last executing test programs: 3.691274123s ago: executing program 2 (id=2196): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020400) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x100, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x1884, r8, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1398, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe7, 0x0, "fc8dfdedc3ec5e2f9b29a8f3268f50b96fa86d7d2f59105cc6990326ab302be9f6e11e70f17854555f614efb7aa1517811dc72f7272eb73796680d37eee69b50bff85974f1b30493717be90599a483c62b08565649a58940db30660ac50efc06830c83617136917eb873c48a06e28e8a77bbddb0b5e4f39bcc227985d6f8f076936f8a10e6f79c423fda006a02c096e36699b32dc868cab33cef1e92570d711969633c1817c4d1ed8937654460c63cca97bbb9a10463ab6d25de014e5a9010ee3907b4f6a8e2dfe337232b98ecfc8ba03ddce48f83383e8427590319762c1af0110cc5"}, @NL80211_BAND_2GHZ={0x5c, 0x0, "138dfbe2a7bff0711f34c0fc990131efa50da4758b12f8512739c63545ea8a173d72df6c914f01593917bcbff1810402a0975cd91f1b1482f85b86130e636e527f0517519231ac9de7901e602e31e19a19c38dacbd8afda0"}, @NL80211_BAND_5GHZ={0x57, 0x1, "3aa59f0293f7004be0d4bb0dc8afb208ced09f2258e921049f80b55616bd70913efd9b06fa1c28509b48a55b32d6e9fdb0a747c876cedcdd6bdf853c1a69d94457dc4a660df0d1a9805e789635e2d8b05f32a4"}, @NL80211_BAND_60GHZ={0x9c, 0x2, "2154baa89dd50a8e5198d050b75539fc894cc308e9ca2e7bb396103c02fb25f91634e34be68cb638086d29f919a993bf81658acf8fbf3751f5a37bbafaef47f24551e866f5ab1b2a63c2311da012d84b1c7c8ec0778b302129537cc0b9673718b86b3d61c207ad205409dbb15e937fefca1d69ecf2eb2e7eedc92d2c43d06b056d8ac60a52663c153fa608ce65a0cc4882c1aeafc96b44b8"}, @NL80211_BAND_6GHZ={0x5d, 0x3, "4f0a1c8f0261abb4471f7bbea440993c133dd158ff0190bde01e4c35f3f143a0e4486ed1a9d1b50ee2a3f7799248e839db7348ee33856fcdcd58d801c2b12b4712467c67154cab2b3e5d12f54343181f54ef48517c64492010"}, @NL80211_BAND_5GHZ={0xf7, 0x1, "8c216878b8ed87e9e76c22da1baae2c02fadd5a078aa034e2615e6bfb8a3965fb45cbc090cae353e7a49e7ef7820171e90869db4f4e59930da27835a81f200f20a20262e0c7570c62b02762bf60d7e7b91d2ae8bf97eb1cfc05f571a8254892a122c42af5994a6844979ba588f98dc86f631cfd3710c41c56d74d2fe555735426e81b9f67f1312cfd1cf65a218621929ce70a8e251194a4390ea636e43bf7efa8091de5448f1794caadc9ccca9f74a3aaa4ac12a504ffefbade637c489631acbab3564640a1e34467b48f85cbe145f8293a13d81858e69c33612e4448fd56c68034e5d6ca3754694d33b20d7de1914445cf4af"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x118, 0x2a, [@random={0x65, 0x6e, "02286107a1a769937d057ad79e2bf2d5fa547e03a216e82c0525841ad038c6db6b3f6d604b5830858f24aa6f30578cfe9911851eb9e83499fd462142423e78f588d4f559c96667ec29817acfe0b45e93c8055c6e80c0fce5c1d5e77da03682cce44830e1ae75608717d48d3f81b9"}, @gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @perr={0x84, 0x69, {0xe1, 0x7, [{{0x0, 0x1}, @device_a, 0x10, @value=@device_b, 0x28}, {{0x0, 0x1}, @broadcast, 0xef45, @value, 0x2a}, {{}, @device_a, 0x1, @void, 0x3b}, {{}, @device_a, 0x9, @void, 0x11}, {{}, @device_b, 0xfff, @void, 0x38}, {{}, @device_a, 0x6, @void, 0x1b}, {{}, @device_b, 0xfffffff8, @void, 0x10}]}}, @ht={0x2d, 0x1a, {0x810, 0x1, 0x0, 0x0, {0x7fff, 0x6, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x5}}, @mesh_chsw={0x76, 0x6, {0x4, 0x3, 0x8, 0xf801}}, @peer_mgmt={0x75, 0x8, {0x1, 0xffff, @val=0x1, @val=0x33, @void}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x384, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0xb4, 0x3, "c3f430b3b5458b41d1ffed136abad616fac43857147c35869c64f4266d527be354ea1403622c93b8a37ec773ac57eba3725781aa1d35cc59161aab99cd95d63a662d0121845e2a11180d8ad31d5d269492116e584e377275ca2e5c906cbe8b0eddfa9efc6be60ee0aff903186f00770e0182a07869b4c81ad5c6b3c4532b7dd337c5045dd371722e819ac6b8526780af5cb0afbaf1bd09adb603f4a37455a8969606071f9bc8daaee943c4555cbf19ae"}, @NL80211_BAND_5GHZ={0xae, 0x1, "d527bd7df133e9f1aa4b31f016cba628ed90fae4cc67a59d774313952f1088a0e5c4dcf70ed0fd826fc1ea8cbb853d1700bd63bd32c6e94b399a1e825b578801d066a6bef0069720b38a4e8cd1f319e6c17834875a2de6507797313ec4116713d853462d6d6ed4679f97ece141d98e97481acfcc46a29cceda92b8e22996bdd4bb6bb48f133b4d9db4268aaeb5f4c7c74d7b153dd6155125b2ee0e5afd56c95a9ea0f15f68e7b5b90ccb"}, @NL80211_BAND_6GHZ={0xba, 0x3, "c331cd5a6e93e9ad1a338fe9b75b28ee910011fb974eb820c3f9e4edda36ccfc32eb576ae237b10c2d26462600fcfd17687945ec48abf9d9b091e8e20419624d9fca6dc03b69919b367f14f6458d43d9ef4126063e4ae5ae19c9aa3b3ebee723a2a10698197a02219d68cc064efaa9c3465b373032e6c2f6bcbd057c2031b01c965a549fab759d288dccad98fd774fb516228bbb53b2492679ab4a20c40684f7c18c9f9ac8fa0920b2f8128aec50dfa7b8453dfa868e"}, @NL80211_BAND_60GHZ={0xa8, 0x2, "9b7221309b505d741408b28f2ca738a1e693fedfbb98ec495d6156a7c8b27ddf139e688968f43c003eff55daa51fb53b8923c1b727e07c79bebfa0bed576e23f0eb29b549b6f9fdf72d3a28bd0069017c577c38f3d5f96c180dbe564906f1ea4ec1a87bba7347ed86e43a5a3c335516598f76b985549060304b0cd874693544847855b27288086cfc065091f6e42a3573b5350d5c26af9ca50a7271ca9147ab2f3b17451"}, @NL80211_BAND_5GHZ={0xb2, 0x1, "4b5dbc1b4b4ab4a872af3e7768b95d6da67ff5d52ed064216c1bf2c7f6fee8844d43a6186db53711eeb9ca4c5d494220ca46bf24d3b4b8983f2964ff654f10b07162d5a2f889e2d4b15a1f7f0990ceb2ecb46ce3e928559279cc37b32909612c2c88f073281eb5231207f577486c45118a21511633f42624aaff9c1f561e1047ac8f41e734d9369c9f39ef0eb32d06d5200965f4ab862fa30a83305c68d6a7a510185507b4a75075c574a7e29c0d"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x1884}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r9 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r9], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r9, @ANYRESHEX=r9, @ANYRESHEX=r9, @ANYBLOB="877a31db9cd214f990e8910469f3cb2eeaab04e4a98bf77c346a283b0719013ea8af33047aceffc41830615ee1a8b8cb6f408269af9eb90a809f1562412df89c5b11ee3e28cf3197883aee778c7f0ef9c1ffc5635c29df5ccc9349ac29fa80c90f2ad783dcc72c9cf77c885c6c2e", @ANYRESOCT=r10], 0x3c}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000200)={0x80, 0x204, 0x44e, 0x8, r13}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r9], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20310}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "267052e85d3ea50670fdf838a110bb75"}]}]}, @IFLA_MAP={0x24, 0xe, {0x1, 0x6, 0x6, 0x81, 0x8, 0x9}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_ADDRESS={0xa}]}, 0x9c}, 0x1, 0xba01}, 0x0) 3.401164288s ago: executing program 2 (id=2201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, 0x0, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 3.239015065s ago: executing program 2 (id=2203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050029bd7000ffdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="2c002380080017"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r6, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x10, 0xb}, {0x1, 0x1, 0x10, 0x4}], 0x10, 0x8388, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r8, &(0x7f0000000240), 0x0}, 0x20) 2.995790351s ago: executing program 2 (id=2206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r2}, &(0x7f00000003c0)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYRESHEX=0x0, @ANYBLOB="4648ad5e6b5bb75420059e02267084c4c08380818f8563cd0174e89422b3ebdb0f2abf09aa52175735be17c7b88334ec06139359c9fd7c63853bb71efc295ee3ab40dec5efe8b2283d6c523f352458cf5bb71f236b2552f363fb292fbaedd60f42852c3b48229b68f6d14b0bc8970eea2b9fcb17421ef66dd576858a670658388a82f9a50c5e2d4872b652eb694d70cae810af1ad50c78104aac5a79acd4c5192b758dc5571b3815506f51baa0079c89c5"], 0x50) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095", @ANYRES8=r2, @ANYRES16=r0, @ANYRESOCT=r5, @ANYRESDEC=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='spi_message_done\x00', r9, 0x0, 0x7}, 0x18) socket(0x2, 0x80802, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001600010027bd7000fbdb4739c29f0001", @ANYRES32=0x0, @ANYBLOB="511490048000000000"], 0x24}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x806000) read(r11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f0000000300)="ff8862f69d23ad7e3020b41e2beb33d539ea4575810d2a8770cc84d0", &(0x7f0000000540)=""/143}, 0x20) read$alg(r11, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x20000004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000148e000000208000a400000000205000300020000000900020073797a3100000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x10009, 0x9}, &(0x7f0000000140)=0xc) 2.190400501s ago: executing program 2 (id=2217): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008094}, 0x240088c2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x20010, r2, 0x32a36000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000240)=""/72, &(0x7f00000002c0)=0x48) bind$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x301, 0x4, 0x0, 0x7, 0xf9, @local}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x2c, 0x6, r1, 0xd}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="e9220b6a08e0eac1ae13925fd293a00ed1db7c308da183ae1d1e70fdabf5c573195f5497ad7af0458f2048c6645daacfa50fc7e4909c3dbb60eb77db9f7f29364ae81d67aa502093ac5b76e4c1efeed9766847bf3c32cb172f5ba2c47f2383e7ee53f6103a4deb52ca15d66ba9c67ff1144e572caff377451630cd3973554a64cb302f3cdcccb06a05b56b2e62c6660d9e851d73f97338add2385f7db9b1e8aed1b69fafd98cb72f63b437bdc115a551cb48a40b1d1ed1e7e01ed2346775741ebaaccfc5d967c5875755d8e7b7c2694b92978bf50285e3813b6f9b6dd6fdb3e8035b", 0xe2}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @bcast, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) bind$llc(0xffffffffffffffff, &(0x7f0000000580)={0x1a, 0x30d, 0x1, 0x2, 0x8, 0x1, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x281, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={r0, 0x401, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xb, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x100}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000640)='GPL\x00', 0xfffffffa, 0xd2, &(0x7f0000000680)=""/210, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r4, 0x1, r5, r6], &(0x7f0000000980)=[{0x4, 0x2, 0x0, 0x6}, {0x0, 0x5, 0xc, 0x5}, {0x2, 0x2, 0x4, 0xf}, {0x2, 0x5, 0x5, 0xc}], 0x10, 0x80000001, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x48800) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000c00)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001dc0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@typedef={0x7}, @ptr={0xa}, @enum={0xb, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x3}, {0x8, 0x3ff}, {0x9, 0x6}, {0x9, 0x1}, {0x5}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e, 0x41, 0x1169d4e09eecf2e4, 0x5f, 0x30, 0x61, 0x0]}}, &(0x7f0000000dc0)=""/4096, 0x79, 0x1000, 0x1, 0xc, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x1b, 0x14, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffb31, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2f, r9, 0x8, &(0x7f0000001e00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001e40)={0x2, 0x10, 0x0, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001e80)=[{0x4, 0x5, 0xa}, {0x4, 0x5, 0x3}], 0x10, 0x1, @void, @value}, 0x94) r10 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r10, &(0x7f0000002080)={&(0x7f0000001f80)={0x1d, r1}, 0x10, &(0x7f0000002040)={&(0x7f0000001fc0)={0x4, 0x220, 0x1, {}, {0x0, 0xea60}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "4840582405f65136"}}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000020c0)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000002100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002140)=0x14) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000021c0)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000002180), {[{{@arp={@private=0xa010102, @loopback, 0xff, 0x0, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x2, 0x0, 0x9, 0x0, 0x10, 0x8, 'veth1\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x100}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80, 'syz1\x00', {0xcd}}}}, {{@arp={@broadcast, @empty, 0xff000000, 0xffffff00, 0x10, 0x8, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xfff7, 0x0, 0x6, 0x2, 0x100, 0x0, 'vlan0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0x335}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast2, @multicast1, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) recvmsg(r7, &(0x7f0000002880)={&(0x7f0000002640)=@hci, 0x80, &(0x7f0000002840)=[{&(0x7f00000026c0)=""/83, 0x53}, {&(0x7f0000002740)=""/57, 0x39}, {&(0x7f0000002780)=""/191, 0xbf}], 0x3}, 0x101) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f00000028c0), &(0x7f0000002900)=0x4) 2.09017645s ago: executing program 3 (id=2218): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xffffffffffffffff}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_emit_ethernet(0xfc0, 0x0, 0x0) 1.893508543s ago: executing program 3 (id=2220): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x398, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PROBE_RESP={0x2e8, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x94, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x89, 0x3, "5dbc8b263f757dc7720e14893ab56bf6166973aca0cea0d6fe89060cce9da3557a3592a5f60e41ea2e6f6e696f465a36db02b566cbcf313be40b5a9f7deeedb7e97f9485df7c2bc802726620f7ddfe2c519f64b7648f41d7d45f766114997df8c4dea046c4e66636480acb464bf6809fbcb748d0b3458fdca156f093591c9950cc1932eeb7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x20000000}, 0x4851) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)={0xe4, r6, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @device_b, @broadcast, @random="b138179a5987"}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0xfd, 0x0, 0x2, 0x6, 0x61}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4d, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0xc, @device_a, 0x7, @value=@broadcast, 0x1, 0xd, @device_a, 0x9}}, @cf={0x4, 0x6, {0x5, 0x0, 0x8000, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ibss={0x6, 0x2, 0x5}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @challenge={0x10, 0x1, 0xde}]}, @NL80211_ATTR_PROBE_RESP={0xa, 0x91, "9271f6358959"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xe4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001540)=ANY=[@ANYBLOB="8800000003147df8fdfffffffbdbdf250900020073797a3200000000080041007369770014003300627269646765300000000000000000000900020073797a300000000008004180"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x200040c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', r8, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 1.810242515s ago: executing program 3 (id=2221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan0\x00', @multicast}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x17, &(0x7f0000000140)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.649722456s ago: executing program 2 (id=2222): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x110, 0x700}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) r1 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x1, 0x2, 0x0, 0x6719}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000222, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r4, @ANYBLOB="010000000000fbdbdf25250000800e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) 1.648289529s ago: executing program 3 (id=2223): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0x110, 0x700}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x5f, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.583965562s ago: executing program 4 (id=2224): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000052000600050001a10000080008"], 0x2c}}, 0x20008000) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0xe4}}, 0x200000d4) getsockopt$inet_int(r1, 0x10d, 0xa7, &(0x7f0000000200), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1403, 0x20, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x3d5ea26d56655f5e) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x6, 0x80013, r5, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x3, 0x5, 0xfffffffffffffc01}) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xde80, 0x10001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 1.493481867s ago: executing program 4 (id=2226): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010800000000000000000a00000a"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=r1, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESDEC], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x240080c1}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000000), 0x4) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304fdffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="e378436821306f0ca7efb42ec4ed755fb6c4343edb907362ea9bc3367afebd013ec2eb8ce93d6ba29e13de930d43cbfb0c97ee388fa4b946"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x800}, 0x0) 1.393754843s ago: executing program 0 (id=2227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, 0x0, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 1.193655179s ago: executing program 1 (id=2229): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x42, 0x800000, 0x8, 0x7, 0x56}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040080}, 0x44041) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r4}, 0x10) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x3, 0x800000, @mcast1={0xff, 0x4}}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x3, 0x800000, @mcast1={0xff, 0x4}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x2000000000000096, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001100000085000000750000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.06171177s ago: executing program 0 (id=2230): r0 = socket(0x25, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x472) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x7c}}, 0x0) 984.956234ms ago: executing program 4 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x27, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x2, 0x8, 0x4, 0x40, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='GPL\x00', 0x1b, 0xaf, &(0x7f00000002c0)=""/175, 0x41000, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x1, 0x4, 0xa, 0xb}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='afs_make_fs_call\x00', r2, 0x0, 0x1000}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x2a020480) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r7, 0x4) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r8 = socket(0xf, 0x3, 0x0) connect$l2tp6(r5, &(0x7f0000001100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0x4}, 0x20) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000140)) syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000fb00740000007400000009000000030000000000000c010000000800000000000011020000000900000010000000000000110100000005000000008000000000000700000000000000000600000d000000000700000001000000000000000200000002000000010000000c0000000100000001000000040000000700000000000000002e002e0061713000"], &(0x7f00000000c0)=""/76, 0x95, 0x4c, 0x0, 0x3, 0x10000, @value=r10}, 0x28) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000580)=0x400, 0x4) 884.053478ms ago: executing program 1 (id=2232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) connect$netrom(r1, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @initdev}, &(0x7f0000000080)=0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001"], 0xd0}}, 0x0) 832.132201ms ago: executing program 0 (id=2233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000700001000000400000000000070000001794"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012db97008fbdbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="060036"], 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012db97008fbdbdf251400000008000300", @ANYRES32=r5, @ANYBLOB="060036"], 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) r10 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r12, 0x1}, 0x18) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xc4, r6, 0x202, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x44040) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="183000000adf250200000a438a00"/24], 0x18}, 0x1, 0x0, 0x0, 0x20}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073011c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000073011c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r13, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x140c, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x7ff}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 742.796928ms ago: executing program 1 (id=2234): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0800030002000000080007"], 0x78}}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40200080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1e}, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x1) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x5f67}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x20000004) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40501}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xff}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_IKEY={0x8, 0x4, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x64}}, 0x0) 663.502514ms ago: executing program 3 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="15000000100000000800"/20, @ANYRES32, @ANYBLOB="0000003ce6900cd5ed46d9b05887e9d60541d9618d6ef7e2a2c5012df2b132b08ea03051b19db6f3c85bb926b519aa1914f018aa057347c2d8c9bfe42fc2144c42ef78ed42206cbd408c6afe51eabfd4fb536ce7bc230c5e20e27b41c593211f4450ffbbc12905c9b089641fbc50fc23d4bc783cef8cb5e27ac3000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000ebb602000014000000b7020000000000008500000051000004bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0xcc054) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1, 0x0, 0x0, 0x7, 0x80000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x1000000}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 659.535916ms ago: executing program 4 (id=2236): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}, 0x4011) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}, @CGW_DST_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x3, 0x3, 0x0, 0x0, "918a76e1efa19e91"}, 0x2}}, @CGW_SRC_IF={0x8}]}, 0x44}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 555.965333ms ago: executing program 0 (id=2237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000110005000000000000000000070000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) 438.671255ms ago: executing program 0 (id=2238): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394fbe586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50783bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300030000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054dedbb92f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800200000140003006d6163736563300000000000000000000a000100aaaaaaaaaa2e000009002400729ed35e760000002c002b8008000100", @ANYRES32, @ANYBLOB="08000300"], 0x78}}, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000940)="aff08eeaa6048a95fac900050f73e32e0817d8234fec62369e4b2a411e4a539d57a21adc8f7a5de9fbfaab3ba47d22fcf2c4c8a5d6de94018c4069f5525ca6eac922048aabd336314001bbfdea6149aeeb96de96b85d8314d7cb8f47d90b491cedfbff79e4af620e73cdec6719359b16b3601a3925799dd2094c56b939b72ca7a221fc54d16b6b25c86d69a6d3dbd23997ceda6ab67f5e2a2db81ca9e97e3a65d7c6c27e8d0b9889c0f1bc8be20562b81a24eb42812a823b8faaee27d8d8016028ee9c23eb8f2124283adb02ca7a54ab2dd1665dd1749d2112d3879722af81a390400bd6d0a1a5546941b91ad456bf5670a77033a8d1", 0xf6) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x4b, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)={0xc4, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4a}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 420.210208ms ago: executing program 1 (id=2239): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000200000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000082}, 0x1a800) 370.139482ms ago: executing program 4 (id=2240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r2, 0x0, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 200.92537ms ago: executing program 1 (id=2241): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010110104fe9e48f7"], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'syzkaller0\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x88}}, 0x4008004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000080000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7d0446148d842aea0000000000000000000000000000000000000000db3e2650deb0f78c0147c69e85dadd25c759dca2f42fef937e9f6e36caa71a48eb11b29086e43838"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000180), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080), 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x753182, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000098edf35c8390e9cb18ff0f", @ANYRES32, @ANYBLOB="000000000000000000000000000000c26432a871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 143.642201ms ago: executing program 0 (id=2242): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x108, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0xe8, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e7123b331772db65a7c86b3f25eb3d3b"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "082019e5574bf55e892bbe14c1412c8d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "127538365d2c0365855e415545abb9dc"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "69cec3145763e7baa1b148b9f4da2c73"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x43, 0x2, '/dga\xd1\xea\xd2t/tux\x00\x93\x83\xe7\'\xb0\x9aG\xe7\x15\r\xdc\xd6?@\xdb\xae\xac+\x8a\xf0\x8f\xdc\b\xab;;\x96\xe0u\xa4\xa2\xea\x03\xb3\x90C+%@\xe2\x9a\xeax\\\ts\xcbom\xa9'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}]}]}]}, 0x108}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000e00)={@void, @void, @ipv6=@tcp={0x3, 0x6, "9dadad", 0x3f5, 0x6, 0xc1ec2efe1b9d25b9, @local, @mcast2, {[@srh={0x1d, 0xe, 0x4, 0x7, 0x3, 0x40, 0xeb21, [@private2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x29}]}, @srh={0x0, 0x8, 0x4, 0x4, 0x80, 0x0, 0x4, [@loopback, @loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}]}, @fragment={0x3b, 0x0, 0x46, 0x1, 0x0, 0x7, 0x68}, @hopopts={0x29, 0x1d, '\x00', [@generic={0x7, 0xeb, "9ee2738e923beea20b77fb80a1dcfd8f8cd7761e54f4bbdd08ad8e14822ffe1b3771577685ef141ebb2ac675c90495d954cddf8260e48fcccfb2a8e00b47c45a3b6054e19937fcfa3e16dbefa5c91c29c6afe995b7a7f0bac401ca7d800c5840129ebd180e1e3d4a4b5d5f6567d53f74dfd10ac62f2aadc67c012e4a70db27161253043fa40232e9c0d6e100b7d97910d082650f8e16e4c1748a22e458c1e9c670a0a635f26f6b5baedd130f0535128412b53c1cc9005f30105a6a54a3b53e385e8ab451352861fd35c4b4ecf5633306daec91f09852987d926f73faa744e1237b776dedcddb66b8b09330"}]}, @fragment={0x2b, 0x0, 0x5, 0x1, 0x0, 0x2, 0x66}, @routing={0x94cff0c317f3eff5, 0x4, 0x2, 0x4, 0x0, [@mcast1, @remote]}, @srh={0x5e, 0x6, 0x4, 0x3, 0x4, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @loopback]}, @routing={0x3c, 0x10, 0x2, 0x2, 0x0, [@remote, @private2, @remote, @loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @local]}, @srh={0x8, 0xc, 0x4, 0x6, 0x7, 0x58, 0x4, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}]}], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x1, 0x5, 0x0, 0x7, {[@window={0x3, 0x3, 0xb}, @sack={0x5, 0xe, [0x2, 0x4, 0x6]}, @nop, @generic={0x3, 0x9, "415a6fdbf51479"}]}}, {"751876216c3ec41ffcb3fbea82ea0aa86736f9fe777b38b69832d1e4010074b194b497067c71d9fc0a3a6ce437aba0061ac32ea8d7a033ecbf0fe99402d2b8c0005852e30000000000000000000000000000c0d044e5ce2c4786ac4e5cd16b5c959e68f9ca5b4118c292b0d61d08edbc0a32f32dea0f7c03ead20735f7705a9ae5be748ebde3967dbe69b5f7ce22f82e1a7c2ee471d91b00befc8eac52332f04dfa17eb82ddb5f900000000000"}}}}}, 0x41d) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000002000000000000000000000d02000000000000000100000549651b60611b5072"], &(0x7f0000001f40)=""/4089, 0x86, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r2, &(0x7f00000002c0), 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0xe, 0x7, 0xe}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x400, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}}, 0x20}}, 0x0) 142.550947ms ago: executing program 3 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x800) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000140)={0x2, 0xe6, "9b5766835684c6743935b4d61db5dd7a8836d4e80213ab3e3889e762a44c1c82cc99347b25226ddb1072935ddd6081340932f64edf0742e3b7544b70e57e2f9e84da8fe6f1371580d304b711230c3d49923c940b62568b82fb253bf64e9af5e4e44687331d90167be35ff8aeeb55fd06961afda444c3301b1672516a51cb035aebacea448b83cf33c705f5d66cf6e57ea0a0d26a3342a57261b6055baff4cddf0119816f29d9f4df6f62c5a03276af7308b9b2532e2807ea6e796d6676fb5a09ce7343091e34a2184d7e8cd9f6fed48e5bd23805bc81946cc6e08f0ae95a23a38394f0cd84bd"}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x107, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x61, 0x0, 0x2e, 0x0]}}, &(0x7f00000004c0)=""/210, 0x37, 0xd2, 0x0, 0x4, 0x10000, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xa7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc156}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x66, &(0x7f0000000400)=""/102, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r5, 0x1, r0, 0x1], 0x0, 0x10, 0x1e8, @void, @value}, 0x94) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000840)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000880)=0x7, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000980)={0x3, &(0x7f0000000940)=[{0x4, 0x0, 0xa, 0x1000}, {0x9, 0xff, 0xfc, 0xfffffff4}, {0x1, 0xf, 0xb, 0x1}]}) r8 = getpid() r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000009c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={r8, r9, 0x0, 0x3, &(0x7f0000000a00)='@{\x00'}, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r3) socketpair(0x2, 0x5, 0x3, &(0x7f0000000ac0)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r11, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x44}}, 0x20008010) socket$inet_smc(0x2b, 0x1, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x411000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r13, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r14, &(0x7f0000000e00)='io.latency\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTACK(r15, 0x0, 0x0, &(0x7f0000000e80)=0x1, 0x4) 129.585683ms ago: executing program 4 (id=2244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84d23c44d09305222fd3a0ec4be3e563112f0b39bd87afe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6ee82a73b787046b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b4000000000000072c57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced91180604b6dd2499d16d7d9158ffffffff00000000d6069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c1c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000022000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69f865ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9c42b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5c97947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd878e0b3bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fadb85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c2ed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000000000000000000002928efeae918fc0a8169a3c965af4a789e5d8f5a51d00d9deb18086071556a0a4d1c562f721450807b770449f6affc91e7f9dbe0ec29c1bf00632ec723262c665af7c56a8538bb99a5b9733a34ef2bb36a2cb72c7bc7052f89809a375825cc4cb42837e07df102dc16a4e422ab0f8865a26cdd4597aca429d7f1ae655de15ad84ff77589ea56ca53190dc65c9ea21c375c2659c854ae12d16ccbd84753230dc8ed63ef4e245ef42884485811f26dcd1c40a193bbbf39931afa4d8c6b9202b4bc15d20cf20608fb81b70180e6c754b4f771b0a3bdf5c22d8d15bd518bbf4ee73a54786cb6d353a360677ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x36, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x0, 0x3, 0x7, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7800, 0x700, 0x727, 0x36}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x81000, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x12, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00df", 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0xec}}, 0xc040) r5 = socket$inet6(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7], 0x50}}, 0x800) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) 0s ago: executing program 1 (id=2245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000006000000dd0000000a"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000002c0), &(0x7f0000000600), 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x3, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000007b080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850200005d0000009594e5ab91b47e75f8804ab1c71994c8f1e298e78eb9025e5dc45d80551d113fe1e550a26394fdedd2b8357fafb7a4b972c31c1f838e9aba1770027832d5e7c80c87f01d479c7e44b15c5ed06f0e2537818489f9ce0026689031726705cdb8dc0ea9eb2087dd3a9e1cd1a2759936557aa4caad91c097d7c785eee93759bf61e3448c8db0b13b62840cdd6ff88cfa0f0764a2fc03eca8696ee8a95fc62b468afb5a0766be9a2a7378f1e1f400006150fc9a0f987b89fa76e7567f6bf814e45bce5b"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xff3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 8.784567][ T26] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.236294][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.358142][ T7271] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 119.368265][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 119.443350][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 119.445319][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.512177][ T7269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.555401][ T7269] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 119.612430][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 119.714374][ T7269] netlink: 32 bytes leftover after parsing attributes in process `syz.4.415'. [ 119.729741][ T7284] netlink: 'syz.4.415': attribute type 29 has an invalid length. [ 119.750400][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'. [ 119.978029][ T7293] netlink: 'syz.1.420': attribute type 16 has an invalid length. [ 119.999755][ T7293] netlink: 6686 bytes leftover after parsing attributes in process `syz.1.420'. [ 120.276327][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.515321][ T7310] tun0: tun_chr_ioctl cmd 1074025677 [ 120.525859][ T7310] tun0: linktype set to 769 [ 120.618718][ T7320] SET target dimension over the limit! [ 120.913838][ T7333] netlink: 84 bytes leftover after parsing attributes in process `syz.1.432'. [ 121.326298][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.036251][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.109798][ T7377] validate_nla: 2 callbacks suppressed [ 122.109819][ T7377] netlink: 'syz.0.446': attribute type 16 has an invalid length. [ 122.356266][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.433354][ T7390] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 122.679996][ T7402] x_tables: duplicate underflow at hook 3 [ 122.704729][ T7402] x_tables: duplicate underflow at hook 3 [ 122.838366][ T7405] lo speed is unknown, defaulting to 1000 [ 122.884184][ T7409] netlink: 'syz.4.458': attribute type 16 has an invalid length. [ 123.085845][ T7419] __nla_validate_parse: 5 callbacks suppressed [ 123.085866][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 123.147354][ T7417] tipc: Started in network mode [ 123.152296][ T7417] tipc: Node identity 3654fc9f213c, cluster identity 4711 [ 123.297668][ T7417] tipc: Enabled bearer , priority 0 [ 123.396217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 123.484852][ T7421] syzkaller0: entered promiscuous mode [ 123.495247][ T7421] syzkaller0: entered allmulticast mode [ 123.502163][ T7421] tipc: Resetting bearer [ 123.907905][ T53] tipc: Resetting bearer [ 124.061181][ T7410] tipc: Resetting bearer [ 124.082207][ T7455] netlink: 'syz.1.471': attribute type 16 has an invalid length. [ 124.100475][ T7455] netlink: 6686 bytes leftover after parsing attributes in process `syz.1.471'. [ 124.359150][ T5933] tipc: Node number set to 392756383 [ 124.448516][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.159949][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 125.478885][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.278328][ T7410] tipc: Disabling bearer [ 126.516195][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.543516][ T7478] lo speed is unknown, defaulting to 1000 [ 126.757991][ T7481] lo speed is unknown, defaulting to 1000 [ 127.048373][ T7497] netlink: 'syz.0.483': attribute type 16 has an invalid length. [ 127.090897][ T7497] netlink: 6686 bytes leftover after parsing attributes in process `syz.0.483'. [ 127.356775][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.377190][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.431932][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.496967][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 127.506067][ T7508] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.556209][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.575865][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.612125][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.632706][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.654810][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.671463][ T7508] wg1 speed is unknown, defaulting to 1000 [ 127.732817][ T7508] wg1 speed is unknown, defaulting to 1000 [ 128.139333][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 128.600560][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.581826][ T7526] gretap1: entered promiscuous mode [ 129.615401][ T7532] netlink: 'syz.2.494': attribute type 4 has an invalid length. [ 129.646197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.778232][ T7544] netlink: 'syz.0.496': attribute type 16 has an invalid length. [ 129.809729][ T7544] netlink: 6686 bytes leftover after parsing attributes in process `syz.0.496'. [ 129.886928][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 129.957498][ T7552] vlan3: entered promiscuous mode [ 129.985061][ T7552] batadv0: entered promiscuous mode [ 130.034219][ T7552] batadv0: left promiscuous mode [ 130.121680][ T7561] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 130.418913][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 130.428062][ T7577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.435731][ T7577] IPv6: NLM_F_CREATE should be set when creating new route [ 130.443066][ T7577] IPv6: NLM_F_CREATE should be set when creating new route [ 130.503267][ T7579] veth0_to_batadv: entered promiscuous mode [ 130.535307][ T7579] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 130.676381][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.684136][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.804612][ T7596] bond1: entered promiscuous mode [ 130.810357][ T7596] bond1: entered allmulticast mode [ 130.817875][ T7596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.834990][ T7604] netlink: 'syz.0.511': attribute type 16 has an invalid length. [ 130.843167][ T7604] netlink: 42322 bytes leftover after parsing attributes in process `syz.0.511'. [ 130.918003][ T7606] netlink: 'syz.0.513': attribute type 21 has an invalid length. [ 130.925913][ T7606] netlink: 152 bytes leftover after parsing attributes in process `syz.0.513'. [ 131.210837][ T7619] siw: device registration error -23 [ 131.292873][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 131.365078][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.414512][ T7633] x_tables: duplicate underflow at hook 1 [ 131.424061][ T7614] dummy0: entered promiscuous mode [ 131.477763][ T7614] macsec1: entered allmulticast mode [ 131.486687][ T7614] dummy0: entered allmulticast mode [ 131.541668][ T7614] dummy0: left allmulticast mode [ 131.561489][ T7614] dummy0: left promiscuous mode [ 131.605735][ T7640] netlink: 'syz.0.523': attribute type 16 has an invalid length. [ 131.617522][ T7640] netlink: 42322 bytes leftover after parsing attributes in process `syz.0.523'. [ 131.653320][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 131.716648][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.282752][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'. [ 132.462239][ T7677] netlink: 'syz.2.534': attribute type 21 has an invalid length. [ 132.472603][ T7677] netlink: 128 bytes leftover after parsing attributes in process `syz.2.534'. [ 132.555416][ T7681] netlink: 'syz.1.536': attribute type 16 has an invalid length. [ 132.715096][ T7684] netlink: 'syz.4.537': attribute type 9 has an invalid length. [ 132.756257][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.841866][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.849267][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.870492][ T7688] batman_adv: batadv0: Interface deactivated: dummy0 [ 132.947808][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.964619][ T7688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.034741][ T7688] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.044768][ T7688] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.054109][ T7688] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.062980][ T7688] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.098824][ T7688] veth0_to_batadv: left promiscuous mode [ 133.246609][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.253264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.375132][ T7699] __nla_validate_parse: 3 callbacks suppressed [ 133.375152][ T7699] netlink: 72 bytes leftover after parsing attributes in process `syz.1.540'. [ 133.380029][ T7701] netlink: 'syz.0.541': attribute type 16 has an invalid length. [ 133.403143][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 133.422460][ T7701] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.541'. [ 133.701509][ T7715] macvtap0: left allmulticast mode [ 133.712181][ T7713] trusted_key: syz.0.545 sent an empty control message without MSG_MORE. [ 133.727836][ T7715] gretap1: left promiscuous mode [ 133.796408][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.065279][ T7729] syzkaller1: entered promiscuous mode [ 134.104055][ T7729] syzkaller1: entered allmulticast mode [ 134.200197][ T7734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 134.458728][ T7739] ip6gretap0: entered promiscuous mode [ 134.481326][ T7739] macsec1: entered promiscuous mode [ 134.510285][ T7739] ip6gretap0: left promiscuous mode [ 134.575424][ T7747] netlink: 80 bytes leftover after parsing attributes in process `syz.1.555'. [ 134.706006][ T7747] netlink: 'syz.1.555': attribute type 9 has an invalid length. [ 134.766892][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 134.846328][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.898668][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 135.004717][ T7759] lo speed is unknown, defaulting to 1000 [ 135.018258][ T7759] wg1 speed is unknown, defaulting to 1000 [ 135.218487][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 135.262289][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 135.316472][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 135.413231][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 135.876182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.949896][ T7799] lo speed is unknown, defaulting to 1000 [ 136.081151][ T7799] wg1 speed is unknown, defaulting to 1000 [ 136.661826][ T7830] lo speed is unknown, defaulting to 1000 [ 136.710306][ T7830] wg1 speed is unknown, defaulting to 1000 [ 136.916281][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.011876][ T7843] dccp_invalid_packet: pskb_may_pull failed [ 137.261642][ T7847] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 137.318133][ T7851] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 137.318529][ T7847] batman_adv: batadv0: Adding interface: team0 [ 137.339528][ T7847] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.368555][ T7847] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 137.385336][ T7857] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 137.401387][ T7857] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 137.450453][ T7859] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 137.466549][ T7851] team0: entered promiscuous mode [ 137.471678][ T7851] C: entered promiscuous mode [ 137.498487][ T7851] team_slave_1: entered promiscuous mode [ 137.516501][ T7851] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.524264][ T7851] batman_adv: batadv0: Interface activated: team0 [ 137.534550][ T7851] batman_adv: batadv0: Interface deactivated: team0 [ 137.557897][ T7851] batman_adv: batadv0: Removing interface: team0 [ 137.594842][ T7851] bridge0: port 3(team0) entered blocking state [ 137.604220][ T7851] bridge0: port 3(team0) entered disabled state [ 137.611099][ T7851] team0: entered allmulticast mode [ 137.616856][ T7851] C: entered allmulticast mode [ 137.622400][ T7851] team_slave_1: entered allmulticast mode [ 137.815863][ T7869] syzkaller0: entered promiscuous mode [ 137.821789][ T7869] syzkaller0: entered allmulticast mode [ 137.956311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.997283][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.896919][ T5933] IPVS: starting estimator thread 0... [ 139.924136][ T7890] __nla_validate_parse: 72 callbacks suppressed [ 139.924165][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 139.985120][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.996568][ T7888] IPVS: using max 20 ests per chain, 48000 per kthread [ 140.004052][ T7892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.016223][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.036201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.064161][ T7887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.067430][ T7900] netlink: 'syz.1.599': attribute type 16 has an invalid length. [ 140.091375][ T7892] netlink: 144 bytes leftover after parsing attributes in process `syz.0.595'. [ 140.119789][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.595'. [ 140.136371][ T7900] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.599'. [ 140.315834][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 140.357168][ T7916] lo speed is unknown, defaulting to 1000 [ 140.375245][ T7916] wg1 speed is unknown, defaulting to 1000 [ 140.506920][ T7922] pimreg0: tun_chr_ioctl cmd 1074025677 [ 140.512675][ T7922] pimreg0: linktype set to 65534 [ 140.689846][ T7931] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.702193][ T7931] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.722369][ T7931] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.734996][ T7931] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.866847][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 141.076296][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.195924][ T7951] lo speed is unknown, defaulting to 1000 [ 141.241246][ T7951] wg1 speed is unknown, defaulting to 1000 [ 141.258650][ T7914] dccp_close: ABORT with 60 bytes unread [ 141.303057][ T7958] netlink: 'syz.0.613': attribute type 16 has an invalid length. [ 141.336259][ T7958] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.613'. [ 141.425118][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 141.651993][ T7976] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 141.667157][ T7976] team0: Device ipvlan1 failed to register rx_handler [ 141.781610][ T7974] lo speed is unknown, defaulting to 1000 [ 141.851123][ T7974] wg1 speed is unknown, defaulting to 1000 [ 141.968789][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 142.026938][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 142.035880][ T7987] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 142.126544][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.395371][ T8003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.101896][ T8036] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 143.166362][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.277650][ T8036] team0 (unregistering): Port device team_slave_0 removed [ 143.303598][ T8036] team0 (unregistering): Port device team_slave_1 removed [ 143.370950][ T6448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.389891][ T6448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.398635][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.691257][ T8070] netlink: 'syz.3.644': attribute type 16 has an invalid length. [ 144.027004][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.196712][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.206298][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.275258][ T8104] Cannot find add_set index 0 as target [ 144.498175][ T8118] netlink: 'syz.0.658': attribute type 16 has an invalid length. [ 144.657877][ T8129] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 144.950559][ T8142] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 144.963342][ T8143] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 145.246306][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.253598][ T8159] __nla_validate_parse: 11 callbacks suppressed [ 145.253616][ T8159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.673'. [ 145.311514][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.674'. [ 145.447238][ T8169] netlink: 'syz.0.674': attribute type 2 has an invalid length. [ 145.523326][ T8171] No such timeout policy "syz0" [ 145.627166][ T8174] netlink: 'syz.1.677': attribute type 11 has an invalid length. [ 145.652396][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'. [ 145.863540][ T8186] netlink: 'syz.2.681': attribute type 11 has an invalid length. [ 145.892836][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 145.922577][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 145.932882][ T8186] netlink: 'syz.2.681': attribute type 18 has an invalid length. [ 146.032833][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.684'. [ 146.065321][ T8191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.684'. [ 146.276289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.676276][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.848870][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 146.894560][ T8268] netlink: 224 bytes leftover after parsing attributes in process `syz.4.689'. [ 146.932154][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.692'. [ 147.327134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.328695][ T8291] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 147.407189][ T8291] veth0_macvtap: left promiscuous mode [ 147.444924][ T8291] veth0_macvtap: entered promiscuous mode [ 147.458185][ T8300] netlink: 'syz.4.700': attribute type 16 has an invalid length. [ 147.485139][ T8291] team0: Device macvtap0 failed to register rx_handler [ 147.529359][ T8291] veth0_macvtap: left promiscuous mode [ 147.556306][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.958399][ T30] audit: type=1800 audit(1742354354.668:2): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.709" name="memory.events" dev="tmpfs" ino=802 res=0 errno=0 [ 147.968172][ T8324] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 148.031789][ T30] audit: type=1804 audit(1742354354.678:3): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.709" name="/newroot/152/memory.events" dev="tmpfs" ino=802 res=1 errno=0 [ 148.172929][ T8341] netlink: 'syz.4.713': attribute type 16 has an invalid length. [ 148.366284][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.902380][ T8373] lo speed is unknown, defaulting to 1000 [ 148.947327][ T8373] wg1 speed is unknown, defaulting to 1000 [ 149.160702][ T8388] netlink: 'syz.2.725': attribute type 16 has an invalid length. [ 149.198143][ T8391] IPVS: Unknown mcast interface: pimreg [ 149.406285][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.454123][ T8400] netlink: 'syz.3.729': attribute type 4 has an invalid length. [ 149.525057][ T8403] block nbd0: Unsupported socket: shutdown callout must be supported. [ 149.545217][ T8397] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.570247][ T8397] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.606279][ T8397] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.616216][ T8397] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.811434][ T8405] lo speed is unknown, defaulting to 1000 [ 149.956309][ T8405] wg1 speed is unknown, defaulting to 1000 [ 150.181143][ T8423] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 150.195360][ T8425] netlink: 'syz.0.737': attribute type 16 has an invalid length. [ 150.429157][ T8418] lo speed is unknown, defaulting to 1000 [ 150.436236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.467998][ T8420] lo speed is unknown, defaulting to 1000 [ 150.485758][ T8418] wg1 speed is unknown, defaulting to 1000 [ 150.539671][ T8420] wg1 speed is unknown, defaulting to 1000 [ 151.208246][ T8421] openvswitch: netlink: Tunnel attr 10 has unexpected len 62 expected 2 [ 151.476242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.598190][ T8440] x_tables: duplicate underflow at hook 2 [ 152.091310][ T8458] netlink: 'syz.2.748': attribute type 21 has an invalid length. [ 152.134371][ T8462] netlink: 'syz.1.749': attribute type 16 has an invalid length. [ 152.147738][ T8462] __nla_validate_parse: 20 callbacks suppressed [ 152.147758][ T8462] netlink: 6686 bytes leftover after parsing attributes in process `syz.1.749'. [ 152.203529][ T8458] netlink: 144 bytes leftover after parsing attributes in process `syz.2.748'. [ 152.310469][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.750'. [ 152.320027][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 152.429541][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 152.439675][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 152.526252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.639007][ T8480] netlink: 104 bytes leftover after parsing attributes in process `syz.4.752'. [ 152.694241][ T8473] can: request_module (can-proto-3) failed. [ 152.923814][ T8500] netlink: 'syz.0.763': attribute type 16 has an invalid length. [ 152.932433][ T8500] netlink: 6686 bytes leftover after parsing attributes in process `syz.0.763'. [ 153.209454][ T8516] lo speed is unknown, defaulting to 1000 [ 153.248771][ T8516] wg1 speed is unknown, defaulting to 1000 [ 153.378617][ T8523] syzkaller1: entered promiscuous mode [ 153.384171][ T8523] syzkaller1: entered allmulticast mode [ 153.566259][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.053255][ T8516] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 154.066752][ T8516] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 154.396168][ T8551] tipc: Failed to remove unknown binding: 66,1,1/392756383:2665322410/2665322412 [ 154.418657][ T8552] netlink: 'syz.4.775': attribute type 16 has an invalid length. [ 154.468521][ T8552] netlink: 6686 bytes leftover after parsing attributes in process `syz.4.775'. [ 154.596244][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.612299][ T8557] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 154.665693][ T8559] xt_cgroup: xt_cgroup: no path or classid specified [ 154.788401][ T8562] lo speed is unknown, defaulting to 1000 [ 154.804139][ T8564] netlink: 5 bytes leftover after parsing attributes in process `syz.3.778'. [ 154.806805][ T8562] wg1 speed is unknown, defaulting to 1000 [ 154.850543][ T8564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.343132][ T5890] IPVS: starting estimator thread 0... [ 155.446904][ T8587] IPVS: using max 21 ests per chain, 50400 per kthread [ 155.491906][ T8589] netlink: 'syz.3.787': attribute type 13 has an invalid length. [ 155.502218][ T8589] syz_tun: refused to change device tx_queue_len [ 155.548817][ T8589] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 155.636289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.659521][ T8598] netlink: 'syz.1.790': attribute type 16 has an invalid length. [ 155.795166][ T8603] lo speed is unknown, defaulting to 1000 [ 155.803690][ T8603] wg1 speed is unknown, defaulting to 1000 [ 156.286262][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.676405][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.018078][ T8637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.433223][ T8659] netlink: 'syz.2.810': attribute type 11 has an invalid length. [ 157.467951][ T8659] __nla_validate_parse: 11 callbacks suppressed [ 157.467973][ T8659] netlink: 224 bytes leftover after parsing attributes in process `syz.2.810'. [ 157.508242][ T8662] macvlan3: entered promiscuous mode [ 157.513883][ T8662] macvlan3: entered allmulticast mode [ 157.521017][ T8662] bond_slave_0: entered promiscuous mode [ 157.527199][ T8662] bond_slave_1: entered promiscuous mode [ 157.533179][ T8662] veth0_to_bond: entered promiscuous mode [ 157.550552][ T8662] bond0: entered allmulticast mode [ 157.557730][ T8662] bond_slave_0: entered allmulticast mode [ 157.563973][ T8662] bond_slave_1: entered allmulticast mode [ 157.570485][ T8662] macvlan2: entered allmulticast mode [ 157.576494][ T8665] netlink: 'syz.4.812': attribute type 16 has an invalid length. [ 157.576737][ T8662] veth0_to_batadv: entered allmulticast mode [ 157.584243][ T8665] netlink: 'syz.4.812': attribute type 17 has an invalid length. [ 157.600023][ T8662] veth0_to_bond: entered allmulticast mode [ 157.606475][ T8662] bond0: entered promiscuous mode [ 157.615952][ T8662] macvlan2: entered promiscuous mode [ 157.629067][ T8662] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 157.640148][ T8662] team0: Port device macvlan3 added [ 157.716236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.856694][ T8677] netlink: 'syz.2.815': attribute type 4 has an invalid length. [ 157.878644][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.816'. [ 157.929033][ T977] lo speed is unknown, defaulting to 1000 [ 158.380384][ T8704] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.385369][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.823'. [ 158.393710][ T8704] IPv6: Can't replace