last executing test programs: 4.51086807s ago: executing program 4 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0x3}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000400)={0xf415, 0xa, 0x2}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f0000000340)={0x1d, r5, 0x2, {0x2, 0x1}, 0xfd}, 0x18, &(0x7f0000000380)={&(0x7f0000000b00)="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", 0x1000}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100feff1f00fedbdf251000000008000700000000001800018014000200776c616e3000000000000000000000000800060000000060"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48806) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) 4.388346528s ago: executing program 4 (id=1288): socket$kcm(0x10, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='cma_alloc_start\x00', r3, 0x0, 0x2}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 3.971131607s ago: executing program 1 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "a67494fcd3a42289"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x1, 0x20, 0x0, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15e556c2baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x3, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x12020}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x16, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @alu={0x7, 0x0, 0x9, 0x9, 0x9, 0x40, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x4, 0xa, 0x0, 0x100, 0x10}, @ringbuf_query]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x56, &(0x7f00000001c0)=""/86, 0x41000, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x24, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x0, 0x10, 0x34, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x15, 0x1, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r4, r5, 0x35, 0x2020, 0x0, @void, @void, @value=r7, @void, r6}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r2, 0x400454cc, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="268b98000000000061119c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.349329535s ago: executing program 2 (id=1298): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0043000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160003000a000000000000000000000000080000000eceb6b362bb944c08e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x4008080, 0x0, 0x0) 2.948102414s ago: executing program 4 (id=1303): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt(r3, 0x1, 0x15, &(0x7f00000003c0)="ba8661b82431f35a69fd1504dc23c5d8", 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r6], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r6], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x5, 0x8, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x66, 0x0, 0x2, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x4c, 0x1e, 0x3, 0xa, [{@multicast2, 0x3}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0xffffffff}, {@multicast2, 0x5}, {@local, 0xc}, {@private=0xa010100, 0xebd}, {@broadcast, 0x7}, {@local, 0x1483}, {@local, 0x7}]}]}}}}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r9}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r9}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) 1.805377433s ago: executing program 2 (id=1304): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.717241074s ago: executing program 0 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.666830123s ago: executing program 4 (id=1306): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0xfffffffc, 0x1, 0x2d, 0xfffffffc, 0x81}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000050000000200", @ANYRES32=r2, @ANYBLOB="208b6944482ddf6d87c2ed7549724852e580a2b045592c299f2488cd7182e2dc600af719c43daab8ce9356b7449f9d71581732920f178c18184029078f158add66e35ceafebf3e9708037fb35d88926477c01dce8147782829368a864ba402b01c5d0b762102a2f157159685037f2a41"], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f00000000c0), 0x4) close(0x3) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000300)=0x40) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) r6 = openat$cgroup_ro(r4, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) listen(r7, 0x3) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff7800000000ffffffff00004e2200"/38, @ANYRESDEC, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000010102040000fe06e2d4c3d9050e000000000000000000000000138f2b58ea71e70b7ec40843c97fb62cd171"], 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x2040}, 0x8) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r8}, 0x18) 1.665975835s ago: executing program 1 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}, {{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/220, 0xdc}], 0x2, &(0x7f0000000440)}, 0x7ff}], 0x3, 0x40002002, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffff2, '\x00', 0x0, r5, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) (rerun: 32) 1.600558946s ago: executing program 0 (id=1309): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xd1, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001540)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x5, 0x5, 0x3, 0x500, 0x4, 0x80050102}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'rose0\x00', @remote}) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r4], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x40000) 1.408688691s ago: executing program 2 (id=1310): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'batadv0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0xccaa, 0x7fffffffffffffff}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0xffffffff, 0x1}, 0x20) socket$inet6(0xa, 0x80000, 0x80000002) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="1c0000000b06010100000000000000000a0000160800094000010000b1027d0cee95cad0e0eed4a3948180f12b5eeda1b2b9dcb7c4ad1d5a2e6317a883365818d5edc17515474df1a87a635c658357ed89bcbba58e678fc507ef75a3b8b94cf4a1d85f147bff0aa0de5143823f7499add27030b2a096ae263367a81b64410aaa44cc57de8c8b5b8ae642f163f33f7c7528ae43e8936e4e495ef90131606ff6cd6af75656010a0b8ccbb887f59099daf312beff1b79e196515df22089e0d64767e92abaf1499d59aa35583b320af4e634819e7deac75f064384637ca94d5714b1a3104f224bc29c777980cba874ac5ced401da6f692de81685b3ab4e63147f9e9114897b57f82af034eef0634e9"], 0x1c}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x4000) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000300)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/246}, {&(0x7f0000000540)=""/237}, {&(0x7f00000003c0)=""/83, 0xfffffffffffffddd}, {&(0x7f0000001dc0)=""/4102}, {&(0x7f0000000b80)=""/263}, {&(0x7f0000000840)=""/207}, {&(0x7f0000000940)=""/206}, {&(0x7f0000000a40)=""/76}], 0x0, &(0x7f0000000180)=""/60}, 0x9}], 0x400000000000261, 0x12141, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) sendfile(r5, r2, 0x0, 0xc414) 1.363099824s ago: executing program 1 (id=1311): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x10000018, 0xb3, 0x7f, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x0, 0x6}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.277221158s ago: executing program 0 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES8=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e000000208000600ac14142b080004000500000030001a"], 0x78}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x70bd29, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r3) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r5, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2c, @remote, 0x4e20, 0x0, 'none\x00', 0x22, 0x5, 0x3f}, 0x2c) (rerun: 64) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) 1.034944468s ago: executing program 1 (id=1314): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001280)=@security={'security\x00', 0xe, 0x4, 0x1308, 0xffffffff, 0x0, 0x11b0, 0x11b0, 0xffffffff, 0xffffffff, 0x1270, 0x1270, 0x1270, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@broadcast, @multicast1, 0xffffffff, 0x0, 'ip_vti0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x62, 0x3, 0x2}, 0x0, 0x10f0, 0x1118, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz1\x00'}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fffffff, 0xfffffeff}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'veth0_to_batadv\x00', 'pim6reg1\x00', {0xff}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x1, 0x2}, {0x3, 0x1, 0x1}}}}, {{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'hsr0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x4, 0x1, 0x1d}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x8, 'Tp'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfe7, 0x1, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1368) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x38}}, 0x0) 956.566833ms ago: executing program 3 (id=1315): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) close(0x4) 946.500217ms ago: executing program 0 (id=1316): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r0, 0x36, 0x4, 0x0, @void, @value=r0}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x8, &(0x7f0000000000), 0x8) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x101, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x10, 0x22, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000021568122000000000101000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000050000000d0908000000400018150000", @ANYRES32, @ANYBLOB="0000000000000000184b0000faffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ac0d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000070091000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7ff, 0xa7, &(0x7f0000000680)=""/167, 0x40f00, 0x8, '\x00', r8, @sk_msg=0x7, r9, 0x8, &(0x7f0000000a00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x7, 0x5, 0x9}, 0x10, r10, r0, 0xa, &(0x7f0000001480)=[0x1], &(0x7f00000014c0)=[{0x1, 0x4, 0x9, 0x6}, {0x1, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x2, 0x7}, {0x0, 0x1, 0x10, 0x8}, {0x1, 0x5, 0x4, 0x6}, {0x2, 0x2, 0x10, 0x6}, {0x0, 0x1, 0xe, 0x2}, {0x3, 0x4, 0x2, 0xd}, {0x8, 0x1, 0x8, 0xa}, {0x3, 0x4, 0x10, 0x6}], 0x10, 0x7, @void, @value}, 0x94) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(0x3) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="00032bbd7000fcdbdf250f000000994a17fd87ca52c8659731775b350228480001802400028008000400010000800800030009000000080002000300000008000200030000000e00010069623a64766d7270310000000d00010069623a776c616e3000000000", @ANYRES64=r4, @ANYRESOCT=r4, @ANYBLOB="8fed8d344f8fe878b900861553a44d60c7f9816403b3675941cdb6aab70ad51ffaae3a2061daedf990d7b943e2715d171dd72c23822562d2f9caacc86bbf477860f124429b511d4925c9e689c93c57ad20ece5f07df2512f3f060cf70bcf68409bbd75edac162e8779dbf957f8ad6fdd95e836bea2e370cd53dcefb58138e4804a264bff4aeb51c7fb0ed109d041bccc58ec13197dd5c6a458e109cfbe2dbe6159cb26c067c68101f4afcf41499a5885fba0c3b3b16b00aa302c96af1d588f2ff0e8c61cb633b0e131154582a55107b487a03eab3e3cc2ca595d9ddc8dc8f66b825cdb9f1ee480c3", @ANYRES16=r3, @ANYBLOB='\\\x00\x00\x00', @ANYRES64=r1, @ANYRESDEC=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='a', 0x1}, {&(0x7f0000000ac0)="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", 0x5ac}], 0x2}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r3, 0x2ac6d477bcf2db69, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4004880) syz_emit_ethernet(0x1aa, &(0x7f0000001640)=ANY=[@ANYBLOB="fe6277246dd1483e042b4af0337f62577497b6bb39b5f01143a6c09932d911d917cac0404f8ab231ec0003", @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRESOCT=r8, @ANYRES16=r10, @ANYRES8=r7, @ANYRESHEX], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='hybla\x00', 0x6) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005100010000000000000000001c000000c2b4b47c35d6cde85020bbbe1dd7ba7939038c4ebc5c1bef670df5dc9f4d"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 943.084443ms ago: executing program 2 (id=1317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200002f72ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x4c) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791192000000000063004800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='hybla\x00', 0x6) syz_emit_ethernet(0xfffffffffffffef7, &(0x7f0000000100)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) unshare(0x20000200) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x800, 0xda) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0xfffffffffffffffb, 0x12) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) unshare(0x24020400) r6 = socket(0x21, 0x2, 0x10000000000002) getpeername$packet(r6, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x3, 0xf7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 804.850153ms ago: executing program 3 (id=1318): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0x1, &(0x7f0000000000), 0x0}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000440)="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", 0x14c}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e26, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001a40)=""/4096}], 0x56}, 0x80001}], 0x1, 0x2100, 0x0) 770.088757ms ago: executing program 0 (id=1319): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, r0, 0x0) unshare(0x8000400) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getchain={0x2c, 0x11, 0x100, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0x3}, {0xb}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 769.174691ms ago: executing program 1 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}]}, 0xd0}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000000c0)) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 619.744295ms ago: executing program 3 (id=1321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000020c0), 0x8) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000020c0), 0x8) socket(0x2b, 0x80801, 0x1) socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40000) (async) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40000) sendmsg$nl_route_sched(r1, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) (async) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000002480)={0x0, 0x7}, 0x8) sendmsg$inet6(r0, &(0x7f0000003940)={&(0x7f00000024c0)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002500)="847bb2", 0x3}], 0x1}, 0x4040) (async) sendmsg$inet6(r0, &(0x7f0000003940)={&(0x7f00000024c0)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002500)="847bb2", 0x3}], 0x1}, 0x4040) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000052000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) 618.988843ms ago: executing program 2 (id=1322): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="64000000020601080000000000000000000000011c0007800800114000000000060005404e2200000500140008000000050005000a000000050001000700000005000400020000000900020073797a310000000010000300686173683a69702c6d616300adc609cf1242682a8b69efc71fac1880722ea3f72287c656e991edc46333db59b78c0796717897df472cbdfe4289d3ffab7d5ae02ba1deadb6cf0acae0a3a29fd3a7e00014528579fb416a05199d09e43b9e7847712a0c6d3f368186fbb29c7a2600827cce3794cf33c5dd0afd1661f6f53f4b64881ead0a0e29ad2b0a000000e42ed94c10b5dd2fbc5c5eba68e9d99bde11ceb0a3391b375b5116f8bafbd51e8c353ced361287fa9ca7"], 0x64}}, 0x4004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x24000054}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800051697731a94f75f3e77914b07d210bfc3ee83fc4ba829095cd9c582bf1fee363c2022f724b7d3cf3355aca6aba78ce7ec7ae901a00e6080a47bb091541d9cf8d17c9b5e74232e769ca2c6216062edf641b94ed779e0279e8b96a68eb90b0c716446fa56ef806352bc7ae5bf462235523578ae85e8de1a285519553f02561d6f64bb8a0cb9f32b6e35df0e021005f9b7821dd57ebdfce42bfffead062731b91456b5a51c", @ANYRES32, @ANYBLOB="0000000000000000850000005500000025922000ffffffff"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x29, &(0x7f00000003c0)=""/41, 0x41100, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x5, 0x7, 0x49}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000300), &(0x7f0000000540)=r7}, 0x20) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000000180)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2000, 0x2, 0x0, 0x8001, 0x0, 0x1000b}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r10) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a11861cd0e7f5fba802f5e6d402bdf2a27c55546fc1506ef68cf2a9ec5e143fff3d317b8f55ac8359aee71b94a71a5f01460bcc3231acc0aeac515c2fef5583129611b89371e2722155cf3d62629d6701a862a2813388a36736726b944533ceca36dfe7051b5758f5d9e4ffbfca94f6c699053c23bbf244df9f5ad3a8ac62c2f6d38279a09f96e530fdb318cb89f138a05a35eb36905b250167d5af0130c72eb737da7e852056163ae3cd15cc7ffb63ef0a642d71c27c9ffff54f6812f4ef55cc0965be4ac9b000000000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010057872214ed27bd7000fedbdf2521000000080003216d4eeafd6893a2488a00", @ANYRES32=r3, @ANYBLOB="14002c8008000000060000000800000006000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8d0) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4) 618.619342ms ago: executing program 4 (id=1323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xc}, {0x15, 0xffe0}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = accept4(r4, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000001c0)={0x9, 0xe, 0x8000, 0x7, 0x3, 0x5, 0x4}, 0xc) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000280)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) splice(r0, &(0x7f0000000200)=0x2, r3, &(0x7f0000000300)=0x9, 0x7ff, 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0x2}, {0x7, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 458.756549ms ago: executing program 1 (id=1324): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x8f7084bcb4e933bd}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x44}, [@IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000b50000/0x4000)=nil, 0x4000, 0x0, 0x50, r6, 0x1000) r7 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r9 = socket(0x2a, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r4, 0x8, 0xfffffffffffff327, 0x6}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x8, '\x00', r8, r11, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 449.860051ms ago: executing program 3 (id=1325): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {0x8800000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 394.120613ms ago: executing program 0 (id=1326): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003e000701fcfffffffd9bdf25037c800800148004009d80"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d000100000000000000000004000080450011802fe5afbf24fbcccc55761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840c09650dbe70d6147f9cdbd9d15d2dcd393701e00"/90], 0x5c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x80000}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 391.485458ms ago: executing program 4 (id=1327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86812164b8886c3588ed6", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_PKTS={0x0, 0x2, 0x1, 0x0, 0x8}]}, 0xffffffffffffff05}, 0x1, 0x0, 0x0, 0x20000080}, 