last executing test programs: 1m25.242136707s ago: executing program 3 (id=2543): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x3e, 0x80000001, 0x64, @local, @mcast1, 0x1, 0x20, 0x7, 0xe}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/15, 0xf, 0x0, &(0x7f00000002c0)=""/154, 0x9a}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x8, 0x68, &(0x7f00000000c0)=""/104, 0x40e00, 0xa, '\x00', r1, @fallback=0xb, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xd, 0x0, 0x80000000}, 0x10, r4, 0xffffffffffffffff, 0x9, &(0x7f0000000640)=[r5, r6, 0xffffffffffffffff, r7, r8, r9, r0, r10], &(0x7f0000000680)=[{0x1, 0x3, 0xe, 0x3}, {0x1, 0x5, 0xd, 0x2}, {0x4, 0x5, 0x1, 0x6}, {0x3, 0x5, 0xf, 0xc}, {0x0, 0x4, 0x9, 0x8}, {0x2, 0x3, 0xe}, {0x1, 0x4, 0xb, 0xa}, {0x5, 0x3, 0xb, 0x3}, {0x1, 0x4, 0x3, 0xc}], 0x10, 0x101, @void, @value}, 0x94) setsockopt(r0, 0x10d, 0xf, &(0x7f0000000080)="02", 0x1) listen(r0, 0x0) 1m24.827729339s ago: executing program 3 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)="23e38d4bf5580746c8d9796900ad4be49ed89db0825e3d641597b86437bc2f9a16e59fa0927b51e24d25446219dd883dbac6fd5374f4b86323bbb5ca6d3bb6c24374f30bd4e6f0148861a82505365489cd4e2809929a547aee69dd6e7a31dd47e254df2e63680fb4a87e14befc9eb0149b3c3b370c91fc1301af168920763e191fad7eb4a4568d71a4b5bb2b260d3d06481f360cae1b3bc14fc2a0a60e33126a557be1ef1445f86bdcc1fab17af900bebac80560ee905d", &(0x7f0000000180)=""/128}, 0x20) 1m15.009122412s ago: executing program 3 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)="23e38d4bf5580746c8d9796900ad4be49ed89db0825e3d641597b86437bc2f9a16e59fa0927b51e24d25446219dd883dbac6fd5374f4b86323bbb5ca6d3bb6c24374f30bd4e6f0148861a82505365489cd4e2809929a547aee69dd6e7a31dd47e254df2e63680fb4a87e14befc9eb0149b3c3b370c91fc1301af168920763e191fad7eb4a4568d71a4b5bb2b260d3d06481f360cae1b3bc14fc2a0a60e33126a557be1ef1445f86bdcc1fab17af900bebac80560ee905d", &(0x7f0000000180)=""/128}, 0x20) 1m6.310733824s ago: executing program 3 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)="23e38d4bf5580746c8d9796900ad4be49ed89db0825e3d641597b86437bc2f9a16e59fa0927b51e24d25446219dd883dbac6fd5374f4b86323bbb5ca6d3bb6c24374f30bd4e6f0148861a82505365489cd4e2809929a547aee69dd6e7a31dd47e254df2e63680fb4a87e14befc9eb0149b3c3b370c91fc1301af168920763e191fad7eb4a4568d71a4b5bb2b260d3d06481f360cae1b3bc14fc2a0a60e33126a557be1ef1445f86bdcc1fab17af900bebac80560ee905d", &(0x7f0000000180)=""/128}, 0x20) 56.131697268s ago: executing program 3 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)="23e38d4bf5580746c8d9796900ad4be49ed89db0825e3d641597b86437bc2f9a16e59fa0927b51e24d25446219dd883dbac6fd5374f4b86323bbb5ca6d3bb6c24374f30bd4e6f0148861a82505365489cd4e2809929a547aee69dd6e7a31dd47e254df2e63680fb4a87e14befc9eb0149b3c3b370c91fc1301af168920763e191fad7eb4a4568d71a4b5bb2b260d3d06481f360cae1b3bc14fc2a0a60e33126a557be1ef1445f86bdcc1fab17af900bebac80560ee905d", &(0x7f0000000180)=""/128}, 0x20) 46.343088161s ago: executing program 3 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x5}}}}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f00000002c0)="23e38d4bf5580746c8d9796900ad4be49ed89db0825e3d641597b86437bc2f9a16e59fa0927b51e24d25446219dd883dbac6fd5374f4b86323bbb5ca6d3bb6c24374f30bd4e6f0148861a82505365489cd4e2809929a547aee69dd6e7a31dd47e254df2e63680fb4a87e14befc9eb0149b3c3b370c91fc1301af168920763e191fad7eb4a4568d71a4b5bb2b260d3d06481f360cae1b3bc14fc2a0a60e33126a557be1ef1445f86bdcc1fab17af900bebac80560ee905d", &(0x7f0000000180)=""/128}, 0x20) 2.360602095s ago: executing program 0 (id=3718): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000007a00000008000300", @ANYRES32=r6, @ANYBLOB="dff513ad705237d99481e26a7b7435eebf89c80c90aaba40253fe649db7380a840bd432c7125260f614562fa4c62cd78706c199ea5adea309710829205cfac1d1fb3eb203cb4db6eb03b8ed2ca188f89163d49e8107b626c0d5cc240a117b7d353f545b29c605a8230b780f78b9ff4bf0e105dd081825b198d298bc0b8705dd2"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x8}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044080}, 0x48010) 2.220593426s ago: executing program 0 (id=3721): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=[{0x18, 0x84, 0x0, 'b'}, {0x10, 0x84, 0x8}], 0x28}, 0x41) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 2.082056798s ago: executing program 0 (id=3722): syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450c003c0000000000019078ac1414bbac1414aa040090780000000048bc00010068fff5023300060264010102860a00000000060202020000"], 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) syz_emit_ethernet(0x62, &(0x7f0000000200)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r3 = socket(0x27, 0x80000, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r4 = epoll_create1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r7) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000000000000a00000c0002006e6c38213231310000"], 0x20}}, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x88, @empty, 0x9}, 0x1c) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000fc0)="a7deb7fe77cd0eccc55dc35640961cc70508a09d152b2dc172963e77f0d3565361b4c6dc7df86a7f8d6c7623328424f6775b71a276fc36355751178e49a604b4bf6e047a15b4f9cc56838ccaf5a034f72a636b2892071a3de6e68aff5730cdf0bd1fbd39fadbfba44222fe0af519bb866bae24227cb0adc90824c93ffec241ce1517b23540d55739ef3bdae46d31ab04f9f6d9a3bbd6258aee94b2d369658c4aa00461bbc85a2b2e53efb95acd751ca5bbedcfd4f70e1cede1fac32ffcb7d9a08d6e8ed52f80f15589607aa4aca088b583b3e362147d93a93ee6a2924c22b3836eb2240270ec426caec43fe00aa087411499416eb9e2b9d3b1e64cb17d85dcd9f932ef8b0dd81b83683920a3b9917c8dda4fdaeb028ec8c56688d4232e06d166cc6c01f58f3bb6af25060949f50a263e0011408e435f55870afd6b444db942e7183e7e1c3dae5d5c4fc08c9d9dc2957c4635ead81ec0c762cc477fdde5038a52348d106e10ed9da3dcb988051fdd267f55c4ec0681734119882a7e72cbc80d9daa31830620449be84337920c975df17fdf424cf1cd8e8994e28b41daac575c4ecfc3f71198856e3ee85d76299e9a71d27d83c77f6299d7ccaf766c2479965d1fc23a7ca76358b4fff2625bd48753fc75c631e50a028343b852216580275b4b24dbec133fe03e0c44614126fcd04554473755638e4b4476452366a77ec7c607ade29a87a8fc09a67fc15970050773b079e50d32ff99026142f6b68c4771e7dd13b65fa95563524501fb58608bcb77c6e40d73b23c1c7de590e4bc517927c6ec67b959b5d7bf92cdc3c00e131cad32c1d3086af42562af76d7f48ea2821da88d3c5bfd3462a52d8d8dbf909ebf7301cb8f5bd52a259a3dae103a1b3078d9753087331ba169ffecf3cf85ff4db1f6f0bf84f91bd3f902577af3395ac5dbb39b12b0eee3bc62a5c75bdf186e56377ae04f87b23aeb8a19b3c35524735dce5a6c8a2ff23abcc25a5e3d19efae81623e341cc8cde75cf9581022bc23bba25a97c821128c786626e059bc33f32c06d2b2d35f441bb490cf1505c9fad913148f615c8ff54b99112be97673c934dcc175f3e46cc39bb26f7fb618f7887984886cbce1143de774e361808b58eba3715a38e8f99c60c699c2bdd2f7fb84e89debadae7efb3597327622295fe99455239d5b1aae070100fac86fb979657eaa0cc090a28a0bba06f8f601fe7d32de1015325b139a35688b35e936f06ef2f41694b3ccc6456897fc5ccaba6150ecd4164464268300b4319974aae4c85574feccf1449a6b39d7d8c3773811a860b3cab3c6f7639e481858e6d9bbdb226d292727974c3b3b04328314c2a8fb77b7569f0ead797cab81ebe0f4df413e369c77c6446e214d2b4cd2c7fa50ed7d3ef4f866f3b5c739b789480054d96a33b569ee9ebf3507b22a0e222f0813c629548443b258503db229d22f0d78131874c4c143223fa1013a0c51032ffd185ad2d76b17e9ebd45910bfb856da6ecd7ee5e5c343aa0d08f28294331d784ddad9a2fcde3c5dc50e99bbf203c6338afac1c1679fa40cfafda26522215cea9b88a3c47960f826d81a11c7045203f0c739f890045fc029949d5da343f0adebc7358b4c88366fee4c77207f438c29750aaf99e73746e1d19167be8bed6f676d8a4f4b6a769619340cdf0ef1cd2c0de042b79d9ac01e37a7585649150b2b8573551a3b6108b0fbe9b8c556bf3c06948e593fe8423926c791ba3f2653f2dc091ffb9549412b296bfdc5921f183debd0cce3ce4af0d4b8e732c0b9907bd4c93a37e3103b10fb1048060d156c82927a95d469f39ddfdc17da6826b51e971fb402214835d673d202db33d0c103406f291ad0165a12b2e3fa273aa48d2ff1d9e0cae353d4f45f3fa1f737d713dba455f478392cdda9efa7c5d91570da9dfb1782f811cc9c25aa38da68d8e8bc7396498fe5f79c0a0759dc70e871ab6187cea91990eb64aa9a781b5c4b639beed5459ce05174858af25d4484ba578c3824cefd3fc1c1a880d2c24620da37f52ec3d83af570686853bf05e3dc15c340cd70b07cd9e714d839b99b18f3fd48bd8ab15daf419311a93e502ccffba4117d6c911c05a49d90ea23f9499326fbded61f66a953a60da293a67911969f2837ef0a2d8a5114c393441cdff25187829bf9b81c2ec3ec2220109feb5e7d24386f9d5951a786c5feaa9712ef159633b7e9159f32ca180a94f6018a730c104ac81fa1f10e2f8c42f0152104d750a6dc601bf06cc6e67a22e11ebcbe08a9c82e40b66cdec505b27723804cf306fe74eb783166ae8cc7ce468f7025e510e96c7cfda879eaf67fe74cbee310f6dddfc5f459d34605714686fff4ffb9e390803c5f07586b8d706a79ba589e4f5f2cef3c80e1806626f316d2c4724cbb69423962ea2dd5359793e6fa96df0cf10b173865db02eddd5195750380c9ae4dd0c9bdfbd81d92e51a2ef54e5c2c5b46348bd9623fe9f1889eebd5a82f1aa740830a319075f78c4694aa5418bb1498f1de10efa8b0d33517fdfbfab75ff4064be1b6a011882fdbf143cd275a4960773a4c00f40e790df135f3198dad1b5357e98055293c5ec472283bf324a62129908b4acb9e367c478eb1c0094b1a5c0ed4e36bf4ac098e0e21d480e79bb0b459c52ff8ce04ba10354eccd960587f484b8d74e9d2e3164e549ee78445ac7bd068d8a5fb59e2ec47afcd697d2a66a9011dd53e22a9c0daed2efe6175f64b2751e347d4ae42d0213396de6b4731c65ef2f4857cf94ed4b51596525a04210b98cad63fe8e1137a14cac31692a82ddc75df8e7b17f865f4a84e4dae4e64203e8e946c2e59e849e41a463cb880bb60cad59fd1b2e53991cf5d1d977529ac6ce9156af0c228124651516bacedba0a6ce44989237cecb1e3f3ccbd73130288ae78d39e74cd3f047dcf930ed0ed66a3a17d68ed5a09b68a78d0efb28a8b5dc7101e324aac3e7be3c9e94f373c9a918fe447cbb4c4bd36045c623e5eb33698de4b5b60ddf052f0c35d45348c2a08d9f1afab88d2d46a641a564c28f380d3a81d80e71e7ef2e39f64ff6916cd37693e194e5eb60fc66a621908692cb56750bf77adb6a89a163ed91573509c3a081e6a275c706d0870a006dd580bff62ea03bc314ce43d8272407883f7c3c02d47fc00e7cbef52283bfb24f8ca7ff711733c008828152934c39e72f4d82ae9022294b4c0aba63e82932612ea688543219ea846f126da852d3e20111229ce503e9dfd9b1dc33fad87b6ab2c6a4ba83b7f41e1854df0677b2895158704e949cfceab516597fdb1f89d4dc19e08c279a8b1a1b6079498efda9548a13d4163db0fd8a31329489db84d4df2ecc185145a5e47c3822f3ce3fd02df4db69b47f404121194cb3494d902bb55e33c34a7636ece63681b4ca71909f4e84a0eb6650f64c536e5b5c7c1ab2d0272d5db63f58d3bc7db3f60a5313df57fe0a052b42db83fe574431911c9c3c713b76efaaacec27cdeab5bdd9f52c30d25c6ce9f98d5e1131c34b0b6dc1d8acc2c890fe72a4b660e1114cb2e81469346bfbb01e1f77edbb7c7a6dfdcba2aefd117470901c01bb5b21717008309aa0bd3f821ca68d455bb8ab9daff0aef77b885cc79b2ba1a60e6dee3e691f801bc285c0983c69f8c3fe55f73fe95d38ab32a664609a4ad0decf892971d7df9b685d68b4664cca6a9e7ecddbfe4692272675f6d8fab482edbce11c1f8a64dcdc09631b2233d101afe08d766c50b347e8c9b212c86265c39677f3ac0c286249653e20caca02f232240b176f77d9f51cebfed2581f74ff101992f35fe1750c1427cd7dfdd78aeb050bf2ddedc720476d1f08a7909aa449ed6561190f69e99abdcf85d2424a5040a5fbd0713f60908b435cf4ffd4be0f93032baee2109079c0758d35d04a84a1e6caf4b29b47ddc497d0a47d0a44a56862563fbffe7086c2ef79e5467e1976c2d86e217336b51ec20366bab661b78dc68c1d0452c60baeca3debc3c3c5cf6073fba2a3d1223a60c2be391dfccac7b85457feb9757bfdc71e63b955cb2c8549b0aa716a1e617e194b9b131ba622c140eda8ade91116d30fe5e8caf149842e59bcdcc5a40049c620096a4e9ea83d5df39d9e93c8449b012e506edbacb7d029c551c3be33d50c80a8f6ed78a2e5094054aedf0c12b032a1ea91e55586358ddff173ff02e43fd0a45d6bb63eb8b19902d2b6a9b72d6d4873d233686a50dd3877ce8f8fa3a1d4b16a2073264df71d15fe07a89403e062176e25a712400dde858f2332b08e797c953e740ec52ce1a7e8a071a1ffad0a4d9657c581baa233c85c6242bf6d8da91b33ecd7db0470968182ff54fda2730b0d9b04afd48fed6be6e73403faa0859a5263f7dee9d5abbd9c608887f1726e475a32035bad85a65d873136c3686267669730f878350c3f6c04b84df9ba40b683256982ef9953cbbdcc5352435d8425f344c9c260bfe697c27cc1d0e5e4d88e7bb27e28048918ea5a613e0df620078767c69a924117ada776df6e449a5f9ca49d036e260270d678e1004dcda6a16949aa917e0ea031341c8c0c3c56cab606eccfc54bf02eb24882481bcccb36b3c84997aad3a4d4858b413412f000ea3443261b9580cd9282cc8b8c17d7e000f9dac81f07d19f481ab40e3ee026a4f42242ca216cdc86a37012ecfa5fa5c03b6cb70bafd83b5d780cfed9aadb58e7068c9cd2feb21aadc66288c3f668c3cd4f95939e538c4cfb953b27dcd25bcb9543a70dcc348c730471af5f62d18de6f53a7ecc6710d2a21fc7e38e2a2357cbd6af25ce92175517c7bb57aef185ea1e2f00d2187229c9ea8854f3001e821f73e118df7a9878b950689caeabba5b884c2254d1878c5f9deceefac2c226e72528e6524e2ec10ce3c461b0a4d10362a364a7f534d106b30e7187719d93f22f03c18eab4f5f426ac1648df498fc3556002a8603a78baaed099b6bf988f0e73a7569c068c557908e32bbf20543512809144cb562bde286fb282639b4700b7f7085683c8ee005ed7851b9bc213d703a33bcb02818f33526fa020129e269becbae93527886d513d468e84c0d90e0774fb6e353177696203eb7b02c3b20ecb08fd11c66db65e3a974007afa6292b77b25bb57eaeec7f4357748c9bae70336cc411aca3e58973a2bc6b4a72a67918295c1e27fba1e960cb377ad5b41ef92bfd8457308d9631cb355237fb4ce8a6ce4e07bf5695387dbb95514eadcb12f52624a5946cc00d423c73fcee69191489c70691fae285bec5eb4a585584ddc3c96bce43d081ae16e6235fb543c2c816120d56941be725614ec3f6542873483d53deb30bea217e1006aec25f75d6b31aff502735b4868736ff0605cbf5728d4fd19a2eac7f76768e714ff528f8a695e28aa8af8ec7fbe530edde839a08ef65069ed5549fc4660138ade1fdff4fc45f22fec3aebf6e76b5e893c4f1eab8f3c8d20931c21ab62a6e44d4bc9bc4bd4387dbecdfd783ca7b8fc67c540abc88bd20a428d46b5ba15e20cef111abe56d415506e671623c690b09a69b55e35cb9ee004a264805c309d3b66c0ab22efb229c7f918522b83ceae46d62908a051b8afccb063b584c1b2d7b10e973ed98599916dd132ceb1d52be72db14b42e03e50a188a1593c2a9a8c7779fefb022d56bcea7005979445be6a171649f2307aa8152e16b4e66430e3eb6132537ef466c7ee0bd79d1073d9958c36fe3a35e1f27885854a4a2c62c7295a70615ec5ae1f3159a32b8a8591eaa64d7b6c1f5e2be606158", 0x1000) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) sendmsg$NFT_BATCH(r9, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x2) r10 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r10, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000840)="696f1bf7", 0x4}], 0x1}, 0x48050) 1.645702642s ago: executing program 1 (id=3729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000ffe0000000"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="7a419be16dc2ef70da91b78b22", &(0x7f0000000100)=@udp=r6}, 0x20) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYBLOB="b9e94971417a169a1903cb94f671c362dec7611611c3c4ee90f1001a1f5b01b18413866175f408227a6b588de71ea37b950c726cb0bee5c0708ae22107ff5f6ded7b51a8f33e26f7c42e1ebc56de6ae00139bc3009015f393d4a413a2119dfed6fe5e42e0f4780284036f4d8e20d5b43fb26a7c42dd4024a4b302da9417c3d9bae098252b97db2ce3f3d10fff2dbc16844c23fb42205ebf53715ba891f48ea7c36e562495141c97651", @ANYRES8=r3, @ANYRESDEC=r8], 0x50}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES16=r1, @ANYRES64], 0x124}}, 0xc000) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close(r8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x11}], 0x1, 0x0, 0x168}}], 0x1, 0x40000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x2000000, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=0x2) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1.51458014s ago: executing program 4 (id=3733): r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) listen(r1, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x2, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x2f, @multicast2, 0x6, 0x4, 'wlc\x00', 0xd, 0x0, 0x18}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x32, 0x0, 0x0, 0x6b, @local, @mcast2, 0x0, 0x8000, 0x9, 0x5}}) 1.143088587s ago: executing program 0 (id=3738): syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x0, 0x2f, 0x1, 0x68, 0xfff5, 0x2, 0x33, 0x6, @private=0xa010102, @rand_addr=0x64010102, {[@ssrr={0x89, 0x3, 0x51}]}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback={0xe0ffffffffffffff}}, 0x1c) 825.777943ms ago: executing program 2 (id=3743): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xffffff22, 0x2, [@TCA_HHF_QUANTUM={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x40}}, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r5, 0x107, 0x16, &(0x7f00000002c0)="06abb7a27d940033b56c9a7ebe07f88c336006ac2443b967b827584ca20ab41fd98cd3387a97850571a0b743770639d0835eddbbdd40e5b805269deab27e76c15ed3174b9b2d88c1b9dc4fbe8bf7766d5b4d9cc5153d22642646d4947c15bc53e10e72fc6ec5877e0fb022f1df0d3b381a7b6325bde106a5ffc365d84a3adfcd556ea6a7ad1ec36b048d2b351cb00a1ec145a6a98966aa85c88eadad73479fc59ea2348c88e49ca46289879f28a4f02a6b9a2945a3c9b5e481ac803f2cbad5ca747fb39a01f1508c96f3f35fa0583ad7271926", 0xd3) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendto$x25(r6, &(0x7f0000000080)="519c723c7d4187f10736371ac37700ff36275833bf6471a9092177b73fccc1d4ec19010c5a6723b0c4c3bfb961b02e8a831f3141a3dbae", 0x37, 0x801, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 724.061776ms ago: executing program 1 (id=3744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) 672.593344ms ago: executing program 2 (id=3745): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000380000070000a100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0x4e, r2, 0x0, 0x1c000000007400}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000380000070000a100"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0x4e, r2, 0x0, 0x1c000000007400}, 0x38) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x41) (async) 607.466333ms ago: executing program 1 (id=3746): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x3, 0x9) (rerun: 64) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) (async) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1600000015000100000000000000000002"], 0x20}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0x10, 0xfffffffe, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40]}}]}}]}, 0x8c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000), 0x10) (async) bind$can_raw(r8, &(0x7f0000000100), 0x10) (async) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000) (async) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r7) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @private}, &(0x7f0000000480)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f0000000880)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@dstopts={0x2b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, [{0x1, 0x10, "fabe16836ee74850bd96b79ec0105d516b6f4722e3aca0f8a8f1a13bec2e1d45ab8d5c91a8b77d7dbd0dbc39128efadcd37a308e91478a497b34f3d19621914c9c3e181cc532f40860996ae19ea7d8b1006623263ed9bc1852a7e30d4f2e130b83c560cf24a9f3a889d79f2a1f050e6b8456d26c8ec982c205abe64de63b3293fe"}, {0x1f, 0x6, "aeb6d661e6d00c5f73b6660bee93b0b390c1020b701755ea1ed93c5a5199c21ae0dd8210ec12cd06b031697cbd74e492"}, {0x2, 0x10, "579793462b6ac7ed86028d613ecac40a3b3c2b4d5fe7664eb3ae7c14bb3c6f68f05eab2378b02aa63ef1a14ae511e911538c3e25ad948892415bd583619253159578a6f3f43662ffdc0d62bba12c30dd67364329a9353fdae5252ddf87a698e923342c210ad8282507cae201d07acdcb62fb4402ac8f480697e597df0e685bd24d86"}, {0x2, 0x1c7, "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"}]}}}}}, 0xfce) 587.556622ms ago: executing program 4 (id=3747): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) close(r1) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040), 