bridge_slave_0: entered allmulticast mode [ 288.650474][T15629] bridge_slave_0: entered promiscuous mode [ 288.689115][T15629] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.712039][T15629] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.732204][T15629] bridge_slave_1: entered allmulticast mode [ 288.749904][T15629] bridge_slave_1: entered promiscuous mode [ 288.758183][T15705] lo speed is unknown, defaulting to 1000 [ 288.844225][T15629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.870352][T15629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.995972][T15629] team0: Port device team_slave_0 added [ 289.011069][T15629] team0: Port device team_slave_1 added [ 289.018992][T15727] __nla_validate_parse: 1 callbacks suppressed [ 289.019046][T15727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2769'. [ 289.044853][T15727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2769'. [ 289.086873][T15629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.093955][T15629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.130605][T15629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.197769][T15629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.205267][T15629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.255857][T15629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.277010][T15736] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2772'. [ 289.289022][T15736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2772'. [ 289.423772][T15629] hsr_slave_0: entered promiscuous mode [ 289.429526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.464511][T15629] hsr_slave_1: entered promiscuous mode [ 289.474369][T15629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.474613][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 289.494350][T15629] Cannot create hsr debugfs directory [ 289.615948][T15747] vlan5: entered promiscuous mode [ 289.630983][T15747] bond0: (slave vlan5): Opening slave failed [ 290.185656][T15769] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2785'. [ 290.214965][T15769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2785'. [ 290.464772][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.491493][T15629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.561233][T15629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.625170][T15629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.641793][T15793] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 290.657558][T15629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.712729][ T5147] Bluetooth: hci0: command tx timeout [ 290.880929][T15799] lo speed is unknown, defaulting to 1000 [ 290.900738][T15629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.946250][T15629] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.978996][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.986167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.026194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.033355][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.065649][T15810] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2801'. [ 291.104059][T15810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2801'. [ 291.504787][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.540779][T15837] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2807'. [ 291.657183][T15842] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 291.663078][T15629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.701369][T15842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.795216][T15842] veth9: entered promiscuous mode [ 291.802962][T15842] bond0: (slave veth9): Enslaving as an active interface with an up link [ 291.881486][ T5838] IPVS: starting estimator thread 0... [ 291.958034][T15629] veth0_vlan: entered promiscuous mode [ 291.975070][T15849] IPVS: using max 22 ests per chain, 52800 per kthread [ 291.996894][T15629] veth1_vlan: entered promiscuous mode [ 292.062682][T15853] batadv_slave_1: entered promiscuous mode [ 292.072351][T15629] veth0_macvtap: entered promiscuous mode [ 292.117716][T15629] veth1_macvtap: entered promiscuous mode [ 292.153178][T15629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.183228][T15629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.227022][T15629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.249125][T15629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.264066][T15629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.276651][T15629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.554933][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.743910][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.771104][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.795363][ T5147] Bluetooth: hci0: command tx timeout [ 292.876934][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.897876][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.410934][T15892] netlink: 'syz.1.2827': attribute type 1 has an invalid length. [ 293.570842][T15900] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 293.584901][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.598928][T15897] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 293.615657][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.0.2825 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 293.615682][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.615692][T15897] Call Trace: [ 293.615699][T15897] [ 293.615707][T15897] dump_stack_lvl+0x241/0x360 [ 293.615735][T15897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.615754][T15897] ? __pfx__printk+0x10/0x10 [ 293.615778][T15897] ? __kmalloc_cache_noprof+0x243/0x390 [ 293.615798][T15897] ? sysfs_warn_dup+0x51/0xa0 [ 293.615824][T15897] sysfs_warn_dup+0x8e/0xa0 [ 293.615843][T15897] sysfs_do_create_link_sd+0xbe/0x110 [ 293.615865][T15897] device_add_class_symlinks+0x1c5/0x250 [ 293.615892][T15897] device_add+0x553/0xbf0 [ 293.615930][T15897] wiphy_register+0x1922/0x2650 [ 293.615969][T15897] ? __pfx_wiphy_register+0x10/0x10 [ 293.615989][T15897] ? minstrel_ht_alloc+0x84b/0x940 [ 293.616022][T15897] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 293.616053][T15897] ieee80211_register_hw+0x35d9/0x42e0 [ 293.616087][T15897] ? ieee80211_register_hw+0x15e1/0x42e0 [ 293.616116][T15897] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 293.616147][T15897] ? __asan_memset+0x23/0x50 [ 293.616163][T15897] ? __hrtimer_init+0x170/0x250 [ 293.616186][T15897] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 293.616241][T15897] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 293.616258][T15897] ? trace_kmalloc+0x1f/0xd0 [ 293.616276][T15897] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 293.616298][T15897] ? kstrndup+0xbb/0x150 [ 293.616331][T15897] hwsim_new_radio_nl+0xece/0x2290 [ 293.616365][T15897] ? __pfx___nla_validate_parse+0x10/0x10 [ 293.616388][T15897] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 293.616445][T15897] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 293.616476][T15897] genl_rcv_msg+0xb1f/0xec0 [ 293.616508][T15897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.616562][T15897] ? __pfx_lock_acquire+0x10/0x10 [ 293.616584][T15897] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 293.616604][T15897] ? __pfx___might_resched+0x10/0x10 [ 293.616639][T15897] netlink_rcv_skb+0x206/0x480 [ 293.616658][T15897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.616681][T15897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.616736][T15897] genl_rcv+0x28/0x40 [ 293.616754][T15897] netlink_unicast+0x7f6/0x990 [ 293.616788][T15897] ? __pfx_netlink_unicast+0x10/0x10 [ 293.616809][T15897] ? __virt_addr_valid+0x45f/0x530 [ 293.616826][T15897] ? __phys_addr_symbol+0x2f/0x70 [ 293.616848][T15897] ? __check_object_size+0x47a/0x730 [ 293.616875][T15897] netlink_sendmsg+0x8de/0xcb0 [ 293.616912][T15897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.616936][T15897] ? aa_sock_msg_perm+0x91/0x160 [ 293.616965][T15897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.616980][T15897] __sock_sendmsg+0x221/0x270 [ 293.617004][T15897] ____sys_sendmsg+0x53a/0x860 [ 293.617038][T15897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.617058][T15897] ? __fget_files+0x2a/0x410 [ 293.617083][T15897] ? __fget_files+0x2a/0x410 [ 293.617119][T15897] __sys_sendmsg+0x269/0x350 [ 293.617149][T15897] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.617223][T15897] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.617248][T15897] ? do_syscall_64+0x100/0x230 [ 293.617272][T15897] ? do_syscall_64+0xb6/0x230 [ 293.617296][T15897] do_syscall_64+0xf3/0x230 [ 293.617316][T15897] ? clear_bhb_loop+0x35/0x90 [ 293.617341][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.617361][T15897] RIP: 0033:0x7f472a38d169 [ 293.617376][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.617390][T15897] RSP: 002b:00007f472b218038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.617408][T15897] RAX: ffffffffffffffda RBX: 00007f472a5a5fa0 RCX: 00007f472a38d169 [ 293.617421][T15897] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 000000000000008a [ 293.617431][T15897] RBP: 00007f472a40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.617442][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.617452][T15897] R13: 0000000000000000 R14: 00007f472a5a5fa0 R15: 00007ffd054615e8 [ 293.617483][T15897] [ 294.624795][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.654234][T15921] lo speed is unknown, defaulting to 1000 [ 294.792703][T15927] __nla_validate_parse: 3 callbacks suppressed [ 294.792722][T15927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2835'. [ 