0x240088c1) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000030b0000000900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x74, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf91}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd0c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x24040080) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r5, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000200)={0x2, 'rose0\x00', {}, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580315bdcb, 0x12, r9, 0x10000000) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000400)=[@mss={0x2, 0x4}, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2}, 0x1c) 82.002434ms ago: executing program 3 (id=1328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) close(0x3) close(0x4) 48.645325ms ago: executing program 2 (id=1329): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d00", @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 3 (id=1330): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6b}) accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @rose, @remote, @netrom, @default, @netrom, @bcast, @netrom]}, &(0x7f0000000180)=0x48) (async) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@bcast, @rose, @remote, @netrom, @default, @netrom, @bcast, @netrom]}, &(0x7f0000000180)=0x48) getpeername$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @bcast, @bcast, @rose, @bcast, @null, @default, @default]}, &(0x7f0000000240)=0x48) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x8e47, 0x4e4, 0x4, 0x0, 0x79, "8ab8c6602dc9b8d95d14843af86b50bdc2db53701067460e7611a649e19620793586a418f0f8475583da423fd21c2498b1bd05bec3533024c2d969a87a9de085d536b3a67374a1443f91b9c283a665b33214516fa97e1e0106c898b5ffa85c9b31839b66814e485748c0abf2cd661dec60a90eb8cd6d30f40d9ffa2bfda4c51a"}) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) ioctl(r3, 0x0, &(0x7f0000000380)="c368e9263e293285e0a72b7cc754769096aea3aea5bddafc4d97b1a8b0f33b5172b280cf31190624c6b9efe8afaf3501ae3eef12") r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @empty, 0x9, 0x2, 0x72d, 0x0, 0x8, 0x40000000, r5}) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @empty, 0x9, 0x2, 0x72d, 0x0, 0x8, 0x40000000, r5}) r6 = socket(0xa, 0xa, 0xd) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c78}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc80}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5d6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7d}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c78}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc80}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5d6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7d}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680)={[{0x2b, 'net_cls'}]}, 0x9) getsockopt$netlink(r6, 0x10e, 0x6, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000001700)={0x1, [0x0]}, &(0x7f0000001740)=0x8) read$alg(r6, &(0x7f0000001780)=""/250, 0xfa) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001880)={r9, 0x8001, 0x0, 0x6, 0x8}, &(0x7f00000018c0)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001880)={r9, 0x8001, 0x0, 0x6, 0x8}, &(0x7f00000018c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000001900)={r10, 0xd, "720f25d7285133c80b0cf6e9bc"}, &(0x7f0000001940)=0x15) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001980)=@assoc_value={r10, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001980)=@assoc_value={r10, 0x2}, 0x8) sendmmsg(r4, &(0x7f0000002c40)=[{{&(0x7f00000019c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0xbb, @mcast2}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001a40)="2e2e118d6e154f715175bcf123dfc910c1d86d803c73182127d527745108203083b09382e1d7dde50de2d75d8867d6bec8776cf4e331302ee01b7298b14a0c4ca875a385791948b645a6d558ac068de74371f45e15541b096c14081377ae1f02e96c171be0107453e37af36b091e43b5c795c609b49b532a3b89dde76f84659a0b17ec7e2a7858b34eaff3da077682e77358ab29f205e8e89225947e8e0b16a6f09ef1b0294a92367926bbae332d872cb25c04c4887e9cad34381cc959222faf09c8f21a84f216a5fd343f2dd6aa79116738cd273a49d80219db7a163cf0cede9b72df932d9fbc32bda191137e65890d0db97234aa58267c", 0xf8}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="cc1180b4c23dbeb84ba226", 0xb}, {&(0x7f0000002b80)="2b8173896ca726f55de9e2735abbb8e5e17ea7de27c664176fa4bbe8855ddb6a1abb2f8580fa3fdc51b12f7df2ab2f99da8a3507df3af6174471e6c675b64dd24ff497", 0x43}], 0x4}}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000002c80)={r10, 0x800}, &(0x7f0000002cc0)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000002c80)={r10, 0x800}, &(0x7f0000002cc0)=0x8) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000002d40)={0x0, 0x10, '\x00', 0x1, &(0x7f0000002d00)=[0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000002d40)={0x0, 0x10, '\x00', 0x1, &(0x7f0000002d00)=[0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002e40)={r11, 0x98, &(0x7f0000002d80)=[@in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0xc}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x6, @empty, 0x42e}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000002e80)=0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) writev(r12, &(0x7f0000004080)=[{&(0x7f0000002ec0)="58559e3a027b43e75b3b5f79635fd3805564bb75a042a3df505a87aa237d331f65c4e062f2ee551a30417c368b25a00fb57cf2ee25c7e2e23f365b5e15560682e847f1c18154d352f8e30411b65c9f72b9b5632eea72418437d78d610de5d0e596fd5f3be899ebb08119f0953acf0040d34eff41483435bb24768e551959379066d1a31a13ab", 0x86}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)="dfbd11c1cb071798138f4d36c749e7e6e6500e2396ea0eae343f6b201e53e1dbb67afc511ab21109108ecd351317a31901f77f76ce378a7815d92b82e9e5ef1c9ed9d86cce7106c6ef61dc2199df79157217ebcee1ba0e3a7a4071ae43a694764eac1adcfe3ec823dbe20c15e29331931eba93c7841db879200ff6442ada9233a3063f5ac0fe91f18b8e7f9eeec69d40c919daef76c05df7d0a24c06c075dede8fa2ad3eeb774595252fad0e66d368b706cf5022833fe89a141a24ccc5b3911717fb378429c66eb72599c3770ee06862ed20765ba23f355e6ec7c3f3b4b4ca3890a6c05b1b9ddd9a3200de5d96478fa7e20c1ef5d716e691a3731bfc382ed5ae41e057df958e82a86c4be89cc1041950c2ceb3d869c3e43b37ecd3d344b6296845c4c0ad7b882815edf0864d2ce45ac8f09d046200b5afc4e55f2eb453a7ff678bd82a7e03e85a157395f4c0bdb69cd46e884419ff7eed2395f2e538ad95b71546dbdacacbfc0b34afedce1eaf7b88a88bfbbac116a05135defbaff1b9ffbd11725cb59ff84f6362ce857d5b0928cc09d40b49d3af208b4850b9649a9172118c437000dec7eea65b5a8f274bc4f7f2d1ab3715d377aa95aa50300d6de922955ca87a76899a52d71877b0c4c90f11227d116f8190dac701703369801fb26d5accc2c1a1cbbf5db4d6a011a6144d3c5fedb5c4c6261ffc00d089871a0f9e137e1acc831cd471ca040b5985555a32948ceb0548624026864f04fc409de07fc616cfac62406d8ecdf2cfae79710babd117374e15aa57aadbc310afd9a108661d799498f0ddd8b1fff7f7f81b1b522ae1fc18c1c368904fa6026dc02c587ebd9b9f7c9180490f20161700b3e328ad82957c9e6654fe71b5daab40741a0dec7190573f23874cd47427a961c4ac31c2085d18bf09f1d383d782c8793cf9086741f8446be2ad771845b5e67baa2cdbfe7a0b8883a42f3fe299d529209ccb3e6af2586d407dc614131240ce708c5d45f0001bb5b4173c42faa653cbf8276ef4eea4a145c58351c9428e6bb88dffb3076fe550ad23e59cb0178c1d558479ed1867892c1aee906303b19d659225ff369681e207ca84ea1da59f145a6418257e521b0dc4aba4e63ccd8c07943e759dbfb7abc0e82803ef23bde2adc32b6097726c26c07509a8de0e70c6f58875f6108d36374ff5c45ca1b7e5b5ee97919b6a1417538000903ef918a2fd1fd24f6fb9a9c91a82d7eb624a4559b3d305524fec87b66d63abfdc16226017af9def09831fa673ad1cb5947dc28ea4c8924ec8fc1f260846907c5a497336fd66b31983b0e31b9c51eddcdb3f427c6769732d97c6d8f6589933121ce5e7ffa0bdfa40ad90e6ae9ede67b01f93b38872ab36476ad6c3b4efff0bd2c2810ccdc3a490ab6997da5cafe1671ab1ad0cd2579631ab40847644d99e1f6ddf194e67b78063379af14a038dc5e7cfec625a5377b5c320fe2560da37fa3776473ff60a740f1ec72dcc8e947612d2f41bc1368cca753090572de1ddf6a181ab5eac491ee7d40619acc723d87ba621f63bf6da43490c3f558ff7e2b9cd54acd1090e0bd8c577ff3a2ea21c06e4ae70deb95865c58c8846ed64baf578949e099a698c58ab2e781c5d401c95e92613e7be24bd70d7eac55bdee9f71d202ce574b60f138b9009b4c801be4abdd458a666620866700c4bf7d6e9f586867af7760bd595e343d36e78dae328c5f963ce71e0fcf87235df0afe58ae57ef41c565a7e3dba2481880cfc525dc63a599dfe565d097d3619e350b3bd1183f292860c0bf75bdc8dc748e56a2e4a955e352262c8a469798220d3c8144e3054157a530b2b35ccbc7c8c39b849bb2aa39b409bfea49b592c7baf415b4d94bce49a4abdd8eb0272f5c50eddaa5b130c960525e68cc4bbc63e9a8775a87b9a95e613b98aa511e67d0df3237055d1f5551b583514ac7edd1552fbad865ca0b1e30cc86873db7b0e93b2d2d253e85f5dc3e4730b67024a32089c96bb836d60abad256b74368452d64824c05948d37335cbb4ff2ca80952c41ba801a91e6eef33dd1b86f8c231c68bf6a4199e0afee392ccde58013181324e4c20a3a38df10aecdffe1f1315039f931bd132ae24d7ea8ed52316795b562826d784974c6bd495203eed882db922685d22ae146a89b9bce4554c92244c4b2ae8c40fd0b58ebf7c9c07c603ed9aabf5f9c538d8011bdea8b95809627f6340f1a736c5f8b414646bae31d70fd78e9bef61c8813c488b7ba4584a55623f14bbef5cad8cc69233560e75c715dd6973806eba99b7d38102edafaf1444fbb3f266038de54333985bebb10405377165d9944ff64188515c54c64d8c24c0d5b2afd409ab5050c53a9efa3c686236c391ead11b65e7f36127aa00adc2457a98a9fbf1e7713a0891648dd896698dca322ac87e5420d4ab88be3575eee2d6c73c47670d18d4778c2b75f7d2835268178daf8b7b61cbf5e4e52e567472cfc0e1c87da677421b7567a8402cd12da87c7494e87b2aad7486c9bc514d0720163b239865724488ce7da916142e49372b84adb4f9d3c3ace84222430eec754c2bce94269a2981c905c94d5b35f2cbc4329ed7fd7fd6bebf2e615b4780c010b6c9746c30add5e4f8f8dffe9a20983f38b5dc3de8e84c20b24a393b540e779d85580a254a00cb3b24d8341bd8a74a173bdf0429be4ebf1e9bcf4a61d06d50a5a7dca7a1770d637d2fa922bc3892b7a25b0a71be0a928a9bd67ba1155ea3e5fa0e48ff685ba91dae8de2a4827bd7d0259b43a85934224e0cd7647f2d2c01ba5fceeb84e5ff46d6475b6972d0590f1bd527d2ef9f2fb023e31bac86495e7e5d562f4736dc22f4b2d5ad6a688b9f699bb72020f52c55fe02f84e8b3f36c1f0149f06f85c7ba13df2cdeec81c8772dbc03c3bfe32c21b5a9639d07f739747201312db0309ddafe67a0512f809e5c6d1fff6612c29eda83c9ec914e5d6fcfb800ddc599955b45159d5ffe496b3f9a7b3555630f4b6fc99eacf3d421ba7f36824da55248d026e6135347609765a0af0e2cdf43a8d1f0e12e5abc135e9100c1cf385f2d094e867a9228fb0c5d2954215e4d1bc53d8b4b77806a852dff72a5f05c40e5bfaa560d4fe1f4e7af7840867a892f9f46fd55edcd1ce2a8c69269a77037dc47fd5af88a40d2789519abda7b3c687ed6c64d423f64bd9db263e9cf2c42cadd669624c92c451df842c8e6cfc4c84fd799abf927dfa6d0dc6ce3b955ecab349694979659a8ed550efe96a8893d09b4ec9ab0894c28fa66abb47eec373a546a750ae1f12c56e098367af0d470b9e0c3ef39665431a978d3a62dbd108dcef141d4672c5210df26b4eb3e0e48a4d7f3d28523a85d50eea9dcc8482736a5f704af5bb766c6c174e620b2e580bc0c4be08976d1180a83bb76734f9e05f4b999d18dc57191f082145a83c6675c7ff366c420fbe4a246e6ce6e680e04edf272ddcc3d5f58886c844e4654deba14bbef5c5809e034611d6e248bd4a4001c531c05c761f2f7f4d7afaa9dc9d094e649d42721e4e94005ed9d947f3cc452521e41e7820172c94490c759b03af560acf60592b57e4503173d40a9c57dc7a5ba730815bef69f787e3befad8a48bbc54b0df17d9a1836f058d22bfcfb0245dc74eeab5c0d256ae98978d7ac2d67db116b16094ccb4627d78800eb1f51f2c66835b93906a1d6a9523dd9c1f3d8c3f0f0f4639947c58afd46693bb4e62f06e47016c23c10e6f51c85832e251af27909a724a8ff2d14b0a31f6749e2f33a9f844fed77f570cde1ca948148a85ea9de13a0bd968315f6e18d3b94649f6c98146057b5b9efc32ed4fec17e47a23bd40bb7fc4e59220d58f182c267d3cc4decf348a2dbdf2b25ee95af327d41445437ef1c149781f3bb13f4314690c6c880d8e885f3f3875aa5f66a440649547418269827c0bf8b627345cf2d3806dfdc3eda2ac013602fac05ef065404ad6d4a808bca65672e0b0972aede95d675d419acca7ce17257a4b561b56650245b515c6ccf63a76f884f59d7b47bfc2126cba83c59bb1a4efb3a325c07a8acbe0c412d302d4a359f5ef58df1467970454b55a968c4b530e4ba4a40347c5c2f94dcc2e4924b3e058b18900f45d5d38fcd1edf471f819e3d78836be3538799bb851083a0d38b711a75246e31d644bd2b20f8c2f221225ffbd0b13b558457cb48b98db533b62183526e906a81d395a3f8a71edf264c08ac43df22f44026bca4a8e9892958b26eafe8d96ee82b1bbf5566c74d010cbac7877d2209511bd538e975d33722db23049f5fd273e6fe2ed6e25ee65d3012d27034ad15c322593ea0a517a5a48b2e2283b8d4e4df4f8bf41fdf3ac5121b91d6553fca71ba3a00d0d491d68aae157ea776ab11c7cc3bdbe7469eb66611e8f5cba993b6097dca36dbd9274540b1fe2568774f2bc73500ccf7ca4cabc3fb4cfaf2bdf4ffe002571b3ce7e5f1fe712b0333a1707a7bf2abc7da4cb35c8876f8bfdfa4810a8a69b3fc0c6b30bd1935e67b74775cbfa88e9ca8be99af6143960b92f2c651d9503e5d74e3bcee1f58fabab6dae52350f0444a831b0f5511b1e5429b52cd05f36920dc7b68d8a2398bc533fa28c502437888221164d75fc410336c1c8351f2ffd6515468f8fd79f9f81fe55fb698eb282ab89c6702c6c6150a37c69f734764e7158c53aa1cf3d5a3dd2dff6bf6de3820eb6ee53fb23023677f7970d90b15dc6bb0b40a756a99bf01b816566fd9b5714461f3bde514c515e86741769647900c9f055f16e1c2418aa50fba86012c63d1646584e04d7cab066f5c209e3cff8347628be6e116bbfe1e41593135dd86cd135c1deb1bd9ba0b8dcc67c28ad7cda082f2d220a80d8d40ace7a7d9c3657f335be082d9c38ba0885761e3d4ee22d52f819baad2c0e8b057466d6d94b33bc04cfbe12845bc4ecb6d2d335aaea4238b8016080b4a848eff772ef9ee74d9e4d680c2911c092022413c687f485b1c437bb7028ad6d47b75990e92e4d493d44fa7f46c781434833aada6289ae2bb1206820694cbe9661e10cede1f7fa2bf7b7cb10699d387700e374fc0ec7cb2bc544b74a3220753dfbf0bfc56d91ce0a8c22347bafea5da98ef1624cff0864eb91311376122935db30f832e0e3ae91f9a2ca99ad6efdf02fc4d45b8a4a070f23fdd68715100e72797ee2eee11c2ac13e74eb0c0b8682c41db72d5268b38e36374c30c22b687851657fbecae5bd2087a7d31325e78c25abf1dfc8f442bf702f990df9f0f02f9556e5d10af64d7cda813e1fa56aa245b48d0bb9fb8a30d030a68ba8fb5e9b53cebf37f60f936a15f1ba485b1d7c50c0a91faa7126ecba2c3b760e724a989679b5cfacff53c8d81f971a53ec680bad876ab09638d2a1f487fd67ad036c705f9ddbca661a976e79bb57195ad61ecfba557850023e9392023ffc164e54ade39c6fa030463eb771fe1fa6841f6b67d1086f69a9f75e123d34c1af9405cc555753aaad4f73ef1d813aeb9f8963418c9aa12995d5bfa2a1249e4133520d629afe10fcdf56b66966a399e487daee1abd446a971fc560cd7905f1179422584b059c69d1418e04c50dd6ee59ce0f9c9e4acc1a3faf988c43d10a1c4344959e11388d25b07c7a9d5ffbed0dec0f6cd8f91fc02d0676eea5e9a8d4a6b4729c8a21ef9e9e196d73fb1c25bb6c15e5c4b9e8806730d114ad70f491af4c47dc6de3f5d8f8857feecb2a2a49fbf789a6b81345ca3ecd5482e36be5ba5b4e4e3ed569361abb04c74117dca5c4d8165b", 0x1000}, {&(0x7f0000003fc0)="e1c070401eaf60262b064d404cf102049d0fd7d01bd52df94b2e8a05f1dde364eda115f0c58061c34863ca3785142c36e3a32341301cd6f0afb8a226630ff9d149c7d59e1b2bf098a69af8e3c49aca3a84a9ad03ede72c36a1ae8f05963b5e49c52daa68ad3557579ade62b260b0b29f33d107768b0c5cc0508c3f7383e69fae7a7f804c542fea1cf5285ad6f6bebaa1ceb1c0de44758ac98576b1eecad43e3868abe6fb23a1ab3e71bb863715fb3369af8034", 0xb3}], 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000004140)={0x0, 0x3ff, 0xfd6, 0x8}, &(0x7f0000004180)=0x10) kernel console output (not intermixed with test programs): hsr_slave_1: entered promiscuous mode [ 92.670586][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.678488][ T5841] Cannot create hsr debugfs directory [ 92.944472][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.958042][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.987724][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.028838][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.104256][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.121583][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.132256][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.148758][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.249817][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.260910][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.272011][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.286658][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.430783][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.441858][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.453576][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.482484][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.491412][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.499189][ T5140] Bluetooth: hci0: command tx timeout [ 93.574183][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.581341][ T5140] Bluetooth: hci1: command tx timeout [ 93.602974][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.620834][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.633216][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.655532][ T55] Bluetooth: hci3: command tx timeout [ 93.661214][ T5140] Bluetooth: hci2: command tx timeout [ 93.665534][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.681417][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.688702][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.703322][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.728710][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.735993][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.744122][ T5140] Bluetooth: hci4: command tx timeout [ 93.785960][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.797783][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.859942][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.867189][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.906928][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.919789][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.927000][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.979558][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.986709][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.029544][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.036754][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.230590][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.301739][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.340888][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.370377][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.398021][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.405309][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.418294][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.425442][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.438111][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.501876][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.509056][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.547081][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.554275][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.623483][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.653031][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.713956][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.724432][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.821091][ T5827] veth0_vlan: entered promiscuous mode [ 94.869016][ T5831] veth0_vlan: entered promiscuous mode [ 94.913543][ T5827] veth1_vlan: entered promiscuous mode [ 94.946574][ T5831] veth1_vlan: entered promiscuous mode [ 95.020440][ T5834] veth0_vlan: entered promiscuous mode [ 95.079150][ T5831] veth0_macvtap: entered promiscuous mode [ 95.094419][ T5834] veth1_vlan: entered promiscuous mode [ 95.114496][ T5831] veth1_macvtap: entered promiscuous mode [ 95.134503][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.161630][ T5827] veth0_macvtap: entered promiscuous mode [ 95.172253][ T5827] veth1_macvtap: entered promiscuous mode [ 