0x8) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffffff9d0000004500003000000000006790e0777800000000ffffffff2100907812000228250000240000000000000000e0000002e00000e08e580123122300e87f881b5f633924c7e832f166777e385c57c62c9ae46a2db6755c344cec1c675cfefe664c6738b632a86ab56de376af61ecedb9a773a5c56e0231727f945c5f43a3c82b61cf8c5ec38ba4d69b260acb20d118ddac1a01b14d1c7669e9c3bc860b55ff"], 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a010102080016"], 0x34}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010003b15000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028005001600020000000500170000000000080018000000000004001200"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 504.234021ms ago: executing program 2 (id=3748): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) close(r0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc3}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) listen(r2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'freezer'}, {0x2b, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'memory'}, {0x2b, 'cpuacct'}, {0x2b, 'rdma'}, {0x2b, 'cpu'}]}, 0x33) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000028c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002900)={0x30, r7, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xda}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500150001000000"], 0x3c}}, 0x0) 498.220525ms ago: executing program 1 (id=3749): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="000000000700f6ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x23, 0x1, 0xffff, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1401000031001fffffff00000000000003"], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x0, 0x0, 0x0, 0x0, {}, 0x8}}, @NL80211_ATTR_BSS_SELECT={0x4}]}, 0x4c}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r6}, 0x38) r10 = socket(0x10, 0x2, 0xfffffffc) r11 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x18, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9, 0x40000000000005, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@empty, 0xfffffffe, 0x1}}, 0xe8) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) clock_gettime(0xfffffffffffffffd, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048800, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xf, "1291371129fcbea6ef261f1096a374"}, &(0x7f0000000240)=0x17) 459.79732ms ago: executing program 4 (id=3750): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = socket(0x10, 0x0, 0x0) clock_gettime(0xfffffffffffffffd, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048800, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xf, "1291371129fcbea6ef261f1096a374"}, &(0x7f0000000240)=0x17) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 435.902312ms ago: executing program 2 (id=3751): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520001000000d3c39f59048a3c2b0000000000001bfff200"], 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 344.296266ms ago: executing program 4 (id=3752): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x25}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x3e, 0x6, 0x0, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"95dcab9658d0c47938fb822384f87a28c3d55cdf0dd530b6af2d872c6b886d28a986bb675d5892bb905f"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x128, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdb7}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x128}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@bridge_dellink={0x118, 0x11, 0x400, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x8000}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'veth1\x00'}, {0x14, 0x35, 'ip6tnl0\x00'}]}, @IFLA_WEIGHT={0x8, 0xf, 0x6}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'macvlan0\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'veth0_to_batadv\x00'}, {0x14, 0x35, 'macvlan0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}]}, @IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x46e8}]}, 0x118}}, 0x0) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000000180)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r11, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r11], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010003904fcffffff0000000000000000", @ANYRES32=r11, @ANYBLOB="00000000422200042c001280080001006772650020000280"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febdc281a37df6f12dd01001800000000000000202000082000000003000010000000000000000b000000000000000d3512c78f90d3959cfccf"], 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 311.285585ms ago: executing program 2 (id=3753): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a10000002000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c454059b61aa781a00d400000000e2ff050000000000005c844508ed611342"], 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r3, 0xffffe000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100005800c000380080003"], 0x34}}, 0x0) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r9, 0x0) (async) listen(r9, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="17000000", @ANYRES16=r5, @ANYBLOB="100025bd7000fddbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x33a0}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c851}, 0x1000) (async) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000340)=""/129, &(0x7f0000000400)=0x81) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff000, @void, @value}, 0x94) 295.908933ms ago: executing program 1 (id=3754): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="be", 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 176.648229ms ago: executing program 0 (id=3755): r0 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010002", 0x7) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) 176.234694ms ago: executing program 4 (id=3756): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f92c24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x48000000}, 0x0) 158.517228ms ago: executing program 1 (id=3757): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 146.372203ms ago: executing program 2 (id=3758): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f00000003c0)=""/104, 0x68}], 0x7, &(0x7f00000004c0)}, 0xdc}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f0000000740)=""/8, 0x8}], 0x4, &(0x7f00000007c0)=""/125, 0x7d}, 0x6}, {{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/177, 0xb1}, {&(0x7f0000000980)=""/191, 0xbf}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/35, 0x23}], 0x4}, 0x2}, {{&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/48, 0x30}, {&(0x7f0000000bc0)=""/94, 0x5e}, {&(0x7f0000000c40)=""/82, 0x52}], 0x3, &(0x7f0000000d00)=""/19, 0x13}, 0x7ff}], 0x4, 0x62, &(0x7f0000000e40)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e80)={'gretap0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000ec0)={0x0, 0x3ff80000}, &(0x7f0000000f00)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000f40)={r3, @in6={{0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa000000}}, 0x0, 0x6, 0x4, 0x4, 0x86, 0x40, 0x4}, 0x9c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001000)={r3, 0xea, "7e89429a6cce89b8c721fd959091789f44a7447371f2b0966b7ef48f36eedcb163d85658c972911d3bb752f80ad7658fc35ee3a2a890d25d7ab2e91388bea14c614b90cf58dba37f58d74bb4561162b281e09ce924c5746631219f37024fc8f1372e8448477e809c94bf631f0efc4c6280dd14f77d9dcfb52bd26166ab11573a0e9b60faae198bf9de4fe04a4800bd7415f768e0b455ffa51f135d5d2dce0e9a8338399f17bf1b8109eccccc459310c11f0d13e999e7dacd082bb6e51f9ea0da726ab1c2b29cf680be9f2ae22e0b2314612db3d9971fcd22785039c142af8fd67635374d1561982a230e"}, &(0x7f0000001100)=0xf2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfff, 0x25}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x6, 0x7, 0x4, 0x9, 0x800, 0x3, 0x6, 0x0]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x891}, 0x8db9cc7000cfa7af) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001780)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001740)={&(0x7f0000001340)={0x3cc, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2e5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa69}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e8996abf9b511bbc76731ce7fbbdf92dd96b1b21bb33"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "0a79d6a8e7c03df482a86e8fbd3348405b947c3c7474253190a378ebb707"}}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @private2, 0xe8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x8008000}, 0x20000000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001800), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8d4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x48840) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001940)={r5, 0x4, 0x7, [0x0, 0xf, 0xe, 0x10, 0x3, 0x1, 0x2]}, &(0x7f0000001980)=0x16) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000019c0)={r9, 0x7}, 0x8) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001a00), 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@ibss={0x6, 0x2, 0x8}, @peer_mgmt={0x75, 0x4, {0x1, 0x7, @void, @void, @void}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48090) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001bc0)={r3, 0xffffffff, 0x8, 0xa6}, 0x10) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{&(0x7f0000001c00)={0xa, 0x4e21, 0x7f, @mcast2}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000001c40)="7f225fc8bea86fa4237cb90c0c39824aea2093fd5682d3b2e40ba070a491fd87bcadfc32d0a7664b112f45b3ccf55b341da053bf50c4fdc3b17672c3e822386c5e9b54f830158b67319216492f25b486ed46fba493329ad07e0de946f8e1175b95190ecf430951af3190c31be9efc97cdf7fd20736d8766060d98fe2d7f0e66b6d2b499717b5c31f36069c988f4250a4efadb08c1300daeec5f9e118528731a4e4b9d2f96def02fee4c267bc19", 0xad}, {&(0x7f0000001d00)="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", 0xfc}, {&(0x7f0000001e00)="477cfc1282edc69db1ffb5835ea441e79b11fff625bbfcbd1847b370fd6a961a7628ef6194cb2ae5bb41416d978b3a6f63b41271adc59a48183b3da38aeb81d32f9d0504bd0729554d82d4302f89bbcaabb848d6ba5b8a8b0f2448ae035913baabafe50db2f4e0544fa7b0d26de2432ef2e1d4bda0ca9bebe278c1d9ca84c1c62a", 0x81}, {&(0x7f0000001ec0)="20c4e6238b1aab87", 0x8}, {&(0x7f0000001f00)="f2922cc745b16f4c21f6b6f307fe02c23304a609667cc6427a12d019d28f336919460588f585a5f1e604571afc430559085f3ef5fd70b54c7ad546941ec972771fe65d0c7b9d9fde5138a2310970b2fd6d497f29e41e4ae355d1e2c1cd86a50ea01283647ae29ee16762107d7f33c2da0d8e82bfafc586937b7968ba3ab21fdbdd16608acc558b3f76ce42c3d06c4d6ebdc71be4072dfd325d1df2d79648ee510288a17286784a8f491cc1dedafc", 0xae}, {&(0x7f0000001fc0)="5e10649f85ada0890e111c55f5111c25b7e870fe72ac09283a10e9914adae8b7e647a77b3e072deea15e18cc1dfe3cd376793dcb500fa238cdb3ef35df0410c2f75167b70d42e8a5f81c9bca4c9a104ffa80fb50b1727b7c7de8acf5cea450858c801f608a8db3090e70869585284a1a83b4e08f9747ae5da45d0c6420ba520db176a533fa49349489fd6ccb097cc45960ed5b5496a5e648a9408f141c3a4e3c8ca75a9fe9fc65338ea4bbbdabf7afc0752e422be5e05e59285c87d6fff36cf1c93f4961fd247fbcc852484956f137f86f8e9cf2288d77cf6f278d9bb44a", 0xde}, {&(0x7f00000020c0)="5f2d82435bb2b26225e68073a5794d94ece96aedbf1c9eac28905a6b7ca238120b54fcdc787b0db052c67a00837a17a36942b79830a9fb5a02cb5b19769263a2b4fbf2ec3949bb28ef9348358bc284c9e53ecc373bc5463554cf1637b418b2fc65dad2967af55e7a0e2086c11a7373760ac2147ca78b00e136bf26b5cd6d3fed0085b857dac8c9ff5218dc7f8a6efb3ed457dabc1419c22e561e8aee98e2f6ca68c29283779cfe05542f794763e844ee863445fd9535170c4bd73750ca43ef2896f67b187cc8716255c83535ca2ce06854ed0b0f351d5be982abbac06e2ab3667f94bef1285a7129422e160a69", 0xed}, {&(0x7f00000021c0)="5134ce06ef0a8414e24f8c4eb0f99737658c0ca774084d160446560d2c6a30e9f9dbcb2221acea54942f56327013c2ccbdd007b4d015ed816df617ff791cb5bc7786369bbddfde1e2ed2fa3dda9109996218073e2cac2264143c7e7af453a9c42c80507e2baf18fdebc0ff96a44989a0aded6bca6999e2380dea170489b6a1546fec531c25c4112058e91c609df8d284dba947c11c319a12fe8cb538d2f325285dfff764610202d9e9e363b767425443e64f96e2e903ba2046233c882b6b596f083312a226b069b1f48a0f7d5826df95563d4187e63b2e33a81524d1601a3d7023e6a7ee94f9465a0f4b97da8650b86188b47798c23f", 0xf6}, {&(0x7f00000022c0)="1830e20b89ae68470e2b069f85fecf36a74ed05c76be299b842f183b83948281ae5909130a5a8492b923b18ebdb28ea51862905c69f7d84399c4c788543b8e1052da4de23188f10ee8b5e8132a3d4a0844f60a6b6ae5f405d8835b1b7aa730667729eb74d3009836544095b6fc1c4af1", 0x70}], 0x9, &(0x7f0000002400)}}], 0x1, 0x85) read(r4, &(0x7f0000002480)=""/167, 0xa7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002540)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000002580), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000025c0)={0xa, 0x4e24, 0x401, @empty, 0x1}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000002600)=""/120, &(0x7f0000002680)=0x78) recvfrom(r2, &(0x7f00000026c0)=""/243, 0xf3, 0x0, &(0x7f00000027c0)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000002840)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}) sendmsg$802154_raw(r1, &(0x7f0000002a00)={&(0x7f0000002880)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f00000029c0)={&(0x7f00000028c0)="7a0ed2a07a00200756da4e2cbc3cd14bc54ea8fae4e33ebd39ca13487895980785cddade42855480781f4e5f171e613629d3df7265a08e8a80f2c6dae50b0a662442fcb59e0312209048be1d33f4693be5bdd1e5581a32a76d3a9ea4b8d3be9b4691ccab41d589b301e066cfaf5c7d4032df0786ab7651a337e010c431e44ffe54cfd16f248d7d9fd95dd39a7f74fac25974cf18e0c71a16b26cc8bc37038cb828ed7df06b896846f90761e4a74231d7ac9cf7f052a9a48361efdbe922c4517894a02cd71aadf91af0a8079ce664c8653ded419f84ba37e17bd6a332649dc674dd4f445a906ca5b4a6268332341e705c4a", 0xf1}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) 93.320973ms ago: executing program 4 (id=3759): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x80000000, @empty, 0x7}, 0x1c) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 0s ago: executing program 0 (id=3760): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff46ca9fbf7abae19cbb08004502005c00000000002f907800000000e0000001248081000000000010000800000086dd00090006080088be"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000500000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=r3], 0x34}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) kernel console output (not intermixed with test programs): 52][T12647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2168'. [ 194.702833][T12647] erspan0: entered promiscuous mode [ 194.726064][T12647] batadv_slave_1: entered promiscuous mode [ 194.728297][ T29] audit: type=1107 audit(1732162392.835:2): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 194.733388][T12653] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 194.848160][T12657] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 194.855316][T12645] bond7: (slave ip6gretap2): making interface the new active one [ 194.902623][T12645] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 195.079281][T12670] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 195.117491][T12676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.185979][T12682] netlink: 'syz.1.2177': attribute type 4 has an invalid length. [ 195.208781][T12682] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2177'. [ 195.242546][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.250257][T12686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2179'. [ 195.529913][T12705] netlink: 'syz.1.2183': attribute type 32 has an invalid length. [ 195.541341][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 195.556786][T12705] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 195.660990][T12707] veth7: entered allmulticast mode [ 196.006285][T12723] sctp: [Deprecated]: syz.1.2189 (pid 12723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.006285][T12723] Use struct sctp_sack_info instead [ 196.249723][T12734] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 196.276287][T12734] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.292594][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.308335][T12734] netlink: 'syz.4.2192': attribute type 9 has an invalid length. [ 196.333283][T12734] netlink: 134688 bytes leftover after parsing attributes in process `syz.4.2192'. [ 196.428648][T12742] tipc: Enabling of bearer rejected, failed to enable media [ 196.458981][T12742] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2196'. [ 196.493194][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 196.947280][T12775] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 197.189204][T12799] sctp: [Deprecated]: syz.4.2212 (pid 12799) Use of int in maxseg socket option. [ 197.189204][T12799] Use struct sctp_assoc_value instead [ 197.214689][T12798] sctp: [Deprecated]: syz.4.2212 (pid 12798) Use of int in maxseg socket option. [ 197.214689][T12798] Use struct sctp_assoc_value instead [ 197.322588][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.355781][T12811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.654010][T12833] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 197.711700][T12839] netlink: 'syz.2.2224': attribute type 5 has an invalid length. [ 197.741726][T12843] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 197.757771][T12843] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 197.803908][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 198.363247][ C1] net_ratelimit: 1 callbacks suppressed [ 198.363265][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 198.498764][T12882] lo speed is unknown, defaulting to 1000 [ 198.514410][T12882] lo speed is unknown, defaulting to 1000 [ 198.695269][ T3497] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 198.816221][T12901] wlan1: mtu less than device minimum [ 199.049304][T12882] netlink: zone id is out of range [ 199.102393][T12918] validate_nla: 4 callbacks suppressed [ 199.117360][T12918] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 199.175689][T12919] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 199.192140][ T5889] lo speed is unknown, defaulting to 1000 [ 199.192164][T12921] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 199.210874][ T9] lo speed is unknown, defaulting to 1000 [ 199.260590][T12927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.275208][T12928] netlink: 'syz.1.2247': attribute type 4 has an invalid length. [ 199.402583][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.714746][T12940] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 199.728074][T12940] batman_adv: batadv0: Adding interface: wlan0 [ 199.741443][T12940] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.797624][T12944] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 199.822631][T12940] batman_adv: batadv0: Interface activated: wlan0 [ 199.828009][T12944] __nla_validate_parse: 22 callbacks suppressed [ 199.828026][T12944] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2252'. [ 200.020315][T12949] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2255'. [ 200.172337][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 