295.121026][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.664858][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.683968][ T62] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.720648][T15941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2839'. [ 295.755202][T15943] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2841'. [ 295.788188][T15943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2841'. [ 295.873493][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.041640][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.118838][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.130778][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.143642][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.168310][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.178464][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.186317][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.263665][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.290745][T15973] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2849'. [ 296.373314][T15959] lo speed is unknown, defaulting to 1000 [ 296.587007][ T53] bridge_slave_1: left allmulticast mode [ 296.612901][ T53] bridge_slave_1: left promiscuous mode [ 296.625896][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.666873][ T53] bridge_slave_0: left allmulticast mode [ 296.685981][ T53] bridge_slave_0: left promiscuous mode [ 296.693052][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.714766][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.407349][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.421960][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.433776][ T53] bond0 (unregistering): Released all slaves [ 297.447037][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'. [ 297.472349][T15997] macsec0: entered promiscuous mode [ 297.515921][T16000] macsec0: left promiscuous mode [ 297.744860][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.862960][T16022] x_tables: ip_tables: osf match: only valid for protocol 6 [ 298.178902][T15959] chnl_net:caif_netlink_parms(): no params data found [ 298.232784][ T5842] Bluetooth: hci0: command tx timeout [ 298.447401][T16056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2872'. [ 298.465245][T16056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2872'. [ 298.562393][ T53] hsr_slave_0: left promiscuous mode [ 298.571733][ T53] hsr_slave_1: left promiscuous mode [ 298.602847][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.619478][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.643742][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.661813][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.768174][ T53] veth1_macvtap: left promiscuous mode [ 298.781002][ T53] veth0_macvtap: left promiscuous mode [ 298.786641][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.794970][ T53] veth1_vlan: left promiscuous mode [ 298.801257][ T53] veth0_vlan: left promiscuous mode [ 299.673524][ T53] team0 (unregistering): Port device team_slave_1 removed [ 299.776289][ T53] team0 (unregistering): Port device team_slave_0 removed [ 299.834784][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.230911][T16069] ip6tnl3: entered promiscuous mode [ 300.304879][ T5842] Bluetooth: hci0: command tx timeout [ 300.416957][T16102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 300.460316][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.478761][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.494612][T15959] bridge_slave_0: entered allmulticast mode [ 300.502756][T15959] bridge_slave_0: entered promiscuous mode [ 300.548984][T16100] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 300.580902][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.606616][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.642572][T15959] bridge_slave_1: entered allmulticast mode [ 300.656093][T15959] bridge_slave_1: entered promiscuous mode [ 300.695004][T16100] bond6: entered promiscuous mode [ 300.700156][T16100] bond6: entered allmulticast mode [ 300.708045][T16120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2892'. [ 300.859707][T15959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.868894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.891539][T15959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.021215][T15959] team0: Port device team_slave_0 added [ 301.056875][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 301.066143][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'. [ 301.105401][T15959] team0: Port device team_slave_1 added [ 301.213921][T15959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.233254][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.286972][T16148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2901'. [ 301.296993][T15959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.329238][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 301.359431][T15959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.383277][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.464793][T15959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.481701][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2903'. [ 301.703055][T16165] netlink: 'syz.4.2908': attribute type 32 has an invalid length. [ 301.732275][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 301.852798][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2908'. [ 301.853054][T16165] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 301.875048][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2908'. [ 301.904844][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.915266][T15959] hsr_slave_0: entered promiscuous mode [ 301.927621][T15959] hsr_slave_1: entered promiscuous mode [ 301.933838][T15959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.935384][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2908'. [ 301.960079][T15959] Cannot create hsr debugfs directory [ 302.019972][T16173] batadv_slave_1: entered promiscuous mode [ 302.020664][T16167] netlink: 'syz.0.2909': attribute type 6 has an invalid length. [ 302.042336][T16165] lo speed is unknown, defaulting to 1000 [ 302.360823][T16184] netlink: 'syz.2.2913': attribute type 1 has an invalid length. [ 302.389429][ T5842] Bluetooth: hci0: command tx timeout [ 302.468151][T16184] 8021q: adding VLAN 0 to HW filter on device bond28 [ 302.479733][T16164] batadv_slave_1: left promiscuous mode [ 302.631683][T16188] bond28: (slave ip6erspan0): making interface the new active one [ 302.671045][T16188] bond28: (slave ip6erspan0): Enslaving as an active interface with an up link [ 302.939027][ T53] IPVS: stop unused estimator thread 0... [ 302.944918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.278720][T16217] bond29: entered promiscuous mode [ 303.284114][T16217] 8021q: adding VLAN 0 to HW filter on device bond29 [ 303.403359][T16226] lo speed is unknown, defaulting to 1000 [ 303.744460][T15959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.766538][T15959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.788995][T15959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.807442][T15959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.984813][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.071696][T15959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.163811][T15959] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.206988][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.214131][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.227718][T16231] syzkaller1: entered promiscuous mode [ 304.233235][T16231] syzkaller1: entered allmulticast mode [ 304.269763][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.276960][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.465952][ T5842] Bluetooth: hci0: command tx timeout [ 304.753731][T15959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.983191][T15959] veth0_vlan: entered promiscuous mode [ 305.024837][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.111175][T15959] veth1_vlan: entered promiscuous mode [ 305.155594][T15959] veth0_macvtap: entered promiscuous mode [ 305.186626][T15959] veth1_macvtap: entered promiscuous mode [ 305.242471][T15959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.262881][T15959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.326982][T15959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.345332][T15959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.363933][T15959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.381823][T15959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.599620][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.627050][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.718685][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.737283][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.758158][T16286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.807727][T16309] __nla_validate_parse: 6 callbacks suppressed [ 305.807744][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 305.840602][T16311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2949'. [ 305.874771][T16311] sctp: [Deprecated]: syz.0.2949 (pid 16311) Use of int in max_burst socket option deprecated. [ 305.874771][T16311] Use struct sctp_assoc_value instead [ 305.891585][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 305.970920][T16316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2950'. [ 305.982250][T16311] netlink: 'syz.0.2949': attribute type 3 has an invalid length. [ 306.067042][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.544180][T16354] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.639164][T16361] ip6tnl2: entered promiscuous