95.213192][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.229824][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.254044][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.271006][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.283620][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.293809][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.333453][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.352991][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.362281][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.374325][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.399239][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.411103][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.423661][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.433363][ T5834] veth0_macvtap: entered promiscuous mode [ 95.461322][ T5834] veth1_macvtap: entered promiscuous mode [ 95.472259][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.482592][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.492906][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.508839][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.554860][ T5841] veth0_vlan: entered promiscuous mode [ 95.568358][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.580117][ T5140] Bluetooth: hci0: command tx timeout [ 95.581046][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.595629][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.606439][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.618213][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.656935][ T5140] Bluetooth: hci1: command tx timeout [ 95.690521][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.701560][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.711960][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.723477][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.734990][ T5140] Bluetooth: hci2: command tx timeout [ 95.735246][ T55] Bluetooth: hci3: command tx timeout [ 95.741368][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.762126][ T5841] veth1_vlan: entered promiscuous mode [ 95.777832][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789656][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.798885][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.807923][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.816929][ T55] Bluetooth: hci4: command tx timeout [ 95.868760][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.878332][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.937914][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.948175][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.990480][ T5836] veth0_vlan: entered promiscuous mode [ 96.020548][ T5836] veth1_vlan: entered promiscuous mode [ 96.041350][ T5841] veth0_macvtap: entered promiscuous mode [ 96.060638][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.074539][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.109755][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.124896][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.140181][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.146341][ T5841] veth1_macvtap: entered promiscuous mode [ 96.155769][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.162704][ T5836] veth0_macvtap: entered promiscuous mode [ 96.214542][ T5836] veth1_macvtap: entered promiscuous mode [ 96.260381][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.273280][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.283233][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.293767][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.304062][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.314581][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.327396][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.361596][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.384255][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.395198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.403045][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.405514][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.425118][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.435839][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.447317][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.458295][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.468235][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.478938][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.490083][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.501201][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.513608][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.524824][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.536057][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.547338][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.558121][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.569765][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.590065][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.611631][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.624537][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.636310][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.647887][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.674999][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.688817][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.700963][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.720761][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.734412][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.747356][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.756363][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.765178][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.780422][ T5912] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20003 [ 96.822784][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.843990][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871600][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.885037][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.133357][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.151009][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.330694][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.346122][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.509957][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.534804][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.562057][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.655012][ T55] Bluetooth: hci0: command tx timeout [ 97.717523][ T5926] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.736220][ T55] Bluetooth: hci1: command tx timeout [ 97.807705][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.816512][ T55] Bluetooth: hci3: command tx timeout [ 97.822330][ T55] Bluetooth: hci2: command tx timeout [ 97.858927][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.895114][ T55] Bluetooth: hci4: command tx timeout [ 98.337734][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 98.552456][ T5949] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.833877][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 98.916378][ T5956] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 98.974791][ T5956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.149528][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'. [ 99.185611][ T5962] Zero length message leads to an empty skb [ 99.230429][ T5956] team0: Port device geneve0 added [ 99.308424][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 99.311710][ T5964] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 99.371073][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 99.399339][ T5967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14'. [ 99.422327][ T5944] xt_bpf: check failed: parse error [ 99.492697][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13'. [ 99.621941][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.671887][ T5973] Cannot find set identified by id 0 to match [ 101.123598][ T6013] geneve2: entered promiscuous mode [ 101.129153][ T6013] geneve2: entered allmulticast mode [ 101.392826][ T6013] syz.0.27 (6013) used greatest stack depth: 20288 bytes left [ 101.774300][ T6025] syzkaller1: entered promiscuous mode [ 101.791835][ T6025] syzkaller1: entered allmulticast mode [ 102.115269][ T6035] netlink: 'syz.1.33': attribute type 30 has an invalid length. [ 102.153862][ T6035] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.162937][ T6035] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.172704][ T6035] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.182382][ T6035] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.280668][ T6038] netlink: 'syz.1.33': attribute type 30 has an invalid length. [ 102.310954][ T6035] netlink: 'syz.1.33': attribute type 30 has an invalid length. [ 102.439322][ T6042] x_tables: duplicate underflow at hook 1 [ 102.474795][ T6042] x_tables: duplicate underflow at hook 1 [ 102.490791][ T6042] x_tables: duplicate underflow at hook 1 [ 102.500475][ T6042] x_tables: duplicate underflow at hook 1 [ 102.518867][ T6042] x_tables: duplicate underflow at hook 1 [ 102.545026][ T6042] x_tables: duplicate underflow at hook 1 [ 102.558758][ T6042] x_tables: duplicate underflow at hook 1 [ 102.569274][ T6042] x_tables: duplicate underflow at hook 1 [ 102.595006][ T6042] x_tables: duplicate underflow at hook 1 [ 102.607220][ T6042] x_tables: duplicate underflow at hook 1 [ 103.103475][ T6055] vlan2: entered promiscuous mode [ 103.155898][ T6055] bridge0: entered promiscuous mode [ 103.161436][ T6055] vlan2: entered allmulticast mode [ 103.186746][ T6055] bridge0: entered allmulticast mode [ 103.261074][ T6061] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.349739][ T6061] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 103.366149][ T6057] bridge_slave_0: left allmulticast mode [ 103.382138][ T6057] bridge_slave_0: left promiscuous mode [ 103.403301][ T6065] __nla_validate_parse: 12 callbacks suppressed [ 103.403320][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 103.425327][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.467462][ T6057] bridge_slave_1: left allmulticast mode [ 103.477047][ T6057] bridge_slave_1: left promiscuous mode [ 103.506123][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.563660][ T6057] bond0: (slave bond_slave_0): Releasing backup interface [ 103.616224][ T6057] bond0: (slave bond_slave_1): Releasing backup interface [ 103.656998][ T6057] team0: Port device team_slave_0 removed [ 103.690995][ T6057] team0: Port device team_slave_1 removed [ 103.737868][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.746000][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.761599][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.771205][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.166535][ T6072] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 104.255331][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 104.264083][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 104.665691][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.765018][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.794400][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.857950][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.904860][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.985265][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.994162][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 105.854542][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.243978][ T6108] bridge0: port 3(batadv1) entered blocking state [ 106.267029][ T6108] bridge0: port 3(batadv1) entered disabled state [ 106.301022][ T6108] batadv1: entered allmulticast mode [ 106.327545][ T6108] batadv1: entered promiscuous mode [ 106.519671][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.739485][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 106.748999][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 107.043116][ T6137] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 107.491149][ T6147] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 108.116366][ T6180] gre0: entered promiscuous mode [ 108.501562][ T6194] __nla_validate_parse: 57 callbacks suppressed [ 108.501580][ T6194] netlink: 17 bytes leftover after parsing attributes in process `syz.4.75'. [ 108.554384][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 109.051046][ T6215] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 109.288869][ T6221] netlink: 56 bytes leftover after parsing attributes in process `syz.1.84'. [ 109.366373][ T6220] dummy0: entered promiscuous mode [ 109.875297][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'. [ 110.189784][ T6247] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 110.226404][ T6247] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.296532][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.650971][ T6255] Cannot find add_set index 1 as target [ 110.669927][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 110.704570][ T6255] netlink: 'syz.4.93': attribute type 5 has an invalid length. [ 110.734400][ T6255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'. [ 110.782095][ T6255] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 110.791549][ T6255] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 110.800891][ T6255] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 110.810139][ T6255] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 110.826172][ T6255] geneve2: entered promiscuous mode [ 110.835375][ T6255] geneve2: entered allmulticast mode [ 111.137295][ T6270] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 111.162056][ T6273] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 111.448266][ T6280] syz.4.99: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.482316][ T6280] CPU: 0 UID: 0 PID: 6280 Comm: syz.4.99 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 111.482344][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.482360][ T6280] Call Trace: [ 111.482371][ T6280] [ 111.482381][ T6280] dump_stack_lvl+0x189/0x250 [ 111.482427][ T6280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.482456][ T6280] ? __pfx__printk+0x10/0x10 [ 111.482476][ T6280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.482510][ T6280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.482545][ T6280] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 111.482580][ T6280] warn_alloc+0x214/0x310 [ 111.482616][ T6280] ? __pfx_warn_alloc+0x10/0x10 [ 111.482644][ T6280] ? kasan_save_track+0x4f/0x80 [ 111.482666][ T6280] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 111.482690][ T6280] ? xskq_create+0x56/0x170 [ 111.482715][ T6280] ? __x64_sys_setsockopt+0x18b/0x220 [ 111.482734][ T6280] ? do_syscall_64+0xf6/0x210 [ 111.482758][ T6280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.482798][ T6280] __vmalloc_node_range_noprof+0x125/0x12c0 [ 111.482859][ T6280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.482891][ T6280] ? __kasan_kmalloc+0x93/0xb0 [ 111.482921][ T6280] vmalloc_user_noprof+0x74/0x80 [ 111.482950][ T6280] ? xskq_create+0xbf/0x170 [ 111.482972][ T6280] xskq_create+0xbf/0x170 [ 111.482999][ T6280] xsk_init_queue+0xb0/0x110 [ 111.483025][ T6280] xsk_setsockopt+0x43f/0x710 [ 111.483051][ T6280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.483086][ T6280] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 111.483109][ T6280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.483132][ T6280] do_sock_setsockopt+0x257/0x3e0 [ 111.483157][ T6280] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 111.483175][ T6280] ? __fget_files+0x2a/0x420 [ 111.483206][ T6280] ? __fget_files+0x3a0/0x420 [ 111.483230][ T6280] ? __fget_files+0x2a/0x420 [ 111.483263][ T6280] __x64_sys_setsockopt+0x18b/0x220 [ 111.483291][ T6280] do_syscall_64+0xf6/0x210 [ 111.483319][ T6280] ? clear_bhb_loop+0x45/0xa0 [ 111.483343][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.483362][ T6280] RIP: 0033:0x7fabffb8e969 [ 111.483386][ T6280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.483403][ T6280] RSP: 002b:00007fac00a8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.483423][ T6280] RAX: ffffffffffffffda RBX: 00007fabffdb5fa0 RCX: 00007fabffb8e969 [ 111.483438][ T6280] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 111.483448][ T6280] RBP: 00007fabffc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 111.483460][ T6280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.483472][ T6280] R13: 0000000000000000 R14: 00007fabffdb5fa0 R15: 00007ffe6af35c08 [ 111.483504][ T6280] [ 111.483516][ T6280] Mem-Info: [ 111.705815][ T6292] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 111.825154][ T6280] active_anon:4803 inactive_anon:0 isolated_anon:0 [ 111.825154][ T6280] active_file:1472 inactive_file:38315 isolated_file:0 [ 111.825154][ T6280] unevictable:768 dirty:597 writeback:0 [ 111.825154][ T6280] slab_reclaimable:9854 slab_unreclaimable:98157 [ 111.825154][ T6280] mapped:28607 shmem:1429 pagetables:822 [ 111.825154][ T6280] sec_pagetables:0 bounce:0 [ 111.825154][ T6280] kernel_misc_reclaimable:0 [ 111.825154][ T6280] free:1350893 free_pcp:182 free_cma:0 [ 111.931468][ T6280] Node 0 active_anon:19212kB inactive_anon:0kB active_file:5888kB inactive_file:153188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114428kB dirty:2388kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10792kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.993155][ T6292] wg1: entered promiscuous mode [ 111.998663][ T6292] wg1: entered allmulticast mode [ 112.011645][ T6280] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 112.114798][ T6280] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.213374][ T6280] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 112.230035][ T6280] Node 0 DMA32 free:1471496kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19504kB inactive_anon:0kB active_file:5888kB inactive_file:153096kB unevictable:1536kB writepending:2388kB present:3129332kB managed:2564128kB mlocked:0kB bounce:0kB free_pcp:1964kB local_pcp:868kB free_cma:0kB [ 112.279452][ T6280] lowmem_reserve[]: 0 0 0 0 0 [ 112.285352][ T6280] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 112.319023][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 112.328808][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 112.359476][ T6302] lo speed is unknown, defaulting to 1000 [ 112.373919][ T6280] lowmem_reserve[]: 0 0 0 0 0 [ 112.381875][ T6280] Node 1 Normal free:3914024kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.425035][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 112.433879][ T6306] netlink: 'syz.1.106': attribute type 14 has an invalid length. [ 112.445144][ T6280] lowmem_reserve[]: 0 0 0 0 0 [ 112.453797][ T6280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.468030][ T6306] netlink: 'syz.1.106': attribute type 13 has an invalid length. [ 112.480436][ T6302] lo speed is unknown, defaulting to 1000 [ 112.509834][ T6280] Node 0 DMA32: 389*4kB (UME) 251*8kB (UME) 435*16kB (UME) 406*32kB (UME) 197*64kB (UME) 88*128kB (UME) 63*256kB (UME) 48*512kB (UME) 25*1024kB (UME) 6*2048kB (UME) 327*4096kB (UM) = 1465372kB [ 112.531077][ T6302] lo speed is unknown, defaulting to 1000 [ 112.552748][ T6280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.570678][ T6280] Node 1 Normal: 190*4kB (U) 52*8kB (UME) 39*16kB (UME) 207*32kB (UME) 89*64kB (UME) 28*128kB (UME) 16*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 947*4096kB (UM) = 3914024kB [ 112.583206][ T6302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.594929][ T6280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.611224][ T6302] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.611281][ T6280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.630240][ T6280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.640464][ T6280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.650506][ T6280] 41391 total pagecache pages [ 112.655750][ T6280] 0 pages in swap cache [ 112.659935][ T6280] Free swap = 124996kB [ 112.664505][ T6280] Total swap = 124996kB [ 112.684129][ T6280] 2097051 pages RAM [ 112.688692][ T6280] 0 pages HighMem/MovableOnly [ 112.690133][ T6302] lo speed is unknown, defaulting to 1000 [ 112.693383][ T6280] 424361 pages reserved [ 112.693398][ T6280] 0 pages cma reserved [ 112.753710][ T6302] lo speed is unknown, defaulting to 1000 [ 112.845583][ T6302] lo speed is unknown, defaulting to 1000 [ 112.896333][ T6302] lo speed is unknown, defaulting to 1000 [ 112.905292][ T6302] lo speed is unknown, defaulting to 1000 [ 112.913569][ T6302] lo speed is unknown, defaulting to 1000 [ 113.103161][ T6324] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 113.134336][ T6324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.291118][ T6334] netlink: 232 bytes leftover after parsing attributes in process `syz.4.111'. [ 113.810077][ T6358] __nla_validate_parse: 2 callbacks suppressed [ 113.810095][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'. [ 113.851111][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'. [ 114.360495][ T6390] netlink: 'syz.3.130': attribute type 13 has an invalid length. [ 114.835491][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.843323][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.048840][ T6437] sctp: [Deprecated]: syz.1.136 (pid 6437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.048840][ T6437] Use struct sctp_sack_info instead [ 115.147826][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.169814][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.351339][ T6390] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.367960][ T6390] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.382872][ T6390] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.392044][ T6390] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.626192][ T6410] syzkaller0: entered promiscuous mode [ 115.650613][ T6410] syzkaller0: entered allmulticast mode [ 115.908283][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 115.914604][ T6466] FAULT_INJECTION: forcing a failure. [ 115.914604][ T6466] name failslab, interval 1, probability 0, space 0, times 1 [ 115.930839][ T6466] CPU: 1 UID: 0 PID: 6466 Comm: syz.0.142 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 115.930865][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 115.930877][ T6466] Call Trace: [ 115.930885][ T6466] [ 115.930893][ T6466] dump_stack_lvl+0x189/0x250 [ 115.930930][ T6466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.930959][ T6466] ? __pfx__printk+0x10/0x10 [ 115.930985][ T6466] ? __pfx___might_resched+0x10/0x10 [ 115.931001][ T6466] ? fs_reclaim_acquire+0x7d/0x100 [ 115.931035][ T6466] should_fail_ex+0x414/0x560 [ 115.931070][ T6466] should_failslab+0xa8/0x100 [ 115.931097][ T6466] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 115.931124][ T6466] ? htable_create+0x311/0x7a0 [ 115.931145][ T6466] ? trace_kmalloc+0x1f/0xd0 [ 115.931172][ T6466] kstrdup+0x42/0x100 [ 115.931193][ T6466] htable_create+0x311/0x7a0 [ 115.931222][ T6466] hashlimit_mt_check_common+0x719/0xa10 [ 115.931256][ T6466] hashlimit_mt_check_v1+0x221/0x360 [ 115.931281][ T6466] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 115.931309][ T6466] ? xt_find_match+0x1f7/0x250 [ 115.931336][ T6466] xt_check_match+0x3ce/0xab0 [ 115.931357][ T6466] ? __pfx___mutex_lock+0x10/0x10 [ 115.931387][ T6466] ? __pfx_xt_check_match+0x10/0x10 [ 115.931411][ T6466] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 115.931448][ T6466] ? xt_find_match+0x1f7/0x250 [ 115.931475][ T6466] translate_table+0x150b/0x2000 [ 115.931537][ T6466] ? __pfx_translate_table+0x10/0x10 [ 115.931569][ T6466] ? __might_fault+0xb0/0x130 [ 115.931615][ T6466] ? _copy_from_user+0x94/0xb0 [ 115.931646][ T6466] do_ipt_set_ctl+0x967/0xcd0 [ 115.931684][ T6466] ? rcu_is_watching+0x15/0xb0 [ 115.931714][ T6466] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 115.931765][ T6466] ? __pfx___mutex_lock+0x10/0x10 [ 115.931792][ T6466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.931816][ T6466] ? aa_sk_perm+0x81e/0x950 [ 115.931853][ T6466] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.931890][ T6466] nf_setsockopt+0x26c/0x290 [ 115.931913][ T6466] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 115.931946][ T6466] do_sock_setsockopt+0x257/0x3e0 [ 115.931970][ T6466] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 115.931988][ T6466] ? __fget_files+0x2a/0x420 [ 115.932018][ T6466] ? __fget_files+0x3a0/0x420 [ 115.932042][ T6466] ? __fget_files+0x2a/0x420 [ 115.932076][ T6466] __x64_sys_setsockopt+0x18b/0x220 [ 115.932104][ T6466] do_syscall_64+0xf6/0x210 [ 115.932131][ T6466] ? clear_bhb_loop+0x45/0xa0 [ 115.932157][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.932176][ T6466] RIP: 0033:0x7f1549f8e969 [ 115.932194][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.932210][ T6466] RSP: 002b:00007f154adb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.932230][ T6466] RAX: ffffffffffffffda RBX: 00007f154a1b5fa0 RCX: 00007f1549f8e969 [ 115.932245][ T6466] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 115.932257][ T6466] RBP: 00007f154adb8090 R08: 0000000000000448 R09: 0000000000000000 [ 115.932269][ T6466] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 115.932281][ T6466] R13: 0000000000000000 R14: 00007f154a1b5fa0 R15: 00007ffdafdd9a78 [ 115.932313][ T6466] [ 116.615311][ T6473] netlink: 1292 bytes leftover after parsing attributes in process `syz.0.145'. [ 117.328734][ T6456] netlink: 1 bytes leftover after parsing attributes in process `syz.3.140'. [ 117.441517][ T6475] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 117.593215][ T6475] bond1: entered promiscuous mode [ 117.607037][ T6475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.613389][ T6486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 117.669033][ T6482] bond1: (slave veth3): making interface the new active one [ 117.676547][ T6482] veth3: entered promiscuous mode [ 117.682860][ T6482] bond1: (slave veth3): Enslaving as an active interface with an up link [ 117.706941][ T6490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.149'. [ 118.640203][ T6528] team0: Port device virt_wifi0 added [ 118.679982][ T6529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.758149][ T6533] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 118.780754][ T6530] netlink: 5 bytes leftover after parsing attributes in process `syz.0.160'. [ 118.796576][ T6534] vxcan1: tx address claim with dlc 0 [ 118.845073][ T6530] netlink: 5 bytes leftover after parsing attributes in process `syz.0.160'. [ 118.889448][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 118.896618][ T6538] tipc: Started in network mode [ 118.904014][ T6538] tipc: Node identity , cluster identity 4711 [ 118.991190][ T6541] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.008962][ T6541] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.035596][ T6541] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.057697][ T6541] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.079636][ T6541] bond1: (slave geneve2): making interface the new active one [ 119.097364][ T6541] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.130343][ T6529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.165229][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.177428][ T6541] syz.2.162 (6541) used greatest stack depth: 19208 bytes left [ 119.301781][ T6529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.491959][ T6529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.712622][ T6569] netlink: 96 bytes leftover after parsing attributes in process `syz.2.171'. [ 119.745990][ T6529] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.769418][ T6573] Bluetooth: MGMT ver 1.23 [ 119.782459][ T6529] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.821891][ T6529] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.860938][ T6578] netlink: 204 bytes leftover after parsing attributes in process `syz.1.174'. [ 119.882389][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 119.896373][ T6578] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 119.905969][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.908810][ T6529] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.247535][ T6593] netlink: 'syz.3.177': attribute type 21 has an invalid length. [ 120.253038][ T6592] lo speed is unknown, defaulting to 1000 [ 120.284305][ T6593] netlink: 128 bytes leftover after parsing attributes in process `syz.3.177'. [ 120.290805][ T6592] lo speed is unknown, defaulting to 1000 [ 120.298751][ T6593] netlink: 'syz.3.177': attribute type 5 has an invalid length. [ 120.370741][ T6593] netlink: 3 bytes leftover after parsing attributes in process `syz.3.177'. [ 120.397680][ T6592] lo speed is unknown, defaulting to 1000 [ 120.562778][ T6592] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 120.815030][ T6592] lo speed is unknown, defaulting to 1000 [ 120.822913][ T6592] lo speed is unknown, defaulting to 1000 [ 120.895384][ T6592] lo speed is unknown, defaulting to 1000 [ 120.903676][ T6592] lo speed is unknown, defaulting to 1000 [ 120.957695][ T6592] lo speed is unknown, defaulting to 1000 [ 120.977935][ T6620] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 121.431767][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.439545][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.502735][ T6629] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.543578][ T5900] lo speed is unknown, defaulting to 1000 [ 121.578093][ T5900] syz1: Port: 1 Link DOWN [ 121.608696][ T6645] netlink: 'syz.2.193': attribute type 11 has an invalid length. [ 121.621528][ T6645] netlink: 224 bytes leftover after parsing attributes in process `syz.2.193'. [ 121.799628][ T6651] 8021q: VLANs not supported on ip_vti0 [ 121.806639][ T6652] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 121.820218][ T6652] netlink: 'syz.3.195': attribute type 2 has an invalid length. [ 121.835385][ T6651] lo: entered promiscuous mode [ 121.844779][ T6652] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 121.854367][ T6651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.876272][ T6657] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 121.884075][ T6657] netlink: 224 bytes leftover after parsing attributes in process `syz.3.195'. [ 121.897004][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 122.418819][ T6688] netlink: 'syz.2.207': attribute type 1 has an invalid length. [ 122.493674][ T6693] Illegal XDP return value 16128 on prog (id 86) dev lo, expect packet loss! [ 122.768818][ T6700] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 122.925914][ T6706] vxcan3: entered allmulticast mode [ 123.117073][ T6710] vxcan3: entered allmulticast mode [ 124.407762][ T6793] __nla_validate_parse: 2 callbacks suppressed [ 124.407783][ T6793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.233'. [ 125.220502][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 125.399103][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 125.412651][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 125.441485][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 125.606090][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 125.671281][ T6845] unsupported nlmsg_type 40 [ 125.697616][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 125.701078][ T5200] udevd[5200]: worker [6824] terminated by signal 33 (Unknown signal 33) [ 126.000324][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 126.019612][ T6852] lo speed is unknown, defaulting to 1000 [ 126.037724][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 126.171626][ T6852] lo speed is unknown, defaulting to 1000 [ 126.219057][ T6874] netlink: 14 bytes leftover after parsing attributes in process `syz.3.257'. [ 126.230865][ T6868] sctp: failed to load transform for md5: -2 [ 126.248765][ T6867] sctp: failed to load transform for md5: -2 [ 127.461468][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.474584][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.489490][ T6927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.696131][ T6949] netlink: 'syz.2.278': attribute type 5 has an invalid length. [ 128.366918][ T6988] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 128.410944][ T6988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.877672][ T7008] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 128.907805][ T7008] veth1_macvtap: left promiscuous mode [ 129.197629][ T7017] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.308844][ T7007] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.317681][ T7007] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.326491][ T7007] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.335282][ T7007] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.374863][ T7007] vxlan0: entered promiscuous mode [ 129.380121][ T7007] vxlan0: entered allmulticast mode [ 129.398920][ T7027] netlink: 'syz.1.298': attribute type 4 has an invalid length. [ 129.431632][ T7007] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.441301][ T7007] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.451234][ T7007] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.461083][ T7007] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.549166][ T6395] lo speed is unknown, defaulting to 1000 [ 129.564882][ T6395] s›z0: Port: 1 Link DOWN [ 129.699275][ T7033] sctp: [Deprecated]: syz.3.302 (pid 7033) Use of int in max_burst socket option. [ 129.699275][ T7033] Use struct sctp_assoc_value instead [ 129.762481][ T7033] bridge0: entered promiscuous mode [ 129.775443][ T7032] bridge0: left promiscuous mode [ 129.787007][ T7040] __nla_validate_parse: 13 callbacks suppressed [ 129.787027][ T7040] netlink: 224 bytes leftover after parsing attributes in process `syz.2.304'. [ 129.904247][ T7046] netlink: 'syz.1.306': attribute type 3 has an invalid length. [ 129.940431][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'. [ 129.946113][ T7049] Cannot find map_set index 0 as target [ 129.955114][ T7046] bond0: option arp_all_targets: invalid value (247) [ 130.010183][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'. [ 130.020229][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.306'. [ 130.137820][ T7053] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 130.199151][ T7049] Cannot find map_set index 0 as target [ 130.256797][ T7060] smc: net device bond0 applied user defined pnetid SYZ0 [ 130.264134][ T7058] lo speed is unknown, defaulting to 1000 [ 130.287025][ T7064] smc: net device bond0 erased user defined pnetid SYZ0 [ 130.326830][ T7058] lo speed is unknown, defaulting to 1000 [ 130.402900][ T7064] trusted_key: syz.2.308 sent an empty control message without MSG_MORE. [ 130.452950][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 130.532650][ T7066] netlink: 'syz.4.310': attribute type 10 has an invalid length. [ 130.574848][ T7066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.310'. [ 130.651896][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 130.675497][ T7074] lo speed is unknown, defaulting to 1000 [ 130.856330][ T5876] IPVS: starting estimator thread 0... [ 130.917118][ T7084] netlink: 244 bytes leftover after parsing attributes in process `syz.4.316'. [ 130.955024][ T7082] IPVS: using max 25 ests per chain, 60000 per kthread [ 131.200131][ T7078] lo speed is unknown, defaulting to 1000 [ 131.520176][ T7078] lo speed is unknown, defaulting to 1000 [ 131.768141][ T7076] tipc: Started in network mode [ 131.774923][ T7076] tipc: Node identity ac1414aa, cluster identity 4711 [ 131.787415][ T7076] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.795588][ T7076] tipc: Enabled bearer , priority 10 [ 131.926041][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.064801][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.145846][ T7099] lo speed is unknown, defaulting to 1000 [ 132.189619][ T7099] lo speed is unknown, defaulting to 1000 [ 132.204720][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.344735][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.484764][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.624939][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.762413][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 132.774780][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.790189][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.809952][ T7124] lo speed is unknown, defaulting to 1000 [ 132.849841][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 132.915914][ T6445] tipc: Node number set to 2886997162 [ 133.054960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.324833][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.408097][ T7193] netem: unknown loss type 13 [ 134.421879][ T7193] netem: change failed [ 134.466533][ T7196] raw_sendmsg: syz.0.344 forgot to set AF_INET. Fix it! [ 135.167325][ T7227] netlink: 'syz.2.354': attribute type 5 has an invalid length. [ 135.676364][ T7241] __nla_validate_parse: 9 callbacks suppressed [ 135.676385][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'. [ 135.694468][ T7242] FAULT_INJECTION: forcing a failure. [ 135.694468][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 135.704062][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 135.728192][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.0.359 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 135.728224][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.728236][ T7242] Call Trace: [ 135.728244][ T7242] [ 135.728253][ T7242] dump_stack_lvl+0x189/0x250 [ 135.728291][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.728321][ T7242] ? __pfx__printk+0x10/0x10 [ 135.728344][ T7242] ? __pfx___might_resched+0x10/0x10 [ 135.728362][ T7242] ? fs_reclaim_acquire+0x7d/0x100 [ 135.728397][ T7242] should_fail_ex+0x414/0x560 [ 135.728433][ T7242] should_failslab+0xa8/0x100 [ 