200.200670][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 200.225388][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 200.248681][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 200.421660][T12971] ip6t_srh: unknown srh invflags A757 [ 200.442483][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.497488][T12977] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 200.505547][T12977] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.2265'. [ 200.516552][T12977] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 200.525714][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 200.770658][T12988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2268'. [ 200.853717][T12993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2271'. [ 201.377309][T13031] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 201.493120][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.488715][T13119] netlink: 'syz.3.2307': attribute type 1 has an invalid length. [ 202.504438][T13119] netlink: 'syz.3.2307': attribute type 1 has an invalid length. [ 202.522491][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.537136][T13121] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 202.651040][T13125] bond4: entered promiscuous mode [ 203.083206][ T81] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 203.371759][T13177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.562646][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.463225][ T11] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 204.519318][T13251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.604382][ T5848] Bluetooth: hci0: command tx timeout [ 204.612492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.886474][T13269] __nla_validate_parse: 15 callbacks suppressed [ 204.886494][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 204.927391][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 204.937555][T13269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2358'. [ 205.127729][T13278] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2361'. [ 205.461819][T13298] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.581223][T13304] validate_nla: 9 callbacks suppressed [ 205.581242][T13304] netlink: 'syz.3.2369': attribute type 8 has an invalid length. [ 205.628221][T13304] netlink: 193508 bytes leftover after parsing attributes in process `syz.3.2369'. [ 205.643061][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.692868][T13311] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 205.846118][T13321] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2375'. [ 205.850841][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2373'. [ 205.948763][T13327] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 205.962063][T13327] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 206.387426][T13345] sctp: [Deprecated]: syz.2.2381 (pid 13345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.387426][T13345] Use struct sctp_sack_info instead [ 206.596381][T13349] IPv6: sit2: Disabled Multicast RS [ 206.602196][T13349] sit2: entered allmulticast mode [ 206.674877][T13357] xt_ipcomp: unknown flags B [ 206.682627][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.835273][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 206.866115][T13364] netlink: 'syz.1.2387': attribute type 10 has an invalid length. [ 207.017979][T13370] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2390'. [ 207.047823][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 207.387487][T13384] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 207.401111][T13384] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 207.429415][T13384] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 207.625913][T13409] netlink: 'syz.1.2403': attribute type 3 has an invalid length. [ 207.722691][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.879311][T13429] dccp_v6_rcv: dropped packet with invalid checksum [ 207.988017][T13437] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 208.256793][T13455] xt_HMARK: spi-set and port-set can't be combined [ 208.258511][T13449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.390720][T13460] xt_limit: Overflow, try lower: 2147483649/128 [ 208.650312][T13478] netlink: 'syz.0.2428': attribute type 10 has an invalid length. [ 208.691501][T13478] netlink: 'syz.0.2428': attribute type 10 has an invalid length. [ 208.708952][T13479] SET target dimension over the limit! [ 208.762616][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.945160][ T53] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 209.148775][T13514] FAULT_INJECTION: forcing a failure. [ 209.148775][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 209.185842][T13514] CPU: 0 UID: 0 PID: 13514 Comm: syz.4.2442 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 209.196679][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 209.206762][T13514] Call Trace: [ 209.210064][T13514] [ 209.213017][T13514] dump_stack_lvl+0x241/0x360 [ 209.217754][T13514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.222990][T13514] ? __pfx__printk+0x10/0x10 [ 209.227605][T13514] ? fs_reclaim_acquire+0x93/0x130 [ 209.232722][T13514] ? __pfx___might_resched+0x10/0x10 [ 209.238010][T13514] ? dynamic_dname+0x141/0x1b0 [ 209.242794][T13514] should_fail_ex+0x3b0/0x4e0 [ 209.247494][T13514] ? tomoyo_encode+0x26f/0x540 [ 209.252270][T13514] should_failslab+0xac/0x100 [ 209.256951][T13514] ? tomoyo_encode+0x26f/0x540 [ 209.261742][T13514] __kmalloc_noprof+0xd8/0x400 [ 209.266511][T13514] tomoyo_encode+0x26f/0x540 [ 209.271104][T13514] ? __pfx_sockfs_dname+0x10/0x10 [ 209.276125][T13514] tomoyo_realpath_from_path+0x59e/0x5e0 [ 209.281766][T13514] tomoyo_path_number_perm+0x23a/0x880 [ 209.287228][T13514] ? tomoyo_path_number_perm+0x208/0x880 [ 209.292865][T13514] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.298878][T13514] ? __fget_files+0x29/0x470 [ 209.303470][T13514] ? __fget_files+0x3f3/0x470 [ 209.308151][T13514] security_file_ioctl+0xc6/0x2a0 [ 209.313176][T13514] __se_sys_ioctl+0x47/0x170 [ 209.317765][T13514] do_syscall_64+0xf3/0x230 [ 209.322267][T13514] ? clear_bhb_loop+0x35/0x90 [ 209.326944][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.332838][T13514] RIP: 0033:0x7fcb3ab7e819 [ 209.337250][T13514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.356851][T13514] RSP: 002b:00007fcb3ba2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.365266][T13514] RAX: ffffffffffffffda RBX: 00007fcb3ad35fa0 RCX: 00007fcb3ab7e819 [ 209.373239][T13514] RDX: 0000000020000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 209.381208][T13514] RBP: 00007fcb3ba2d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.389173][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.397140][T13514] R13: 0000000000000000 R14: 00007fcb3ad35fa0 R15: 00007ffd0de6b0f8 [ 209.405117][T13514] [ 209.411798][T13514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.466469][T13522] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 209.625869][T13530] IPv6: sit3: Disabled Multicast RS [ 209.802586][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.072361][T13560] macvtap0: entered promiscuous mode [ 210.074801][T13563] __nla_validate_parse: 18 callbacks suppressed [ 210.074819][T13563] netlink: 209812 bytes leftover after parsing attributes in process `syz.4.2460'. [ 210.083498][T13560] macvtap0: left promiscuous mode [ 210.106508][T13563] netlink: get zone limit has 8 unknown bytes [ 210.140183][T13566] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 210.172631][T13566] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 210.192029][T13566] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 210.205257][ T81] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 210.232794][T13566] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 210.252784][T13566] geneve2: entered promiscuous mode [ 210.266975][T13566] geneve2: entered allmulticast mode [ 210.276691][T13575] IPVS: length: 50 != 24 [ 210.284156][T13576] IPVS: length: 50 != 24 [ 210.297272][T13569] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 210.320979][T13570] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 210.366617][ T5922] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/1 [ 210.380436][ T5922] hid-generic 0005:0C45:1010.0003: probe with driver hid-generic failed with error -22 [ 210.390684][T13581] syz_tun: entered promiscuous mode [ 210.442729][ T5922] page_pool_release_retry() stalled pool shutdown: id 46, 1 inflight 60 sec [ 210.450805][T13581] syz_tun: left promiscuous mode [ 210.511166][T13589] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.519901][T13589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.527445][T13589] IPv6: NLM_F_CREATE should be set when creating new route [ 210.836881][T13612] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 210.852341][T13612] netlink: 9260 bytes leftover after parsing attributes in process `syz.1.2477'. [ 210.852495][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.866888][T13612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2477'. [ 210.880444][T13612] netlink: 'syz.1.2477': attribute type 2 has an invalid length. [ 210.897109][T13612] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 210.910236][T13615] openvswitch: netlink: Missing key (keys=40040, expected=2000) [ 211.123178][T13622] bond4: (slave ip6gretap1): Releasing active interface [ 211.152014][T13622] bond7: (slave ip6gretap2): Releasing active interface [ 211.180224][T13626] team0: Mode changed to "random" [ 211.293596][T13633] lo speed is unknown, defaulting to 1000 [ 211.300693][T13633] lo speed is unknown, defaulting to 1000 [ 211.327906][T13635] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2481'. [ 211.348672][T13635] openvswitch: netlink: Message has 8 unknown bytes. [ 211.429951][T13630] openvswitch: netlink: Message has 161 unknown bytes. [ 211.437201][T13630] openvswitch: netlink: Actions may not be safe on all matching packets [ 211.521878][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2483'. [ 211.542594][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2483'. [ 212.329924][T13678] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2496'. [ 212.493045][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2499'. [ 212.890815][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 213.099651][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 213.125316][T13736] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 213.201589][T13738] netlink: 'syz.1.2512': attribute type 3 has an invalid length. [ 213.231029][T13738] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 213.963577][ C1] net_ratelimit: 4 callbacks suppressed [ 213.963595][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.137814][T13794] bridge0: port 3(vlan4) entered blocking state [ 214.149157][T13794] bridge0: port 3(vlan4) entered disabled state [ 214.159773][T13794] vlan4: entered allmulticast mode [ 214.175353][T13794] vlan4: left allmulticast mode [ 214.209505][T13797] veth1_macvtap: left promiscuous mode [ 214.555080][T13824] netlink: 'syz.1.2540': attribute type 39 has an invalid length. [ 214.685428][ T53] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 214.938888][T13836] netlink: 'syz.0.2545': attribute type 10 has an invalid length. [ 215.012694][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.076729][T13850] xt_connbytes: Forcing CT accounting to be enabled [ 215.100191][T13850] --map-set only usable from mangle table [ 215.162920][ T5848] Bluetooth: hci0: command tx timeout [ 215.323280][ T186] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 215.358206][T13863] __nla_validate_parse: 10 callbacks suppressed [ 215.358224][T13863] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2552'. [ 215.430133][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.458647][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.657534][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.682629][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.880135][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.889958][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.898648][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.907081][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.914704][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.922128][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.956661][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.995577][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.042648][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 216.089977][T13875] lo speed is unknown, defaulting to 1000 [ 216.196126][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2560'. [ 216.197634][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.231919][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2560'. [ 216.252561][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.280814][T13875] lo speed is unknown, defaulting to 1000 [ 216.414811][T13900] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2563'. [ 216.582264][ T11] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 216.669554][ T11] gretap0 (unregistering): left promiscuous mode [ 216.708029][ T11] dvmrp0 (unregistering): left allmulticast mode [ 216.948112][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.964344][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.977452][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 216.998983][ T11] bond0 (unregistering): Released all slaves [ 217.012399][ T11] bond1 (unregistering): Released all slaves [ 217.084079][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.123728][ T11] bond2 (unregistering): Released all slaves [ 217.212813][ T11] bond3 (unregistering): Released all slaves [ 217.308517][ T11] bond4 (unregistering): Released all slaves [ 217.398446][ T11] bond5 (unregistering): Released all slaves [ 217.491621][ T11] bond6 (unregistering): Released all slaves [ 217.647071][T13916] FAULT_INJECTION: forcing a failure. [ 217.647071][T13916] name failslab, interval 1, probability 0, space 0, times 0 [ 217.660417][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.4.2568 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 217.671200][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.681278][T13916] Call Trace: [ 217.684575][T13916] [ 217.687528][T13916] dump_stack_lvl+0x241/0x360 [ 217.692234][T13916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.697456][T13916] ? __pfx__printk+0x10/0x10 [ 217.702073][T13916] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 217.708071][T13916] ? __pfx___might_resched+0x10/0x10 [ 217.713369][T13916] should_fail_ex+0x3b0/0x4e0 [ 217.718047][T13916] should_failslab+0xac/0x100 [ 217.722729][T13916] ? __alloc_skb+0x1c3/0x440 [ 217.727330][T13916] kmem_cache_alloc_node_noprof+0x71/0x320 [ 217.733236][T13916] __alloc_skb+0x1c3/0x440 [ 217.737659][T13916] ? __pfx___alloc_skb+0x10/0x10 [ 217.742602][T13916] ? netlink_autobind+0xd6/0x2f0 [ 217.747553][T13916] ? netlink_autobind+0x2b0/0x2f0 [ 217.752585][T13916] netlink_sendmsg+0x638/0xcb0 [ 217.757361][T13916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.762649][T13916] ? aa_sock_msg_perm+0x91/0x160 [ 217.767591][T13916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.772888][T13916] __sock_sendmsg+0x221/0x270 [ 217.777561][T13916] ____sys_sendmsg+0x52a/0x7e0 [ 217.782331][T13916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.787629][T13916] __sys_sendmsg+0x292/0x380 [ 217.792228][T13916] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.797352][T13916] ? __pfx_vfs_write+0x10/0x10 [ 217.802151][T13916] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.808491][T13916] ? do_syscall_64+0x100/0x230 [ 217.813265][T13916] ? do_syscall_64+0xb6/0x230 [ 217.817948][T13916] do_syscall_64+0xf3/0x230 [ 217.822457][T13916] ? clear_bhb_loop+0x35/0x90 [ 217.827140][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.833038][T13916] RIP: 0033:0x7fcb3ab7e819 [ 217.837451][T13916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.857051][T13916] RSP: 002b:00007fcb3ba2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.865461][T13916] RAX: ffffffffffffffda RBX: 00007fcb3ad35fa0 RCX: 00007fcb3ab7e819 [ 217.873427][T13916] RDX: 0000000004000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 217.881407][T13916] RBP: 00007fcb3ba2d090 R08: 0000000000000000 R09: 0000000000000000 [ 217.889382][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.897351][T13916] R13: 0000000000000000 R14: 00007fcb3ad35fa0 R15: 00007ffd0de6b0f8 [ 217.905332][T13916] [ 217.957218][T13875] chnl_net:caif_netlink_parms(): no params data found [ 217.964684][ T55] Bluetooth: hci2: command tx timeout [ 218.100514][T13930] netlink: 'syz.2.2572': attribute type 3 has an invalid length. [ 218.132516][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 218.371643][T13945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2576'. [ 218.431917][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2577'. [ 218.443468][T13945] netlink: 'syz.2.2576': attribute type 64 has an invalid length. [ 218.451401][T13945] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2576'. [ 218.485981][T13956] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2579'. [ 218.509352][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.530775][T13956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2579'. [ 218.540410][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.552929][T13875] bridge_slave_0: entered allmulticast mode [ 218.562050][T13875] bridge_slave_0: entered promiscuous mode [ 218.697283][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.709778][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.748304][T13875] bridge_slave_1: entered allmulticast mode [ 218.760356][T13875] bridge_slave_1: entered promiscuous mode [ 219.163071][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.203168][T13989] sctp: [Deprecated]: syz.2.2589 (pid 13989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.203168][T13989] Use struct sctp_sack_info instead [ 219.225037][T13987] netlink: 'syz.4.2586': attribute type 8 has an invalid length. [ 219.340995][ T11] hsr_slave_0: left promiscuous mode [ 219.347482][ T11] hsr_slave_1: left promiscuous mode [ 219.360095][ T11] batman_adv: batadv0: Interface deactivated: dummy0 [ 219.367743][ T11] batman_adv: batadv0: Removing interface: dummy0 [ 219.381188][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.389702][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.407213][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.430763][ T11] veth1_macvtap: left promiscuous mode [ 219.510823][T14008] netlink: 'syz.1.2590': attribute type 3 has an invalid length. [ 