mode [ 306.644562][T16361] ip6tnl2: entered allmulticast mode [ 306.711604][T16366] pim6reg1: entered promiscuous mode [ 306.717264][T16366] pim6reg1: entered allmulticast mode [ 306.798776][T16373] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 306.887112][T16354] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.913657][T16377] xt_connbytes: Forcing CT accounting to be enabled [ 306.920970][T16377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 307.114754][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.226104][T16354] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.249784][ T6365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.333873][T16383] xt_hashlimit: invalid rate [ 307.361904][T16354] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.649878][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 307.715970][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.726963][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.754981][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.766542][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.774578][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.782059][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.853394][T16406] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2972'. [ 307.863649][T16406] NCSI netlink: No device for ifindex 0 [ 307.935026][ T6365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.061145][T16400] lo speed is unknown, defaulting to 1000 [ 308.154809][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.177023][ T6365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.206333][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 308.310340][ T6365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.455154][T16419] lo speed is unknown, defaulting to 1000 [ 308.622259][T16400] chnl_net:caif_netlink_parms(): no params data found [ 308.641170][ T6365] bridge_slave_1: left allmulticast mode [ 308.656516][ T6365] bridge_slave_1: left promiscuous mode [ 308.662195][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.705376][ T6365] bridge_slave_0: left allmulticast mode [ 308.711062][ T6365] bridge_slave_0: left promiscuous mode [ 308.724877][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.184786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.417694][T16444] Bluetooth: MGMT ver 1.23 [ 309.426643][ T6365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.468814][ T6365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.506162][ T6365] bond0 (unregistering): Released all slaves [ 309.775265][T16461] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2984'. [ 309.785079][T16461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2984'. [ 309.882666][T16459] lo speed is unknown, defaulting to 1000 [ 309.909803][ T5147] Bluetooth: hci0: command tx timeout [ 310.088471][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.115805][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.123094][T16400] bridge_slave_0: entered allmulticast mode [ 310.176839][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'. [ 310.206480][T16400] bridge_slave_0: entered promiscuous mode [ 310.225416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.347979][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.384603][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.404266][T16400] bridge_slave_1: entered allmulticast mode [ 310.415894][T16400] bridge_slave_1: entered promiscuous mode [ 310.553265][ T6365] hsr_slave_0: left promiscuous mode [ 310.584105][ T6365] hsr_slave_1: left promiscuous mode [ 310.594359][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.615336][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.627848][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.645091][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.715998][ T6365] veth1_macvtap: left promiscuous mode [ 310.740773][ T6365] veth0_macvtap: left promiscuous mode [ 310.750351][ T6365] veth1_vlan: left promiscuous mode [ 310.762164][ T6365] veth0_vlan: left promiscuous mode [ 310.847280][ T25] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1 [ 310.869222][ T25] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22 [ 311.270164][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.293033][ T6365] team0 (unregistering): Port device team_slave_1 removed [ 311.338158][ T6365] team0 (unregistering): Port device team_slave_0 removed [ 311.837019][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.856614][T16494] __nla_validate_parse: 1 callbacks suppressed [ 311.856631][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2992'. [ 311.924288][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.000294][ T5147] Bluetooth: hci0: command tx timeout [ 312.030926][T16400] team0: Port device team_slave_0 added [ 312.083406][T16400] team0: Port device team_slave_1 added [ 312.160391][T16506] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2995'. [ 312.169736][T16506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2995'. [ 312.182208][T16501] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 312.230532][T16502] lo speed is unknown, defaulting to 1000 [ 312.273147][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.285882][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.312113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.349250][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 312.359102][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.373816][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.381072][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.407288][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.585845][T16511] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 312.602510][T16400] hsr_slave_0: entered promiscuous mode [ 312.625271][T16400] hsr_slave_1: entered promiscuous mode [ 312.631437][T16400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.640296][T16400] Cannot create hsr debugfs directory [ 312.791752][T16523] netlink: 'syz.0.3000': attribute type 4 has an invalid length. [ 312.815143][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'. [ 313.021487][T16530] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3002'. [ 313.041972][T16531] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3003'. [ 313.088132][T16531] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 313.098903][T16531] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 313.115597][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 313.344818][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.369459][T16542] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3007'. [ 313.392496][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3007'. [ 313.470099][T16546] lo speed is unknown, defaulting to 1000 [ 313.820797][T16558] xt_l2tp: unknown flags: 10 [ 313.886931][T16400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.941585][T16400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.004371][T16400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.062801][T16400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.081299][ T5147] Bluetooth: hci0: command tx timeout [ 314.394771][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.528229][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.613891][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.729810][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.737000][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.767801][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.774992][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.813010][T16608] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 315.133559][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.249116][T16400] veth0_vlan: entered promiscuous mode [ 315.278019][T16400] veth1_vlan: entered promiscuous mode [ 315.339655][T16400] veth0_macvtap: entered promiscuous mode [ 315.379883][T16400] veth1_macvtap: entered promiscuous mode [ 315.434794][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.475580][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.525207][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.578207][T16400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.587995][T16400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.643302][T16400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.654587][T16400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.679425][T16656] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 315.828993][T16664] netlink: 'syz.0.3046': attribute type 1 has an invalid length. [ 315.848098][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.875010][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.949215][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.967150][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.145195][ T5147] Bluetooth: hci0: command tx timeout [ 316.369942][T16686] tipc: Enabling of bearer rejected, failed to enable media [ 316.406691][T16689] sctp: [Deprecated]: syz.4.3057 (pid 16689) Use of int in max_burst socket option. [ 316.406691][T16689] Use struct sctp_assoc_value instead [ 316.442101][T16691] netlink: 'syz.2.3058': attribute type 1 has an invalid length. [ 316.464793][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.581765][T16701] netlink: 'syz.1.3059': attribute type 4 has an invalid length. [ 316.720080][T16706] lo speed is unknown, defaulting to 1000 [ 316.737899][T16710] netlink: 'syz.2.3064': attribute type 1 has an invalid length. [ 316.777237][T16710] bond30: entered promiscuous mode [ 316.785342][T16710] 8021q: adding VLAN 0 to HW filter on device bond30 [ 316.808384][T16712] bond4: (slave ip6gretap3): Releasing