route, no match found [ 158.406593][ T8705] netlink: 'syz.3.822': attribute type 16 has an invalid length. [ 158.433467][ T8705] netlink: 6686 bytes leftover after parsing attributes in process `syz.3.822'. [ 158.581552][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.610432][ T8712] bond0: entered promiscuous mode [ 158.616997][ T8715] netlink: 56 bytes leftover after parsing attributes in process `syz.1.824'. [ 158.625823][ T8712] bond_slave_0: entered promiscuous mode [ 158.626058][ T8712] bond_slave_1: entered promiscuous mode [ 158.640708][ T8712] bond0: entered allmulticast mode [ 158.646000][ T8712] bond_slave_0: entered allmulticast mode [ 158.652493][ T8712] bond_slave_1: entered allmulticast mode [ 158.662425][ T8712] team0: Port device bond0 added [ 158.677512][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 158.725048][ T8718] netlink: 17 bytes leftover after parsing attributes in process `syz.2.827'. [ 158.766299][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.823901][ T8721] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 158.884488][ T8721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.935140][ T8729] bond3: (slave bridge3): making interface the new active one [ 158.945029][ T8729] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 159.182703][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 159.383399][ T8759] netlink: 'syz.4.837': attribute type 16 has an invalid length. [ 159.401697][ T8759] netlink: 42322 bytes leftover after parsing attributes in process `syz.4.837'. [ 159.514422][ T8768] netlink: 'syz.4.840': attribute type 7 has an invalid length. [ 159.540238][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 159.796379][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.846419][ T8784] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 160.157992][ T8797] netlink: 'syz.4.850': attribute type 16 has an invalid length. [ 160.422123][ T8811] syzkaller1: entered promiscuous mode [ 160.436370][ T8811] syzkaller1: entered allmulticast mode [ 160.571294][ T8817] netlink: 'syz.2.855': attribute type 21 has an invalid length. [ 160.836280][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.566230][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 161.876281][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.270326][ T8875] pim6reg: entered allmulticast mode [ 162.296776][ T8876] pim6reg: left allmulticast mode [ 162.636336][ T8891] validate_nla: 3 callbacks suppressed [ 162.636358][ T8891] netlink: 'syz.1.882': attribute type 2 has an invalid length. [ 162.657694][ T8893] IPVS: Error connecting to the multicast addr [ 162.673724][ T8896] __nla_validate_parse: 13 callbacks suppressed [ 162.673742][ T8896] netlink: 80 bytes leftover after parsing attributes in process `syz.0.883'. [ 162.693169][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 162.704946][ T8899] netlink: 'syz.4.886': attribute type 16 has an invalid length. [ 162.711501][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 162.714163][ T8899] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.886'. [ 162.754748][ T977] IPVS: starting estimator thread 0... [ 162.846317][ T8903] IPVS: using max 23 ests per chain, 55200 per kthread [ 162.853976][ T8905] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 162.916293][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.997546][ T8912] lo speed is unknown, defaulting to 1000 [ 163.019896][ T8905] bond4: entered promiscuous mode [ 163.033110][ T8905] bond4: entered allmulticast mode [ 163.039703][ T8905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.063125][ T8905] netlink: 'syz.4.887': attribute type 11 has an invalid length. [ 163.101665][ T8921] xt_hashlimit: size too large, truncated to 1048576 [ 163.176011][ T8905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 163.184472][ T8905] batadv1: entered promiscuous mode [ 163.190635][ T8905] batadv1: entered allmulticast mode [ 163.197955][ T8905] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 163.312552][ T8248] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.413418][ T8927] 0ªX¹¦D: left allmulticast mode [ 163.425704][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'. [ 163.441844][ T8244] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.956242][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.049892][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 164.350688][ T8957] netlink: 'syz.4.897': attribute type 16 has an invalid length. [ 164.361926][ T8957] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.897'. [ 164.561178][ T8965] netlink: 'syz.2.898': attribute type 8 has an invalid length. [ 164.813883][ T8972] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 164.920349][ T8975] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 164.956302][ T8975] netlink: 'syz.3.902': attribute type 4 has an invalid length. [ 164.996288][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.027398][ T8975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.466324][ T8981] xfrm1: entered allmulticast mode [ 166.036217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.756542][ T9017] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 166.826982][ T9014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.885741][ T9017] macvlan0: entered allmulticast mode [ 167.048197][ T9014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.076231][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.258049][ T9014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.438207][ T9014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.684938][ T9014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.731557][ T9014] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.764582][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.922'. [ 167.776632][ T9036] netlink: 'syz.1.921': attribute type 39 has an invalid length. [ 167.784246][ T9014] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.892957][ T9014] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.126257][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.427260][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 168.546619][ T9065] netlink: 'syz.4.930': attribute type 16 has an invalid length. [ 168.564860][ T9065] netlink: 54374 bytes leftover after parsing attributes in process `syz.4.930'. [ 168.650171][ T8934] Set syz1 is full, maxelem 65536 reached [ 168.931523][ T9077] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 169.156311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.167869][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 169.199456][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 169.391847][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 169.405105][ T9103] netlink: 'syz.3.944': attribute type 16 has an invalid length. [ 169.454682][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 169.463848][ T9103] netlink: 54374 bytes leftover after parsing attributes in process `syz.3.944'. [ 170.015590][ T9128] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.024406][ T9128] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.032795][ T9128] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.041123][ T9128] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.157147][ T9132] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 170.206300][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.232615][ T9139] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 170.452206][ T9149] ip6tnl1: entered promiscuous mode [ 170.475846][ T9149] ip6tnl1: entered allmulticast mode [ 170.611182][ T9155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.963'. [ 170.641180][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 170.676593][ T9160] lo speed is unknown, defaulting to 1000 [ 170.686018][ T9163] netlink: 'syz.4.967': attribute type 10 has an invalid length. [ 170.799660][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.860347][ T9163] team0: entered promiscuous mode [ 170.865456][ T9163] team_slave_0: entered promiscuous mode [ 170.927595][ T9163] team_slave_1: entered promiscuous mode [ 170.943970][ T9163] team0: entered allmulticast mode [ 170.955531][ T9163] team_slave_0: entered allmulticast mode [ 170.984198][ T9163] team_slave_1: entered allmulticast mode [ 171.025980][ T9163] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.200678][ T9188] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 171.236282][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.686480][ T9199] lo speed is unknown, defaulting to 1000 [ 172.276382][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.774957][ T9234] __nla_validate_parse: 6 callbacks suppressed [ 172.774979][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 172.846358][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 172.910344][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 172.946532][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 172.987119][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.018092][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.037226][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.089457][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.125822][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.176035][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.982'. [ 173.232262][ T9245] lo speed is unknown, defaulting to 1000 [ 173.316335][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.197782][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.356335][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.522382][ T9279] lo speed is unknown, defaulting to 1000 [ 174.677819][ T9286] xt_hashlimit: size too large, truncated to 1048576 [ 174.696403][ T9286] xt_hashlimit: max too large, truncated to 1048576 [ 175.396233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.596258][ T9307] netlink: zone id is out of range [ 175.622756][ T9307] netlink: zone id is out of range [ 175.640927][ T9307] netlink: del zone limit has 4 unknown bytes [ 176.436224][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.954455][ T9341] can: request_module (can-proto-0) failed. [ 177.393343][ T9355] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 177.476518][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.362853][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.370766][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.526320][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.929994][ T9379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.030036][ T9379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.548440][ T9379] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.557014][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.585377][ T9379] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.616277][ T9379] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.655680][ T9379] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.820692][ T9379] veth0_to_batadv: left promiscuous mode [ 179.868670][ T9379] bond1: left promiscuous mode [ 179.873611][ T9379] batadv1: left promiscuous mode [ 179.889028][ T9379] bond1: left allmulticast mode [ 179.897261][ T9379] batadv1: left allmulticast mode [ 179.920672][ T9379] bond0: left allmulticast mode [ 179.946461][ T9379] bond_slave_0: left allmulticast mode [ 179.952014][ T9379] bond_slave_1: left allmulticast mode [ 179.976257][ T9379] macvlan2: left allmulticast mode [ 179.987035][ T9379] veth0_to_bond: left allmulticast mode [ 179.994329][ T9379] bond0: left promiscuous mode [ 180.006964][ T9379] bond_slave_0: left promiscuous mode [ 180.017301][ T9379] bond_slave_1: left promiscuous mode [ 180.033309][ T9379] macvlan2: left promiscuous mode [ 180.056341][ T9379] veth0_to_bond: left promiscuous mode [ 180.066384][ T9379] macvlan3: left promiscuous mode [ 180.071489][ T9379] macvlan3: left allmulticast mode [ 180.095601][ T9379] xfrm1: left allmulticast mode [ 180.139719][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.454387][ T9413] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 180.606534][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.630429][ T9426] __nla_validate_parse: 65 callbacks suppressed [ 180.630451][ T9426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1037'. [ 180.973735][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1041'. [ 181.004001][ T9434] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 181.219395][ T9441] lo speed is unknown, defaulting to 1000 [ 181.533984][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 181.636399][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.990114][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1046'. [ 182.235701][ T9457] lo speed is unknown, defaulting to 1000 [ 182.503296][ T9470] netlink: 'syz.3.1049': attribute type 21 has an invalid length. [ 182.556980][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1049'. [ 182.676375][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.952288][ T9483] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1051'. [ 182.980794][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 183.006448][ T9485] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1053'. [ 183.076757][ T9487] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 183.389348][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 183.440829][ T9498] lo speed is unknown, defaulting to 1000 [ 183.482636][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 183.716206][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.870347][ T9504] lo speed is unknown, defaulting to 1000 [ 183.944321][ T9508] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 184.158526][ T9518] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 184.187732][ T9516] bridge0: port 3(vlan0) entered blocking state [ 184.225679][ T9516] bridge0: port 3(vlan0) entered disabled state [ 184.256931][ T9516] vlan0: entered allmulticast mode [ 184.267296][ T9516] vlan0: left allmulticast mode [ 184.268588][ T9519] netlink: 'syz.2.1058': attribute type 4 has an invalid length. [ 184.756228][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.199126][ T9530] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 185.268582][ T9536] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 185.304521][ T9536] netlink: 'syz.2.1063': attribute type 2 has an invalid length. [ 185.796232][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.956126][ T9560] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 185.993752][ T9563] __nla_validate_parse: 4 callbacks suppressed [ 185.993773][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 186.067580][ T9566] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 186.181606][ T9563] bond0: left allmulticast mode [ 186.194580][ T9563] bond_slave_0: left allmulticast mode [ 186.210445][ T9563] bond_slave_1: left allmulticast mode [ 186.225617][ T9563] team0: left allmulticast mode [ 186.246530][ T9563] team_slave_0: left allmulticast mode [ 186.262785][ T9563] team_slave_1: left allmulticast mode [ 186.283128][ T9563] bond0: left promiscuous mode [ 186.300781][ T9563] bond_slave_0: left promiscuous mode [ 186.326489][ T9563] bond_slave_1: left promiscuous mode [ 186.342482][ T9563] team0: left promiscuous mode [ 186.362734][ T9563] team_slave_0: left promiscuous mode [ 186.383298][ T9563] team_slave_1: left promiscuous mode [ 186.627722][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.658457][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.781662][ T9563] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.791180][ T9563] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.801087][ T9563] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.836360][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.876517][ T9563] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.134810][ T9563] bond4: left promiscuous mode [ 187.146223][ T9563] batadv1: left promiscuous mode [ 187.151813][ T9563] bond4: left allmulticast mode [ 187.163216][ T9563] batadv1: left allmulticast mode [ 187.189198][ T9563] ip6tnl1: left promiscuous mode [ 187.194228][ T9563] ip6tnl1: left allmulticast mode [ 187.218307][ T9571] tipc: Cannot configure node identity twice [ 187.231839][ T9578] netlink: 'syz.3.1076': attribute type 2 has an invalid length. [ 187.524413][ T9597] lo speed is unknown, defaulting to 1000 [ 187.876228][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.957493][ T9620] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 188.570877][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 188.916846][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.730695][ T9687] netlink: 'syz.4.1106': attribute type 16 has an invalid length. [ 189.746269][ T9687] netlink: 54374 bytes leftover after parsing attributes in process `syz.4.1106'. [ 189.956170][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.092969][ T9696] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 190.202522][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 190.215216][ T9700] bridge: RTM_NEWNEIGH with invalid ether address [ 190.289663][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 190.464510][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 190.996172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.024141][ T9733] netlink: 'syz.4.1118': attribute type 16 has an invalid length. [ 191.056356][ T9733] netlink: 54374 bytes leftover after parsing attributes in process `syz.4.1118'. [ 191.109577][ T9736] x_tables: unsorted underflow at hook 1 [ 191.127179][ T9737] x_tables: duplicate underflow at hook 3 [ 191.137890][ T9736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1120'. [ 191.176242][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'. [ 191.280782][ T9740] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 191.307442][ T9740] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 191.315352][ T9740] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 191.350760][ T9740] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 191.468369][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 191.490484][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 191.518480][ T9752] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1125'. [ 191.988199][ T9772] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 192.036175][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.327842][ T9778] netlink: 'syz.1.1133': attribute type 16 has an invalid length. [ 192.365778][ T9778] netlink: 54374 bytes leftover after parsing attributes in process `syz.1.1133'. [ 192.710485][ T9788] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001 [ 193.086165][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.545806][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1140'. [ 193.592360][ T9801] openvswitch: netlink: Flow key attr not present in new flow. [ 194.080099][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 194.101484][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 194.116188][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.616739][ T9817] netlink: 'syz.3.1146': attribute type 16 has an invalid length. [ 194.680648][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.689103][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.741625][ T9822] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 194.896582][ T9828] netlink: 'syz.0.1150': attribute type 8 has an invalid length. [ 194.945631][ T9828] netlink: 'syz.0.1150': attribute type 21 has an invalid length. [ 195.156250][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.570816][ T8256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.597052][ T8256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.612246][ T9854] netlink: 'syz.3.1159': attribute type 16 has an invalid length. [ 196.196201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.394144][ T9887] netlink: 'syz.1.1171': attribute type 16 has an invalid length. [ 196.412307][ T9887] __nla_validate_parse: 9 callbacks suppressed [ 196.412327][ T9887] netlink: 42322 bytes leftover after parsing attributes in process `syz.1.1171'. [ 196.478608][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 196.658349][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1173'. [ 196.692037][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1173'. [ 196.966282][ T9918] netlink: 'syz.4.1179': attribute type 17 has an invalid length. [ 197.071015][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 197.094463][ T9924] netlink: 'syz.4.1183': attribute type 16 has an invalid length. [ 197.102928][ T9924] netlink: 6686 bytes leftover after parsing attributes in process `syz.4.1183'. [ 197.154981][ T9928] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1182'. [ 197.186291][ T9928] 0·: renamed from hsr0 [ 197.193794][ T9928] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.220603][ T9928] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.236273][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.251632][ T9928] 0·: entered allmulticast mode [ 197.257107][ T9928] hsr_slave_0: entered allmulticast mode [ 197.277921][ T9928] hsr_slave_1: entered allmulticast mode [ 197.303255][ T9928] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 197.319967][ T9936] bridge0: port 4(netdevsim2) entered blocking state [ 197.327308][ T9936] bridge0: port 4(netdevsim2) entered disabled state [ 197.334535][ T9936] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 197.343939][ T9936] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 197.795921][ T9954] batadv_slave_1: entered promiscuous mode [ 197.849757][ T9952] batadv_slave_1: left promiscuous mode [ 197.980717][ T9960] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 198.030270][ T9960] netlink: 'syz.2.1195': attribute type 3 has an invalid length. [ 198.060499][ T9966] netlink: 'syz.3.1196': attribute type 16 has an invalid length. [ 198.068800][ T9966] netlink: 6686 bytes leftover after parsing attributes in process `syz.3.1196'. [ 198.276153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.423142][ T9978] lo speed is unknown, defaulting to 1000 [ 198.471278][ T9979] lo speed is unknown, defaulting to 1000 [ 198.675129][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 198.718738][ T9988] xt_CONNSECMARK: invalid mode: 0 [ 198.724178][ T9989] xt_CONNSECMARK: invalid mode: 0 [ 198.885019][ T9992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 199.198320][T10004] pim6reg1: entered promiscuous mode [ 199.221931][T10004] pim6reg1: entered allmulticast mode [ 199.316193][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.584346][T10018] netlink: 'syz.0.1210': attribute type 16 has an invalid length. [ 199.600343][T10010] lo speed is unknown, defaulting to 1000 [ 200.356215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.334040][T10094] lo speed is unknown, defaulting to 1000 [ 201.396197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.471869][T10097] bridge0: port 4(ipvlan2) entered blocking state [ 201.530759][T10097] bridge0: port 4(ipvlan2) entered disabled state [ 201.555238][T10097] ipvlan2: entered allmulticast mode [ 201.583734][T10097] bridge0: entered allmulticast mode [ 201.659396][T10097] ipvlan2: left allmulticast mode [ 201.667811][T10097] bridge0: left allmulticast mode [ 201.889481][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 201.896771][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 201.899609][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 202.431557][T10109] lo speed is unknown, defaulting to 1000 [ 202.446232][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.601921][T10108] lo speed is unknown, defaulting to 1000 [ 202.802961][T10136] __nla_validate_parse: 6 callbacks suppressed [ 202.802982][T10136] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1240'. [ 203.303741][T10154] batadv1: entered promiscuous mode [ 203.313382][T10154] batadv1: entered allmulticast mode [ 203.329487][T10154] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.370271][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1246'. [ 203.486183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.609947][T10162] validate_nla: 1 callbacks suppressed [ 203.609969][T10162] netlink: 'syz.2.1250': attribute type 5 has an invalid length. [ 203.989432][T10176] lo speed is unknown, defaulting to 1000 [ 204.170539][T10189] ax25_connect(): syz.0.1259 uses autobind, please contact jreuter@yaina.de [ 204.197210][T10189] ax25_connect(): syz.0.1259 uses autobind, please contact jreuter@yaina.de [ 204.363622][T10197] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1260'. [ 204.385442][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 204.526248][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.529489][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 204.542459][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 204.636917][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 204.675458][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 205.207318][T10223] vxcan1: entered allmulticast mode [ 205.252029][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 205.438274][T10227] bridge_slave_1 (unregistering): left allmulticast mode [ 205.482695][T10227] bridge_slave_1 (unregistering): left promiscuous mode [ 205.525679][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.566274][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.679051][T10252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1275'. [ 205.707755][T10255] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 205.857092][T10260] netlink: 'syz.0.1277': attribute type 1 has an invalid length. [ 205.874877][ T5890] IPVS: starting estimator thread 0... [ 205.883114][T10260] macvlan2: entered promiscuous mode [ 205.894612][T10260] bridge0: entered promiscuous mode [ 205.906697][T10260] bridge0: port 4(macvlan2) entered blocking state [ 205.919686][T10260] bridge0: port 4(macvlan2) entered disabled state [ 205.937645][T10260] macvlan2: entered allmulticast mode [ 205.950989][T10260] bridge0: entered allmulticast mode [ 205.965454][T10260] macvlan2: left allmulticast mode [ 205.974722][T10260] bridge0: left allmulticast mode [ 205.992787][T10260] bridge0: left promiscuous mode [ 205.998245][T10262] IPVS: using max 21 ests per chain, 50400 per kthread [ 206.596395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.749148][T10297] xt_nfacct: accounting object `syz1' does not exists [ 207.118657][T10318] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 207.136332][T10318] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 207.339733][T10324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.349258][T10324] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.360171][T10324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.636159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.759503][T10352] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 207.829539][T10347] __nla_validate_parse: 5 callbacks suppressed [ 207.829560][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 207.860606][T10343] lo speed is unknown, defaulting to 1000 [ 207.873836][T10343] lo speed is unknown, defaulting to 1000 [ 207.882895][T10343] lo speed is unknown, defaulting to 1000 [ 208.275063][T10343] infiniband syz0: set down [ 208.280934][T10343] infiniband syz0: added lo [ 208.320346][T10343] RDS/IB: syz0: added [ 208.325554][T10343] smc: adding ib device syz0 with port count 1 [ 208.332332][T10343] smc: ib device syz0 port 1 has pnetid [ 208.369635][ T9] lo speed is unknown, defaulting to 1000 [ 208.381237][ T5890] lo speed is unknown, defaulting to 1000 [ 208.390776][T10343] lo speed is unknown, defaulting to 1000 [ 208.561049][T10383] netlink: 'syz.1.1310': attribute type 2 has an invalid length. [ 208.589435][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 208.670990][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 208.680256][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.696344][T10388] netlink: 'syz.2.1311': attribute type 13 has an invalid length. [ 208.730784][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 208.799500][T10343] lo speed is unknown, defaulting to 1000 [ 209.139635][T10343] lo speed is unknown, defaulting to 1000 [ 209.187652][T10407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1315'. [ 209.239962][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 209.605104][T10343] lo speed is unknown, defaulting to 1000 [ 209.698582][T10430] xt_l2tp: unknown flags: 10 [ 209.716229][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.920519][T10437] lo speed is unknown, defaulting to 1000 [ 209.979076][T10434] lo speed is unknown, defaulting to 1000 [ 210.168401][T10446] macvlan3: entered promiscuous mode [ 210.173907][T10446] macvlan3: entered allmulticast mode [ 210.196313][T10343] lo speed is unknown, defaulting to 1000 [ 210.534639][T10459] lo speed is unknown, defaulting to 1000 [ 210.698736][T10434] lo speed is unknown, defaulting to 1000 [ 210.766252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.067638][T10469] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1329'. [ 211.082075][T10437] lo speed is unknown, defaulting to 1000 [ 211.441588][T10477] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 211.451569][T10477] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1326'. [ 211.497628][T10461] lo speed is unknown, defaulting to 1000 [ 211.524630][T10459] lo speed is unknown, defaulting to 1000 [ 211.806149][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.908742][T10461] lo speed is unknown, defaulting to 1000 [ 211.935182][T10490] netlink: 'syz.2.1335': attribute type 4 has an invalid length. [ 211.953908][T10491] netlink: 'syz.3.1336': attribute type 3 has an invalid length. [ 211.963597][T10491] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1336'. [ 211.986299][T10488] netlink: 'syz.2.1335': attribute type 4 has an invalid length. [ 212.059640][ T9] lo speed is unknown, defaulting to 1000 [ 212.671397][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 212.836254][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.904644][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 213.268693][T10532] lo speed is unknown, defaulting to 1000 [ 213.320050][T10533] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 213.341364][T10535] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 213.500936][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 213.508215][T10535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.525001][T10532] lo speed is unknown, defaulting to 1000 [ 213.534410][T10541] gretap2: entered promiscuous mode [ 213.607068][T10541] bond1: (slave gretap2): making interface the new active one [ 213.637044][T10541] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 213.876293][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.949702][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'. [ 213.963581][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'. [ 214.077821][T10560] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 214.916220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.016473][T10602] lo speed is unknown, defaulting to 1000 [ 215.035495][T10602] lo speed is unknown, defaulting to 1000 [ 215.925302][ T30] audit: type=1800 audit(1742354422.618:4): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1377" name="memory.events" dev="tmpfs" ino=1435 res=0 errno=0 [ 215.966180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.014463][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 216.044787][T10640] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1382'. [ 216.171297][T10644] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 216.509193][T10639] netlink: 'syz.3.1382': attribute type 5 has an invalid length. [ 216.547930][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 216.996232][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.308120][T10687] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 217.418021][T10687] bond5: entered allmulticast mode [ 217.428717][T10687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.471566][T10695] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 217.503383][T10695] bond5: (slave batadv2): making interface the new active one [ 217.523867][T10695] batadv2: entered allmulticast mode [ 217.550997][T10695] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 217.831239][T10718] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 217.948738][T10722] lo speed is unknown, defaulting to 1000 [ 217.955723][T10722] lo speed is unknown, defaulting to 1000 [ 218.046328][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.152163][T10737] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 218.229168][T10737] lo speed is unknown, defaulting to 1000 [ 218.271654][T10743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.311434][T10737] lo speed is unknown, defaulting to 1000 [ 218.610638][T10756] lo speed is unknown, defaulting to 1000 [ 218.642641][T10762] sctp: [Deprecated]: syz.0.1411 (pid 10762) Use of int in maxseg socket option. [ 218.642641][T10762] Use struct sctp_assoc_value instead [ 218.713946][T10756] lo speed is unknown, defaulting to 1000 [ 219.086266][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.689140][T10794] bridge0: entered promiscuous mode [ 219.723556][T10796] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 219.910388][T10804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.946746][T10804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.979957][T10804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.015313][T10804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.116355][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.238644][T10814] netlink: 'syz.4.1426': attribute type 10 has an invalid length. [ 220.274457][T10814] veth1_vlan: left promiscuous mode [ 220.299194][T10814] team0: Device veth1_vlan failed to register rx_handler [ 220.481028][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'. [ 220.493251][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'. [ 220.526736][T10834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1430'. [ 220.807783][T10852] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 221.156247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.267929][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 221.286382][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 221.398197][T10876] netlink: 'syz.3.1442': attribute type 8 has an invalid length. [ 221.508898][T10881] netpci0: tun_chr_ioctl cmd 1074025672 [ 221.514580][T10881] netpci0: ignored: set checksum disabled [ 221.548253][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1443'. [ 221.668966][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.678909][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 221.737373][T10894] lo speed is unknown, defaulting to 1000 [ 221.768516][T10894] lo speed is unknown, defaulting to 1000 [ 221.793319][T10898] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 221.862523][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 221.961616][T10900] netlink: 'syz.3.1450': attribute type 8 has an invalid length. [ 221.998817][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 222.206138][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.402868][T10916] Bluetooth: MGMT ver 1.23 [ 222.807845][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.827003][T10928] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.843514][T10928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.154340][T10944] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 223.236360][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.460962][T10947] lo speed is unknown, defaulting to 1000 [ 223.585121][T10947] lo speed is unknown, defaulting to 1000 [ 224.103122][T10976] IPv6: NLM_F_REPLACE set, but no existing node found! [ 224.276283][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.437781][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 224.692529][T10991] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 225.158106][ T30] audit: type=1107 audit(1742354431.868:5): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ðçân…àlæ÷L†rÔ•ánP=Ý ¯¦Iûd›"”ÑÖ¤:Äœ^›[g+¨,’§kŽö]¬,t«h@œÅd>îMJD†n©9Ÿèµ [ 225.158106][ T30] ekAŒVº¢n:3ËâtBßVÇ' [ 225.316179][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.398671][T11003] lo speed is unknown, defaulting to 1000 [ 225.485438][T11003] lo speed is unknown, defaulting to 1000 [ 225.576453][T11019] __nla_validate_parse: 8 callbacks suppressed [ 225.576480][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1485'. [ 225.584975][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 225.646930][T11020] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 225.754835][T11020] lo speed is unknown, defaulting to 1000 [ 225.834695][T11030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.937065][T11020] lo speed is unknown, defaulting to 1000 [ 226.047183][T11009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1479'. [ 226.292312][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1491'. [ 226.356183][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.760567][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1494'. [ 226.788854][T11055] netlink: 'syz.2.1493': attribute type 3 has an invalid length. [ 226.819325][T11055] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1493'. [ 226.985356][T11062] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 226.995414][T11061] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 227.100529][T11062] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 227.188600][T11062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.197781][ T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 227.240616][T11071] veth3: entered promiscuous mode [ 227.291815][T11071] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 227.325097][T11064] lo: entered allmulticast mode [ 227.337450][ T8244] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 227.348440][T11063] lo: left allmulticast mode [ 227.396193][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.781605][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 227.789953][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1507'. [ 227.793492][T11101] netlink: 'syz.2.1504': attribute type 20 has an invalid length. [ 227.812554][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 228.138196][T11118] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 228.407345][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1513'. [ 