219.535270][T14008] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2590'. [ 219.878960][ T11] team0 (unregistering): Port device team_slave_1 removed [ 219.919457][ T11] team0 (unregistering): Port device team_slave_0 removed [ 220.053337][ T55] Bluetooth: hci2: command tx timeout [ 220.183928][T13875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.195936][T13875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.205183][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.323639][T14018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 220.423589][T13875] team0: Port device team_slave_0 added [ 220.434316][T13875] team0: Port device team_slave_1 added [ 220.449447][T14027] __nla_validate_parse: 2 callbacks suppressed [ 220.449463][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 220.453651][ T3497] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 220.531384][T13875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.544290][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.576501][T13875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.603945][T14032] pimreg: entered allmulticast mode [ 220.609391][T14035] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2600'. [ 220.625801][T13875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.637676][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.685389][T13875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.736597][T14043] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 220.906490][T13875] hsr_slave_0: entered promiscuous mode [ 220.936548][T13875] hsr_slave_1: entered promiscuous mode [ 220.944815][T13875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.959576][T13875] Cannot create hsr debugfs directory [ 221.061524][T14058] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 221.087413][ T11] IPVS: stop unused estimator thread 0... [ 221.090447][ T186] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 221.099369][T14053] lo speed is unknown, defaulting to 1000 [ 221.148840][T14053] lo speed is unknown, defaulting to 1000 [ 221.242594][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.479823][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2613'. [ 221.603152][T14073] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2614'. [ 221.612351][T14073] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 221.620734][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 221.853970][T14081] sctp: [Deprecated]: syz.2.2617 (pid 14081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.853970][T14081] Use struct sctp_sack_info instead [ 222.030756][T13875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.042119][T13875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.064918][T13875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.113472][T13875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.128941][ T55] Bluetooth: hci2: command tx timeout [ 222.292709][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.388692][T13875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.431008][T13875] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.447033][T14109] netlink: 'syz.1.2628': attribute type 11 has an invalid length. [ 222.468072][T14108] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2629'. [ 222.490104][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.498110][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.508740][T14114] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 222.530833][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.537985][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.573467][T14115] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2629'. [ 222.890078][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.978369][T13875] veth0_vlan: entered promiscuous mode [ 223.011772][T13875] veth1_vlan: entered promiscuous mode [ 223.082024][T13875] veth0_macvtap: entered promiscuous mode [ 223.093781][T14147] delete_channel: no stack [ 223.107147][T13875] veth1_macvtap: entered promiscuous mode [ 223.175146][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.190034][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.207784][T13875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.209961][T14151] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.219243][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.234284][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.242103][T14150] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.263250][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.288447][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.308126][T13875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.345689][T13875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.374771][T13875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.402924][T13875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.411681][T13875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.418011][T14161] tipc: Can't bind to reserved service type 1 [ 223.471383][T14169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2647'. [ 223.511676][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2647'. [ 223.540648][T13875] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 223.572943][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.634518][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.652570][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.727873][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.746212][T14178] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 223.749907][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.771645][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 223.811654][T14178] netlink: 'syz.1.2652': attribute type 29 has an invalid length. [ 224.362792][ C1] net_ratelimit: 1 callbacks suppressed [ 224.362813][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.652081][T14239] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.760219][T14244] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 224.899840][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.945626][T14246] þ: renamed from batadv_slave_0 (while UP) [ 225.402667][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.453254][T14269] __nla_validate_parse: 35 callbacks suppressed [ 225.453274][T14269] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2678'. [ 225.494872][T14269] openvswitch: netlink: IP tunnel dst address not specified [ 225.651102][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.665189][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 225.678114][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.678435][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 225.695944][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.711495][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.726460][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.736390][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.820750][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 225.834109][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 225.842319][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 225.850472][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 225.937525][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.965336][T14270] netlink: 'syz.2.2677': attribute type 6 has an invalid length. [ 226.082120][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.170476][T14272] lo speed is unknown, defaulting to 1000 [ 226.199700][T14272] lo speed is unknown, defaulting to 1000 [ 226.203864][T14292] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 226.206479][ T1153] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 226.337129][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.388541][T14297] can: request_module (can-proto-0) failed. [ 226.442530][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.592730][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2690'. [ 226.723342][T14272] chnl_net:caif_netlink_parms(): no params data found [ 226.739509][T14321] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2692'. [ 226.779237][T14323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.821749][ T53] bridge_slave_1: left allmulticast mode [ 226.843598][ T11] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 226.858760][ T53] bridge_slave_1: left promiscuous mode [ 226.878911][T14329] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.887346][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.914963][ T53] bridge_slave_0: left allmulticast mode [ 226.920922][ T53] bridge_slave_0: left promiscuous mode [ 226.928027][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.291812][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.304417][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.315574][ T53] bond0 (unregistering): Released all slaves [ 227.339257][T14323] IPv6: sit2: Disabled Multicast RS [ 227.447486][T14346] sctp: [Deprecated]: syz.1.2698 (pid 14346) Use of int in max_burst socket option deprecated. [ 227.447486][T14346] Use struct sctp_assoc_value instead [ 227.477087][T14272] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.490992][T14272] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.492664][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.498731][T14272] bridge_slave_0: entered allmulticast mode [ 227.512386][T14272] bridge_slave_0: entered promiscuous mode [ 227.549460][T14272] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.556860][T14272] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.577522][T14272] bridge_slave_1: entered allmulticast mode [ 227.591560][T14272] bridge_slave_1: entered promiscuous mode [ 227.696721][T14272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.711072][T14272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.797615][ T53] hsr_slave_0: left promiscuous mode [ 227.804033][ T55] Bluetooth: hci2: command tx timeout [ 227.821775][ T53] hsr_slave_1: left promiscuous mode [ 227.835665][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.843527][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.864545][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.871975][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.920235][ T53] veth1_macvtap: left promiscuous mode [ 227.928678][ T53] veth0_macvtap: left promiscuous mode [ 227.935067][ T53] veth1_vlan: left promiscuous mode [ 227.940565][ T53] veth0_vlan: left promiscuous mode [ 227.947736][T14366] netlink: 668 bytes leftover after parsing attributes in process `syz.4.2704'. [ 227.957786][T14366] netlink: 668 bytes leftover after parsing attributes in process `syz.4.2704'. [ 228.438758][ T53] team0 (unregistering): Port device team_slave_1 removed [ 228.479613][ T53] team0 (unregistering): Port device team_slave_0 removed [ 228.525182][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 228.857279][T14272] team0: Port device team_slave_0 added [ 228.867521][T14272] team0: Port device team_slave_1 added [ 228.909737][T14272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.917320][T14272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.944493][T14272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.958435][T14272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.966779][T14272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.996297][T14272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.148838][T14372] lo speed is unknown, defaulting to 1000 [ 229.157845][T14272] hsr_slave_0: entered promiscuous mode [ 229.170095][T14272] hsr_slave_1: entered promiscuous mode [ 229.187264][T14272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.195253][T14272] Cannot create hsr debugfs directory [ 229.201649][T14372] lo speed is unknown, defaulting to 1000 [ 229.234248][T14383] validate_nla: 26 callbacks suppressed [ 229.234266][T14383] netlink: 'syz.0.2707': attribute type 2 has an invalid length. [ 229.400822][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'. [ 229.495158][T14393] veth0_vlan: entered allmulticast mode [ 229.563464][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 229.645844][T14388] ªªªªªª: renamed from vlan0 [ 229.876861][T14411] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 229.887341][T14411] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 229.903146][ T55] Bluetooth: hci2: command tx timeout [ 230.069797][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 230.080840][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 230.165660][T14425] ip6tnl0: entered promiscuous mode [ 230.172751][T14425] vlan0: entered promiscuous mode [ 230.191824][T14425] ip6tnl0: left promiscuous mode [ 230.311986][T14272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.362010][T14272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.371709][T14272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.400379][T14272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.561003][T14272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.602081][T14272] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.612584][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 230.624976][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.632131][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.684837][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.692030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.905152][T14452] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2730'. [ 230.944895][T14453] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2730'. [ 231.048244][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 231.066899][T14464] ipvlan1: entered allmulticast mode [ 231.077728][T14464] veth0_vlan: entered allmulticast mode [ 231.121345][T14272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.261939][T14272] veth0_vlan: entered promiscuous mode [ 231.311795][T14272] veth1_vlan: entered promiscuous mode [ 231.346328][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 231.434517][T14272] veth0_macvtap: entered promiscuous mode [ 231.476856][T14272] veth1_macvtap: entered promiscuous mode [ 231.540749][T14490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2740'. [ 231.569854][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: þ [ 231.611030][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.642483][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 231.645607][T14272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.697698][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.731395][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.751752][T14272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.765147][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.774313][T14494] openvswitch: netlink: Actions may not be safe on all matching packets [ 231.776951][T14272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.828150][T14498] wg2: entered promiscuous mode [ 231.856013][T14511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.876684][T14272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.899485][T14272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.918358][T14272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.941167][T14272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.963798][ T53] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 231.969576][ T55] Bluetooth: hci2: command tx timeout [ 231.978256][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2744'. [ 232.125640][T14272] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 232.146821][T14272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.187036][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.202991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.241112][T14528] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2750'. [ 232.250912][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.261154][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.355141][T14531] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2752'. [ 232.456560][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2752'. [ 232.488783][T14531] netlink: 'syz.1.2752': attribute type 4 has an invalid length. [ 232.564071][T14531] netlink: 'syz.1.2752': attribute type 4 has an invalid length. [ 232.617320][ T81] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 232.683189][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 232.864538][T14559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2757'. [ 233.321975][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.430804][T14586] syzkaller1: entered promiscuous mode [ 233.439021][T14586] syzkaller1: entered allmulticast mode [ 233.664826][T14593] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 233.722592][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 233.837911][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.847745][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.860900][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.871109][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.885915][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.895688][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.762509][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.388112][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.514926][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.530551][T14601] lo speed is unknown, defaulting to 1000 [ 235.547701][T14601] lo speed is unknown, defaulting to 1000 [ 235.600367][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.802693][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.849337][ T35] bridge_slave_1: left allmulticast mode [ 235.855418][ T35] bridge_slave_1: left promiscuous mode [ 235.861158][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.930565][ T35] bridge_slave_0: left allmulticast mode [ 235.936390][ T35] bridge_slave_0: left promiscuous mode [ 235.942109][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.949212][T14644] netlink: 'syz.0.2784': attribute type 11 has an invalid length. [ 235.949232][T14644] __nla_validate_parse: 3 callbacks suppressed [ 235.949244][T14644] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2784'. [ 235.965655][ T5848] Bluetooth: hci2: command tx timeout [ 236.056653][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 236.117298][T14654] ip6t_REJECT: ECHOREPLY is not supported [ 236.160433][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2788'. [ 236.416554][T14666] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 236.429602][T14666] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2790'. [ 236.467406][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.479231][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.490626][ T35] bond0 (unregistering): Released all