backup interface [ 316.825943][T16712] bond4: (slave ip6gretap3): the permanent HWaddr of slave - 66:53:53:d8:37:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 316.858894][T16712] bond4: (slave veth7): Releasing backup interface [ 316.871051][T16712] bond0: (slave veth9): Releasing backup interface [ 317.113793][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.437140][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.504791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.536902][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.548743][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.557431][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.571445][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.579473][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 317.589967][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.623754][T16719] lo speed is unknown, defaulting to 1000 [ 317.678035][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.883631][T16719] chnl_net:caif_netlink_parms(): no params data found [ 318.013365][T16732] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 318.038005][T16732] __nla_validate_parse: 9 callbacks suppressed [ 318.038022][T16732] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3070'. [ 318.113587][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.149096][T16719] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.165654][T16719] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.172945][T16719] bridge_slave_0: entered allmulticast mode [ 318.186592][T16719] bridge_slave_0: entered promiscuous mode [ 318.209913][T16719] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.218515][T16719] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.226340][T16719] bridge_slave_1: entered allmulticast mode [ 318.234206][T16719] bridge_slave_1: entered promiscuous mode [ 318.273686][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.356169][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.366736][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.378533][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.393256][T16719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.433901][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.455011][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 318.463257][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.468952][T16719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.554765][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.652269][T16755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.740764][T16719] team0: Port device team_slave_0 added [ 318.793736][T16719] team0: Port device team_slave_1 added [ 318.799906][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 318.825972][T16765] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 318.834153][T16765] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3082'. [ 318.877656][T16748] lo speed is unknown, defaulting to 1000 [ 318.919652][T16719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.938078][T16719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.014789][T16719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.050967][T16719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.085668][T16719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.160118][T16719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.213114][T16775] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 319.221418][T16775] netlink: 'syz.4.3088': attribute type 4 has an invalid length. [ 319.229379][T16775] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.3088'. [ 319.250183][ T11] bridge_slave_1: left allmulticast mode [ 319.256790][ T11] bridge_slave_1: left promiscuous mode [ 319.262593][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.274359][ T11] bridge_slave_0: left allmulticast mode [ 319.280732][ T11] bridge_slave_0: left promiscuous mode [ 319.286649][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.350835][T16782] ipt_REJECT: ECHOREPLY no longer supported. [ 319.585141][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.594609][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 319.668069][ T5147] Bluetooth: hci0: command tx timeout [ 319.790063][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.801998][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.812120][ T11] bond0 (unregistering): Released all slaves [ 319.859725][T16719] hsr_slave_0: entered promiscuous mode [ 319.884646][T16719] hsr_slave_1: entered promiscuous mode [ 319.891050][T16719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.898894][T16719] Cannot create hsr debugfs directory [ 320.224613][T16806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3095'. [ 320.254914][T16806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3095'. [ 320.541880][ T11] hsr_slave_0: left promiscuous mode [ 320.546673][ T5147] Bluetooth: hci2: command tx timeout [ 320.588098][ T11] hsr_slave_1: left promiscuous mode [ 320.608144][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.625351][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.639486][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.651957][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.661693][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.706014][ T11] veth1_macvtap: left promiscuous mode [ 320.712899][ T11] veth0_macvtap: left promiscuous mode [ 320.719691][ T11] veth1_vlan: left promiscuous mode [ 320.725719][ T11] veth0_vlan: left promiscuous mode [ 321.198353][ T11] team0 (unregistering): Port device team_slave_1 removed [ 321.242439][ T11] team0 (unregistering): Port device team_slave_0 removed [ 321.664959][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.745012][ T5147] Bluetooth: hci0: command tx timeout [ 321.782333][T16748] chnl_net:caif_netlink_parms(): no params data found [ 322.086040][T16861] netlink: 'syz.4.3109': attribute type 1 has an invalid length. [ 322.093825][T16861] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3109'. [ 322.265607][T16864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3110'. [ 322.499122][T16864] bond6: left allmulticast mode [ 322.504202][T16864] ip6gretap3: left allmulticast mode [ 322.519552][T16864] bond6: left promiscuous mode [ 322.534947][T16864] ip6gretap3: left promiscuous mode [ 322.614984][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.625631][ T5147] Bluetooth: hci2: command tx timeout [ 322.654860][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.662162][T16748] bridge_slave_0: entered allmulticast mode [ 322.705201][T16748] bridge_slave_0: entered promiscuous mode [ 322.714812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.735919][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.743036][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.764978][T16748] bridge_slave_1: entered allmulticast mode [ 322.771686][T16748] bridge_slave_1: entered promiscuous mode [ 322.938564][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.961244][T16889] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 322.977435][T16889] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3119'. [ 323.044411][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.307821][T16748] team0: Port device team_slave_0 added [ 323.352328][T16905] netlink: 'syz.2.3125': attribute type 16 has an invalid length. [ 323.360392][T16905] netlink: 'syz.2.3125': attribute type 17 has an invalid length. [ 323.378522][T16748] team0: Port device team_slave_1 added [ 323.470193][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3126'. [ 323.633727][T16719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.702129][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.734851][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.760853][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.784290][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.824857][ T5147] Bluetooth: hci0: command tx timeout [ 323.828472][T16719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.863332][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.874248][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.913092][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.928793][T16719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.951912][T16927] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 323.973050][T16719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.041594][T16748] hsr_slave_0: entered promiscuous mode [ 324.051048][T16748] hsr_slave_1: entered promiscuous mode [ 324.058018][T16748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.074249][T16748] Cannot create hsr debugfs directory [ 324.171124][T16931] netlink: 'syz.4.3132': attribute type 1 has an invalid length. [ 324.179885][T16931] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3132'. [ 324.282614][T16933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3133'. [ 324.325108][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 324.337865][T16719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.422354][T16719] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.441138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.448315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.467058][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.474226][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.662409][T16946] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 324.704800][ T5147] Bluetooth: hci2: command tx timeout [ 324.784793][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.796216][T16955] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 324.905415][T16959] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3143'. [ 