135.728461][ T7242] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 135.728487][ T7242] ? __request_module+0x2d1/0x5e0 [ 135.728520][ T7242] kstrdup+0x42/0x100 [ 135.728542][ T7242] __request_module+0x2d1/0x5e0 [ 135.728568][ T7242] ? __pfx___mutex_lock+0x10/0x10 [ 135.728599][ T7242] ? __pfx___request_module+0x10/0x10 [ 135.728630][ T7242] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 135.728667][ T7242] ? xt_find_target+0x1fa/0x240 [ 135.728691][ T7242] xt_request_find_target+0xc1/0x130 [ 135.728713][ T7242] translate_table+0x1672/0x2000 [ 135.728767][ T7242] ? __pfx_translate_table+0x10/0x10 [ 135.728800][ T7242] ? __might_fault+0xb0/0x130 [ 135.728845][ T7242] ? _copy_from_user+0x94/0xb0 [ 135.728876][ T7242] do_ipt_set_ctl+0x967/0xcd0 [ 135.728913][ T7242] ? rcu_is_watching+0x15/0xb0 [ 135.728943][ T7242] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 135.728992][ T7242] ? __pfx___mutex_lock+0x10/0x10 [ 135.729018][ T7242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.729051][ T7242] ? aa_sk_perm+0x81e/0x950 [ 135.729087][ T7242] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.729124][ T7242] nf_setsockopt+0x26c/0x290 [ 135.729146][ T7242] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 135.729179][ T7242] do_sock_setsockopt+0x257/0x3e0 [ 135.729203][ T7242] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 135.729220][ T7242] ? __fget_files+0x2a/0x420 [ 135.729250][ T7242] ? __fget_files+0x3a0/0x420 [ 135.729274][ T7242] ? __fget_files+0x2a/0x420 [ 135.729310][ T7242] __x64_sys_setsockopt+0x18b/0x220 [ 135.729336][ T7242] do_syscall_64+0xf6/0x210 [ 135.729363][ T7242] ? clear_bhb_loop+0x45/0xa0 [ 135.729387][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.729405][ T7242] RIP: 0033:0x7f1549f8e969 [ 135.729423][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.729439][ T7242] RSP: 002b:00007f154adb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.729459][ T7242] RAX: ffffffffffffffda RBX: 00007f154a1b5fa0 RCX: 00007f1549f8e969 [ 135.729474][ T7242] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 135.729485][ T7242] RBP: 00007f154adb8090 R08: 0000000000000448 R09: 0000000000000000 [ 135.729496][ T7242] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000002 [ 135.729507][ T7242] R13: 0000000000000000 R14: 00007f154a1b5fa0 R15: 00007ffdafdd9a78 [ 135.729536][ T7242] [ 136.093629][ T7251] atomic_op ffff8880733ac998 conn xmit_atomic 0000000000000000 [ 136.110450][ T7253] Unsupported ieee802154 address type: 0 [ 136.292997][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 136.390215][ T7266] netlink: 35 bytes leftover after parsing attributes in process `syz.0.369'. [ 136.400887][ T7266] netlink: 'syz.0.369': attribute type 2 has an invalid length. [ 136.852867][ T7295] xt_check_table_hooks: 23 callbacks suppressed [ 136.852950][ T7295] x_tables: duplicate underflow at hook 2 [ 136.999739][ T7308] hsr0: entered promiscuous mode [ 137.015301][ T7308] net_ratelimit: 4 callbacks suppressed [ 137.015319][ T7308] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 137.024986][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.038017][ T7308] netlink: 'syz.4.381': attribute type 4 has an invalid length. [ 137.060851][ T7308] netlink: 152 bytes leftover after parsing attributes in process `syz.4.381'. [ 137.086643][ T7307] netlink: 'syz.3.380': attribute type 5 has an invalid length. [ 137.216367][ T7311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.256418][ T7311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.305934][ T7308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 137.360568][ T7311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.381503][ T7311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.545221][ T7311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.579557][ T7311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.652946][ T7333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.389'. [ 137.662530][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 137.668832][ T55] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 137.694266][ T7333] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.703650][ T7333] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.713439][ T7333] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.723374][ T7333] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.860872][ T7311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.884040][ T7311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 137.979889][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.394'. [ 138.014016][ T7311] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 138.022640][ T7311] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.054841][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.086027][ T7311] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 138.094261][ T7311] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.132450][ T7311] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 138.196850][ T7311] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.270600][ T7311] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 138.285055][ T7311] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 138.400687][ T7372] netlink: 'syz.1.401': attribute type 33 has an invalid length. [ 138.406809][ T7365] lo speed is unknown, defaulting to 1000 [ 138.418642][ T7373] hsr0: entered allmulticast mode [ 138.426408][ T7373] hsr_slave_0: entered allmulticast mode [ 138.432356][ T7373] hsr_slave_1: entered allmulticast mode [ 138.448576][ T7365] lo speed is unknown, defaulting to 1000 [ 138.510757][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 138.522654][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 138.540606][ T7379] netlink: 52 bytes leftover after parsing attributes in process `syz.4.403'. [ 138.734971][ T7390] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 139.010908][ T7400] tipc: Started in network mode [ 139.018578][ T7400] tipc: Node identity 724d29d6, cluster identity 4711 [ 139.027350][ T7400] tipc: Node number set to 1917659606 [ 139.094897][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.140624][ T7403] lo speed is unknown, defaulting to 1000 [ 139.166533][ T7403] lo speed is unknown, defaulting to 1000 [ 140.091372][ T7458] netlink: 'syz.4.423': attribute type 21 has an invalid length. [ 140.144952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.522990][ T7467] netlink: 'syz.3.426': attribute type 4 has an invalid length. [ 140.708206][ T7472] __nla_validate_parse: 7 callbacks suppressed [ 140.708227][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.428'. [ 140.814042][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.972851][ T7489] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 140.993762][ T7489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.433'. [ 141.088102][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 141.175554][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.348435][ T7505] netlink: 80 bytes leftover after parsing attributes in process `syz.1.439'. [ 141.810646][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 141.831553][ T7534] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 141.932046][ T7540] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 142.094254][ T7548] bond2: (slave gretap1): making interface the new active one [ 142.114328][ T7548] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 142.124037][ T7553] netlink: 'syz.4.458': attribute type 11 has an invalid length. [ 142.133896][ T7553] netlink: 60 bytes leftover after parsing attributes in process `syz.4.458'. [ 142.157629][ T7556] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 142.214897][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.400526][ T7564] sctp: [Deprecated]: syz.0.459 (pid 7564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.400526][ T7564] Use struct sctp_sack_info instead [ 142.504279][ T7561] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 142.555759][ T7564] netlink: 52 bytes leftover after parsing attributes in process `syz.0.459'. [ 142.587592][ T7561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.652651][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 142.676725][ T7577] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 142.746484][ T7581] bridge2: entered promiscuous mode [ 142.751893][ T7581] bridge2: entered allmulticast mode [ 142.769688][ T7581] team0: Port device bridge2 added [ 142.785928][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 143.264815][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.839184][ T7626] netlink: 'syz.0.476': attribute type 64 has an invalid length. [ 144.221757][ T7639] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 144.243692][ T7639] macvtap1: entered promiscuous mode [ 144.249513][ T7639] vlan0: entered promiscuous mode [ 144.261817][ T7639] macvtap1: entered allmulticast mode [ 144.277955][ T7639] vlan0: entered allmulticast mode [ 144.294868][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.315846][ T7639] veth0_vlan: entered allmulticast mode [ 144.406652][ T7639] vlan0: left allmulticast mode [ 144.411578][ T7639] veth0_vlan: left allmulticast mode [ 144.444785][ T7639] vlan0: left promiscuous mode [ 144.804327][ T7666] SET target dimension over the limit! [ 145.334836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.412465][ T7703] dvmrp1: entered allmulticast mode [ 145.569230][ T7713] netlink: 'syz.3.501': attribute type 6 has an invalid length. [ 145.668178][ T7722] netlink: get zone limit has 8 unknown bytes [ 145.830557][ T7731] __nla_validate_parse: 11 callbacks suppressed [ 145.830575][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 145.952768][ T7733] syzkaller1: entered promiscuous mode [ 145.962994][ T7733] syzkaller1: entered allmulticast mode [ 145.981873][ T7740] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 145.990042][ T7740] netlink: 'syz.4.507': attribute type 2 has an invalid length. [ 146.009575][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 146.039885][ T7742] bridge: RTM_NEWNEIGH with invalid ether address [ 146.110313][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.200399][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 146.289377][ T7756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.325236][ T7756] xt_TCPMSS: Only works on TCP SYN packets [ 146.374811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.478465][ T7761] batadv_slave_1: entered promiscuous mode [ 146.509844][ T7764] €Â: renamed from bond_slave_0 (while UP) [ 146.557034][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 146.610889][ T7772] netlink: 224 bytes leftover after parsing attributes in process `syz.0.517'. [ 146.838797][ T7779] netlink: 68 bytes leftover after parsing attributes in process `syz.1.518'. [ 147.392462][ T7790] veth5: entered allmulticast mode [ 147.403644][ T7790] bridge0: port 3(veth5) entered blocking state [ 147.411836][ T7790] bridge0: port 3(veth5) entered disabled state [ 147.418460][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.439484][ T7790] veth5: entered promiscuous mode [ 147.445733][ T7790] bridge0: port 3(veth5) entered blocking state [ 147.452673][ T7790] bridge0: port 3(veth5) entered forwarding state [ 147.483000][ T53] bridge0: port 3(veth5) entered disabled state [ 147.610738][ T7808] netlink: 'syz.3.530': attribute type 12 has an invalid length. [ 147.626007][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 147.641093][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 147.845146][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 147.882414][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 147.905135][ T7820] tun0: tun_chr_ioctl cmd 1074025677 [ 147.924992][ T7820] tun0: linktype set to 776 [ 148.004456][ T7824] ªªªªªª: renamed from lo [ 148.454919][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.803303][ T7873] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 148.911946][ T7872] lo speed is unknown, defaulting to 1000 [ 148.986697][ T7872] ªªªªªª speed is unknown, defaulting to 1000 [ 149.494929][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.635350][ T7906] lo speed is unknown, defaulting to 1000 [ 149.643969][ T7906] ªªªªªª speed is unknown, defaulting to 1000 [ 150.209353][ T7941] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20003 [ 150.535235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.630930][ T7963] xt_nat: multiple ranges no longer supported [ 150.679093][ T7966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.832289][ T7969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 150.844993][ T7969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.905009][ T7970] __nla_validate_parse: 11 callbacks suppressed [ 150.905030][ T7970] netlink: 176 bytes leftover after parsing attributes in process `syz.4.572'. [ 150.924133][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 151.072446][ T7979] 8021q: adding VLAN 0 to HW filter on device team1 [ 151.092425][ T7969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 151.107569][ T7969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.172160][ T7969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 151.214757][ T7969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.316296][ T7969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 151.356301][ T7969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 151.434596][ T7995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.580'. [ 151.489957][ T7998] netlink: 'syz.3.580': attribute type 13 has an invalid length. [ 151.574966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.588592][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 151.628811][ T7998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.941281][ T7969] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 151.969173][ T7969] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.023851][ T7969] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 152.044239][ T7969] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.100993][ T7969] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 152.109273][ T7969] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.128607][ T7969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 152.154684][ T7969] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.354561][ T8008] lo speed is unknown, defaulting to 1000 [ 152.387191][ T8008] ªªªªªª speed is unknown, defaulting to 1000 [ 152.432461][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 152.473919][ T8016] netlink: 'syz.0.587': attribute type 30 has an invalid length. [ 152.522277][ T8016] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.530618][ T8016] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.538979][ T8016] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.547244][ T8016] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.579795][ T8022] tipc: Started in network mode [ 152.591824][ T8022] tipc: Node identity ff, cluster identity 4711 [ 152.604732][ T8022] tipc: Enabling of bearer rejected, failed to enable media [ 152.615443][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.666702][ T8026] x_tables: duplicate underflow at hook 2 [ 152.789124][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 153.022366][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 153.086391][ T8042] vlan2: entered allmulticast mode [ 153.091745][ T8042] bond0: entered allmulticast mode [ 153.106889][ T8042] €Â: entered allmulticast mode [ 153.116399][ T8042] bond_slave_1: entered allmulticast mode [ 153.178540][ T8045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.595'. [ 153.249977][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 153.271184][ T8045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.595'. [ 153.497173][ T8058] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 153.581546][ T8070] Bluetooth: MGMT ver 1.23 [ 153.654871][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.841074][ T8078] lo speed is unknown, defaulting to 1000 [ 153.920420][ T8078] ªªªªªª speed is unknown, defaulting to 1000 [ 154.089034][ T8096] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 154.322879][ T8096] bond2: (slave gretap1): making interface the new active one [ 154.391828][ T8096] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 154.450689][ T8104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.463410][ T8104] bond2: (slave bond3): Enslaving as a backup interface with an up link [ 154.490006][ T8125] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 154.591703][ T8125] 0ªX¹¦À: renamed from caif0 [ 154.633009][ T8125] 0ªX¹¦À: entered allmulticast mode [ 154.639260][ T8125] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 154.694958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.696195][ T8104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.880237][ T8146] netlink: 'syz.1.619': attribute type 11 has an invalid length. [ 154.907999][ T8149] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 155.255864][ T62] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 155.635526][ T8185] netlink: 'syz.3.628': attribute type 10 has an invalid length. [ 155.694058][ T8185] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.735014][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.297060][ T30] audit: type=1800 audit(1745947118.118:2): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.627" name="memory.events" dev="tmpfs" ino=617 res=0 errno=0 [ 156.660919][ T8181] batadv_slave_1: left promiscuous mode [ 156.685116][ T8181] bond1: left promiscuous mode [ 156.689940][ T8181] veth3: left promiscuous mode [ 156.774954][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.869973][ T8214] __nla_validate_parse: 15 callbacks suppressed [ 156.869991][ T8214] netlink: 56 bytes leftover after parsing attributes in process `syz.2.634'. [ 156.966871][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 157.089678][ T8226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.637'. [ 157.219296][ T8239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.641'. [ 157.230261][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 157.239553][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 157.332489][ T8242] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 157.519273][ T8261] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 157.547512][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.559146][ T8261] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.619662][ T8261] netlink: 240 bytes leftover after parsing attributes in process `syz.3.644'. [ 157.814918][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.852551][ T8280] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 157.928979][ T8283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.955378][ T8283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.971523][ T8283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.004503][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.650'. [ 158.026991][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 158.067324][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 158.136398][ T8283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.153795][ T8283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.188175][ T8283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.327753][ T8283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.349890][ T8283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.364836][ T8283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.502978][ T8283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.516675][ T8283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.527296][ T8283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 158.602831][ T8316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.613820][ T8316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.649645][ T8326] batadv_slave_1: entered promiscuous mode [ 158.677003][ T8324] netlink: 'syz.4.655': attribute type 7 has an invalid length. [ 158.695471][ T8324] netlink: 'syz.4.655': attribute type 8 has an invalid length. [ 158.778770][ T8316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.807859][ T8316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.854805][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.882897][ T8283] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.891827][ T8283] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.903931][ T8283] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 158.960504][ T8332] bond2: entered promiscuous mode [ 158.967897][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.975395][ T8323] batadv_slave_1: left promiscuous mode [ 159.034409][ T8316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.091261][ T8316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.132375][ T8283] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.143216][ T8283] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.155927][ T8283] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.212494][ T8316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.227548][ T8316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.276889][ T8283] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.290865][ T8283] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.349048][ T8283] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.381422][ T8283] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.395931][ T8283] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.404239][ T8283] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 159.545422][ T8316] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.558530][ T8316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.603216][ T8316] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.634796][ T8316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.690828][ T8316] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.713373][ T8316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.787813][ T8316] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.800523][ T8366] xt_CT: No such helper "snmp" [ 159.809144][ T8316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.834332][ T8365] xt_CT: No such helper "snmp" [ 159.894806][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.996920][ T8377] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.123731][ T8377] vlan3: entered allmulticast mode [ 160.135095][ T8377] bond0: entered allmulticast mode [ 160.143174][ T8377] bridge0: port 1(vlan3) entered blocking state [ 160.154985][ T8377] bridge0: port 1(vlan3) entered disabled state [ 160.164550][ T8377] vlan3: entered promiscuous mode [ 160.181561][ T8377] bond0: entered promiscuous mode [ 160.300775][ T8391] syzkaller0: entered promiscuous mode [ 160.302509][ T3005] batman_adv: batadv1: IGMP Querier appeared [ 160.306475][ T8391] syzkaller0: entered allmulticast mode [ 160.318215][ T3005] batman_adv: batadv1: MLD Querier appeared [ 160.947486][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.974802][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.038699][ T8442] netlink: 'syz.4.685': attribute type 29 has an invalid length. [ 162.056242][ T8442] netlink: 'syz.4.685': attribute type 29 has an invalid length. [ 162.064240][ T8442] netlink: 'syz.4.685': attribute type 29 has an invalid length. [ 162.099111][ T8442] netlink: 'syz.4.685': attribute type 29 has an invalid length. [ 162.118310][ T8442] netlink: 'syz.4.685': attribute type 29 has an invalid length. [ 162.143320][ T8442] netlink: 'syz.4.685': attribute type 29 has an invalid length. [ 162.153864][ T8449] __nla_validate_parse: 3 callbacks suppressed [ 162.154069][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.686'. [ 162.254721][ T8452] sctp: [Deprecated]: syz.3.686 (pid 8452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.254721][ T8452] Use struct sctp_sack_info instead [ 162.305616][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 162.474261][ T8467] lo speed is unknown, defaulting to 1000 [ 162.527351][ T8467] ªªªªªª speed is unknown, defaulting to 1000 [ 162.542328][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 162.676593][ T8480] batadv1: left allmulticast mode [ 162.681952][ T8480] batadv1: left promiscuous mode [ 162.688525][ T8480] bridge0: port 3(batadv1) entered disabled state [ 162.711548][ T8480] bridge_slave_1: left allmulticast mode [ 162.727958][ T8480] bridge_slave_1: left promiscuous mode [ 162.733761][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.763058][ T8480] ¾x9ÿ: left allmulticast mode [ 162.775027][ T8480] ¾x9ÿ: left promiscuous mode [ 162.780908][ T8480] bridge0: port 1(1¾x9ÿ) entered disabled state [ 163.014940][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.214389][ T8490] lo speed is unknown, defaulting to 1000 [ 163.247987][ T8490] ªªªªªª speed is unknown, defaulting to 1000 [ 163.429838][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 163.710969][ T8517] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 163.731457][ T8518] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 163.737212][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 163.764667][ T8521] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 163.777527][ T8521] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 163.832517][ T8517] lo speed is unknown, defaulting to 1000 [ 163.862062][ T8517] ªªªªªª speed is unknown, defaulting to 1000 [ 164.049861][ T8539] validate_nla: 3 callbacks suppressed [ 164.049880][ T8539] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 164.064938][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.105101][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 164.107554][ T8539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.480285][ T8556] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 164.649987][ T8569] dvmrp8: entered allmulticast mode [ 164.666349][ T8568] dvmrp8: left allmulticast mode [ 164.799993][ T8580] vlan0: entered promiscuous mode [ 164.859930][ T8571] netlink: 64 bytes leftover after parsing attributes in process `syz.4.716'. [ 164.871161][ T8580] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 164.943783][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 164.969365][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 165.006619][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.040527][ T8580] team0: Port device bond0 added [ 165.104923][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.201789][ T8581] team0 (unregistering): Port device bond0 removed [ 166.144828][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.174925][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.215153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.254935][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.294832][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.334816][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.375008][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.414843][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.454811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.494828][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.534782][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.574791][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.614829][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.655114][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.704803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.734843][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.774877][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.814896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.854819][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.894896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.934848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.974868][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.014816][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.054806][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.094769][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.134844][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.174822][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.219352][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.254761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.294776][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.334772][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.374873][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.414840][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.454847][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.494890][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.535710][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.574819][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.506272][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 204.515069][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.725'. [ 204.540158][ T8608] lo speed is unknown, defaulting to 1000 [ 204.558069][ T8608] ªªªªªª speed is unknown, defaulting to 1000 [ 204.614862][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.652723][ T8612] Cannot find del_set index 1 as target [ 204.941503][ T13] tipc: Subscription rejected, illegal request [ 204.992318][ T8626] lo speed is unknown, defaulting to 1000 [ 205.007483][ T8626] ªªªªªª speed is unknown, defaulting to 1000 [ 205.171527][ T8633] netlink: 'syz.0.730': attribute type 29 has an invalid length. [ 205.181034][ T8629] lo speed is unknown, defaulting to 1000 [ 205.213295][ T8629] ªªªªªª speed is unknown, defaulting to 1000 [ 205.269216][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 205.655124][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.772943][ T8654] batadv0: entered promiscuous mode [ 205.798754][ T8654] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.811150][ T8654] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 205.833054][ T8642] lo speed is unknown, defaulting to 1000 [ 205.866593][ T8642] ªªªªªª speed is unknown, defaulting to 1000 [ 205.994317][ T8656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 206.704866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.750864][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 207.744856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.001224][ T8661] lo speed is unknown, defaulting to 1000 [ 208.198737][ T8661] ªªªªªª speed is unknown, defaulting to 1000 [ 208.557868][ T8682] vxcan3: entered allmulticast mode [ 208.682802][ T8683] lo speed is unknown, defaulting to 1000 [ 208.734848][ T8683] ªªªªªª speed is unknown, defaulting to 1000 [ 208.735766][ T8684] lo speed is unknown, defaulting to 1000 [ 208.759895][ T30] audit: type=1804 audit(1745947170.588:3): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.744" name="/newroot/146/cgroup.controllers" dev="tmpfs" ino=769 res=1 errno=0 [ 208.782383][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.791791][ T30] audit: type=1800 audit(1745947170.588:4): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.744" name="cgroup.controllers" dev="tmpfs" ino=769 res=0 errno=0 [ 208.791897][ T8684] ªªªªªª speed is unknown, defaulting to 1000 [ 208.911348][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 209.167611][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.745'. [ 209.182824][ T8693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.217090][ T8697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.746'. [ 209.283198][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 209.615351][ T8709] sit0: entered promiscuous mode [ 209.672465][ T8709] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 209.731373][ T8709] netlink: 1 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.751791][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.750'. [ 209.815017][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.866485][ T8708] lo speed is unknown, defaulting to 1000 [ 209.891018][ T8708] ªªªªªª speed is unknown, defaulting to 1000 [ 210.827897][ T8741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.759'. [ 210.846138][ T8731] lo speed is unknown, defaulting to 1000 [ 210.854895][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.864964][ T8731] ªªªªªª speed is unknown, defaulting to 1000 [ 210.917797][ T8741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.759'. [ 210.919301][ T6422] IPVS: starting estimator thread 0... [ 211.018349][ T8745] IPVS: using max 36 ests per chain, 86400 per kthread [ 211.034272][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.761'. [ 211.320210][ T8756] netlink: zone id is out of range [ 211.332444][ T8756] netlink: zone id is out of range [ 211.342561][ T8756] netlink: zone id is out of range [ 211.357264][ T8756] netlink: zone id is out of range [ 211.362423][ T8756] netlink: zone id is out of range [ 211.376934][ T8756] netlink: zone id is out of range [ 211.382092][ T8756] netlink: zone id is out of range [ 211.395122][ T8753] lo speed is unknown, defaulting to 1000 [ 211.411474][ T8756] netlink: zone id is out of range [ 211.495018][ T8753] ªªªªªª speed is unknown, defaulting to 1000 [ 211.503503][ T8742] lo speed is unknown, defaulting to 1000 [ 211.558363][ T8742] ªªªªªª speed is unknown, defaulting to 1000 [ 211.655006][ T5832] Bluetooth: hci0: command 0x0401 tx timeout [ 211.661251][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 211.667664][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 211.674182][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.703545][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 211.960504][ T8776] lo: entered allmulticast mode [ 212.058813][ T8783] lo speed is unknown, defaulting to 1000 [ 212.070071][ T8783] ªªªªªª speed is unknown, defaulting to 1000 [ 212.223120][ T8798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.772'. [ 212.235066][ T8790] netlink: 240 bytes leftover after parsing attributes in process `syz.4.771'. [ 212.270673][ T8799] ip6t_rpfilter: unknown options [ 212.305513][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 212.523658][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 213.380574][ T8850] lo speed is unknown, defaulting to 1000 [ 213.450474][ T8850] ªªªªªª speed is unknown, defaulting to 1000 [ 213.486712][ T8854] lo speed is unknown, defaulting to 1000 [ 213.511343][ T8854] ªªªªªª speed is unknown, defaulting to 1000 [ 213.602477][ T8855] lo speed is unknown, defaulting to 1000 [ 213.628803][ T8855] ªªªªªª speed is unknown, defaulting to 1000 [ 213.684526][ T8859] sctp: [Deprecated]: syz.0.788 (pid 8859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.684526][ T8859] Use struct sctp_sack_info instead [ 213.879240][ T8866] sctp: [Deprecated]: syz.0.788 (pid 8866) Use of int in max_burst socket option deprecated. [ 213.879240][ T8866] Use struct sctp_assoc_value instead [ 214.023078][ T8875] lo: left promiscuous mode [ 214.383951][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.400941][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.523147][ T8875] geneve2: left promiscuous mode [ 214.534561][ T8875] geneve2: left allmulticast mode [ 214.548363][ T8875] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.557658][ T8875] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.566363][ T8875] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.575141][ T8875] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.588034][ T8875] bond2: left promiscuous mode [ 214.598200][ T8875] batadv0: left promiscuous mode [ 214.609461][ T8875] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.619249][ T8875] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.627679][ T8875] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.636128][ T8875] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.693131][ T8899] bond0: option resend_igmp: invalid value (262144) [ 214.718297][ T8899] bond0: option resend_igmp: allowed values 0 - 255 [ 214.742677][ T8903] netlink: 'syz.0.794': attribute type 27 has an invalid length. [ 214.751615][ T8900] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.759986][ T8900] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.768365][ T8900] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.776927][ T8900] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.805475][ T8900] vxlan0: entered promiscuous mode [ 214.811070][ T8900] vxlan0: entered allmulticast mode [ 215.014875][ C1] net_ratelimit: 16 callbacks suppressed [ 215.014894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.308208][ T8932] caif0: entered promiscuous mode [ 215.418120][ T8940] __nla_validate_parse: 2 callbacks suppressed [ 215.418141][ T8940] netlink: 84 bytes leftover after parsing attributes in process `syz.2.804'. [ 215.530515][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 215.542388][ T8946] 8021q: VLANs not supported on sit0 [ 215.601995][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 215.622833][ T8951] 8021q: VLANs not supported on ip6_vti0 [ 215.644885][ T8949] veth1_macvtap: left promiscuous mode [ 215.656129][ T8949] macsec0: entered promiscuous mode [ 215.677798][ T8949] veth1_macvtap: entered promiscuous mode [ 215.690643][ T8949] macsec0: left promiscuous mode [ 215.936854][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 216.059453][ T8970] netlink: 68 bytes leftover after parsing attributes in process `syz.0.814'. [ 216.064807][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.393953][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 216.412090][ T8984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.820'. [ 216.423290][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 217.104776][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.302124][ T8986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.395149][ T9013] lo speed is unknown, defaulting to 1000 [ 217.460146][ T9019] netlink: 'syz.4.830': attribute type 21 has an invalid length. [ 217.478415][ T9013] ªªªªªª speed is unknown, defaulting to 1000 [ 217.487162][ T9018] batadv_slave_0: entered promiscuous mode [ 217.504925][ T9019] netlink: 128 bytes leftover after parsing attributes in process `syz.4.830'. [ 217.547124][ T9019] netlink: 'syz.4.830': attribute type 4 has an invalid length. [ 217.559655][ T9019] netlink: 'syz.4.830': attribute type 3 has an invalid length. [ 217.567733][ T9019] netlink: 3 bytes leftover after parsing attributes in process `syz.4.830'. [ 217.766287][ T9031] FAULT_INJECTION: forcing a failure. [ 217.766287][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 217.794305][ T9029] netlink: 'syz.0.834': attribute type 11 has an invalid length. [ 217.804445][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.1.833 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 217.804474][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.804487][ T9031] Call Trace: [ 217.804494][ T9031] [ 217.804503][ T9031] dump_stack_lvl+0x189/0x250 [ 217.804542][ T9031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.804571][ T9031] ? __pfx__printk+0x10/0x10 [ 217.804602][ T9031] ? __pfx___might_resched+0x10/0x10 [ 217.804625][ T9031] should_fail_ex+0x414/0x560 [ 217.804661][ T9031] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 217.804691][ T9031] should_failslab+0xa8/0x100 [ 217.804720][ T9031] __kvmalloc_node_noprof+0x168/0x5e0 [ 217.804747][ T9031] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 217.804783][ T9031] bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 217.804817][ T9031] ? wake_up_q+0xca/0x110 [ 217.804848][ T9031] ? __mutex_unlock_slowpath+0x68a/0x700 [ 217.804892][ T9031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.804916][ T9031] ? synchronize_rcu+0x11a/0x310 [ 217.804934][ T9031] ? __pfx_synchronize_rcu+0x10/0x10 [ 217.804956][ T9031] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 217.804988][ T9031] ? bpf_dispatcher_xdp+0x800/0x1000 [ 217.805026][ T9031] ? 