228.435502][T11136] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 228.446226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.895033][T11157] netlink: 'syz.4.1521': attribute type 9 has an invalid length. [ 229.476158][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.850122][T11162] lo speed is unknown, defaulting to 1000 [ 229.867835][T11162] lo speed is unknown, defaulting to 1000 [ 230.334179][T11197] netlink: 'syz.3.1530': attribute type 3 has an invalid length. [ 230.526955][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.660822][T11204] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 230.722414][T11209] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 230.724069][T11204] __nla_validate_parse: 3 callbacks suppressed [ 230.724088][T11204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1529'. [ 230.762078][T11209] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 230.816507][T11204] veth0_vlan: left promiscuous mode [ 230.821818][T11204] veth0_vlan: entered promiscuous mode [ 230.895698][T11204] veth0_vlan: entered allmulticast mode [ 231.000127][T11204] bridge0: port 4(veth0_vlan) entered blocking state [ 231.036911][T11204] bridge0: port 4(veth0_vlan) entered disabled state [ 231.045627][T11204] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 231.168881][T11225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1540'. [ 231.566241][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.304786][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'. [ 232.480423][T11289] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 232.528041][T11293] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.560156][T11293] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.582661][T11293] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.596241][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.614553][T11293] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.633352][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1558'. [ 232.638140][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 232.651605][T11301] netem: incorrect ge model size [ 232.659253][T11301] netem: change failed [ 232.664019][T11302] netem: incorrect ge model size [ 232.670769][T11302] netem: change failed [ 232.833276][T11310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1563'. [ 232.933457][T11317] Bluetooth: MGMT ver 1.23 [ 232.972535][T11312] lo speed is unknown, defaulting to 1000 [ 232.981084][T11312] lo speed is unknown, defaulting to 1000 [ 233.347147][T11333] x_tables: ip_tables: udp match: only valid for protocol 17 [ 233.636223][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.700460][T11346] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1575'. [ 233.956608][T11357] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 234.041590][T11359] lo speed is unknown, defaulting to 1000 [ 234.050143][T11359] lo speed is unknown, defaulting to 1000 [ 234.115964][T11341] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1572'. [ 234.136188][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1572'. [ 234.155890][T11341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 234.263528][T11366] bridge3: entered allmulticast mode [ 234.500962][T11363] x_tables: duplicate entry at hook 2 [ 234.571314][T11376] macvlan1: entered promiscuous mode [ 234.578175][T11376] ipvlan0: entered promiscuous mode [ 234.584748][T11376] ipvlan0: left promiscuous mode [ 234.616548][T11376] macvlan1: left promiscuous mode [ 234.686140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.728491][T11380] lo speed is unknown, defaulting to 1000 [ 234.735341][T11380] lo speed is unknown, defaulting to 1000 [ 235.632805][T11413] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 235.645205][T11412] netlink: 'syz.3.1596': attribute type 1 has an invalid length. [ 235.716180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.324472][T11436] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 236.756150][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.757471][T11453] __nla_validate_parse: 3 callbacks suppressed [ 236.757492][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 237.100253][T11474] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 237.228788][T11474] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 237.282690][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1620'. [ 237.333706][T11474] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 237.424473][T11474] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 237.534694][T11474] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 237.577501][T11474] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 237.594062][T11474] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 237.655385][T11474] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 237.796145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.619464][T11554] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 238.670968][T11554] bond2: (slave gretap1): making interface the new active one [ 238.679967][T11554] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 238.836236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.838062][T11567] netlink: 'syz.1.1644': attribute type 1 has an invalid length. [ 238.895133][T11567] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1644'. [ 239.109085][T11578] sctp: [Deprecated]: syz.3.1648 (pid 11578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.109085][T11578] Use struct sctp_sack_info instead [ 239.136782][T11580] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.299381][T11580] lo speed is unknown, defaulting to 1000 [ 239.332024][T11580] lo speed is unknown, defaulting to 1000 [ 239.886153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.313905][T11619] lo speed is unknown, defaulting to 1000 [ 240.350189][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 240.351014][T11619] lo speed is unknown, defaulting to 1000 [ 240.419771][T11628] ªªªªªª: renamed from lo [ 240.457999][T11627] xt_ecn: cannot match TCP bits for non-tcp packets [ 240.916241][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.138721][T11645] netlink: 'syz.2.1669': attribute type 2 has an invalid length. [ 241.146903][T11645] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1669'. [ 241.297081][T11650] netlink: 'syz.1.1670': attribute type 16 has an invalid length. [ 241.323869][T11650] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1670'. [ 241.328478][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 241.395908][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1673'. [ 241.956298][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.665761][T11712] netlink: 'syz.2.1694': attribute type 13 has an invalid length. [ 243.006194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.367346][T11750] FAULT_INJECTION: forcing a failure. [ 243.367346][T11750] name failslab, interval 1, probability 0, space 0, times 0 [ 243.399493][T11750] CPU: 1 UID: 0 PID: 11750 Comm: syz.2.1703 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 243.399525][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.399538][T11750] Call Trace: [ 243.399545][T11750] [ 243.399554][T11750] dump_stack_lvl+0x241/0x360 [ 243.399600][T11750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.399624][T11750] ? __pfx__printk+0x10/0x10 [ 243.399659][T11750] should_fail_ex+0x40a/0x550 [ 243.399697][T11750] should_failslab+0xac/0x100 [ 243.399727][T11750] ? skb_clone+0x20c/0x390 [ 243.399753][T11750] kmem_cache_alloc_noprof+0x70/0x380 [ 243.399788][T11750] skb_clone+0x20c/0x390 [ 243.399818][T11750] __netlink_deliver_tap+0x3c4/0x7f0 [ 243.399862][T11750] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.399893][T11750] netlink_deliver_tap+0x19d/0x1b0 [ 243.399926][T11750] netlink_unicast+0x7c4/0x990 [ 243.399964][T11750] ? __pfx_netlink_unicast+0x10/0x10 [ 243.399990][T11750] ? __virt_addr_valid+0x45f/0x530 [ 243.400012][T11750] ? __phys_addr_symbol+0x2f/0x70 [ 243.400042][T11750] ? __check_object_size+0x47a/0x730 [ 243.400077][T11750] netlink_sendmsg+0x8de/0xcb0 [ 243.400122][T11750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.400159][T11750] ? __pfx_aa_file_perm+0x10/0x10 [ 243.400180][T11750] ? aa_sock_msg_perm+0x91/0x160 [ 243.400218][T11750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.400249][T11750] __sock_sendmsg+0x221/0x270 [ 243.400284][T11750] sock_write_iter+0x2d7/0x3f0 [ 243.400316][T11750] ? __pfx_sock_write_iter+0x10/0x10 [ 243.400358][T11750] ? bpf_lsm_file_permission+0x9/0x10 [ 243.400397][T11750] vfs_write+0xacf/0xd10 [ 243.400425][T11750] ? __pfx_sock_write_iter+0x10/0x10 [ 243.400456][T11750] ? __pfx_vfs_write+0x10/0x10 [ 243.400476][T11750] ? do_sys_openat2+0x17a/0x1d0 [ 243.400509][T11750] ? __fget_files+0x2a/0x410 [ 243.400543][T11750] ? __fget_files+0x2a/0x410 [ 243.400583][T11750] ksys_write+0x18f/0x2b0 [ 243.400606][T11750] ? __pfx_ksys_write+0x10/0x10 [ 243.400631][T11750] ? do_syscall_64+0x100/0x230 [ 243.400662][T11750] ? do_syscall_64+0xb6/0x230 [ 243.400693][T11750] do_syscall_64+0xf3/0x230 [ 243.400721][T11750] ? clear_bhb_loop+0x35/0x90 [ 243.400753][T11750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.400782][T11750] RIP: 0033:0x7f34afd8d169 [ 243.400808][T11750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.400826][T11750] RSP: 002b:00007f34adbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.400856][T11750] RAX: ffffffffffffffda RBX: 00007f34affa5fa0 RCX: 00007f34afd8d169 [ 243.400871][T11750] RDX: 000000000000fcae RSI: 0000400000000240 RDI: 0000000000000003 [ 243.400884][T11750] RBP: 00007f34adbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.400897][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.400910][T11750] R13: 0000000000000000 R14: 00007f34affa5fa0 R15: 00007ffd7ae5f408 [ 243.400940][T11750] [ 243.401438][T11750] netlink: 'syz.2.1703': attribute type 16 has an invalid length. [ 243.545122][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 243.551366][T11750] netlink: 'syz.2.1703': attribute type 3 has an invalid length. [ 243.723749][T11750] netlink: 64102 bytes leftover after parsing attributes in process `syz.2.1703'. [ 243.815455][T11761] syzkaller1: entered promiscuous mode [ 243.821090][T11761] syzkaller1: entered allmulticast mode [ 243.903136][T11765] batman_adv: batadv0: Removing interface: dummy0 [ 243.911313][T11765] bridge_slave_0: left allmulticast mode [ 243.916961][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 243.927319][T11765] bridge_slave_0: left promiscuous mode [ 243.933856][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.967810][T11765] bridge_slave_1: left allmulticast mode [ 243.975436][T11765] bridge_slave_1: left promiscuous mode [ 243.985329][T11767] netlink: 'syz.3.1710': attribute type 16 has an invalid length. [ 243.993716][T11767] netlink: 'syz.3.1710': attribute type 3 has an invalid length. [ 244.001700][T11767] netlink: 64102 bytes leftover after parsing attributes in process `syz.3.1710'. [ 244.012551][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.043717][T11765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.051106][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.103005][T11765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.131758][T11765] bond0: (slave macvlan2): Releasing backup interface [ 244.161965][T11765] bond1: (slave gretap2): Releasing active interface [ 244.328307][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 244.488811][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'. [ 244.530175][T11792] netlink: 'syz.1.1717': attribute type 16 has an invalid length. [ 244.539562][T11792] netlink: 'syz.1.1717': attribute type 3 has an invalid length. [ 244.551267][T11792] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.1717'. [ 244.614926][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1718'. [ 244.635635][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 244.810142][T11801] lo speed is unknown, defaulting to 1000 [ 244.817360][T11801] lo speed is unknown, defaulting to 1000 [ 244.838123][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'. [ 245.033358][T11815] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 245.086299][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.291158][T11819] netlink: 'syz.2.1723': attribute type 16 has an invalid length. [ 245.472641][T11809] lo speed is unknown, defaulting to 1000 [ 245.512328][T11809] lo speed is unknown, defaulting to 1000 [ 245.534487][T11815] tap0: tun_chr_ioctl cmd 1074025677 [ 245.551361][T11815] tap0: linktype set to 804 [ 245.632824][T11821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.670918][T11821] team0: Port device bond0 added [ 245.755664][T11822] bridge0: port 2(team0) entered blocking state [ 245.776543][T11822] bridge0: port 2(team0) entered disabled state [ 245.783281][T11822] team0: entered allmulticast mode [ 245.826302][T11822] team_slave_0: entered allmulticast mode [ 245.856505][T11822] team_slave_1: entered allmulticast mode [ 245.862318][T11822] bond0: entered allmulticast mode [ 245.865952][T11826] ax25_connect(): syz.3.1725 uses autobind, please contact jreuter@yaina.de [ 245.894621][T11822] : entered allmulticast mode [ 245.915910][T11822] bond_slave_1: entered allmulticast mode [ 245.937584][T11822] team0: entered promiscuous mode [ 245.942714][T11822] team_slave_0: entered promiscuous mode [ 245.958157][T11822] team_slave_1: entered promiscuous mode [ 245.964031][T11822] bond0: entered promiscuous mode [ 245.969437][T11822] : entered promiscuous mode [ 245.974421][T11822] bond_slave_1: entered promiscuous mode [ 245.984936][T11822] bridge0: port 2(team0) entered blocking state [ 245.992803][T11822] bridge0: port 2(team0) entered forwarding state [ 246.116254][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.210622][T11829] validate_nla: 1 callbacks suppressed [ 246.210642][T11829] netlink: 'syz.4.1727': attribute type 9 has an invalid length. [ 246.571827][T11842] lo speed is unknown, defaulting to 1000 [ 246.618292][T11842] lo speed is unknown, defaulting to 1000 [ 246.827834][T11854] netlink: 'syz.4.1737': attribute type 7 has an invalid length. [ 246.835649][T11854] netlink: 'syz.4.1737': attribute type 8 has an invalid length. [ 247.123239][T11865] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.156466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.197453][T11865] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 247.238243][T11865] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 247.310420][ T9] lo speed is unknown, defaulting to 1000 [ 247.317297][ T9] lo speed is unknown, defaulting to 1000 [ 247.355062][T11875] vcan1: entered allmulticast mode [ 247.608254][T11880] lo speed is unknown, defaulting to 1000 [ 247.650249][T11880] lo speed is unknown, defaulting to 1000 [ 248.196244][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.615956][T11918] __nla_validate_parse: 15 callbacks suppressed [ 248.615978][T11918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 248.755412][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'. [ 248.785662][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'. [ 248.796643][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'. [ 248.816936][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'. [ 248.881924][T11920] netlink: 'syz.4.1758': attribute type 16 has an invalid length. [ 248.890476][T11920] netlink: 63882 bytes leftover after parsing attributes in process `syz.4.1758'. [ 249.128912][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 249.192788][T11946] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1764'. [ 249.236233][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.650424][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'. [ 249.680387][T11962] tc_dump_action: action bad kind [ 249.943904][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1773'. [ 250.286138][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.647072][T12009] netlink: 'syz.0.1783': attribute type 16 has an invalid length. [ 250.693600][T12009] netlink: 'syz.0.1783': attribute type 3 has an invalid length. [ 250.743266][T12009] FAULT_INJECTION: forcing a failure. [ 250.743266][T12009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.779365][T12009] CPU: 0 UID: 0 PID: 12009 Comm: syz.0.1783 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 250.779396][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.779410][T12009] Call Trace: [ 250.779417][T12009] [ 250.779426][T12009] dump_stack_lvl+0x241/0x360 [ 250.779459][T12009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.779482][T12009] ? __pfx__printk+0x10/0x10 [ 250.779507][T12009] ? __pfx_lock_release+0x10/0x10 [ 250.779540][T12009] ? __lock_acquire+0x1397/0x2100 [ 250.779578][T12009] should_fail_ex+0x40a/0x550 [ 250.779616][T12009] _copy_from_user+0x2d/0xb0 [ 250.779646][T12009] kstrtouint_from_user+0xc6/0x190 [ 250.779674][T12009] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 250.779703][T12009] ? __pfx_lock_acquire+0x10/0x10 [ 250.779746][T12009] proc_fail_nth_write+0xaa/0x2d0 [ 250.779777][T12009] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 250.779805][T12009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.779842][T12009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.779875][T12009] vfs_write+0x29f/0xd10 [ 250.779900][T12009] ? fdget_pos+0x254/0x320 [ 250.779930][T12009] ? __mutex_unlock_slowpath+0x227/0x800 [ 250.779963][T12009] ? __pfx_vfs_write+0x10/0x10 [ 250.779983][T12009] ? do_sys_openat2+0x17a/0x1d0 [ 250.780018][T12009] ? __fget_files+0x2a/0x410 [ 250.780051][T12009] ? __fget_files+0x395/0x410 [ 250.780081][T12009] ? __fget_files+0x2a/0x410 [ 250.780122][T12009] ksys_write+0x18f/0x2b0 [ 250.780148][T12009] ? __pfx_ksys_write+0x10/0x10 [ 250.780172][T12009] ? do_syscall_64+0x100/0x230 [ 250.780204][T12009] ? do_syscall_64+0xb6/0x230 [ 250.780243][T12009] do_syscall_64+0xf3/0x230 [ 250.780271][T12009] ? clear_bhb_loop+0x35/0x90 [ 250.780303][T12009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.780331][T12009] RIP: 0033:0x7f8ddd78bc1f [ 250.780348][T12009] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 250.780365][T12009] RSP: 002b:00007f8dde6c0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.780387][T12009] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ddd78bc1f [ 250.780402][T12009] RDX: 0000000000000001 RSI: 00007f8dde6c00a0 RDI: 0000000000000004 [ 250.780414][T12009] RBP: 00007f8dde6c0090 R08: 0000000000000000 R09: 0000000000000000 [ 250.780426][T12009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 250.780438][T12009] R13: 0000000000000000 R14: 00007f8ddd9a5fa0 R15: 00007ffee63de9c8 [ 250.780468][T12009] [ 251.132893][T12018] : renamed from bond0 [ 251.173811][T12018] syzkaller1: entered promiscuous mode [ 251.180156][T12018] syzkaller1: entered allmulticast mode [ 251.247043][T12018] sch_fq: defrate 2048 ignored. [ 251.316461][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.355390][T12039] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.390065][T12030] bridge0: port 2(team0) entered disabled state [ 