325.049992][T16748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 325.080905][T16748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 325.152523][T16748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 325.205545][T16748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 325.213231][T16975] xt_TCPMSS: Only works on TCP SYN packets [ 325.259695][T16719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.442109][T16719] veth0_vlan: entered promiscuous mode [ 325.480422][T16719] veth1_vlan: entered promiscuous mode [ 325.506282][T16986] FAULT_INJECTION: forcing a failure. [ 325.506282][T16986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.545036][T16986] CPU: 0 UID: 0 PID: 16986 Comm: syz.4.3152 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 325.545063][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.545073][T16986] Call Trace: [ 325.545079][T16986] [ 325.545086][T16986] dump_stack_lvl+0x241/0x360 [ 325.545111][T16986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.545127][T16986] ? __pfx__printk+0x10/0x10 [ 325.545144][T16986] ? __pfx_lock_release+0x10/0x10 [ 325.545165][T16986] ? validate_chain+0x11e/0x5920 [ 325.545184][T16986] should_fail_ex+0x40a/0x550 [ 325.545206][T16986] _copy_from_iter+0x1df/0x1c40 [ 325.545225][T16986] ? __pfx_validate_chain+0x10/0x10 [ 325.545249][T16986] ? __pfx__copy_from_iter+0x10/0x10 [ 325.545277][T16986] tun_get_user+0x276/0x45f0 [ 325.545309][T16986] ? __pfx_tun_get_user+0x10/0x10 [ 325.545342][T16986] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 325.545364][T16986] ? tun_get+0x1e/0x2f0 [ 325.545379][T16986] ? __pfx_lock_release+0x10/0x10 [ 325.545418][T16986] ? tun_get+0x1e/0x2f0 [ 325.545433][T16986] ? tun_get+0x27d/0x2f0 [ 325.545449][T16986] tun_chr_write_iter+0x10d/0x1f0 [ 325.545472][T16986] vfs_write+0xacf/0xd10 [ 325.545491][T16986] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 325.545513][T16986] ? __pfx_vfs_write+0x10/0x10 [ 325.545526][T16986] ? do_sys_openat2+0x17a/0x1d0 [ 325.545548][T16986] ? __fget_files+0x2a/0x410 [ 325.545570][T16986] ? __fget_files+0x2a/0x410 [ 325.545595][T16986] ksys_write+0x18f/0x2b0 [ 325.545611][T16986] ? __pfx_ksys_write+0x10/0x10 [ 325.545627][T16986] ? do_syscall_64+0x100/0x230 [ 325.545649][T16986] ? do_syscall_64+0xb6/0x230 [ 325.545670][T16986] do_syscall_64+0xf3/0x230 [ 325.545688][T16986] ? clear_bhb_loop+0x35/0x90 [ 325.545711][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.545730][T16986] RIP: 0033:0x7f0d73f8d169 [ 325.545745][T16986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.545758][T16986] RSP: 002b:00007f0d74e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.545776][T16986] RAX: ffffffffffffffda RBX: 00007f0d741a5fa0 RCX: 00007f0d73f8d169 [ 325.545788][T16986] RDX: 000000000000003b RSI: 0000400000001100 RDI: 0000000000000003 [ 325.545797][T16986] RBP: 00007f0d74e14090 R08: 0000000000000000 R09: 0000000000000000 [ 325.545806][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.545816][T16986] R13: 0000000000000000 R14: 00007f0d741a5fa0 R15: 00007ffdabf3e9e8 [ 325.545842][T16986] [ 325.560444][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.738889][T16992] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3154'. [ 325.826958][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'. [ 325.836068][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.905132][ T5147] Bluetooth: hci0: command tx timeout [ 325.930179][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.945291][T16719] veth0_macvtap: entered promiscuous mode [ 325.990517][T16719] veth1_macvtap: entered promiscuous mode [ 326.032041][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.039230][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.061659][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.068833][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.153598][T16719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.189397][T16719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.211155][T16719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.238026][T16719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.253515][T16719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.264708][T16719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.315725][T16748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.344739][T16748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.722002][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.734743][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.785091][ T5147] Bluetooth: hci2: command tx timeout [ 326.864914][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.920384][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.962111][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.011934][T17028] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 327.071560][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.223869][T16748] veth0_vlan: entered promiscuous mode [ 327.262439][T16748] veth1_vlan: entered promiscuous mode [ 327.276087][T17032] lo speed is unknown, defaulting to 1000 [ 327.280339][T17037] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3164'. [ 327.294280][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3065'. [ 327.308543][T17023] netlink: 'syz.4.3161': attribute type 2 has an invalid length. [ 327.332951][T17023] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3161'. [ 327.441483][T16748] veth0_macvtap: entered promiscuous mode [ 327.457388][T16748] veth1_macvtap: entered promiscuous mode [ 327.531412][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.556413][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.573454][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.596762][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.607758][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.620953][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.639364][T16748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.650255][T16748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.660479][T16748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.670006][T16748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.904888][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.038654][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.047132][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.286868][T17065] sctp: [Deprecated]: syz.2.3173 (pid 17065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.286868][T17065] Use struct sctp_sack_info instead [ 328.330465][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.332383][T17065] tipc: Enabled bearer , priority 10 [ 328.361935][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.563139][T17075] FAULT_INJECTION: forcing a failure. [ 328.563139][T17075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.611762][T17075] CPU: 0 UID: 0 PID: 17075 Comm: syz.2.3177 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 328.611789][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.611799][T17075] Call Trace: [ 328.611805][T17075] [ 328.611813][T17075] dump_stack_lvl+0x241/0x360 [ 328.611839][T17075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.611856][T17075] ? __pfx__printk+0x10/0x10 [ 328.611876][T17075] ? __pfx_lock_release+0x10/0x10 [ 328.611907][T17075] should_fail_ex+0x40a/0x550 [ 328.611933][T17075] _copy_from_iter+0x1df/0x1c40 [ 328.611951][T17075] ? __virt_addr_valid+0x183/0x530 [ 328.611968][T17075] ? __pfx_lock_release+0x10/0x10 [ 328.611997][T17075] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 328.612018][T17075] ? __pfx__copy_from_iter+0x10/0x10 [ 328.612044][T17075] ? __virt_addr_valid+0x183/0x530 [ 328.612058][T17075] ? __virt_addr_valid+0x183/0x530 [ 328.612072][T17075] ? __virt_addr_valid+0x45f/0x530 [ 328.612089][T17075] ? __phys_addr_symbol+0x2f/0x70 [ 328.612116][T17075] ? __check_object_size+0x47a/0x730 [ 328.612141][T17075] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 328.612165][T17075] ? iov_iter_single_seg_count+0xd7/0x300 [ 328.612187][T17075] tun_get_user+0x17cb/0x45f0 [ 328.612229][T17075] ? __pfx_tun_get_user+0x10/0x10 [ 328.612265][T17075] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 328.612287][T17075] ? tun_get+0x1e/0x2f0 [ 328.612303][T17075] ? __pfx_lock_release+0x10/0x10 [ 328.612340][T17075] ? tun_get+0x1e/0x2f0 [ 328.612353][T17075] ? tun_get+0x27d/0x2f0 [ 328.612371][T17075] tun_chr_write_iter+0x10d/0x1f0 [ 328.612397][T17075] vfs_write+0xacf/0xd10 [ 328.612419][T17075] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 328.612442][T17075] ? __pfx_vfs_write+0x10/0x10 [ 328.612457][T17075] ? do_sys_openat2+0x17a/0x1d0 [ 328.612480][T17075] ? __fget_files+0x2a/0x410 [ 328.612504][T17075] ? __fget_files+0x2a/0x410 [ 328.612532][T17075] ksys_write+0x18f/0x2b0 [ 328.612551][T17075] ? __pfx_ksys_write+0x10/0x10 [ 328.612568][T17075] ? do_syscall_64+0x100/0x230 [ 328.612592][T17075] ? do_syscall_64+0xb6/0x230 [ 328.612614][T17075] do_syscall_64+0xf3/0x230 [ 328.612634][T17075] ? clear_bhb_loop+0x35/0x90 [ 328.612658][T17075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.612677][T17075] RIP: 0033:0x7f53f638d169 [ 328.612692][T17075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.612706][T17075] RSP: 002b:00007f53f727b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.612725][T17075] RAX: ffffffffffffffda RBX: 00007f53f65a5fa0 RCX: 00007f53f638d169 [ 328.612737][T17075] RDX: 000000000000003b RSI: 0000400000001100 RDI: 0000000000000003 [ 328.612747][T17075] RBP: 00007f53f727b090 R08: 0000000000000000 R09: 0000000000000000 [ 328.612757][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.612767][T17075] R13: 0000000000000000 R14: 00007f53f65a5fa0 