0xffffffffa0001f9c [ 217.805040][ T9031] ? 0xffffffffa000201c [ 217.805104][ T9031] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 217.805135][ T9031] ? _copy_from_user+0x94/0xb0 [ 217.805161][ T9031] ? bpf_test_init+0x133/0x170 [ 217.805188][ T9031] ? xdp_convert_md_to_buff+0x5b/0x330 [ 217.805221][ T9031] bpf_prog_test_run_xdp+0x713/0xf90 [ 217.805269][ T9031] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 217.805305][ T9031] ? __fget_files+0x2a/0x420 [ 217.805337][ T9031] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 217.805368][ T9031] bpf_prog_test_run+0x2a9/0x340 [ 217.805399][ T9031] __sys_bpf+0x4a4/0x860 [ 217.805432][ T9031] ? __pfx___sys_bpf+0x10/0x10 [ 217.805471][ T9031] ? ksys_write+0x1f0/0x250 [ 217.805491][ T9031] ? rcu_is_watching+0x15/0xb0 [ 217.805533][ T9031] __x64_sys_bpf+0x7c/0x90 [ 217.805555][ T9031] do_syscall_64+0xf6/0x210 [ 217.805583][ T9031] ? clear_bhb_loop+0x45/0xa0 [ 217.805608][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.805627][ T9031] RIP: 0033:0x7ff73c58e969 [ 217.805643][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.805659][ T9031] RSP: 002b:00007ff73a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.805681][ T9031] RAX: ffffffffffffffda RBX: 00007ff73c7b5fa0 RCX: 00007ff73c58e969 [ 217.805695][ T9031] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 217.805708][ T9031] RBP: 00007ff73a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.805719][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.805731][ T9031] R13: 0000000000000000 R14: 00007ff73c7b5fa0 R15: 00007ffd719f88d8 [ 217.805762][ T9031] [ 218.134781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.305130][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.315096][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.341608][ T9014] caif0: left promiscuous mode [ 218.347440][ T9014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.373771][ T9018] batadv_slave_0: left promiscuous mode [ 218.535343][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 218.738657][ T9055] netlink: 'syz.4.840': attribute type 4 has an invalid length. [ 218.825930][ T9053] xt_l2tp: v2 sid > 0xffff: 262144 [ 219.174900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.283871][ T9085] IPVS: length: 117 != 8 [ 219.301769][ T9086] bond1: entered promiscuous mode [ 219.307287][ T9086] bond1: entered allmulticast mode [ 219.312972][ T9086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.571791][ T9094] lo speed is unknown, defaulting to 1000 [ 219.622283][ T9094] ªªªªªª speed is unknown, defaulting to 1000 [ 220.102205][ T9120] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 220.127212][ T9120] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 220.214839][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.640278][ T9149] __nla_validate_parse: 6 callbacks suppressed [ 220.640357][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.868'. [ 220.669521][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 220.931389][ T9171] set match dimension is over the limit! [ 220.973157][ T9177] xt_hashlimit: invalid rate [ 220.986867][ T9178] lo speed is unknown, defaulting to 1000 [ 221.011739][ T9178] ªªªªªª speed is unknown, defaulting to 1000 [ 221.093333][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 221.113443][ T9188] netlink: 3 bytes leftover after parsing attributes in process `syz.2.879'. [ 221.122524][ T9188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.254796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.525257][ T9216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.880'. [ 221.649966][ T9227] IPVS: set_ctl: invalid protocol: 43 172.20.20.49:20000 [ 221.657895][ T9222] lo speed is unknown, defaulting to 1000 [ 221.680014][ T9222] ªªªªªª speed is unknown, defaulting to 1000 [ 221.934482][ T9237] lo: entered allmulticast mode [ 221.948117][ T9237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.203060][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 222.223936][ T9253] netlink: 96 bytes leftover after parsing attributes in process `syz.3.893'. [ 222.294860][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.339849][ T9259] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.363842][ T9262] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 222.378002][ T9259] netlink: 'syz.1.895': attribute type 10 has an invalid length. [ 222.431933][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 222.503997][ T9259] veth1_vlan: entered allmulticast mode [ 222.533438][ T9259] team0: Device veth1_vlan failed to register rx_handler [ 222.592228][ T9260] wg1: Master is either lo or non-ether device [ 222.962627][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.997124][ T9284] netlink: 'syz.1.902': attribute type 11 has an invalid length. [ 223.169183][ T9291] lo speed is unknown, defaulting to 1000 [ 223.195141][ T9291] ªªªªªª speed is unknown, defaulting to 1000 [ 223.334770][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.499839][ T9316] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 223.612592][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 223.654145][ T9321] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 223.658561][ T9320] macvlan2: entered promiscuous mode [ 223.695783][ T9320] macvlan2: entered allmulticast mode [ 223.715383][ T9320] erspan0: entered allmulticast mode [ 223.750144][ T9325] ipvlan0: entered promiscuous mode [ 223.755502][ T9325] ipvlan0: entered allmulticast mode [ 223.760818][ T9325] bridge0: entered allmulticast mode [ 223.882403][ T9336] xt_TCPMSS: Only works on TCP SYN packets [ 224.182970][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.928'. [ 224.203733][ T9355] netlink: 'syz.4.928': attribute type 7 has an invalid length. [ 224.220915][ T9355] netlink: 'syz.4.928': attribute type 8 has an invalid length. [ 224.374894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.649155][ T9385] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 224.726373][ T9377] lo speed is unknown, defaulting to 1000 [ 224.763289][ T9377] ªªªªªª speed is unknown, defaulting to 1000 [ 225.245939][ T9383] lo speed is unknown, defaulting to 1000 [ 225.253415][ T9383] ªªªªªª speed is unknown, defaulting to 1000 [ 225.424185][ T9409] netlink: 'syz.1.946': attribute type 2 has an invalid length. [ 225.432100][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.740808][ T9414] lo speed is unknown, defaulting to 1000 [ 225.748678][ T9414] ªªªªªª speed is unknown, defaulting to 1000 [ 225.829373][ T9417] tipc: Started in network mode [ 225.834396][ T9417] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 225.854846][ T9417] tipc: Enabling of bearer rejected, failed to enable media [ 225.871843][ T9422] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.998585][ T9422] lo speed is unknown, defaulting to 1000 [ 226.030853][ T9422] ªªªªªª speed is unknown, defaulting to 1000 [ 226.038042][ T9425] lo speed is unknown, defaulting to 1000 [ 226.098877][ T9425] ªªªªªª speed is unknown, defaulting to 1000 [ 226.454787][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.975818][ T9449] openvswitch: netlink: Key 15 has unexpected len 184 expected 4 [ 227.494852][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.670721][ T9467] nbd: couldn't find a device at index 135 [ 228.295536][ T9484] wireguard0: entered promiscuous mode [ 228.301195][ T9484] wireguard0: entered allmulticast mode [ 228.534895][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.580304][ T9514] __nla_validate_parse: 5 callbacks suppressed [ 228.580323][ T9514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'. [ 228.580364][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'. [ 228.849617][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 229.200621][ T9537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.584836][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.720052][ T9577] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 229.732765][ T9571] x_tables: duplicate underflow at hook 1 [ 229.739479][ T9578] x_tables: duplicate underflow at hook 1 [ 229.928253][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 230.615200][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.633266][ T9618] sctp: [Deprecated]: syz.4.997 (pid 9618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.633266][ T9618] Use struct sctp_sack_info instead [ 231.237308][ T9661] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 231.276982][ T9664] netlink: 432 bytes leftover after parsing attributes in process `syz.1.1009'. [ 231.368326][ T9669] sctp: [Deprecated]: syz.3.1010 (pid 9669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.368326][ T9669] Use struct sctp_sack_info instead [ 231.379906][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 231.396325][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 231.407392][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 231.427432][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 231.447671][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 231.596584][ T9661] lo speed is unknown, defaulting to 1000 [ 231.630923][ T9661] ªªªªªª speed is unknown, defaulting to 1000 [ 231.654941][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.781013][ T9689] tun0: tun_chr_ioctl cmd 1074025677 [ 231.786549][ T9689] tun0: linktype set to 823 [ 231.982622][ T9698] netlink: 'syz.0.1015': attribute type 13 has an invalid length. [ 231.991152][ T9698] netlink: 'syz.0.1015': attribute type 12 has an invalid length. [ 232.226455][ T9705] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 232.391045][ T9705] lo speed is unknown, defaulting to 1000 [ 232.432567][ T9705] ªªªªªª speed is unknown, defaulting to 1000 [ 232.515323][ T9716] syz.0.1022 uses old SIOCAX25GETINFO [ 232.704960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.873170][ T9731] 8021q: VLANs not supported on 60ªX¹¦À [ 233.734769][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.866384][ T9771] lo speed is unknown, defaulting to 1000 [ 233.889031][ T9771] ªªªªªª speed is unknown, defaulting to 1000 [ 233.980650][ T5140] Bluetooth: hci4: command 0x0405 tx timeout [ 234.313106][ T9802] __nla_validate_parse: 90 callbacks suppressed [ 234.313124][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 234.425140][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 234.436581][ T9806] netlink: 'syz.3.1053': attribute type 12 has an invalid length. [ 234.444932][ T9806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1053'. [ 234.784801][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.811872][ T9818] netlink: 'syz.3.1057': attribute type 27 has an invalid length. [ 235.165973][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1064'. [ 235.326407][ T9855] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 235.356650][ T9858] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 235.391681][ T9858] wlan1: mtu less than device minimum [ 235.416406][ T9861] netlink: 'syz.3.1070': attribute type 29 has an invalid length. [ 235.438204][ T9858] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 235.741011][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 235.750895][ T9880] netlink: 'syz.1.1078': attribute type 11 has an invalid length. [ 235.769504][ T9879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.806268][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 235.824807][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.889894][ T9879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.060558][ T5140] Bluetooth: hci4: command 0x0405 tx timeout [ 236.124427][ T9907] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.1083'. [ 236.638848][ T9939] syzkaller0: entered allmulticast mode [ 236.698302][ T9942] bond0: (slave bond_slave_0): Releasing backup interface [ 236.725945][ T9942] bond0: (slave bond_slave_1): Releasing backup interface [ 236.759959][ T9942] team0: Port device team_slave_0 removed [ 236.763920][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'. [ 236.780827][ T9942] team0: Port device team_slave_1 removed [ 236.805611][ T9942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.848571][ T9942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.856145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.861763][ T9960] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 236.917845][ T9942] bond0: (slave wlan1): Releasing backup interface [ 236.949810][ T9942] bond0: (slave macvlan2): Releasing backup interface [ 237.064490][ T9962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1098'. [ 237.155495][ T9947] lo speed is unknown, defaulting to 1000 [ 237.163048][ T9947] ªªªªªª speed is unknown, defaulting to 1000 [ 237.245359][ T9977] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 237.259101][ T9977] batman_adv: batadv0: Adding interface: ip6gretap2 [ 237.266053][ T9977] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 237.286554][ T9977] batman_adv: batadv0: Interface activated: ip6gretap2 [ 237.453886][ T9987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1101'. [ 237.670401][ T9991] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.679884][ T9991] bond0: (slave bond5): Enslaving as an active interface with an up link [ 237.775391][ T9947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.814348][ T9988] lo speed is unknown, defaulting to 1000 [ 237.830059][ T9997] ip6gretap0: entered promiscuous mode [ 237.874861][ T9997] macsec0: entered promiscuous mode [ 237.894853][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.907811][ T9997] ip6gretap0: left promiscuous mode [ 238.227828][ T8893] bond0 (unregistering): Released all slaves [ 238.254276][ T9988] ªªªªªª speed is unknown, defaulting to 1000 [ 238.608688][T10023] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.825880][T10028] netlink: 'syz.1.1115': attribute type 8 has an invalid length. [ 238.894590][T10037] netlink: 'syz.3.1119': attribute type 2 has an invalid length. [ 238.934842][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.991415][T10033] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 239.018606][T10033] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 239.050535][T10037] €: entered promiscuous mode [ 239.200242][T10041] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 239.203673][T10045] geneve3: entered promiscuous mode [ 239.230276][T10045] geneve3: entered allmulticast mode [ 239.632799][T10078] __nla_validate_parse: 4 callbacks suppressed [ 239.632818][T10078] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1131'. [ 239.668922][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1131'. [ 239.722279][T10076] syzkaller0: entered promiscuous mode [ 239.729394][T10076] syzkaller0: entered allmulticast mode [ 239.974820][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.344269][T10110] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1137'. [ 240.563610][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 241.019914][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.050253][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 242.054906][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.113814][T10142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1145'. [ 242.227756][T10149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1149'. [ 242.278348][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 242.423607][T10136] bond0 (unregistering): (slave bond5): Releasing backup interface [ 242.469107][T10136] bond0 (unregistering): Released all slaves [ 242.510475][T10163] netlink: 'syz.1.1151': attribute type 1 has an invalid length. [ 242.611439][T10160] lo: left allmulticast mode [ 243.083836][T10160] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.093249][T10160] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.094819][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.793633][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.840385][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.967521][T10160] hsr0: left promiscuous mode [ 244.135258][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.224497][T10160] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.236907][T10160] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.245574][T10160] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.253948][T10160] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.313519][T10160] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 244.325590][T10160] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 244.334080][T10160] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 244.342622][T10160] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 244.351473][T10160] geneve2: left promiscuous mode [ 244.356882][T10160] geneve2: left allmulticast mode [ 244.436407][T10160] bond1: left promiscuous mode [ 244.441341][T10160] bond1: left allmulticast mode [ 244.450993][T10160] macvlan2: left promiscuous mode [ 244.456787][T10160] macvlan2: left allmulticast mode [ 244.471041][T10160] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 244.848705][T10216] lo speed is unknown, defaulting to 1000 [ 244.867519][T10216] ªªªªªª speed is unknown, defaulting to 1000 [ 245.001621][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 245.033250][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 245.060702][T10242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1171'. [ 245.146640][T10237] lo speed is unknown, defaulting to 1000 [ 245.154829][T10237] ªªªªªª speed is unknown, defaulting to 1000 [ 245.174918][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.209333][T10247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 245.425514][T10240] lo speed is unknown, defaulting to 1000 [ 245.473789][T10240] ªªªªªª speed is unknown, defaulting to 1000 [ 245.646439][T10263] netlink: 'syz.4.1177': attribute type 5 has an invalid length. [ 245.806442][T10271] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 245.833644][T10272] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 246.214920][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.290204][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 246.879998][T10325] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1190'. [ 246.904481][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 247.254811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.282583][T10348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1196'. [ 247.294681][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1196'. [ 247.357574][T10354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.537470][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1202'. [ 247.653734][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.759631][T10371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.814758][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 247.839572][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.964352][T10386] dvmrp0: entered allmulticast mode [ 248.245593][T10402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.253169][T10402] IPv6: NLM_F_CREATE should be set when creating new route [ 248.260470][T10402] IPv6: NLM_F_CREATE should be set when creating new route [ 248.267834][T10402] IPv6: NLM_F_CREATE should be set when creating new route [ 248.294804][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.432164][T10417] netlink: 'syz.0.1218': attribute type 11 has an invalid length. [ 248.556272][T10427] 8021q: VLANs not supported on vcan0 [ 249.334760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.380618][T10472] vlan1: entered allmulticast mode [ 249.401404][T10472] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 249.512781][T10482] xt_hashlimit: size too large, truncated to 1048576 [ 249.589496][T10486] xt_hashlimit: size too large, truncated to 1048576 [ 249.898383][ T5140] Bluetooth: hci0: command 0x0401 tx timeout [ 250.327622][T10526] sctp: [Deprecated]: syz.1.1248 (pid 10526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.327622][T10526] Use struct sctp_sack_info instead [ 250.374876][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.475486][T10535] __nla_validate_parse: 9 callbacks suppressed [ 250.475504][T10535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1252'. [ 250.546336][T10539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.609976][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 250.751231][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 251.078242][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 251.107593][T10576] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1263'. [ 251.238941][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 251.411338][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 251.414786][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.429890][T10594] ip6gre1: entered promiscuous mode [ 251.481841][T10597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1269'. [ 251.522530][T10598] sctp: [Deprecated]: syz.1.1269 (pid 10598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.522530][T10598] Use struct sctp_sack_info instead [ 251.549694][T10597] sctp: [Deprecated]: syz.1.1269 (pid 10597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.549694][T10597] Use struct sctp_sack_info instead [ 251.891879][T10627] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 251.901032][T10627] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1276'. [ 251.931705][T10624] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1275'. [ 252.217009][T10632] can: request_module (can-proto-0) failed. [ 252.454789][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.717122][T10656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.494861][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.643847][T10691] syzkaller0: entered promiscuous mode [ 253.651498][T10691] syzkaller0: entered allmulticast mode [ 254.135572][T10705] netlink: 'syz.2.1298': attribute type 15 has an invalid length. [ 254.164099][T10705] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 254.534804][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.574834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.692147][T10731] __nla_validate_parse: 6 callbacks suppressed [ 255.692179][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 255.751613][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 255.764332][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 255.822066][T10731] ip6gretap0: entered promiscuous mode [ 255.842123][T10731] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 255.903039][T10735] lo speed is unknown, defaulting to 1000 [ 255.930553][T10735] ªªªªªª speed is unknown, defaulting to 1000 [ 256.251065][T10759] netlink: 'syz.2.1310': attribute type 27 has an invalid length. [ 256.260136][T10761] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1313'. [ 256.379900][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 256.401202][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 256.614835][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.838114][T10790] netlink: 'syz.3.1321': attribute type 1 has an invalid length. [ 256.851530][T10790] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1321'. [ 256.880744][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 257.005834][T10800] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 257.062108][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 257.111818][T10808] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 257.207833][T10809] bond5: (slave gretap2): making interface the new active one [ 257.216831][T10809] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 257.226730][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 257.291946][T10804] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 257.300419][T10804] netlink: 'syz.1.1324': attribute type 2 has an invalid length. [ 257.303269][T10816] vlan2: entered promiscuous mode [ 257.323445][T10816] team0: entered promiscuous mode [ 257.380983][T10814] lo speed is unknown, defaulting to 1000 [ 257.401600][T10814] ªªªªªª speed is unknown, defaulting to 1000 [ 257.457506][T10826] ------------[ cut here ]------------ [ 257.463056][T10826] memcpy: detected field-spanning write (size 229) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 257.480971][T10827] ================================================================== [ 257.489068][T10827] BUG: KASAN: stack-out-of-bounds in ipv6_addr_prefix+0x6e/0x1d0 [ 257.496829][T10827] Read of size 229 at addr ffffc90019f77a94 by task syz.3.1330/10827 [ 257.504914][T10827] [ 257.507265][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.3.1330 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 257.507292][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.507315][T10827] Call Trace: [ 257.507323][T10827] [ 257.507332][T10827] dump_stack_lvl+0x189/0x250 [ 257.507367][T10827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.507395][T10827] ? __pfx__printk+0x10/0x10 [ 257.507415][T10827] ? __pfx__printk+0x10/0x10 [ 257.507432][T10827] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 257.507460][T10827] ? __virt_addr_valid+0xc3/0x540 [ 257.507487][T10827] print_report+0xb4/0x290 [ 257.507511][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 257.507536][T10827] kasan_report+0x118/0x150 [ 257.507561][T10827] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 257.507585][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 257.507614][T10827] kasan_check_range+0x29a/0x2b0 [ 257.507638][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 257.507663][T10827] __asan_memcpy+0x29/0x70 [ 257.507683][T10827] ipv6_addr_prefix+0x6e/0x1d0 [ 257.507711][T10827] ip6_route_info_create+0x629/0xa70 [ 257.507735][T10827] ip6_route_add+0x29/0x2f0 [ 257.507753][T10827] ? ipv6_route_ioctl+0x343/0x480 [ 257.507774][T10827] ipv6_route_ioctl+0x35c/0x480 [ 257.507796][T10827] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 257.507833][T10827] inet6_ioctl+0x219/0x280 [ 257.507860][T10827] ? __pfx_inet6_ioctl+0x10/0x10 [ 257.507891][T10827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.507931][T10827] sock_do_ioctl+0xd9/0x300 [ 257.507958][T10827] ? __pfx_sock_do_ioctl+0x10/0x10 [ 257.507984][T10827] ? __lock_acquire+0xaac/0xd20 [ 257.508019][T10827] sock_ioctl+0x576/0x790 [ 257.508045][T10827] ? __pfx_sock_ioctl+0x10/0x10 [ 257.508071][T10827] ? __fget_files+0x3a0/0x420 [ 257.508096][T10827] ? __fget_files+0x2a/0x420 [ 257.508122][T10827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.508148][T10827] ? __pfx_sock_ioctl+0x10/0x10 [ 257.508172][T10827] __se_sys_ioctl+0xf9/0x170 [ 257.508192][T10827] do_syscall_64+0xf6/0x210 [ 257.508219][T10827] ? clear_bhb_loop+0x45/0xa0 [ 257.508242][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.508262][T10827] RIP: 0033:0x7efd0538e969 [ 257.508296][T10827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.508315][T10827] RSP: 002b:00007efd0621e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.508336][T10827] RAX: ffffffffffffffda RBX: 00007efd055b6080 RCX: 00007efd0538e969 [ 257.508352][T10827] RDX: 0000200000000400 RSI: 000000000000890b RDI: 0000000000000003 [ 257.508365][T10827] RBP: 00007efd05410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 257.508378][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.508390][T10827] R13: 0000000000000000 R14: 00007efd055b6080 R15: 00007ffff2df9bc8 [ 257.508414][T10827] [ 257.508421][T10827] [ 257.654810][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.654884][T10827] The buggy address belongs to stack of task syz.3.1330/10827 [ 257.804640][T10827] and is located at offset 84 in frame: [ 257.810278][T10827] ipv6_route_ioctl+0x0/0x480 [ 257.814963][T10827] [ 257.817284][T10827] This frame has 1 object: [ 257.821692][T10827] [32, 208) 'cfg' [ 257.821705][T10827] [ 257.827741][T10827] The buggy address belongs to the virtual mapping at [ 257.827741][T10827] [ffffc90019f70000, ffffc90019f79000) created by: [ 257.827741][T10827] copy_process+0x544/0x3b80 [ 257.845381][T10827] [ 257.847706][T10827] The buggy address belongs to the physical page: [ 257.854117][T10827] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804ae97dc0 pfn:0x4ae97 [ 257.864198][T10827] memcg:ffff88801ff2a282 [ 257.868435][T10827] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 257.875562][T10827] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 257.884163][T10827] raw: ffff88804ae97dc0 0000000000000000 00000001ffffffff ffff88801ff2a282 [ 257.892734][T10827] page dumped because: kasan: bad access detected [ 257.899152][T10827] page_owner tracks the page as allocated [ 257.904882][T10827] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 10825, tgid 10825 (syz.3.1330), ts 257452766769, free_ts 257372662618 [ 257.924243][T10827] post_alloc_hook+0x1d8/0x230 [ 257.929017][T10827] get_page_from_freelist+0x21e0/0x22c0 [ 257.934572][T10827] __alloc_frozen_pages_noprof+0x181/0x370 [ 257.940405][T10827] alloc_pages_mpol+0x232/0x4a0 [ 257.945260][T10827] alloc_pages_noprof+0xa9/0x190 [ 257.950196][T10827] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 257.956092][T10827] __vmalloc_node_noprof+0x7d/0x90 [ 257.961209][T10827] dup_task_struct+0x3e7/0x860 [ 257.965972][T10827] copy_process+0x544/0x3b80 [ 257.970558][T10827] kernel_clone+0x21e/0x870 [ 257.975061][T10827] __se_sys_clone3+0x256/0x2d0 [ 257.979824][T10827] do_syscall_64+0xf6/0x210 [ 257.984334][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.990228][T10827] page last free pid 10817 tgid 10817 stack trace: [ 257.996721][T10827] __free_frozen_pages+0xb14/0xce0 [ 258.001834][T10827] tlb_finish_mmu+0x112/0x1d0 [ 258.006524][T10827] exit_mmap+0x474/0xba0 [ 258.010767][T10827] __mmput+0x118/0x420 [ 258.014848][T10827] exit_mm+0x1da/0x2c0 [ 258.018931][T10827] do_exit+0x859/0x2550 [ 258.023091][T10827] do_group_exit+0x21c/0x2d0 [ 258.027686][T10827] __x64_sys_exit_group+0x3f/0x40 [ 258.032714][T10827] x64_sys_call+0x21ba/0x21c0 [ 258.037390][T10827] do_syscall_64+0xf6/0x210 [ 258.041903][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.047799][T10827] [ 258.050119][T10827] Memory state around the buggy address: [ 258.055743][T10827] ffffc90019f77a00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 258.063799][T10827] ffffc90019f77a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 258.071861][T10827] >ffffc90019f77b00: 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 258.079918][T10827] ^ [ 258.084497][T10827] ffffc90019f77b80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 258.092552][T10827] ffffc90019f77c00: 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 258.100609][T10827] ================================================================== [ 258.138128][T10826] WARNING: CPU: 0 PID: 10826 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 258.148142][T10826] Modules linked in: [ 258.152080][T10826] CPU: 0 UID: 0 PID: 10826 Comm: syz.3.1330 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 258.164284][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.174393][T10826] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 258.180095][T10826] Code: cc e8 b0 00 b3 f7 c6 05 37 66 5c 05 01 90 b9 10 00 00 00 48 c7 c7 a0 46 7d 8c 4c 89 fe 48 c7 c2 c0 4d 7d 8c e8 8d 5f 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 7e 00 b3 f7 44 89 e6 48 c7 c7 40 fc [ 258.199889][T10826] RSP: 0018:ffffc9001a2af920 EFLAGS: 00010246 [ 258.206015][T10826] RAX: ba0da929636b0300 RBX: ffff888060d64868 RCX: ffff88802f53bc00 [ 258.214013][T10826] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 258.222758][T10826] RBP: 0000000000000005 R08: 0000000000000003 R09: 0000000000000004 [ 258.231487][T10826] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 00000000000000e5 [ 258.240006][T10826] R13: 1ffff92003455f4e R14: ffffc9001a2afa94 R15: 00000000000000e5 [ 258.248336][T10826] FS: 00007efd0623f6c0(0000) GS:ffff8881260c4000(0000) knlGS:0000000000000000 [ 258.257338][T10826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.263948][T10826] CR2: 00007efd061fcf98 CR3: 0000000050d2e000 CR4: 00000000003526f0 [ 258.271973][T10826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.280020][T10826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.288040][T10826] Call Trace: [ 258.291353][T10826] [ 258.294315][T10826] ip6_route_info_create+0x629/0xa70 [ 258.299742][T10826] ip6_route_add+0x29/0x2f0 [ 258.304281][T10826] ? ipv6_route_ioctl+0x343/0x480 [ 258.309462][T10826] ipv6_route_ioctl+0x35c/0x480 [ 258.314363][T10826] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 258.319880][T10826] inet6_ioctl+0x219/0x280 [ 258.324333][T10826] ? __pfx_inet6_ioctl+0x10/0x10 [ 258.329374][T10826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.333007][T10827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.333028][T10827] CPU: 1 UID: 0 PID: 10827 Comm: syz.3.1330 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 258.333057][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.333072][T10827] Call Trace: [ 258.333080][T10827] [ 258.333090][T10827] dump_stack_lvl+0x99/0x250 [ 258.333123][T10827] ? __asan_memcpy+0x40/0x70 [ 258.333146][T10827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.333176][T10827] ? __pfx__printk+0x10/0x10 [ 258.333204][T10827] panic+0x2db/0x790 [ 258.333237][T10827] ? __pfx_panic+0x10/0x10 [ 258.333270][T10827] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 258.333295][T10827] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.333319][T10827] ? print_memory_metadata+0x314/0x400 [ 258.333349][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 258.333377][T10827] check_panic_on_warn+0x89/0xb0 [ 258.333404][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 258.333432][T10827] end_report+0x78/0x160 [ 258.333457][T10827] kasan_report+0x129/0x150 [ 258.333481][T10827] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 258.333507][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 258.333540][T10827] kasan_check_range+0x29a/0x2b0 [ 258.333566][T10827] ? ipv6_addr_prefix+0x6e/0x1d0 [ 258.333622][T10827] __asan_memcpy+0x29/0x70 [ 258.333644][T10827] ipv6_addr_prefix+0x6e/0x1d0 [ 258.333675][T10827] ip6_route_info_create+0x629/0xa70 [ 258.333701][T10827] ip6_route_add+0x29/0x2f0 [ 258.333721][T10827] ? ipv6_route_ioctl+0x343/0x480 [ 258.333755][T10827] ipv6_route_ioctl+0x35c/0x480 [ 258.333780][T10827] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 258.333819][T10827] inet6_ioctl+0x219/0x280 [ 258.333846][T10827] ? __pfx_inet6_ioctl+0x10/0x10 [ 258.333878][T10827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.333914][T10827] sock_do_ioctl+0xd9/0x300 [ 258.333943][T10827] ? __pfx_sock_do_ioctl+0x10/0x10 [ 258.333970][T10827] ? __lock_acquire+0xaac/0xd20 [ 258.334005][T10827] sock_ioctl+0x576/0x790 [ 258.334032][T10827] ? __pfx_sock_ioctl+0x10/0x10 [ 258.334059][T10827] ? __fget_files+0x3a0/0x420 [ 258.334086][T10827] ? __fget_files+0x2a/0x420 [ 258.334114][T10827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 258.334140][T10827] ? __pfx_sock_ioctl+0x10/0x10 [ 258.334165][T10827] __se_sys_ioctl+0xf9/0x170 [ 258.334187][T10827] do_syscall_64+0xf6/0x210 [ 258.334215][T10827] ? clear_bhb_loop+0x45/0xa0 [ 258.334238][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.334259][T10827] RIP: 0033:0x7efd0538e969 [ 258.334279][T10827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.334297][T10827] RSP: 002b:00007efd0621e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.334320][T10827] RAX: ffffffffffffffda RBX: 00007efd055b6080 RCX: 00007efd0538e969 [ 258.334336][T10827] RDX: 0000200000000400 RSI: 000000000000890b RDI: 0000000000000003 [ 258.334350][T10827] RBP: 00007efd05410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 258.334364][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.334377][T10827] R13: 0000000000000000 R14: 00007efd055b6080 R15: 00007ffff2df9bc8 [ 258.334402][T10827] [ 258.335729][T10827] Kernel Offset: disabled