251.396562][T12030] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.481826][T12030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.494342][T12030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.599815][T12030] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.610148][T12030] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.619513][T12030] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.628912][T12030] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.643584][T12030] bond1: left promiscuous mode [ 251.649680][T12030] bond1: left allmulticast mode [ 251.664161][ T5933] lo speed is unknown, defaulting to 1000 [ 251.876618][T12047] lo speed is unknown, defaulting to 1000 [ 251.883648][T12047] lo speed is unknown, defaulting to 1000 [ 252.356339][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.470753][T12043] netlink: 'syz.2.1793': attribute type 9 has an invalid length. [ 252.493525][T12043] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 252.957263][T12085] netlink: 'syz.4.1804': attribute type 21 has an invalid length. [ 252.996134][T12085] netlink: 'syz.4.1804': attribute type 20 has an invalid length. [ 253.032091][T12081] openvswitch: netlink: Message has 1 unknown bytes. [ 253.045791][T12081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.406201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.424093][T12102] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 253.630795][T12112] __nla_validate_parse: 6 callbacks suppressed [ 253.630817][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 253.876481][T12120] bridge_slave_0: left allmulticast mode [ 253.896228][T12120] bridge_slave_0: left promiscuous mode [ 253.902242][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.950198][T12120] bridge_slave_1: left allmulticast mode [ 253.980230][T12120] bridge_slave_1: left promiscuous mode [ 253.986099][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.040038][T12120] bond0: (slave veth0_to_bond): Releasing backup interface [ 254.065201][T12120] bond0: (slave bond_slave_0): Releasing backup interface [ 254.117865][T12120] bond0: (slave bond_slave_1): Releasing backup interface [ 254.168295][T12120] team0: Port device team_slave_0 removed [ 254.174403][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 254.198364][T12120] team0: Port device team_slave_1 removed [ 254.205116][T12120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.216431][T12120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.239979][T12120] bond0: (slave macvlan2): Releasing backup interface [ 254.280422][T12120] bond1: (slave batadv1): Removing an active aggregator [ 254.303692][T12120] bond1: (slave batadv1): Releasing backup interface [ 254.319935][T12120] team0: Port device macvlan3 removed [ 254.327857][T12120] bond2: (slave ip6gretap1): Removing an active aggregator [ 254.335819][T12120] bond2: (slave ip6gretap1): Releasing backup interface [ 254.343108][T12120] bond2: (slave ip6gretap1): the permanent HWaddr of slave - e2:4a:97:b7:84:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 254.378861][T12120] bond2: (slave veth3): Releasing backup interface [ 254.412092][T12135] vlan3: entered promiscuous mode [ 254.436146][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.513911][T12139] lo speed is unknown, defaulting to 1000 [ 254.537954][T12139] lo speed is unknown, defaulting to 1000 [ 254.705732][T12145] pim6reg1: entered promiscuous mode [ 254.742928][T12145] pim6reg1: entered allmulticast mode [ 254.792355][T12149] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 254.815667][T12149] macsec1: entered promiscuous mode [ 254.835308][T12149] macsec1: entered allmulticast mode [ 254.866528][T12149] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 254.994807][T12137] x_tables: duplicate entry at hook 2 [ 255.084483][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1829'. [ 255.173893][T12169] xt_hashlimit: overflow, try lower: 0/0 [ 255.274799][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1832'. [ 255.339589][T12177] netlink: 'syz.4.1832': attribute type 29 has an invalid length. [ 255.349206][T12177] netlink: 'syz.4.1832': attribute type 29 has an invalid length. [ 255.357475][T12177] netlink: 'syz.4.1832': attribute type 29 has an invalid length. [ 255.365621][T12177] netlink: 'syz.4.1832': attribute type 29 has an invalid length. [ 255.402231][T12177] netlink: 'syz.4.1832': attribute type 29 has an invalid length. [ 255.446802][T12177] netlink: 'syz.4.1832': attribute type 29 has an invalid length. [ 255.477928][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.017041][T12200] vlan0: entered promiscuous mode [ 256.022233][T12201] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1840'. [ 256.022317][T12200] vlan0: entered allmulticast mode [ 256.046552][T12200] hsr_slave_1: entered allmulticast mode [ 256.120994][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.328914][T12209] lo speed is unknown, defaulting to 1000 [ 256.335772][T12209] lo speed is unknown, defaulting to 1000 [ 256.478638][T12219] lo speed is unknown, defaulting to 1000 [ 256.516156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.598839][T12232] syzkaller1: left promiscuous mode [ 256.604124][T12232] syzkaller1: left allmulticast mode [ 256.651143][T12228] lo speed is unknown, defaulting to 1000 [ 256.688761][T12219] lo speed is unknown, defaulting to 1000 [ 256.847459][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 256.896401][T12237] openvswitch: netlink: Message has 3 unknown bytes. [ 256.911115][T12238] team0: Port device wlan1 added [ 257.000345][T12228] lo speed is unknown, defaulting to 1000 [ 257.172429][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 257.181798][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 257.495499][T12232] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1847'. [ 257.566140][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.671112][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 258.031452][T12266] lo speed is unknown, defaulting to 1000 [ 258.167398][T12266] lo speed is unknown, defaulting to 1000 [ 258.596145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.599790][T12279] syzkaller0: entered promiscuous mode [ 258.644899][T12279] syzkaller0: entered allmulticast mode [ 259.638767][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.677478][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.257518][T12288] bond0: left allmulticast mode [ 261.262464][T12288] : left allmulticast mode [ 261.291956][T12288] bond_slave_1: left allmulticast mode [ 261.310156][T12288] team0: Port device bond0 removed [ 261.317909][T12288] team0: left allmulticast mode [ 261.323132][T12288] team_slave_0: left allmulticast mode [ 261.328876][T12288] team_slave_1: left allmulticast mode [ 261.334534][T12288] team0: left promiscuous mode [ 261.340001][T12288] team_slave_0: left promiscuous mode [ 261.345759][T12288] team_slave_1: left promiscuous mode [ 261.351934][T12288] bridge0: port 2(team0) entered disabled state [ 261.367757][T12288] bridge_slave_0: left allmulticast mode [ 261.378764][T12288] bridge_slave_0: left promiscuous mode [ 261.384581][T12288] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.477502][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 261.477920][T12288] bond0: (slave 4): Releasing backup interface [ 261.508687][T12288] : left promiscuous mode [ 261.531994][T12288] bond0: (slave bond_slave_1): Releasing backup interface [ 261.547026][T12288] bond_slave_1: left promiscuous mode [ 261.578924][T12288] team0: Port device team_slave_0 removed [ 261.598869][T12288] team0: Port device team_slave_1 removed [ 261.605969][T12288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.647413][T12288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.666702][T12288] bond2: (slave gretap1): Releasing active interface [ 261.686890][T12293] bond0: left promiscuous mode [ 261.691742][T12293] bond_slave_0: left promiscuous mode [ 261.706507][T12293] bond_slave_1: left promiscuous mode [ 261.716425][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.727494][T12293] bond0: left allmulticast mode [ 261.732540][T12293] bond_slave_0: left allmulticast mode [ 261.746111][T12293] bond_slave_1: left allmulticast mode [ 261.755783][T12293] team0: Port device bond0 removed [ 261.766643][T12293] team0: left allmulticast mode [ 261.771573][T12293] C: left allmulticast mode [ 261.786240][T12293] team_slave_1: left allmulticast mode [ 261.791824][T12293] team0: left promiscuous mode [ 261.796863][T12293] C: left promiscuous mode [ 261.801647][T12293] team_slave_1: left promiscuous mode [ 261.807603][T12293] bridge0: port 3(team0) entered disabled state [ 261.819644][T12293] bridge_slave_0: left allmulticast mode [ 261.825365][T12293] bridge_slave_0: left promiscuous mode [ 261.834429][T12293] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.847699][T12293] bridge_slave_1: left allmulticast mode [ 261.853405][T12293] bridge_slave_1: left promiscuous mode [ 261.868333][T12293] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.888069][T12293] bond0: (slave bond_slave_0): Releasing backup interface [ 261.919522][T12293] bond0: (slave bond_slave_1): Releasing backup interface [ 261.943019][T12293] team0: Port device C removed [ 261.967344][T12293] team0: Port device team_slave_1 removed [ 261.976251][T12293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.999201][T12293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.022172][T12295] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 262.030186][T12300] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1859'. [ 262.172015][T12309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.434504][T12330] bridge0: port 1(hsr0) entered blocking state [ 262.456652][T12330] bridge0: port 1(hsr0) entered disabled state [ 262.463088][T12330] hsr0: entered allmulticast mode [ 262.497816][T12330] hsr_slave_0: entered allmulticast mode [ 262.513614][T12330] hsr_slave_1: entered allmulticast mode [ 262.548396][T12330] hsr0: entered promiscuous mode [ 262.567440][T12330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 262.756237][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.126503][T12362] syzkaller1: entered promiscuous mode [ 263.132173][T12362] syzkaller1: entered allmulticast mode [ 263.147520][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1879'. [ 263.168967][T12364] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 263.371528][T12375] validate_nla: 32 callbacks suppressed [ 263.372510][T12375] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 263.412035][T12375] syz_tun: entered promiscuous mode [ 263.433193][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 263.458552][T12375] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 263.590656][T12391] batadv_slave_1: entered promiscuous mode [ 263.620483][T12391] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 263.657428][T12388] batadv_slave_1: left promiscuous mode [ 263.806469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.990229][T12401] veth3: left promiscuous mode [ 263.998324][T12401] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 264.016237][T12401] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 264.045837][T12401] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 264.056192][T12401] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 264.075216][T12401] hsr_slave_1: left allmulticast mode [ 264.093517][T12401] vlan0: left promiscuous mode [ 264.128403][T12401] vlan0: left allmulticast mode [ 264.177688][ T30] audit: type=1800 audit(1742354470.898:6): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1895" name="memory.events" dev="tmpfs" ino=1968 res=0 errno=0 [ 264.368580][T12430] netlink: 'syz.1.1897': attribute type 16 has an invalid length. [ 264.377016][T12430] netlink: 'syz.1.1897': attribute type 3 has an invalid length. [ 264.384796][T12430] netlink: 64102 bytes leftover after parsing attributes in process `syz.1.1897'. [ 264.420810][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 264.540067][T12439] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1902'. [ 264.563292][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1902'. [ 264.647919][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 264.666231][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1903'. [ 264.733028][T12448] sch_tbf: burst 3631 is lower than device lo mtu (11337746) ! [ 264.846132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.905962][T12453] batadv1: entered promiscuous mode [ 264.922078][T12453] batadv1: entered allmulticast mode [ 264.972887][T12454] batadv1: entered promiscuous mode [ 264.979099][T12454] batadv1: entered allmulticast mode [ 265.085041][T12462] bridge0: port 2(team0) entered blocking state [ 265.097228][T12462] bridge0: port 2(team0) entered disabled state [ 265.103906][T12462] team0: entered allmulticast mode [ 265.112978][T12462] team0: entered promiscuous mode [ 265.146761][T12464] openvswitch: netlink: Multiple metadata blocks provided [ 265.684914][T12494] netlink: 'syz.0.1918': attribute type 1 has an invalid length. [ 265.796899][T12496] macvtap1: entered promiscuous mode [ 265.802269][T12496] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 265.821898][T12496] macvtap1: entered allmulticast mode [ 265.835400][T12496] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 265.876132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.895929][T12496] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 265.906306][T12496] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 266.092036][T12512] netlink: 'syz.4.1923': attribute type 16 has an invalid length. [ 266.118154][T12512] netlink: 'syz.4.1923': attribute type 3 has an invalid length. [ 266.190108][T12519] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 32 [ 266.357259][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 266.462462][T12532] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 266.588868][T12537] __nla_validate_parse: 11 callbacks suppressed [ 266.588892][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'. [ 266.801537][T12547] lo speed is unknown, defaulting to 1000 [ 266.896466][T12547] lo speed is unknown, defaulting to 1000 [ 266.907041][T12556] netlink: 'syz.4.1938': attribute type 9 has an invalid length. [ 266.916422][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.040207][T12551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1937'. [ 267.120928][T12562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 267.238162][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1939'. [ 267.819943][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 267.833439][T12582] netlink: 'syz.2.1943': attribute type 2 has an invalid length. [ 267.895686][T12580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 267.933713][T12582] fþ: entered promiscuous mode [ 267.956285][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.861736][T12622] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1955'. [ 268.878192][T12619] lo speed is unknown, defaulting to 1000 [ 268.885081][T12619] lo speed is unknown, defaulting to 1000 [ 268.893403][T12622] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1955'. [ 268.926288][T12622] vlan0: entered promiscuous mode [ 268.943427][T12622] netlink: 'syz.1.1955': attribute type 16 has an invalid length. [ 269.006250][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.014381][T12622] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1955'. [ 269.551861][T12644] lo speed is unknown, defaulting to 1000 [ 269.651230][T12644] lo speed is unknown, defaulting to 1000 [ 269.657984][T12645] lo speed is unknown, defaulting to 1000 [ 270.046134][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.235354][T12645] lo speed is unknown, defaulting to 1000 [ 270.641840][T12667] tap0: tun_chr_ioctl cmd 1074025677 [ 270.647569][T12667] tap0: linktype set to 778 [ 271.076385][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.187704][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 271.265568][T12675] tipc: Enabling of bearer rejected, failed to enable media [ 271.326647][T12671] lo speed is unknown, defaulting to 1000 [ 271.336419][T12671] lo speed is unknown, defaulting to 1000 [ 271.450452][T12691] lo speed is unknown, defaulting to 1000 [ 272.116202][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.559620][T12718] vlan2: entered promiscuous mode [ 272.589627][T12718] team0: Device vlan2 is already an upper device of the team interface [ 272.692608][T12719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 272.736314][T12719] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 272.744121][T12719] gretap0: entered promiscuous mode [ 272.756536][T12719] gretap0: entered allmulticast mode [ 273.245915][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.747480][T12748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1985'. [ 273.757118][T12748] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1985'. [ 273.977469][T12756] lo speed is unknown, defaulting to 1000 [ 273.999103][T12756] lo speed is unknown, defaulting to 1000 [ 274.157609][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 274.176176][T12770] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1994'. [ 274.276231][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.379126][T12778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1996'. [ 274.774737][T12789] lo speed is unknown, defaulting to 1000 [ 274.852135][T12789] lo speed is unknown, defaulting to 1000 [ 274.879241][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2000'. [ 275.007293][T12803] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 275.137732][T12808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2004'. [ 275.188680][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'. [ 275.199372][T12813] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 275.316338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.334696][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2006'. [ 275.365394][T12814] bond0: (slave gretap3): making interface the new active one [ 275.378258][T12814] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 275.619715][T12830] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 275.636374][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 276.367645][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.402363][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.049226][T12840] vlan2: entered allmulticast mode [ 278.072222][T12840] bond0: entered allmulticast mode [ 278.109063][T12840] syz_tun: entered allmulticast mode [ 278.134938][T12840] bond0: left allmulticast mode [ 278.146285][T12840] syz_tun: left allmulticast mode [ 278.216971][T12849] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2014'. [ 278.436323][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.767433][T12864] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 278.876784][T12865] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2018'. [ 278.913663][T12866] lo speed is unknown, defaulting to 1000 [ 278.989084][T12866] lo speed is unknown, defaulting to 1000 [ 279.117708][T12869] lo speed is unknown, defaulting to 1000 [ 279.476139][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.935638][T12869] lo speed is unknown, defaulting to 1000 [ 280.308022][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 