R15: 00007ffd5e2add18 [ 328.612795][T17075] [ 328.944834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.994075][T17081] x_tables: ip_tables: udp match: only valid for protocol 17 [ 329.066949][T17072] syzkaller1: entered promiscuous mode [ 329.073579][T17072] syzkaller1: entered allmulticast mode [ 329.133662][T17085] __nla_validate_parse: 6 callbacks suppressed [ 329.133674][T17085] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3179'. [ 329.155519][T17085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3179'. [ 329.467730][ T5886] tipc: Node number set to 2887052255 [ 329.575501][T17097] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 329.583982][T17097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.790333][ T6365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.984943][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.052762][ T6365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.180012][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.189210][ T6365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.191113][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.211044][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.223480][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.234586][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.242365][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.266666][ T6365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.294236][T17109] lo speed is unknown, defaulting to 1000 [ 330.463237][ T6365] bridge_slave_1: left allmulticast mode [ 330.475526][ T6365] bridge_slave_1: left promiscuous mode [ 330.483242][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.526683][ T6365] bridge_slave_0: left allmulticast mode [ 330.532386][ T6365] bridge_slave_0: left promiscuous mode [ 330.554132][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.714910][T17127] netlink: 'syz.1.3193': attribute type 2 has an invalid length. [ 330.728972][T17126] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3191'. [ 330.747900][T17126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3191'. [ 331.034936][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.089896][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.118223][T17144] xt_socket: unknown flags 0x4 [ 331.123315][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.138670][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.166670][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.192738][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.201594][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.391586][ T6365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.404025][ T6365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.422242][ T6365] bond0 (unregistering): Released all slaves [ 331.439701][T17109] chnl_net:caif_netlink_parms(): no params data found [ 331.697019][T17141] lo speed is unknown, defaulting to 1000 [ 331.749636][T17109] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.788564][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.822642][T17109] bridge_slave_0: entered allmulticast mode [ 331.834481][T17171] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 331.843243][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 331.863119][T17109] bridge_slave_0: entered promiscuous mode [ 331.894354][T17173] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3203'. [ 331.910481][T17173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3203'. [ 331.938900][T17109] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.947414][T17175] netlink: 'syz.4.3204': attribute type 1 has an invalid length. [ 331.956312][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.970847][T17109] bridge_slave_1: entered allmulticast mode [ 331.979754][T17109] bridge_slave_1: entered promiscuous mode [ 331.996401][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 332.043607][T17175] bond7: entered promiscuous mode [ 332.060670][T17175] bond7: entered allmulticast mode [ 332.080939][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.108919][T17176] batadv1: entered allmulticast mode [ 332.115649][T17176] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 332.125321][T17176] bond7: (slave batadv1): making interface the new active one [ 332.132807][T17176] batadv1: entered promiscuous mode [ 332.141351][T17176] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 332.290737][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.305291][ T5842] Bluetooth: hci2: command tx timeout [ 332.373446][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.401383][ T6365] hsr_slave_0: left promiscuous mode [ 332.407380][ T6365] hsr_slave_1: left promiscuous mode [ 332.413272][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.425420][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.435501][ T6365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.442952][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.485381][ T6365] veth1_macvtap: left promiscuous mode [ 332.490957][ T6365] veth0_macvtap: left promiscuous mode [ 332.501346][ T6365] veth1_vlan: left promiscuous mode [ 332.521029][ T6365] veth0_vlan: left promiscuous mode [ 333.047125][ T6365] team0 (unregistering): Port device team_slave_1 removed [ 333.097350][ T6365] team0 (unregistering): Port device team_slave_0 removed [ 333.105050][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.265150][ T5842] Bluetooth: hci4: command tx timeout [ 333.628947][T17193] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3209'. [ 333.655635][T17197] lo: entered promiscuous mode [ 333.677046][T17197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.691562][T17204] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3212'. [ 333.719172][T17109] team0: Port device team_slave_0 added [ 333.739782][T17109] team0: Port device team_slave_1 added [ 333.875162][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.892434][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.930530][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.018642][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.025917][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.058371][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.144932][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.174034][T17109] hsr_slave_0: entered promiscuous mode [ 334.184605][T17109] hsr_slave_1: entered promiscuous mode [ 334.200894][T17109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.212540][T17109] Cannot create hsr debugfs directory [ 334.265229][T17141] chnl_net:caif_netlink_parms(): no params data found [ 334.352318][T17228] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3220'. [ 334.384934][ T5842] Bluetooth: hci2: command tx timeout [ 334.482675][T17232] bridge0: port 3(gretap0) entered blocking state [ 334.495628][T17232] bridge0: port 3(gretap0) entered disabled state [ 334.512892][T17232] gretap0: entered allmulticast mode [ 334.524136][T17232] gretap0: entered promiscuous mode [ 334.538960][T17232] bridge0: port 3(gretap0) entered blocking state [ 334.546082][T17232] bridge0: port 3(gretap0) entered forwarding state [ 334.585806][T17236] gretap0: left allmulticast mode [ 334.591193][T17236] gretap0: left promiscuous mode [ 334.596944][T17236] bridge0: port 3(gretap0) entered disabled state [ 334.651703][T17239] tun0: tun_chr_ioctl cmd 1074025677 [ 334.659036][T17239] tun0: linktype set to 270 [ 334.663983][T17141] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.673198][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.681504][T17141] bridge_slave_0: entered allmulticast mode [ 334.689174][T17141] bridge_slave_0: entered promiscuous mode [ 334.698311][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.706073][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.735151][T17141] bridge_slave_1: entered allmulticast mode [ 334.742260][T17141] bridge_slave_1: entered promiscuous mode [ 334.781356][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3224'. [ 334.805953][T17141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.849765][T17141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.951953][T17141] team0: Port device team_slave_0 added [ 334.981604][T17141] team0: Port device team_slave_1 added [ 335.041740][T17248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3227'. [ 335.059686][T17141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.060424][T17248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3227'. [ 335.075881][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.075910][T17141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.083387][T17141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.132146][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.166813][T17141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.185065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.345348][ T5842] Bluetooth: hci4: command tx timeout [ 335.802540][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 335.817422][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 336.079436][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 336.146584][ T6365] bond0 (unregistering): Released all slaves [ 336.161628][ T6365] bond1 (unregistering): Released all slaves [ 336.172217][ T6365] bond2 (unregistering): Released all slaves [ 336.184235][ T6365] bond3 (unregistering): Released all slaves [ 336.202669][ T6365] bond4 (unregistering): Released all slaves [ 336.224938][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.303731][T17141] hsr_slave_0: entered promiscuous mode [ 336.317592][T17141] hsr_slave_1: entered promiscuous mode [ 336.340155][T17141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.356561][T17141] Cannot