slaves [ 236.646816][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 236.709110][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2791'. [ 236.842484][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 236.919964][T14677] netlink: 'syz.0.2793': attribute type 1 has an invalid length. [ 236.948434][T14677] netlink: 'syz.0.2793': attribute type 10 has an invalid length. [ 236.968352][T14677] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2793'. [ 237.035279][T14601] chnl_net:caif_netlink_parms(): no params data found [ 237.323952][T14697] netlink: 'syz.4.2798': attribute type 1 has an invalid length. [ 237.371837][ T35] hsr_slave_0: left promiscuous mode [ 237.379582][ T35] hsr_slave_1: left promiscuous mode [ 237.392624][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.400043][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.416821][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.425863][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.465408][ T35] veth1_macvtap: left promiscuous mode [ 237.479549][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2798'. [ 237.486465][ T35] veth0_macvtap: left promiscuous mode [ 237.489114][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2798'. [ 237.505351][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2798'. [ 237.505926][ T35] veth1_vlan: left promiscuous mode [ 237.528999][ T35] veth0_vlan: left promiscuous mode [ 237.691671][T14725] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 237.701612][T14725] openvswitch: netlink: Actions may not be safe on all matching packets [ 237.734774][ T81] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 237.735059][ T3497] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 237.791540][T14687] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 237.882604][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 238.044648][ T5848] Bluetooth: hci2: command tx timeout [ 238.121599][ T35] team0 (unregistering): Port device team_slave_1 removed [ 238.154644][ T35] team0 (unregistering): Port device team_slave_0 removed [ 238.477284][T14697] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 238.520769][T14707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.523782][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.623187][T14601] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.630363][T14601] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.647459][T14601] bridge_slave_0: entered allmulticast mode [ 238.655186][T14601] bridge_slave_0: entered promiscuous mode [ 238.663798][ T81] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 238.669966][T14601] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.681216][T14601] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.700831][T14601] bridge_slave_1: entered allmulticast mode [ 238.711567][T14601] bridge_slave_1: entered promiscuous mode [ 238.961351][T14601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.986693][T14601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.085829][T14601] team0: Port device team_slave_0 added [ 239.091991][T14753] unknown channel width for channel at 909000KHz? [ 239.136075][T14601] team0: Port device team_slave_1 added [ 239.187645][T14763] IPVS: set_ctl: invalid protocol: 12 100.1.1.2:20004 [ 239.240485][T14601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.267473][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.352641][T14601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.378048][T14779] nftables ruleset with unbound chain [ 239.384707][T14601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.391819][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.419001][T14601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.595555][T14601] hsr_slave_0: entered promiscuous mode [ 239.604909][T14601] hsr_slave_1: entered promiscuous mode [ 239.615234][T14601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.626322][T14601] Cannot create hsr debugfs directory [ 239.972473][ C1] net_ratelimit: 1 callbacks suppressed [ 239.972492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 240.123252][ T5848] Bluetooth: hci2: command tx timeout [ 240.136569][T14601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.152782][T14601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.190730][T14601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.200227][T14601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.307180][T14601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.325909][T14601] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.341606][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.348773][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.362135][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.369319][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.622180][T14601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.707587][T14601] veth0_vlan: entered promiscuous mode [ 240.737461][T14601] veth1_vlan: entered promiscuous mode [ 240.850319][T14847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.917853][T14601] veth0_macvtap: entered promiscuous mode [ 240.935587][T14601] veth1_macvtap: entered promiscuous mode [ 240.949744][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: þ [ 240.959512][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.970496][T14601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.981731][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.992738][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.003076][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.012561][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.013805][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.033662][T14601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.043640][T14601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.052516][T14601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.061234][T14601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.070343][T14601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.158095][T14857] __nla_validate_parse: 11 callbacks suppressed [ 241.158113][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 241.220878][T14601] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 241.232239][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.261813][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.286793][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.337149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.353464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.388456][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 241.460949][T14864] veth1_vlan: left allmulticast mode [ 241.473109][T14871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2850'. [ 241.515392][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 241.583764][T14874] ip6t_srh: unknown srh invflags 5F00 [ 241.759201][T14884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2855'. [ 241.876902][T14891] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2858'. [ 241.901488][T14891] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 241.918865][T14891] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 242.043128][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 242.476536][T14910] netlink: 'syz.4.2864': attribute type 9 has an invalid length. [ 242.489021][T14910] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.2864'. [ 242.517495][T14912] netlink: 'syz.1.2867': attribute type 24 has an invalid length. [ 242.539511][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 242.567351][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2868'. [ 242.626289][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2869'. [ 242.650777][T14921] bridge_slave_0: entered promiscuous mode [ 242.660906][T14921] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 242.672708][T14921] tipc: Enabled bearer , priority 10 [ 242.700061][T14921] tipc: Enabling of bearer rejected, already enabled [ 242.745947][T14926] netlink: 'syz.2.2872': attribute type 12 has an invalid length. [ 243.082472][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.193740][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.292880][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.307709][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.328031][ T3497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.343530][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.353523][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 243.361891][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.399204][T14937] lo speed is unknown, defaulting to 1000 [ 243.413515][T14937] lo speed is unknown, defaulting to 1000 [ 243.483584][ T12] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 243.493060][ T11] IPVS: nq: UDP 127.0.0.1:0 - no destination available [ 243.508198][T14937] chnl_net:caif_netlink_parms(): no params data found [ 243.587635][T14937] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.612840][T14937] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.619991][T14937] bridge_slave_0: entered allmulticast mode [ 243.644435][T14937] bridge_slave_0: entered promiscuous mode [ 243.655241][T14937] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.712591][T14937] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.719819][T14937] bridge_slave_1: entered allmulticast mode [ 243.748863][T14937] bridge_slave_1: entered promiscuous mode [ 243.767179][T14949] netlink: 'syz.0.2878': attribute type 19 has an invalid length. [ 243.790310][T14954] IPVS: length: 8 != 1152 [ 243.825144][T14937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.859906][T14937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.901243][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.915730][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.930718][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.947832][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.969971][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.977696][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.018415][T14937] team0: Port device team_slave_0 added [ 244.047020][T14966] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.056791][T14937] team0: Port device team_slave_1 added [ 244.122555][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 244.157417][T14958] lo speed is unknown, defaulting to 1000 [ 244.173074][T14937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.199808][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.226787][ T9] page_pool_release_retry() stalled pool shutdown: id 55, 1 inflight 60 sec [ 244.236979][ T9] page_pool_release_retry() stalled pool shutdown: id 54, 1 inflight 60 sec [ 244.264278][T14937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.289211][T14958] lo speed is unknown, defaulting to 1000 [ 244.296276][T14937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.305753][T14937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.361667][T14937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.432284][T14937] hsr_slave_0: entered promiscuous mode [ 244.438913][T14937] hsr_slave_1: entered promiscuous mode [ 244.450109][T14937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.458084][T14937] Cannot create hsr debugfs directory [ 244.579932][T14958] chnl_net:caif_netlink_parms(): no params data found [ 244.630551][T14937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.704419][T14937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.717274][T14958] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.728756][T14958] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.736132][T14958] bridge_slave_0: entered allmulticast mode [ 244.748317][T14958] bridge_slave_0: entered promiscuous mode [ 244.769901][T14937] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 244.781433][T14937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.795457][T14958] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.807985][T14958] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.815888][T14958] bridge_slave_1: entered allmulticast mode [ 244.827775][T14958] bridge_slave_1: entered promiscuous mode [ 244.856522][ T3497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.901646][T14937] bond0: (slave netdevsim0): Releasing backup interface [ 244.915828][T14937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.969781][T14958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.044725][ T3497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.075006][T14958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.141792][T14958] team0: Port device team_slave_0 added [ 245.162497][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 245.195017][ T3497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.240297][T14958] team0: Port device team_slave_1 added [ 245.334085][T14958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.341105][T14958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.407242][ T5848] Bluetooth: hci2: command tx timeout [ 245.425990][T14958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.469395][T14958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.491500][T14958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.581251][T14958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.725085][T14958] hsr_slave_0: entered promiscuous mode [ 245.760352][T14958] hsr_slave_1: entered promiscuous mode [ 245.786634][T14958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.801988][T14958] Cannot create hsr debugfs directory [ 245.853211][T14937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.876030][ T3497] bridge_slave_1: left allmulticast mode [ 245.881859][ T3497] bridge_slave_1: left promiscuous mode [ 245.895771][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.909924][ T3497] bridge_slave_0: left allmulticast mode [ 245.919154][ T3497] bridge_slave_0: left promiscuous mode [ 245.929957][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.943977][T15036] openvswitch: netlink: Message has 8 unknown bytes. [ 246.044186][ T5848] Bluetooth: hci0: command tx timeout [ 246.205866][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.243683][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.255843][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.271724][ T3497] bond0 (unregistering): Released all slaves [ 246.297849][T14937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.344774][T14937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.387254][T14937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.815408][ T3497] hsr_slave_0: left promiscuous mode [ 246.838256][ T3497] hsr_slave_1: left promiscuous mode [ 246.848915][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.870060][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.896211][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.904707][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.948583][ T3497] veth1_macvtap: left promiscuous mode [ 246.956923][ T3497] veth0_macvtap: left promiscuous mode [ 246.967563][ T3497] veth1_vlan: left promiscuous mode [ 246.975316][ T3497] veth0_vlan: left promiscuous mode [ 247.252489][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 247.492977][ T5848] Bluetooth: hci2: command tx timeout [ 247.494675][T15084] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 247.514916][T15084] __nla_validate_parse: 10 callbacks suppressed [ 247.514931][T15084] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2906'. [ 247.589292][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 247.624512][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 248.082208][T15086] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 248.112684][T15086] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 248.134361][ T5848] Bluetooth: hci0: command tx timeout [ 248.163866][T15086] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2907'. [ 248.174394][T15086] netlink: 'syz.0.2907': attribute type 2 has an invalid length. [ 248.203065][T15086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2907'. [ 248.264920][T14937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.292481][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.315683][T15089] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 248.340125][T15089] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 248.415953][T14937] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.458718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.465922][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.503487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.510711][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.896254][ T3497] erspan0 (unregistering): left promiscuous mode [ 248.954170][ T3497] dvmrp0 (unregistering): left allmulticast mode [ 249.083935][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.100130][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.116791][ T3497] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 249.132140][ T3497] bond0 (unregistering): Released all slaves [ 249.148223][ T3497] bond1 (unregistering): Released all slaves [ 249.164895][ T3497] bond2 (unregistering): Released all slaves [ 249.178220][ T3497] bond3 (unregistering): Released all slaves [ 249.190527][ T3497] bond4 (unregistering): Released all slaves [ 249.209087][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 249.256055][T14958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.322634][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.358413][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2913'. [ 249.398551][T14958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.418433][ T3497] tipc: Disabling bearer [ 249.431323][ T3497] tipc: Disabling bearer [ 249.450351][T14958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.457858][ T3497] tipc: Left network mode [ 249.479625][T14958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.562581][ T5848] Bluetooth: hci2: command tx timeout [ 249.696654][T14958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.711958][T14958] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.742163][T14958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.753014][T14958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.766769][ T186] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.773899][ T186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.806544][ T186] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.813697][ T186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.860507][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.889424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.082319][T14958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.158352][T14937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.205621][ T5848] Bluetooth: hci0: command tx timeout [ 250.241624][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 250.307293][T14958] veth0_vlan: entered promiscuous mode [ 250.332150][T14937] veth0_vlan: entered promiscuous mode [ 250.353899][T15153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2925'. [ 250.363105][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 250.388241][T15153] geneve1: entered promiscuous mode [ 250.401569][T15153] geneve1: entered allmulticast mode [ 250.460990][T14958] veth1_vlan: entered promiscuous mode [ 250.551757][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2929'. [ 250.563576][T14937] veth1_vlan: entered promiscuous mode [ 250.574674][T15165] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 250.644354][ T3497] batman_adv: batadv0: Interface deactivated: wlan0 [ 250.704790][ T3497] batman_adv: batadv0: Removing interface: wlan0 [ 250.728554][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 250.754524][T15175] siw: device registration error -23 [ 250.801551][ T3497] batadv_slave_1: left promiscuous mode [ 250.824891][ T3497] þ: left promiscuous mode [ 250.840629][ T3497] hsr_slave_0: left promiscuous mode [ 250.848560][T15180] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2934'. [ 250.858866][ T3497] hsr_slave_1: left promiscuous mode [ 250.871493][ T3497] batman_adv: batadv0: Interface deactivated: þ [ 250.879457][ T3497] batman_adv: batadv0: Removing interface: þ [ 250.892329][ T3497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.902059][ T3497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.930960][ T3497] veth0_macvtap: left promiscuous mode [ 250.952741][ T3497] veth1_vlan: left promiscuous mode [ 250.959085][ T3497] veth0_vlan: left promiscuous mode [ 251.099098][T15187] netlink: 'syz.2.2936': attribute type 10 has an invalid length. [ 251.379149][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 251.405796][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.433970][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 251.643056][ T5848] Bluetooth: hci2: command tx timeout [ 251.667070][T14937] veth0_macvtap: entered promiscuous mode [ 251.795553][T14937] veth1_macvtap: entered promiscuous mode [ 251.863569][T14958] veth0_macvtap: entered promiscuous mode [ 251.871609][T14958] veth1_macvtap: entered promiscuous mode [ 251.942219][T14958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.962187][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.981116][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.008189][T14937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.043619][T14937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.065339][T14937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.086031][T14937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.103711][T14958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.118922][T14958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.129212][T14958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.151495][T14958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.173003][T14958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.195871][T14958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.230091][T14958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.245960][T14958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.255594][T14958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.268225][T14937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.293692][T14937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.311246][T14937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.326840][T14937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.392336][ T3497] IPVS: stop unused estimator thread 0... [ 252.452591][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 252.549064][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.571304][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.598666][ T5845] IPVS: starting estimator thread 0... [ 252.608588][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.618104][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.660581][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.669301][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.683191][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.691416][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.723953][T15230] IPVS: using max 20 ests per chain, 48000 per kthread [ 252.733452][T15228] tipc: Enabling of bearer rejected, already enabled [ 253.184691][T15256] __nla_validate_parse: 5 callbacks suppressed [ 253.184710][T15256] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2956'. [ 253.299720][T15262] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2958'. [ 253.351137][T15267] netlink: 'syz.2.2961': attribute type 30 has an invalid length. [ 253.403636][T15270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.492521][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 253.537817][T15275] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.555283][T15275] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.620468][T15276] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.627776][T15276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.638284][T15276] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.645465][T15276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.738041][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.821791][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.939263][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.997604][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.061775][ T35] bridge_slave_1: left allmulticast mode [ 254.067724][ T35] bridge_slave_1: left promiscuous mode [ 254.073814][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.082193][ T35] bridge_slave_0: left allmulticast mode [ 254.088593][ T35] bridge_slave_0: left promiscuous mode [ 254.094615][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.522531][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.568237][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.584791][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.599597][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.608890][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.623732][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.633375][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.641182][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.720761][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.782146][ T35] bond0 (unregistering): Released all slaves [ 254.820487][T15284] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 254.861215][T15293] lo speed is unknown, defaulting to 1000 [ 254.867439][T15284] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 254.893537][T15293] lo speed is unknown, defaulting to 1000 [ 254.899372][T15284] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 255.070383][T15308] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2970'. [ 255.225936][T15315] nbd: must specify at least one socket [ 255.320102][ T35] hsr_slave_0: left promiscuous mode [ 255.341671][ T35] hsr_slave_1: left promiscuous mode [ 255.358593][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.376127][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.423597][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.431049][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.485773][ T35] veth1_macvtap: left promiscuous mode [ 255.497628][ T35] veth0_macvtap: left promiscuous mode [ 255.504607][ T35] veth1_vlan: left promiscuous mode [ 255.509990][ T35] veth0_vlan: left promiscuous mode [ 255.562489][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.676203][T15342] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2979'. [ 255.686514][T15342] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 255.991893][ T35] team0 (unregistering): Port device team_slave_1 removed [ 256.037717][ T35] team0 (unregistering): Port device team_slave_0 removed [ 256.415638][T15348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2981'. [ 256.544042][T15293] chnl_net:caif_netlink_parms(): no params data found [ 256.612466][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.684106][ T5848] Bluetooth: hci0: command tx timeout [ 256.788617][T15370] bridge_slave_0: left allmulticast mode [ 256.813900][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.830579][T15370] bridge_slave_1: left allmulticast mode [ 256.836426][T15370] bridge_slave_1: left promiscuous mode [ 256.847741][ T9] IPVS: starting estimator thread 0... [ 256.848870][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.876045][T15370] bond0: (slave bond_slave_1): Releasing backup interface [ 256.924323][T15370] team0: Port device team_slave_0 removed [ 256.946636][T15376] IPVS: using max 18 ests per chain, 43200 per kthread [ 256.952983][T15370] team0: Port device team_slave_1 removed [ 256.960789][T15370] bond0: (slave batadv_slave_0): Releasing backup interface [ 256.970894][T15370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.980723][T15370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.998690][T15370] bond0: (slave wlan1): Releasing backup interface [ 257.034322][T15293] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.041516][T15293] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.049437][T15293] bridge_slave_0: entered allmulticast mode [ 257.057831][T15293] bridge_slave_0: entered promiscuous mode [ 257.066784][T15293] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.074574][T15293] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.082229][T15293] bridge_slave_1: entered allmulticast mode [ 257.089569][T15293] bridge_slave_1: entered promiscuous mode [ 257.182146][T15293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.210265][T15293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.265642][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'. [ 257.286714][T15293] team0: Port device team_slave_0 added [ 257.304932][T15293] team0: Port device team_slave_1 added [ 257.394376][T15293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.401432][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.467796][T15293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.504814][T15395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2991'. [ 257.518830][T15293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.529554][T15293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.572560][T15293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.642543][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.688329][T15293] hsr_slave_0: entered promiscuous mode [ 257.704881][T15293] hsr_slave_1: entered promiscuous mode [ 257.732091][T15293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.740010][T15293] Cannot create hsr debugfs directory [ 257.915901][T15416] Bluetooth: MGMT ver 1.23 [ 257.945740][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2999'. [ 257.958651][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 257.971285][T15416] netlink: 'syz.4.2999': attribute type 12 has an invalid length. [ 257.985566][T15416] netlink: 'syz.4.2999': attribute type 11 has an invalid length. [ 258.024953][T15418] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 258.145692][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'. [ 258.313037][T15441] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.331379][T15293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.350269][T15293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.370016][T15293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.382291][T15293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.587967][T15293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.641637][T15293] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.682476][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 258.686621][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.696464][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.716863][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.724015][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.762978][ T5848] Bluetooth: hci0: command tx timeout [ 259.068638][T15293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.089505][T15481] netlink: 'syz.0.3016': attribute type 1 has an invalid length. [ 259.119933][T15481] netlink: 'syz.0.3016': attribute type 3 has an invalid length. [ 259.148698][T15481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3016'. [ 259.200333][T15293] veth0_vlan: entered promiscuous mode [ 259.234298][T15293] veth1_vlan: entered promiscuous mode [ 259.295621][T15293] veth0_macvtap: entered promiscuous mode [ 259.311445][T15293] veth1_macvtap: entered promiscuous mode [ 259.337302][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.351165][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.364342][T15293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.377527][T15293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.400718][T15293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.414619][T15293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.444185][T15293] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.460676][T15293] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.470642][T15293] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.484755][T15293] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.509490][T15496] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 259.598956][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.613567][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.640355][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.658063][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.666082][T15472] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.722544][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.855625][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 259.877491][T15511] netlink: 'syz.2.3023': attribute type 4 has an invalid length. [ 260.230871][T15530] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 260.244205][T15530] nbd: couldn't find device at index 2097172 [ 260.325962][T15536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3029'. [ 260.374538][T15537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3029'. [ 260.774093][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.057420][T15556] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 261.081123][T15556] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.3037'. [ 261.100898][T15556] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 261.123975][T15557] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 261.132051][T15557] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.3037'. [ 261.149436][T15557] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 261.157981][T15560] netlink: 'syz.2.3038': attribute type 1 has an invalid length. [ 261.178409][T15556] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 1280 [ 261.242974][T15560] netlink: 9384 bytes leftover after parsing attributes in process `syz.2.3038'. [ 261.359650][T15565] vxcan1: tx address claim with different name [ 261.441318][T15567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3040'. [ 261.458294][T15567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3040'. [ 261.517411][T15567] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 261.708229][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 261.802606][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.097366][T15604] tipc: Invalid UDP bearer configuration [ 262.097406][T15604] tipc: Enabling of bearer rejected, failed to enable media [ 262.591006][T15628] openvswitch: netlink: Actions may not be safe on all matching packets [ 262.852566][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.883406][T15636] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 263.351447][T15665] netlink: 'syz.1.3078': attribute type 16 has an invalid length. [ 263.438379][T15674] tc_dump_action: action bad kind [ 263.451635][T15674] ebt_limit: overflow, try lower: 570423552/2483027968 [ 263.577653][T15682] openvswitch: netlink: Message has 225 unknown bytes. [ 263.585978][T15682] openvswitch: netlink: Actions may not be safe on all matching packets [ 263.603732][T15682] tap0: tun_chr_ioctl cmd 1074025677 [ 263.609278][T15682] tap0: linktype set to 65534 [ 263.614738][T15681] tipc: Bearer : already 2 bearers with priority 10 [ 263.622254][T15681] tipc: Bearer : trying with adjusted priority [ 263.640175][T15681] tipc: Enabled bearer , priority 9 [ 263.819041][T15699] No such timeout policy "syz0" [ 263.882466][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.121590][T15714] bridge_slave_0: default FDB implementation only supports local addresses [ 264.175745][T15718] FAULT_INJECTION: forcing a failure. [ 264.175745][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.200558][T15719] validate_nla: 2 callbacks suppressed [ 264.200574][T15719] netlink: 'syz.0.3096': attribute type 10 has an invalid length. [ 264.230102][T15718] CPU: 1 UID: 0 PID: 15718 Comm: syz.4.3094 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 264.240903][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 264.250991][T15718] Call Trace: [ 264.254285][T15718] [ 264.257235][T15718] dump_stack_lvl+0x241/0x360 [ 264.261951][T15718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.267217][T15718] ? __pfx__printk+0x10/0x10 [ 264.271812][T15718] ? snprintf+0xda/0x120 [ 264.276061][T15718] should_fail_ex+0x3b0/0x4e0 [ 264.280739][T15718] _copy_to_user+0x31/0xb0 [ 264.285161][T15718] simple_read_from_buffer+0xca/0x150 [ 264.290562][T15718] proc_fail_nth_read+0x1e9/0x250 [ 264.295596][T15718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.301156][T15718] ? rw_verify_area+0x55e/0x6f0 [ 264.306017][T15718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.311566][T15718] vfs_read+0x1fc/0xb70 [ 264.315724][T15718] ? fdget_pos+0x24e/0x320 [ 264.320142][T15718] ? __pfx_vfs_read+0x10/0x10 [ 264.324822][T15718] ? __fget_files+0x3f3/0x470 [ 264.329530][T15718] ? fdget_pos+0x24e/0x320 [ 264.333949][T15718] ksys_read+0x183/0x2b0 [ 264.338197][T15718] ? __pfx_ksys_read+0x10/0x10 [ 264.342990][T15718] ? do_syscall_64+0x100/0x230 [ 264.347760][T15718] ? do_syscall_64+0xb6/0x230 [ 264.352446][T15718] do_syscall_64+0xf3/0x230 [ 264.356951][T15718] ? clear_bhb_loop+0x35/0x90 [ 264.361637][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.367547][T15718] RIP: 0033:0x7fcb3ab7d25c [ 264.371973][T15718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 264.391580][T15718] RSP: 002b:00007fcb3ba0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.400030][T15718] RAX: ffffffffffffffda RBX: 00007fcb3ad36080 RCX: 00007fcb3ab7d25c [ 264.408004][T15718] RDX: 000000000000000f RSI: 00007fcb3ba0c0a0 RDI: 0000000000000006 [ 264.415972][T15718] RBP: 00007fcb3ba0c090 R08: 0000000000000000 R09: 0000000000000000 [ 264.423939][T15718] R10: 00000000000000ae R11: 0000000000000246 R12: 0000000000000001 [ 264.431907][T15718] R13: 0000000000000000 R14: 00007fcb3ad36080 R15: 00007ffd0de6b0f8 [ 264.439891][T15718] [ 264.446196][T15719] geneve0: entered promiscuous mode [ 264.515516][T15723] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20004 [ 264.841428][T15743] __nla_validate_parse: 5 callbacks suppressed [ 264.841447][T15743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3103'. [ 264.862868][T15745] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3103'. [ 264.922623][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.947010][T15747] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3104'. [ 265.491238][T15770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3112'. [ 265.621350][T15774] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3114'. [ 265.802000][T15786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3117'. [ 265.962501][ C1] net_ratelimit: 1 callbacks suppressed [ 265.962529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.173384][T15788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3118'. [ 266.454440][T15826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3132'. [ 266.463711][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3132'. [ 266.473982][T15825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3132'. [ 266.599779][T15832] netlink: 'syz.0.3134': attribute type 4 has an invalid length. [ 266.650144][T15839] xt_CT: No such helper "pptp" [ 266.651567][T15833] netlink: 'syz.0.3134': attribute type 4 has an invalid length. [ 266.695123][ T5845] lo speed is unknown, defaulting to 1000 [ 266.703436][ T5890] lo speed is unknown, defaulting to 1000 [ 267.013045][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.133433][T15868] netlink: 'syz.0.3145': attribute type 3 has an invalid length. [ 267.416158][T15886] veth1_to_hsr: entered promiscuous mode [ 267.486806][T15886] veth1_to_hsr (unregistering): left promiscuous mode [ 267.507275][T15886] 0· (unregistering): left promiscuous mode [ 267.648201][T15896] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.722515][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.901837][T15912] netlink: 'syz.0.3166': attribute type 10 has an invalid length. [ 268.046318][T15924] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 268.052463][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.177326][T15932] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 268.186351][T15933] ebt_limit: overflow, try lower: 570423552/2483027968 [ 268.206813][T15935] ebt_limit: overflow, try lower: 570423552/2483027968 [ 268.561178][T15962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.762515][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.912292][T15984] netlink: 'syz.0.3190': attribute type 4 has an invalid length. [ 269.084060][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 269.155478][T15996] lo speed is unknown, defaulting to 1000 [ 269.298694][T16005] netlink: 'syz.1.3198': attribute type 5 has an invalid length. [ 269.521529][T16019] SET target dimension over the limit! [ 269.713522][T16031] erspan0: entered allmulticast mode [ 269.802519][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.843849][T16041] __nla_validate_parse: 16 callbacks suppressed [ 269.843867][T16041] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3211'. [ 270.122574][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 270.406634][T16058] netlink: 'syz.0.3217': attribute type 2 has an invalid length. [ 270.682267][T16074] netlink: 'syz.0.3223': attribute type 21 has an invalid length. [ 270.692001][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3223'. [ 270.703216][T16075] netlink: 'syz.0.3223': attribute type 21 has an invalid length. [ 270.711099][T16075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3223'. [ 270.842475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.162577][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.257648][T16099] netlink: 'syz.4.3231': attribute type 2 has an invalid length. [ 271.360149][T16107] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 271.400064][T16104] netlink: 'syz.1.3233': attribute type 3 has an invalid length. [ 271.439954][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.464503][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.494082][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.520292][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.545868][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.556192][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.566524][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 271.855880][T16124] netlink: 'syz.4.3241': attribute type 10 has an invalid length. [ 271.864603][T16124] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 271.882484][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.060262][T16140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.202474][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 272.431489][T16160] xt_bpf: check failed: parse error [ 272.923637][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.242886][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.463670][T16220] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 273.570940][T16230] x_tables: duplicate underflow at hook 1 [ 273.777199][T16244] netlink: 'syz.4.3279': attribute type 17 has an invalid length. [ 273.962475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.053760][T16251] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 274.061464][T16253] ipt_rpfilter: unknown options [ 274.074141][T16251] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 274.095601][T16253] netlink: 'syz.4.3285': attribute type 10 has an invalid length. [ 274.105035][T16253] veth1_macvtap: left promiscuous mode [ 274.264118][T16263] tipc: Enabling of bearer rejected, already enabled [ 274.282455][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.346787][T16266] vlan3: entered allmulticast mode [ 274.352064][T16266] bridge_slave_0: entered allmulticast mode [ 274.369426][T16266] bridge_slave_0: left allmulticast mode [ 274.816682][T16292] bridge_slAve_0: renamed from lo (while UP) [ 274.872974][T16295] __nla_validate_parse: 75 callbacks suppressed [ 274.872996][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 274.889002][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3297'. [ 274.910349][T16294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3298'. [ 275.002530][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.066207][T16301] FAULT_INJECTION: forcing a failure. [ 275.066207][T16301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.087116][T16301] CPU: 0 UID: 0 PID: 16301 Comm: syz.2.3299 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 275.097933][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 275.108007][T16301] Call Trace: [ 275.111297][T16301] [ 275.114231][T16301] dump_stack_lvl+0x241/0x360 [ 275.118922][T16301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.124146][T16301] ? __pfx__printk+0x10/0x10 [ 275.128753][T16301] ? snprintf+0xda/0x120 [ 275.133015][T16301] should_fail_ex+0x3b0/0x4e0 [ 275.137732][T16301] _copy_to_user+0x31/0xb0 [ 275.142160][T16301] simple_read_from_buffer+0xca/0x150 [ 275.147563][T16301] proc_fail_nth_read+0x1e9/0x250 [ 275.152602][T16301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.158151][T16301] ? rw_verify_area+0x55e/0x6f0 [ 275.163007][T16301] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.168549][T16301] vfs_read+0x1fc/0xb70 [ 275.172705][T16301] ? fdget_pos+0x24e/0x320 [ 275.177155][T16301] ? __pfx_vfs_read+0x10/0x10 [ 275.181834][T16301] ? __fget_files+0x3f3/0x470 [ 275.186522][T16301] ? fdget_pos+0x24e/0x320 [ 275.190944][T16301] ksys_read+0x183/0x2b0 [ 275.195187][T16301] ? __pfx_ksys_read+0x10/0x10 [ 275.199970][T16301] ? do_syscall_64+0x100/0x230 [ 275.204744][T16301] ? do_syscall_64+0xb6/0x230 [ 275.209437][T16301] do_syscall_64+0xf3/0x230 [ 275.213948][T16301] ? clear_bhb_loop+0x35/0x90 [ 275.218634][T16301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.224531][T16301] RIP: 0033:0x7f34dbf7d25c [ 275.228959][T16301] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 275.248574][T16301] RSP: 002b:00007f34dcd66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.256997][T16301] RAX: ffffffffffffffda RBX: 00007f34dc135fa0 RCX: 00007f34dbf7d25c [ 275.264967][T16301] RDX: 000000000000000f RSI: 00007f34dcd660a0 RDI: 0000000000000005 [ 275.272936][T16301] RBP: 00007f34dcd66090 R08: 0000000000000000 R09: 0000000000000000 [ 275.280909][T16301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.288882][T16301] R13: 0000000000000000 R14: 00007f34dc135fa0 R15: 00007fffd1a23168 [ 275.296869][T16301] [ 275.652124][T16321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3306'. [ 275.834144][T16325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'. [ 276.193566][T16350] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3316'. [ 276.362479][ C1] net_ratelimit: 2 callbacks suppressed [ 276.362497][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 276.382692][T16358] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 276.517377][T16365] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 276.786633][T16383] xt_ipcomp: unknown flags B [ 277.082490][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 277.402869][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.561761][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 277.728210][T16440] tipc: Enabling of bearer rejected, already enabled [ 277.739051][T16436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3344'. [ 277.748851][T16436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3344'. [ 277.764392][T16436] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 278.059825][T16463] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 278.098033][T16465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3353'. [ 278.122475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.254421][T16472] lo speed is unknown, defaulting to 1000 [ 278.279631][T16472] lo speed is unknown, defaulting to 1000 [ 278.414949][T16483] validate_nla: 2 callbacks suppressed [ 278.414969][T16483] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 278.442584][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.455987][T16483] bridge0: port 3(dummy0) entered blocking state [ 278.462870][T16483] bridge0: port 3(dummy0) entered disabled state [ 278.476095][T16483] dummy0: entered allmulticast mode [ 278.499711][T16483] dummy0: entered promiscuous mode [ 278.506237][T16483] bridge0: port 3(dummy0) entered blocking state [ 278.512800][T16483] bridge0: port 3(dummy0) entered forwarding state [ 279.162529][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.482515][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 280.202485][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.249174][T16605] __nla_validate_parse: 6 callbacks suppressed [ 280.249188][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3390'. [ 280.427419][T16611] netlink: 'syz.2.3392': attribute type 9 has an invalid length. [ 280.435404][T16611] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.3392'. [ 280.445478][T16611] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 280.478924][T16613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3393'. [ 280.488409][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 280.499159][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 280.701510][T16631] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 280.808474][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'. [ 280.819640][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'. [ 280.892057][T16642] netlink: 'syz.1.3404': attribute type 2 has an invalid length. [ 280.909839][T16642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3404'. [ 281.072870][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 281.157097][T16661] lo speed is unknown, defaulting to 1000 [ 281.170362][T16661] lo speed is unknown, defaulting to 1000 [ 281.208565][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 281.340959][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.350475][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.363049][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.371001][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.379965][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.388234][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.397030][T16675] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 281.531932][T16680] net_ratelimit: 2 callbacks suppressed [ 281.531946][T16680] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 281.562711][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.570908][ T55] Bluetooth: hci2: command tx timeout [ 281.651844][T16688] sctp: [Deprecated]: syz.4.3417 (pid 16688) Use of int in max_burst socket option. [ 281.651844][T16688] Use struct sctp_assoc_value instead [ 281.745806][T16693] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 281.874424][T16700] lo speed is unknown, defaulting to 1000 [ 281.881121][T16700] lo speed is unknown, defaulting to 1000 [ 282.282478][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 282.454563][T16729] sctp: [Deprecated]: syz.4.3430 (pid 16729) Use of int in max_burst socket option. [ 282.454563][T16729] Use struct sctp_assoc_value instead [ 282.603206][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 282.701237][T16739] openvswitch: netlink: Multiple metadata blocks provided [ 282.828080][T16744] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 283.322493][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.642589][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 283.650193][T16798] pimreg3: entered allmulticast mode [ 283.724255][T16800] validate_nla: 58 callbacks suppressed [ 283.724275][T16800] netlink: 'syz.0.3447': attribute type 4 has an invalid length. [ 283.860065][T16806] openvswitch: netlink: ct_state flags 00004000 unsupported [ 284.142726][T16825] netlink: 'syz.0.3457': attribute type 39 has an invalid length. [ 284.210063][T16779] tipc: Failed to remove unknown binding: 66,3,3/2886997162:1659968900/1659968901 [ 284.339056][T16836] netlink: 'syz.0.3461': attribute type 3 has an invalid length. [ 284.362558][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.977942][T16872] bond1: entered promiscuous mode [ 284.990007][T16872] bond1: entered allmulticast mode [ 284.996451][T16872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.232013][T16888] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 285.617054][T16912] __nla_validate_parse: 19 callbacks suppressed [ 285.617076][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 286.133262][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 286.238495][T16936] hsr_slave_1 (unregistering): left promiscuous mode [ 286.403320][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 286.762492][ C1] net_ratelimit: 4 callbacks suppressed [ 286.762511][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.900519][T16971] netlink: 4348 bytes leftover after parsing attributes in process `syz.0.3505'. [ 287.018800][T16977] netlink: 'syz.0.3508': attribute type 4 has an invalid length. [ 287.209182][T16988] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3511'. [ 287.220940][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 287.268122][T16990] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3513'. [ 287.415830][T16999] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 287.482453][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 287.588554][T17008] netlink: 209812 bytes leftover after parsing attributes in process `syz.0.3520'. [ 287.598971][T17008] netlink: get zone limit has 8 unknown bytes [ 287.802630][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.867092][T17030] openvswitch: netlink: Actions may not be safe on all matching packets [ 287.937713][T17034] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 288.101360][T17045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3532'. [ 288.268251][T17052] netlink: 'syz.2.3534': attribute type 1 has an invalid length. [ 288.482634][T17065] netlink: 'syz.1.3540': attribute type 11 has an invalid length. [ 288.490520][T17065] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3540'. [ 288.522456][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 288.666935][T17075] netlink: 'syz.4.3544': attribute type 10 has an invalid length. [ 288.842541][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.958484][T17085] netlink: 'syz.1.3547': attribute type 4 has an invalid length. [ 289.303868][T17112] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 289.324012][T17112] veth1_to_hsr: entered promiscuous mode [ 289.386791][T17112] veth1_to_hsr (unregistering): left promiscuous mode [ 289.409092][T17112] hsr_slave_1 (unregistering): left promiscuous mode [ 289.562854][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 289.705498][T17129] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 289.767540][T17133] nbd: must specify a size in bytes for the device [ 289.970067][T17148] netlink: 'syz.4.3568': attribute type 20 has an invalid length. [ 290.033750][T17160] netlink: 'syz.2.3569': attribute type 4 has an invalid length. [ 290.140353][T17163] pim6reg1: entered promiscuous mode [ 290.159316][T17163] pim6reg1: entered allmulticast mode [ 290.596572][T17196] netlink: 'syz.4.3580': attribute type 3 has an invalid length. [ 290.621613][T17196] netlink: 'syz.4.3580': attribute type 3 has an invalid length. [ 290.647710][T17198] __nla_validate_parse: 138 callbacks suppressed [ 290.647729][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 290.803670][T17204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 290.833246][T17211] wireguard: wg1: Could not create IPv4 socket [ 290.839982][T17205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 290.900682][T17214] netlink: 'syz.2.3587': attribute type 1 has an invalid length. [ 291.030636][T17220] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3589'. [ 291.059871][T17223] netlink: 'syz.0.3588': attribute type 4 has an invalid length. [ 291.368174][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'. [ 291.429838][T17248] FAULT_INJECTION: forcing a failure. [ 291.429838][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 291.448803][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.2.3600 