create hsr debugfs directory [ 336.423768][T17274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3235'. [ 336.464987][ T5842] Bluetooth: hci2: command tx timeout [ 336.477336][ T6365] tipc: Left network mode [ 336.523279][T17280] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 336.568139][ T6365] IPVS: stopping master sync thread 7680 ... [ 336.597042][T17109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.675805][T17109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.689270][T17286] netlink: 'syz.2.3239': attribute type 10 has an invalid length. [ 336.715308][T17109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.766886][T17109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.974735][T17292] lo speed is unknown, defaulting to 1000 [ 337.157054][T17109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.275687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.279089][T17109] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.331918][ T6365] hsr_slave_0: left promiscuous mode [ 337.338586][ T6365] hsr_slave_1: left promiscuous mode [ 337.424875][ T5842] Bluetooth: hci4: command tx timeout [ 338.302398][T17305] pimreg: entered allmulticast mode [ 338.307909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.326820][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.333968][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.468722][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.475911][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.551717][ T5842] Bluetooth: hci2: command tx timeout [ 338.794887][T17141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 338.832521][T17317] lo speed is unknown, defaulting to 1000 [ 338.832583][T17141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.914872][T17141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.986481][T17141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 339.278616][T17141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.337160][T17141] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.344915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.371210][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.378400][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.407009][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.414221][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.509956][T17109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.512022][ T5842] Bluetooth: hci4: command tx timeout [ 339.579804][T17141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.675800][T17338] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.3252'. [ 339.714118][T17338] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 339.734206][T17338] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3252'. [ 339.840891][T17109] veth0_vlan: entered promiscuous mode [ 339.894494][T17109] veth1_vlan: entered promiscuous mode [ 339.960823][T17109] veth0_macvtap: entered promiscuous mode [ 339.989330][T17342] netlink: 'syz.4.3253': attribute type 3 has an invalid length. [ 340.020412][T17342] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3253'. [ 340.057615][T17109] veth1_macvtap: entered promiscuous mode [ 340.140948][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.163566][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.193773][T17109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.282106][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.322645][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.334349][T17109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.361771][T17141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.376290][T17348] lo speed is unknown, defaulting to 1000 [ 340.384939][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.407563][T17109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.435471][T17109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.453266][T17109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.472601][T17109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.615677][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.619276][T17141] veth0_vlan: entered promiscuous mode [ 340.635001][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.673158][T17141] veth1_vlan: entered promiscuous mode [ 340.708953][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.717765][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.781859][T17141] veth0_macvtap: entered promiscuous mode [ 340.811484][T17141] veth1_macvtap: entered promiscuous mode [ 340.867439][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.887459][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.918306][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.939421][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.951780][T17141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.008840][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.031916][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.052425][T17141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.063695][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 341.074432][T17141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.097164][T17141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.132078][T17141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.151362][T17141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.159429][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 341.164288][T17141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.170781][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 341.191352][T17141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.429432][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.543829][T17383] netlink: 'syz.2.3265': attribute type 5 has an invalid length. [ 341.552056][T17384] netlink: 'syz.2.3265': attribute type 5 has an invalid length. [ 341.552090][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.618010][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.630457][T17382] ip6gretap0: entered promiscuous mode [ 341.641918][T17382] ip6gretap0: left promiscuous mode [ 341.898130][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.934492][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.954462][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.039556][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.310227][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.339809][T17412] ================================================================== [ 342.347927][T17412] BUG: KASAN: slab-use-after-free in __mutex_lock+0x830/0x1010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.355500][T17412] Read of size 8 at addr ffff888049444060 by task syz.4.3273/17412 [ 342.363404][T17412] [ 342.365737][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.4.3273 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 342.365759][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.365771][T17412] Call Trace: [ 342.365778][T17412] [ 342.365786][T17412] dump_stack_lvl+0x241/0x360 [ 342.365810][T17412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.365829][T17412] ? __pfx__printk+0x10/0x10 [ 342.365847][T17412] ? _printk+0xd5/0x120 [ 342.365862][T17412] ? __virt_addr_valid+0x183/0x530 [ 342.365879][T17412] ? __virt_addr_valid+0x183/0x530 [ 342.365896][T17412] print_report+0x16e/0x5b0 [ 342.365915][T17412] ? __virt_addr_valid+0x183/0x530 [ 342.365930][T17412] ? __virt_addr_valid+0x183/0x530 [ 342.365945][T17412] ? __virt_addr_valid+0x45f/0x530 [ 342.365960][T17412] ? __phys_addr+0xba/0x170 [ 342.365982][T17412] ? __mutex_lock+0x830/0x1010 [ 342.366002][T17412] kasan_report+0x143/0x180 [ 342.366021][T17412] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 342.366041][T17412] ? __mutex_lock+0x830/0x1010 [ 342.366071][T17412] __mutex_lock+0x830/0x1010 [ 342.366092][T17412] ? __mutex_lock+0x602/0x1010 [ 342.366116][T17412] ? l2cap_register_user+0x6d/0x1e0 [ 342.366135][T17412] ? __pfx___mutex_lock+0x10/0x10 [ 342.366156][T17412] ? snprintf+0xda/0x120 [ 342.366173][T17412] ? vsnprintf+0x1148/0x1220 [ 342.366189][T17412] ? mac_address_string+0x175/0xff0 [ 342.366208][T17412] ? __pfx_snprintf+0x10/0x10 [ 342.366225][T17412] ? hid_match_id+0x308/0x330 [ 342.366248][T17412] l2cap_register_user+0x6d/0x1e0 [ 342.366266][T17412] ? hid_ignore+0x602/0x800 [ 342.366283][T17412] hidp_connection_add+0x14f0/0x19a0 [ 342.366305][T17412] hidp_sock_ioctl+0x446/0x870 [ 342.366324][T17412] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 342.366361][T17412] ? tomoyo_path_number_perm+0x65d/0x770 [ 342.366382][T17412] ? __lock_acquire+0x1397/0x2100 [ 342.366408][T17412] sock_do_ioctl+0x158/0x460 [ 342.366429][T17412] ? __pfx_sock_do_ioctl+0x10/0x10 [ 342.366454][T17412] sock_ioctl+0x626/0x8e0 [ 342.366472][T17412] ? __pfx_sock_ioctl+0x10/0x10 [ 342.366489][T17412] ? __fget_files+0x2a/0x410 [ 342.366512][T17412] ? __fget_files+0x2a/0x410 [ 342.366535][T17412] ? __pfx_sock_ioctl+0x10/0x10 [ 342.366552][T17412] __se_sys_ioctl+0xf5/0x170 [ 342.366570][T17412] do_syscall_64+0xf3/0x230 [ 342.366592][T17412] ? clear_bhb_loop+0x35/0x90 [ 342.366614][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.366635][T17412] RIP: 0033:0x7f0d73f8d169 [ 342.366651][T17412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.366665][T17412] RSP: 002b:00007f0d74e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.366683][T17412] RAX: ffffffffffffffda RBX: 00007f0d741a5fa0 RCX: 00007f0d73f8d169 [ 342.366697][T17412] RDX: 00004000000005c0 RSI: 00000000400448c8 RDI: 000000000000000a [ 342.366709][T17412] RBP: 00007f0d7400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 342.366720][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.366731][T17412] R13: 0000000000000000 R14: 00007f0d741a5fa0 R15: 00007ffdabf3e9e8 [ 342.366751][T17412] [ 342.366758][T17412] [ 342.674413][T17412] Allocated by task 17141: [ 342.678813][T17412] kasan_save_track+0x3f/0x80 [ 342.683481][T17412] __kasan_kmalloc+0x98/0xb0 [ 342.688059][T17412] __kmalloc_noprof+0x285/0x4c0 [ 342.692896][T17412] hci_alloc_dev_priv+0x27/0x2030 [ 342.697907][T17412] vhci_create_device+0x116/0x6b0 [ 342.702919][T17412] vhci_write+0x3cf/0x490 [ 342.707236][T17412] vfs_write+0xacf/0xd10 [ 342.711466][T17412] ksys_write+0x18f/0x2b0 [ 342.715777][T17412] do_syscall_64+0xf3/0x230 [ 342.720269][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.726151][T17412] [ 342.728460][T17412] Freed by task 17141: [ 342.732505][T17412] kasan_save_track+0x3f/0x80 [ 342.737165][T17412] kasan_save_free_info+0x40/0x50 [ 342.742181][T17412] __kasan_slab_free+0x59/0x70 [ 342.746928][T17412] kfree+0x196/0x430 [ 342.750809][T17412] hci_release_dev+0x1525/0x16b0 [ 342.755728][T17412] bt_host_release+0x83/0x90 [ 342.760308][T17412] device_release+0x99/0x1c0 [ 342.764882][T17412] kobject_put+0x22f/0x480 [ 342.769284][T17412] vhci_release+0x88/0xd0 [ 342.773598][T17412] __fput+0x3e9/0x9f0 [ 342.777568][T17412] task_work_run+0x24f/0x310 [ 342.782142][T17412] do_exit+0xa2a/0x28e0 [ 342.786288][T17412] do_group_exit+0x207/0x2c0 [ 342.790866][T17412] __x64_sys_exit_group+0x3f/0x40 [ 342.795881][T17412] x64_sys_call+0x26a8/0x26b0 [ 342.800547][T17412] do_syscall_64+0xf3/0x230 [ 342.805036][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.810916][T17412] [ 342.813227][T17412] Last potentially related work creation: [ 342.818919][T17412] kasan_save_stack+0x3f/0x60 [ 342.823581][T17412] kasan_record_aux_stack+0xaa/0xc0 [ 342.828772][T17412] insert_work+0x3e/0x330 [ 342.833090][T17412] __queue_work+0xb66/0xf50 [ 342.837584][T17412] queue_work_on+0x1c2/0x380 [ 342.842160][T17412] hci_cmd_sync_submit+0x2c3/0x2f0 [ 342.847265][T17412] process_scheduled_works+0xabe/0x18e0 [ 342.852793][T17412] worker_thread+0x870/0xd30 [ 342.857368][T17412] kthread+0x7a9/0x920 [ 342.861425][T17412] ret_from_fork+0x4b/0x80 [ 342.865831][T17412] ret_from_fork_asm+0x1a/0x30 [ 342.870582][T17412] [ 342.872890][T17412] Second to last potentially related work creation: [ 342.879454][T17412] kasan_save_stack+0x3f/0x60 [ 342.884128][T17412] kasan_record_aux_stack+0xaa/0xc0 [ 342.889347][T17412] insert_work+0x3e/0x330 [ 342.893661][T17412] __queue_work+0xb66/0xf50 [ 342.898156][T17412] queue_work_on+0x1c2/0x380 [ 342.902741][T17412] hci_abort_conn+0x1e5/0x330 [ 342.907497][T17412] process_scheduled_works+0xabe/0x18e0 [ 342.913064][T17412] worker_thread+0x870/0xd30 [ 342.917640][T17412] kthread+0x7a9/0x920 [ 342.921696][T17412] ret_from_fork+0x4b/0x80 [ 342.926107][T17412] ret_from_fork_asm+0x1a/0x30 [ 342.930855][T17412] [ 342.933164][T17412] The buggy address belongs to the object at ffff888049444000 [ 342.933164][T17412] which belongs to the cache kmalloc-8k of size 8192 [ 342.947200][T17412] The buggy address is located 96 bytes inside of [ 342.947200][T17412] freed 8192-byte region [ffff888049444000, ffff888049446000) [ 342.960982][T17412] [ 342.963292][T17412] The buggy address belongs to the physical page: [ 342.969682][T17412] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49440 [ 342.978431][T17412] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 342.986911][T17412] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 342.994459][T17412] page_type: f5(slab) [ 342.998430][T17412] raw: 00fff00000000040 ffff88801b042280 ffffea0001735000 dead000000000002 [ 343.007002][T17412] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 343.015575][T17412] head: 00fff00000000040 ffff88801b042280 ffffea0001735000 dead000000000002 [ 343.024228][T17412] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 343.032882][T17412] head: 00fff00000000003 ffffea0001251001 ffffffffffffffff 0000000000000000 [ 343.041558][T17412] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 343.050221][T17412] page dumped because: kasan: bad access detected [ 343.056638][T17412] page_owner tracks the page as allocated [ 343.062337][T17412] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15071, tgid 15059 (syz.1.2553), ts 274468885111, free_ts 268108257165 [ 343.083870][T17412] post_alloc_hook+0x1f4/0x240 [ 343.088634][T17412] get_page_from_freelist+0x365c/0x37a0 [ 343.094168][T17412] __alloc_frozen_pages_noprof+0x292/0x710 [ 343.099966][T17412] alloc_pages_mpol+0x311/0x660 [ 343.104817][T17412] allocate_slab+0x8f/0x3a0 [ 343.109330][T17412] ___slab_alloc+0xc27/0x14a0 [ 343.114020][T17412] __slab_alloc+0x58/0xa0 [ 343.118358][T17412] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 343.124775][T17412] krealloc_noprof+0x10f/0x300 [ 343.129535][T17412] copy_array+0x63/0xf0 [ 343.133679][T17412] copy_verifier_state+0x7fa/0xda0 [ 343.138778][T17412] push_stack+0x19b/0x3d0 [ 343.143097][T17412] check_cond_jmp_op+0x859/0x3df0 [ 343.148107][T17412] do_check+0x8f59/0xfb10 [ 343.152433][T17412] do_check_common+0x1268/0x1bd0 [ 343.157357][T17412] bpf_check+0x5a44/0x1bcd0 [ 343.161848][T17412] page last free pid 14778 tgid 14771 stack trace: [ 343.168343][T17412] free_frozen_pages+0xe0d/0x10e0 [ 343.173369][T17412] packet_set_ring+0x1919/0x24a0 [ 343.178307][T17412] packet_setsockopt+0x1096/0x1870 [ 343.183416][T17412] do_sock_setsockopt+0x3af/0x720 [ 343.188435][T17412] __x64_sys_setsockopt+0x1ee/0x280 [ 343.193622][T17412] do_syscall_64+0xf3/0x230 [ 343.198117][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.204002][T17412] [ 343.206315][T17412] Memory state around the buggy address: [ 343.211933][T17412] ffff888049443f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.220065][T17412] ffff888049443f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 343.228130][T17412] >ffff888049444000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.236185][T17412] ^ [ 343.243541][T17412] ffff888049444080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.251591][T17412] ffff888049444100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 343.259654][T17412] ================================================================== [ 343.268297][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.277388][T17412] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 343.284604][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.4.3273 Not tainted 6.14.0-rc3-syzkaller-00743-g287044abff82 #0 [ 343.295351][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 343.305399][T17412] Call Trace: [ 343.308667][T17412] [ 343.311583][T17412] dump_stack_lvl+0x241/0x360 [ 343.316267][T17412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.321451][T17412] ? __pfx__printk+0x10/0x10 [ 343.326035][T17412] ? vscnprintf+0x5d/0x90 [ 343.330353][T17412] panic+0x349/0x880 [ 343.334232][T17412] ? check_panic_on_warn+0x21/0xb0 [ 343.339340][T17412] ? __pfx_panic+0x10/0x10 [ 343.343742][T17412] ? mark_lock+0x9a/0x360 [ 343.348059][T17412] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 343.353945][T17412] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 343.359825][T17412] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.366138][T17412] ? print_report+0x519/0x5b0 [ 343.370805][T17412] check_panic_on_warn+0x86/0xb0 [ 343.375733][T17412] ? __mutex_lock+0x830/0x1010 [ 343.380484][T17412] end_report+0x77/0x160 [ 343.384719][T17412] kasan_report+0x154/0x180 [ 343.389220][T17412] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 343.395122][T17412] ? __mutex_lock+0x830/0x1010 [ 343.399890][T17412] __mutex_lock+0x830/0x1010 [ 343.404483][T17412] ? __mutex_lock+0x602/0x1010 [ 343.409254][T17412] ? l2cap_register_user+0x6d/0x1e0 [ 343.414444][T17412] ? __pfx___mutex_lock+0x10/0x10 [ 343.419474][T17412] ? snprintf+0xda/0x120 [ 343.423710][T17412] ? vsnprintf+0x1148/0x1220 [ 343.428293][T17412] ? mac_address_string+0x175/0xff0 [ 343.433481][T17412] ? __pfx_snprintf+0x10/0x10 [ 343.438143][T17412] ? hid_match_id+0x308/0x330 [ 343.442812][T17412] l2cap_register_user+0x6d/0x1e0 [ 343.447826][T17412] ? hid_ignore+0x602/0x800 [ 343.452319][T17412] hidp_connection_add+0x14f0/0x19a0 [ 343.457592][T17412] hidp_sock_ioctl+0x446/0x870 [ 343.462344][T17412] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 343.467625][T17412] ? tomoyo_path_number_perm+0x65d/0x770 [ 343.473256][T17412] ? __lock_acquire+0x1397/0x2100 [ 343.478272][T17412] sock_do_ioctl+0x158/0x460 [ 343.482849][T17412] ? __pfx_sock_do_ioctl+0x10/0x10 [ 343.487965][T17412] sock_ioctl+0x626/0x8e0 [ 343.492282][T17412] ? __pfx_sock_ioctl+0x10/0x10 [ 343.497119][T17412] ? __fget_files+0x2a/0x410 [ 343.501698][T17412] ? __fget_files+0x2a/0x410 [ 343.506278][T17412] ? __pfx_sock_ioctl+0x10/0x10 [ 343.511114][T17412] __se_sys_ioctl+0xf5/0x170 [ 343.515695][T17412] do_syscall_64+0xf3/0x230 [ 343.520191][T17412] ? clear_bhb_loop+0x35/0x90 [ 343.524867][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.530749][T17412] RIP: 0033:0x7f0d73f8d169 [ 343.535161][T17412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.554776][T17412] RSP: 002b:00007f0d74e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.563209][T17412] RAX: ffffffffffffffda RBX: 00007f0d741a5fa0 RCX: 00007f0d73f8d169 [ 343.571177][T17412] RDX: 00004000000005c0 RSI: 00000000400448c8 RDI: 000000000000000a [ 343.579144][T17412] RBP: 00007f0d7400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.587108][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.595067][T17412] R13: 0000000000000000 R14: 00007f0d741a5fa0 R15: 00007ffdabf3e9e8 [ 343.603029][T17412] [ 343.606305][T17412] Kernel Offset: disabled [ 343.610614][T17412] Rebooting in 86400 seconds..