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 291.459608][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 291.469692][T17248] Call Trace: [ 291.473043][T17248] [ 291.476003][T17248] dump_stack_lvl+0x241/0x360 [ 291.480715][T17248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.485946][T17248] ? __pfx__printk+0x10/0x10 [ 291.490569][T17248] ? fs_reclaim_acquire+0x93/0x130 [ 291.495705][T17248] ? __pfx___might_resched+0x10/0x10 [ 291.501016][T17248] ? dynamic_dname+0x141/0x1b0 [ 291.505814][T17248] should_fail_ex+0x3b0/0x4e0 [ 291.510535][T17248] ? tomoyo_encode+0x26f/0x540 [ 291.512048][T17250] Cannot find set identified by id 0 to match [ 291.515304][T17248] should_failslab+0xac/0x100 [ 291.515350][T17248] ? tomoyo_encode+0x26f/0x540 [ 291.530865][T17248] __kmalloc_noprof+0xd8/0x400 [ 291.535685][T17248] tomoyo_encode+0x26f/0x540 [ 291.540280][T17248] ? __pfx_sockfs_dname+0x10/0x10 [ 291.545570][T17248] tomoyo_realpath_from_path+0x59e/0x5e0 [ 291.551251][T17248] tomoyo_path_number_perm+0x23a/0x880 [ 291.556746][T17248] ? tomoyo_path_number_perm+0x208/0x880 [ 291.562385][T17248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.568405][T17248] ? __fget_files+0x29/0x470 [ 291.572996][T17248] ? __fget_files+0x3f3/0x470 [ 291.577680][T17248] security_file_ioctl+0xc6/0x2a0 [ 291.582719][T17248] __se_sys_ioctl+0x47/0x170 [ 291.587324][T17248] do_syscall_64+0xf3/0x230 [ 291.591833][T17248] ? clear_bhb_loop+0x35/0x90 [ 291.596516][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.602470][T17248] RIP: 0033:0x7f34dbf7e819 [ 291.606912][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.626515][T17248] RSP: 002b:00007f34dcd66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.634936][T17248] RAX: ffffffffffffffda RBX: 00007f34dc135fa0 RCX: 00007f34dbf7e819 [ 291.643438][T17248] RDX: 0000000020000000 RSI: 0000000040046629 RDI: 0000000000000003 [ 291.651439][T17248] RBP: 00007f34dcd66090 R08: 0000000000000000 R09: 0000000000000000 [ 291.659417][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.667391][T17248] R13: 0000000000000000 R14: 00007f34dc135fa0 R15: 00007fffd1a23168 [ 291.675370][T17248] [ 291.700748][T17248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.968118][T17266] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3608'. [ 291.968156][T17267] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3608'. [ 291.977247][ C1] net_ratelimit: 4 callbacks suppressed [ 291.977262][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 292.199195][T17282] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 292.216608][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 292.256639][T17285] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3614'. [ 292.296470][T17285] netlink: 'syz.0.3614': attribute type 1 has an invalid length. [ 292.450594][T17296] netlink: 'syz.2.3619': attribute type 30 has an invalid length. [ 292.544890][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.555955][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.566286][T17303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.577700][T17303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.682459][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 292.786802][T17313] netlink: 826 bytes leftover after parsing attributes in process `syz.0.3625'. [ 293.002530][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 293.380939][T17347] lo speed is unknown, defaulting to 1000 [ 293.398646][T17347] lo speed is unknown, defaulting to 1000 [ 293.724219][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 293.791141][T17369] xt_l2tp: wrong L2TP version: 0 [ 294.042763][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.399779][T17406] mac80211_hwsim hwsim10 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.740180][T17425] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 294.762475][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 294.797080][T17426] xt_hashlimit: size too large, truncated to 1048576 [ 294.818534][T17426] xt_hashlimit: max too large, truncated to 1048576 [ 294.843080][T17426] xt_hashlimit: overflow, try lower: 0/0 [ 295.082590][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.319228][T17464] sctp: [Deprecated]: syz.0.3678 (pid 17464) Use of int in max_burst socket option deprecated. [ 295.319228][T17464] Use struct sctp_assoc_value instead [ 295.594341][T17479] tipc: Started in network mode [ 295.615248][T17479] tipc: Node identity ac1414aa, cluster identity 4711 [ 295.638797][T17479] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.655843][T17479] tipc: Enabled bearer , priority 10 [ 295.710769][T17485] __nla_validate_parse: 11 callbacks suppressed [ 295.710786][T17485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3685'. [ 295.772859][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.931483][T17505] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 296.069684][T17512] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.3694'. [ 296.080999][T17512] netlink: 133 bytes leftover after parsing attributes in process `syz.4.3694'. [ 296.207907][T17520] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 296.220049][T17520] netlink: 9340 bytes leftover after parsing attributes in process `syz.4.3697'. [ 296.230402][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 296.406077][T17530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3699'. [ 296.425520][T17532] xt_HMARK: proto mask must be zero with L3 mode [ 296.643383][ T972] tipc: Node number set to 2886997162 [ 296.698509][T17546] veth1_macvtap: entered allmulticast mode [ 296.734198][T17549] netlink: 'syz.2.3705': attribute type 11 has an invalid length. [ 296.759026][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.773796][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.844062][ T186] wlan0: Trigger new scan to find an IBSS to join [ 296.902882][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 296.918442][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3707'. [ 296.946359][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3708'. [ 296.960691][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3708'. [ 297.052530][ C1] net_ratelimit: 7 callbacks suppressed [ 297.052549][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.110343][T17568] netlink: 'syz.1.3710': attribute type 11 has an invalid length. [ 297.162498][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.582610][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.629142][T17602] netlink: 'syz.2.3720': attribute type 1 has an invalid length. [ 298.202481][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 298.317802][T17638] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 298.424969][T17647] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:6 [ 298.502260][T17651] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 298.510314][T17652] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 298.562995][T17654] netlink: 'syz.2.3737': attribute type 10 has an invalid length. [ 298.589967][T17654] team0: Device veth0_macvtap failed to register rx_handler [ 298.602492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 298.637154][T17655] netlink: 'syz.2.3737': attribute type 10 has an invalid length. [ 298.664754][T17655] team0: Device veth0_macvtap failed to register rx_handler [ 299.136574][T17679] netlink: 'syz.2.3745': attribute type 9 has an invalid length. [ 299.164402][T17679] netlink: 'syz.2.3745': attribute type 9 has an invalid length. [ 299.242637][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.329586][T17693] netlink: 'syz.2.3748': attribute type 1 has an invalid length. [ 299.342165][T17693] netlink: 'syz.2.3748': attribute type 2 has an invalid length. [ 299.642445][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.810164][ T186] wlan0: Trigger new scan to find an IBSS to join [ 299.820398][ T972] ================================================================== [ 299.828493][ T972] BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 [ 299.835979][ T972] Read of size 8 at addr ffff8880121fa338 by task kworker/1:2/972 [ 299.843779][ T972] [ 299.846100][ T972] CPU: 1 UID: 0 PID: 972 Comm: kworker/1:2 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 299.856773][ T972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 299.866833][ T972] Workqueue: events l2cap_chan_timeout [ 299.872312][ T972] Call Trace: [ 299.875610][ T972] [ 299.878543][ T972] dump_stack_lvl+0x241/0x360 [ 299.883233][ T972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.888463][ T972] ? __pfx__printk+0x10/0x10 [ 299.893075][ T972] ? _printk+0xd5/0x120 [ 299.897238][ T972] ? __virt_addr_valid+0x183/0x530 [ 299.902351][ T972] ? __virt_addr_valid+0x183/0x530 [ 299.907486][ T972] print_report+0x169/0x550 [ 299.911996][ T972] ? __virt_addr_valid+0x183/0x530 [ 299.917162][ T972] ? __virt_addr_valid+0x183/0x530 [ 299.922289][ T972] ? __virt_addr_valid+0x45f/0x530 [ 299.927416][ T972] ? __phys_addr+0xba/0x170 [ 299.931927][ T972] ? lock_release+0x151/0xa30 [ 299.936614][ T972] kasan_report+0x143/0x180 [ 299.941115][ T972] ? kasan_save_track+0x51/0x80 [ 299.946103][ T972] ? lock_release+0x151/0xa30 [ 299.950789][ T972] ? process_scheduled_works+0xa63/0x1850 [ 299.956532][ T972] lock_release+0x151/0xa30 [ 299.961075][ T972] ? __pfx_lock_release+0x10/0x10 [ 299.966112][ T972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.972097][ T972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.978430][ T972] ? process_scheduled_works+0xa63/0x1850 [ 299.984154][ T972] __mutex_unlock_slowpath+0xe2/0x750 [ 299.989535][ T972] ? kasan_quarantine_put+0xdc/0x230 [ 299.994815][ T972] ? lockdep_hardirqs_on+0x99/0x150 [ 300.000012][ T972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.005996][ T972] ? l2cap_chan_timeout+0x196/0x360 [ 300.011196][ T972] ? l2cap_chan_timeout+0x196/0x360 [ 300.016419][ T972] ? l2cap_chan_timeout+0x196/0x360 [ 300.021618][ T972] ? process_scheduled_works+0x976/0x1850 [ 300.027342][ T972] process_scheduled_works+0xa63/0x1850 [ 300.032901][ T972] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.038885][ T972] ? assign_work+0x364/0x3d0 [ 300.043476][ T972] worker_thread+0x870/0xd30 [ 300.048077][ T972] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.053966][ T972] ? __kthread_parkme+0x169/0x1d0 [ 300.058990][ T972] ? __pfx_worker_thread+0x10/0x10 [ 300.064099][ T972] kthread+0x2f0/0x390 [ 300.068167][ T972] ? __pfx_worker_thread+0x10/0x10 [ 300.073289][ T972] ? __pfx_kthread+0x10/0x10 [ 300.077894][ T972] ret_from_fork+0x4b/0x80 [ 300.082315][ T972] ? __pfx_kthread+0x10/0x10 [ 300.086900][ T972] ret_from_fork_asm+0x1a/0x30 [ 300.091730][ T972] [ 300.094742][ T972] [ 300.097072][ T972] Allocated by task 15502: [ 300.101473][ T972] kasan_save_track+0x3f/0x80 [ 300.106168][ T972] __kasan_kmalloc+0x98/0xb0 [ 300.110754][ T972] __kmalloc_cache_noprof+0x19c/0x2c0 [ 300.116125][ T972] l2cap_conn_add+0xa9/0x8e0 [ 300.120712][ T972] l2cap_chan_connect+0x623/0xeb0 [ 300.125733][ T972] l2cap_sock_connect+0x5c9/0x800 [ 300.130755][ T972] kernel_connect+0x10b/0x160 [ 300.135444][ T972] rfcomm_dlc_open+0x7cc/0x1270 [ 300.140300][ T972] rfcomm_sock_connect+0x305/0x610 [ 300.145427][ T972] __sys_connect+0x2d1/0x300 [ 300.150016][ T972] __x64_sys_connect+0x7a/0x90 [ 300.154781][ T972] do_syscall_64+0xf3/0x230 [ 300.159308][ T972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.165204][ T972] [ 300.167520][ T972] Freed by task 15293: [ 300.171575][ T972] kasan_save_track+0x3f/0x80 [ 300.176244][ T972] kasan_save_free_info+0x40/0x50 [ 300.181271][ T972] __kasan_slab_free+0x59/0x70 [ 300.186033][ T972] kfree+0x1a0/0x440 [ 300.189933][ T972] hci_conn_hash_flush+0xff/0x240 [ 300.194982][ T972] hci_dev_close_sync+0xa42/0x11c0 [ 300.200116][ T972] hci_unregister_dev+0x20b/0x510 [ 300.205164][ T972] vhci_release+0x80/0xd0 [ 300.209503][ T972] __fput+0x23f/0x880 [ 300.213484][ T972] task_work_run+0x24f/0x310 [ 300.218090][ T972] do_exit+0xa2f/0x28e0 [ 300.222236][ T972] do_group_exit+0x207/0x2c0 [ 300.226818][ T972] __x64_sys_exit_group+0x3f/0x40 [ 300.231835][ T972] x64_sys_call+0x2634/0x2640 [ 300.236524][ T972] do_syscall_64+0xf3/0x230 [ 300.241037][ T972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.246939][ T972] [ 300.249259][ T972] The buggy address belongs to the object at ffff8880121fa000 [ 300.249259][ T972] which belongs to the cache kmalloc-1k of size 1024 [ 300.263308][ T972] The buggy address is located 824 bytes inside of [ 300.263308][ T972] freed 1024-byte region [ffff8880121fa000, ffff8880121fa400) [ 300.277183][ T972] [ 300.279498][ T972] The buggy address belongs to the physical page: [ 300.285905][ T972] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121f8 [ 300.294675][ T972] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 300.303170][ T972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 300.310719][ T972] page_type: f5(slab) [ 300.314698][ T972] raw: 00fff00000000040 ffff88801ac41dc0 ffffea0001e84a00 dead000000000002 [ 300.323296][ T972] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 300.331877][ T972] head: 00fff00000000040 ffff88801ac41dc0 ffffea0001e84a00 dead000000000002 [ 300.340568][ T972] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 300.349324][ T972] head: 00fff00000000003 ffffea0000487e01 ffffffffffffffff 0000000000000000 [ 300.357992][ T972] head: ffff888200000008 0000000000000000 00000000ffffffff 0000000000000000 [ 300.366657][ T972] page dumped because: kasan: bad access detected [ 300.373068][ T972] page_owner tracks the page as allocated [ 300.378773][ T972] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 35, tgid 35 (kworker/u8:2), ts 235829839289, free_ts 225746407496 [ 300.397879][ T972] post_alloc_hook+0x1f3/0x230 [ 300.402653][ T972] get_page_from_freelist+0x3649/0x3790 [ 300.408207][ T972] __alloc_pages_noprof+0x292/0x710 [ 300.413412][ T972] alloc_pages_mpol_noprof+0x3e8/0x680 [ 300.418870][ T972] alloc_slab_page+0x6a/0x140 [ 300.423542][ T972] allocate_slab+0x5a/0x2f0 [ 300.428045][ T972] ___slab_alloc+0xcd1/0x14b0 [ 300.432735][ T972] __slab_alloc+0x58/0xa0 [ 300.437076][ T972] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 300.442456][ T972] batadv_hard_if_event+0xe7a/0x1620 [ 300.447746][ T972] notifier_call_chain+0x19f/0x3e0 [ 300.452861][ T972] register_netdevice+0x167f/0x1b00 [ 300.458059][ T972] nsim_create+0x647/0x890 [ 300.462471][ T972] __nsim_dev_port_add+0x6c0/0xae0 [ 300.467590][ T972] nsim_dev_reload_up+0x69b/0x8e0 [ 300.472614][ T972] devlink_reload+0x478/0x870 [ 300.477288][ T972] page last free pid 5848 tgid 5848 stack trace: [ 300.483600][ T972] free_unref_page+0xdf9/0x1140 [ 300.488447][ T972] __slab_free+0x31b/0x3d0 [ 300.492887][ T972] qlist_free_all+0x9a/0x140 [ 300.497497][ T972] kasan_quarantine_reduce+0x14f/0x170 [ 300.503063][ T972] __kasan_slab_alloc+0x23/0x80 [ 300.507921][ T972] kmem_cache_alloc_noprof+0x135/0x2a0 [ 300.513389][ T972] skb_clone+0x20c/0x390 [ 300.517810][ T972] hci_cmd_work+0x2ca/0x6c0 [ 300.522328][ T972] process_scheduled_works+0xa63/0x1850 [ 300.527879][ T972] worker_thread+0x870/0xd30 [ 300.532477][ T972] kthread+0x2f0/0x390 [ 300.536552][ T972] ret_from_fork+0x4b/0x80 [ 300.540983][ T972] ret_from_fork_asm+0x1a/0x30 [ 300.545752][ T972] [ 300.548069][ T972] Memory state around the buggy address: [ 300.553700][ T972] ffff8880121fa200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.561763][ T972] ffff8880121fa280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.569822][ T972] >ffff8880121fa300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.577907][ T972] ^ [ 300.583802][ T972] ffff8880121fa380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.591857][ T972] ffff8880121fa400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 300.599927][ T972] ================================================================== [ 300.608850][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 300.651275][ T972] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 300.658528][ T972] CPU: 1 UID: 0 PID: 972 Comm: kworker/1:2 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 300.669217][ T972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 300.679274][ T972] Workqueue: events l2cap_chan_timeout [ 300.684744][ T972] Call Trace: [ 300.688032][ T972] [ 300.690963][ T972] dump_stack_lvl+0x241/0x360 [ 300.695645][ T972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.700850][ T972] ? __pfx__printk+0x10/0x10 [ 300.705441][ T972] ? preempt_schedule+0xe1/0xf0 [ 300.710296][ T972] ? vscnprintf+0x5d/0x90 [ 300.714640][ T972] panic+0x349/0x880 [ 300.718566][ T972] ? check_panic_on_warn+0x21/0xb0 [ 300.723693][ T972] ? __pfx_panic+0x10/0x10 [ 300.728138][ T972] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 300.734124][ T972] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.740474][ T972] ? print_report+0x502/0x550 [ 300.745179][ T972] check_panic_on_warn+0x86/0xb0 [ 300.750145][ T972] ? lock_release+0x151/0xa30 [ 300.754851][ T972] end_report+0x77/0x160 [ 300.759112][ T972] kasan_report+0x154/0x180 [ 300.763644][ T972] ? kasan_save_track+0x51/0x80 [ 300.768512][ T972] ? lock_release+0x151/0xa30 [ 300.773215][ T972] ? process_scheduled_works+0xa63/0x1850 [ 300.778989][ T972] lock_release+0x151/0xa30 [ 300.783499][ T972] ? __pfx_lock_release+0x10/0x10 [ 300.788529][ T972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.794527][ T972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.800860][ T972] ? process_scheduled_works+0xa63/0x1850 [ 300.806578][ T972] __mutex_unlock_slowpath+0xe2/0x750 [ 300.811947][ T972] ? kasan_quarantine_put+0xdc/0x230 [ 300.817231][ T972] ? lockdep_hardirqs_on+0x99/0x150 [ 300.822469][ T972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.828461][ T972] ? l2cap_chan_timeout+0x196/0x360 [ 300.833694][ T972] ? l2cap_chan_timeout+0x196/0x360 [ 300.838908][ T972] ? l2cap_chan_timeout+0x196/0x360 [ 300.844121][ T972] ? process_scheduled_works+0x976/0x1850 [ 300.849855][ T972] process_scheduled_works+0xa63/0x1850 [ 300.855410][ T972] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.861398][ T972] ? assign_work+0x364/0x3d0 [ 300.865986][ T972] worker_thread+0x870/0xd30 [ 300.870592][ T972] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.876497][ T972] ? __kthread_parkme+0x169/0x1d0 [ 300.881535][ T972] ? __pfx_worker_thread+0x10/0x10 [ 300.886659][ T972] kthread+0x2f0/0x390 [ 300.890729][ T972] ? __pfx_worker_thread+0x10/0x10 [ 300.895844][ T972] ? __pfx_kthread+0x10/0x10 [ 300.900442][ T972] ret_from_fork+0x4b/0x80 [ 300.904861][ T972] ? __pfx_kthread+0x10/0x10 [ 300.909443][ T972] ret_from_fork_asm+0x1a/0x30 [ 300.914216][ T972] [ 300.917580][ T972] Kernel Offset: disabled [ 300.921902][ T972] Rebooting in 86400 seconds..