280.526121][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.893218][T12926] openvswitch: netlink: IP tunnel dst address not specified [ 281.445149][T12948] netlink: 'syz.0.2040': attribute type 10 has an invalid length. [ 281.479740][T12948] lo: entered promiscuous mode [ 281.498987][T12948] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 281.546726][ T5905] lo speed is unknown, defaulting to 1000 [ 281.552752][ T5905] lo speed is unknown, defaulting to 1000 [ 281.558622][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.845915][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 281.847798][T12953] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.886256][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 282.007671][T12954] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2043'. [ 282.142458][T12966] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.159519][T12964] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 282.168225][T12964] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2046'. [ 282.300524][T12967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2045'. [ 282.318499][T12974] No such timeout policy "syz0" [ 282.606158][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.714657][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 282.881633][T12999] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2057'. [ 282.889081][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 282.982526][T13004] xt_TCPMSS: Only works on TCP SYN packets [ 283.646130][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.955791][T13053] sctp: [Deprecated]: syz.1.2075 (pid 13053) Use of int in max_burst socket option. [ 283.955791][T13053] Use struct sctp_assoc_value instead [ 284.008111][T13055] syzkaller0: entered allmulticast mode [ 284.011829][T13057] sctp: [Deprecated]: syz.0.2077 (pid 13057) Use of int in max_burst socket option deprecated. [ 284.011829][T13057] Use struct sctp_assoc_value instead [ 284.051180][T13055] syzkaller0 (unregistering): left allmulticast mode [ 284.196299][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 284.676194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.046225][T13096] __nla_validate_parse: 2 callbacks suppressed [ 285.046246][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2089'. [ 285.424919][T13112] syzkaller1: entered promiscuous mode [ 285.438566][T13112] syzkaller1: entered allmulticast mode [ 285.467575][T13117] netlink: 'syz.4.2097': attribute type 3 has an invalid length. [ 285.488843][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2097'. [ 285.644908][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2099'. [ 285.716180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.860845][T13131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2102'. [ 286.318470][T13149] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 286.340869][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 286.497566][T13154] netlink: 'syz.1.2109': attribute type 21 has an invalid length. [ 286.505477][T13154] netlink: 'syz.1.2109': attribute type 20 has an invalid length. [ 286.567583][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2110'. [ 286.627731][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2110'. [ 286.748365][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2114'. [ 286.767660][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.985028][T13175] lo speed is unknown, defaulting to 1000 [ 286.995502][T13175] lo speed is unknown, defaulting to 1000 [ 287.036232][T13178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.106985][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 287.193006][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 287.713365][T13199] : entered promiscuous mode [ 287.796222][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.118263][T13211] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 288.575639][T13232] gre1: entered allmulticast mode [ 288.591621][T13232] bond0: (slave gre1): refused to change device type [ 288.836214][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.168936][T13259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.443180][T13274] xt_CT: No such helper "snmp" [ 289.511689][T13282] netlink: 'syz.1.2150': attribute type 2 has an invalid length. [ 289.532366][T13282] xt_l2tp: v2 doesn't support IP mode [ 289.547455][T13282] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 289.643288][T13282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.720760][T13286] bond2: (slave dummy0): making interface the new active one [ 289.738956][T13286] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 289.763664][T13288] lo speed is unknown, defaulting to 1000 [ 289.780481][T13296] openvswitch: netlink: Message has 8 unknown bytes. [ 289.818825][T13288] lo speed is unknown, defaulting to 1000 [ 289.886154][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.971552][T13293] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.027089][T13296] tipc: New replicast peer: 0.0.0.0 [ 290.043291][T13296] tipc: Enabled bearer , priority 10 [ 290.119114][T13293] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 290.138000][T13293] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 290.149103][T13293] bridge0: port 4(netdevsim2) entered disabled state [ 290.161128][T13293] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.298032][T13293] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.448109][T13293] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.565368][T13323] __nla_validate_parse: 7 callbacks suppressed [ 290.565389][T13323] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2160'. [ 290.643012][T13323] xt_hashlimit: size too large, truncated to 1048576 [ 290.781292][T13293] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.839903][T13328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.843237][T13293] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.895117][T13293] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.916145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.917127][T13293] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.929272][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 290.996573][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 291.156748][ T9] tipc: Node number set to 4271477761 [ 291.229755][T13337] pim6reg1: entered promiscuous mode [ 291.256296][T13337] pim6reg1: entered allmulticast mode [ 291.515123][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 291.535066][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 291.776503][T13362] netpci0: tun_chr_ioctl cmd 1074025681 [ 291.878440][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 291.907341][T13370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 291.956156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.082566][T13378] vlan0: entered promiscuous mode [ 292.102711][T13375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.419636][T13394] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 292.959635][T13413] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 293.006154][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.167109][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2195'. [ 293.187774][T13422] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 293.232825][T13424] can: request_module (can-proto-3) failed. [ 293.478938][T13436] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.503029][T13436] IPv6: Can't replace route, no match found [ 293.647406][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 293.868457][T13456] sctp: [Deprecated]: syz.2.2206 (pid 13456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 293.868457][T13456] Use struct sctp_sack_info instead [ 293.879626][T13457] ax25_connect(): syz.4.2207 uses autobind, please contact jreuter@yaina.de [ 293.894736][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2208'. [ 294.036579][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.204332][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 295.076171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.096335][T13503] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 295.336783][T13506] netlink: 'syz.2.2222': attribute type 10 has an invalid length. [ 295.371043][T13506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.395235][T13506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.428833][T13506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.452674][T13506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.493708][T13506] geneve0: entered promiscuous mode [ 295.510760][T13506] geneve0: entered allmulticast mode [ 295.528473][T13506] team0: Port device geneve0 added [ 295.554993][T13518] ipvlan2: entered promiscuous mode [ 295.583482][T13518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 295.666447][T13510] lo speed is unknown, defaulting to 1000 [ 295.674758][T13510] lo speed is unknown, defaulting to 1000 [ 295.980282][T13536] __nla_validate_parse: 4 callbacks suppressed [ 295.980304][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 296.116235][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.181949][T13541] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 296.210816][T13541] netlink: 'syz.1.2234': attribute type 2 has an invalid length. [ 296.258244][T13545] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2235'. [ 296.286810][T13542] gretap4: entered promiscuous mode [ 296.298996][T13545] batadv_slave_1: entered promiscuous mode [ 296.483003][T13554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2238'. [ 296.778599][T13563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2244'. [ 296.791237][T13563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2244'. [ 296.851665][T13563] [ 296.854052][T13563] ====================================================== [ 296.861094][T13563] WARNING: possible circular locking dependency detected [ 296.868135][T13563] 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 Not tainted [ 296.875255][T13563] ------------------------------------------------------ [ 296.882272][T13563] syz.4.2244/13563 is trying to acquire lock: [ 296.888338][T13563] ffff88807ef84d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 296.898639][T13563] [ 296.898639][T13563] but task is already holding lock: [ 296.906013][T13563] ffff888061ce0d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 296.915697][T13563] [ 296.915697][T13563] which lock already depends on the new lock. [ 296.915697][T13563] [ 296.926184][T13563] [ 296.926184][T13563] the existing dependency chain (in reverse order) is: [ 296.935210][T13563] [ 296.935210][T13563] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 296.943667][T13563] lock_acquire+0x1ed/0x550 [ 296.948719][T13563] __mutex_lock+0x19c/0x1010 [ 296.953845][T13563] __dev_open+0x5cb/0x8a0 [ 296.958708][T13563] netif_open+0xae/0x1b0 [ 296.963487][T13563] dev_open+0x13e/0x260 [ 296.968174][T13563] team_add_slave+0xabe/0x28a0 [ 296.973463][T13563] do_set_master+0x579/0x730 [ 296.978581][T13563] do_setlink+0xfee/0x40f0 [ 296.983519][T13563] rtnl_newlink+0x15a6/0x1d90 [ 296.988745][T13563] rtnetlink_rcv_msg+0x791/0xcf0 [ 296.994212][T13563] netlink_rcv_skb+0x206/0x480 [ 296.999505][T13563] netlink_unicast+0x7f6/0x990 [ 297.004796][T13563] netlink_sendmsg+0x8de/0xcb0 [ 297.010097][T13563] __sock_sendmsg+0x221/0x270 [ 297.015300][T13563] ____sys_sendmsg+0x53a/0x860 [ 297.020596][T13563] __sys_sendmsg+0x269/0x350 [ 297.025708][T13563] do_syscall_64+0xf3/0x230 [ 297.030742][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.037162][T13563] [ 297.037162][T13563] -> #1 (team->team_lock_key){+.+.}-{4:4}: [ 297.045187][T13563] lock_acquire+0x1ed/0x550 [ 297.050271][T13563] __mutex_lock+0x19c/0x1010 [ 297.055404][T13563] team_set_mac_address+0x122/0x280 [ 297.061168][T13563] netif_set_mac_address+0x327/0x510 [ 297.066989][T13563] do_setlink+0xaa6/0x40f0 [ 297.071941][T13563] rtnl_newlink+0x15a6/0x1d90 [ 297.077159][T13563] rtnetlink_rcv_msg+0x791/0xcf0 [ 297.082635][T13563] netlink_rcv_skb+0x206/0x480 [ 297.087937][T13563] netlink_unicast+0x7f6/0x990 [ 297.093251][T13563] netlink_sendmsg+0x8de/0xcb0 [ 297.098573][T13563] __sock_sendmsg+0x221/0x270 [ 297.103876][T13563] __sys_sendto+0x363/0x4c0 [ 297.108907][T13563] __x64_sys_sendto+0xde/0x100 [ 297.114210][T13563] do_syscall_64+0xf3/0x230 [ 297.119262][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.125815][T13563] [ 297.125815][T13563] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 297.134453][T13563] validate_chain+0x18ef/0x5920 [ 297.139840][T13563] __lock_acquire+0x1397/0x2100 [ 297.145229][T13563] lock_acquire+0x1ed/0x550 [ 297.150275][T13563] __mutex_lock+0x19c/0x1010 [ 297.155393][T13563] dev_set_mac_address+0x2a/0x50 [ 297.160855][T13563] bond_set_mac_address+0x28e/0x830 [ 297.166582][T13563] netif_set_mac_address+0x327/0x510 [ 297.172402][T13563] do_setlink+0xaa6/0x40f0 [ 297.177347][T13563] rtnl_newlink+0x15a6/0x1d90 [ 297.182557][T13563] rtnetlink_rcv_msg+0x791/0xcf0 [ 297.188033][T13563] netlink_rcv_skb+0x206/0x480 [ 297.193353][T13563] netlink_unicast+0x7f6/0x990 [ 297.198646][T13563] netlink_sendmsg+0x8de/0xcb0 [ 297.203937][T13563] __sock_sendmsg+0x221/0x270 [ 297.209148][T13563] ____sys_sendmsg+0x53a/0x860 [ 297.214438][T13563] __sys_sendmsg+0x269/0x350 [ 297.219552][T13563] do_syscall_64+0xf3/0x230 [ 297.224585][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.231005][T13563] [ 297.231005][T13563] other info that might help us debug this: [ 297.231005][T13563] [ 297.241230][T13563] Chain exists of: [ 297.241230][T13563] &dev_instance_lock_key#12 --> team->team_lock_key --> &dev_instance_lock_key#2 [ 297.241230][T13563] [ 297.256301][T13563] Possible unsafe locking scenario: [ 297.256301][T13563] [ 297.263753][T13563] CPU0 CPU1 [ 297.269115][T13563] ---- ---- [ 297.274476][T13563] lock(&dev_instance_lock_key#2); [ 297.279691][T13563] lock(team->team_lock_key); [ 297.286983][T13563] lock(&dev_instance_lock_key#2); [ 297.294717][T13563] lock(&dev_instance_lock_key#12); [ 297.300018][T13563] [ 297.300018][T13563] *** DEADLOCK *** [ 297.300018][T13563] [ 297.308157][T13563] 2 locks held by syz.4.2244/13563: [ 297.313350][T13563] #0: ffffffff8fed6e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 297.322428][T13563] #1: ffff888061ce0d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 297.332554][T13563] [ 297.332554][T13563] stack backtrace: [ 297.338476][T13563] CPU: 1 UID: 0 PID: 13563 Comm: syz.4.2244 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 297.338499][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.338509][T13563] Call Trace: [ 297.338517][T13563] [ 297.338525][T13563] dump_stack_lvl+0x241/0x360 [ 297.338547][T13563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.338565][T13563] ? __pfx__printk+0x10/0x10 [ 297.338585][T13563] print_circular_bug+0x13a/0x1b0 [ 297.338607][T13563] check_noncircular+0x36a/0x4a0 [ 297.338628][T13563] ? __pfx_check_noncircular+0x10/0x10 [ 297.338646][T13563] ? lockdep_lock+0x123/0x2b0 [ 297.338675][T13563] validate_chain+0x18ef/0x5920 [ 297.338702][T13563] ? __pfx_validate_chain+0x10/0x10 [ 297.338720][T13563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.338747][T13563] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 297.338766][T13563] ? lockdep_hardirqs_on+0x99/0x150 [ 297.338789][T13563] ? mark_lock+0x9a/0x360 [ 297.338805][T13563] ? __lock_acquire+0x1397/0x2100 [ 297.338835][T13563] ? mark_lock+0x9a/0x360 [ 297.338851][T13563] __lock_acquire+0x1397/0x2100 [ 297.338882][T13563] lock_acquire+0x1ed/0x550 [ 297.338906][T13563] ? dev_set_mac_address+0x2a/0x50 [ 297.338926][T13563] ? __pfx_lock_acquire+0x10/0x10 [ 297.338952][T13563] ? __pfx___might_resched+0x10/0x10 [ 297.338975][T13563] ? dev_set_mac_address+0x42/0x50 [ 297.338992][T13563] ? __pfx_lock_release+0x10/0x10 [ 297.339019][T13563] __mutex_lock+0x19c/0x1010 [ 297.339040][T13563] ? dev_set_mac_address+0x2a/0x50 [ 297.339057][T13563] ? notifier_call_chain+0x3cc/0x3f0 [ 297.339082][T13563] ? __mutex_unlock_slowpath+0x227/0x800 [ 297.339105][T13563] ? dev_set_mac_address+0x2a/0x50 [ 297.339122][T13563] ? __pfx___mutex_lock+0x10/0x10 [ 297.339143][T13563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.339169][T13563] ? net_generic+0x1f/0x240 [ 297.339189][T13563] ? net_generic+0x1f0/0x240 [ 297.339211][T13563] dev_set_mac_address+0x2a/0x50 [ 297.339230][T13563] bond_set_mac_address+0x28e/0x830 [ 297.339288][T13563] ? __pfx_bond_set_mac_address+0x10/0x10 [ 297.339309][T13563] ? hsr_netdev_notify+0x295/0xb50 [ 297.339336][T13563] ? notifier_call_chain+0x15a/0x3f0 [ 297.339360][T13563] ? notifier_call_chain+0x3cc/0x3f0 [ 297.339385][T13563] netif_set_mac_address+0x327/0x510 [ 297.339407][T13563] ? __pfx_netif_set_mac_address+0x10/0x10 [ 297.339427][T13563] ? rcu_is_watching+0x15/0xb0 [ 297.339446][T13563] ? trace_kmalloc+0x1f/0xd0 [ 297.339468][T13563] ? do_setlink+0x7a7/0x40f0 [ 297.339486][T13563] do_setlink+0xaa6/0x40f0 [ 297.339515][T13563] ? __pfx_do_setlink+0x10/0x10 [ 297.339536][T13563] ? __pfx___might_resched+0x10/0x10 [ 297.339559][T13563] ? __pfx___mutex_trylock_common+0x10/0x10 [ 297.339579][T13563] ? rcu_is_watching+0x15/0xb0 [ 297.339597][T13563] ? trace_contention_end+0x3c/0x120 [ 297.339616][T13563] ? __mutex_lock+0x397/0x1010 [ 297.339637][T13563] ? __pfx_aa_get_newest_label+0x10/0x10 [ 297.339666][T13563] ? rtnl_newlink+0xc4c/0x1d90 [ 297.339691][T13563] ? __pfx___mutex_lock+0x10/0x10 [ 297.339716][T13563] ? ns_capable+0x8a/0xf0 [ 297.339735][T13563] ? rtnl_link_get_net_capable+0x168/0x340 [ 297.339754][T13563] rtnl_newlink+0x15a6/0x1d90 [ 297.339785][T13563] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.339810][T13563] ? __pfx_validate_chain+0x10/0x10 [ 297.339835][T13563] ? validate_chain+0x11e/0x5920 [ 297.339853][T13563] ? __pfx_lock_acquire+0x10/0x10 [ 297.339878][T13563] ? __pfx_lock_release+0x10/0x10 [ 297.339903][T13563] ? __pfx_validate_chain+0x10/0x10 [ 297.339921][T13563] ? mark_lock+0x9a/0x360 [ 297.339938][T13563] ? __lock_acquire+0x1397/0x2100 [ 297.339974][T13563] ? __pfx_lock_release+0x10/0x10 [ 297.340004][T13563] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.340030][T13563] rtnetlink_rcv_msg+0x791/0xcf0 [ 297.340054][T13563] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 297.340079][T13563] ? __lock_acquire+0x1397/0x2100 [ 297.340104][T13563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.340135][T13563] netlink_rcv_skb+0x206/0x480 [ 297.340161][T13563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.340186][T13563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.340219][T13563] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.340249][T13563] netlink_unicast+0x7f6/0x990 [ 297.340275][T13563] ? __pfx_netlink_unicast+0x10/0x10 [ 297.340296][T13563] ? __virt_addr_valid+0x45f/0x530 [ 297.340312][T13563] ? __phys_addr_symbol+0x2f/0x70 [ 297.340327][T13563] ? __check_object_size+0x47a/0x730 [ 297.340352][T13563] netlink_sendmsg+0x8de/0xcb0 [ 297.340381][T13563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.340408][T13563] ? aa_sock_msg_perm+0x91/0x160 [ 297.340434][T13563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.340470][T13563] __sock_sendmsg+0x221/0x270 [ 297.340496][T13563] ____sys_sendmsg+0x53a/0x860 [ 297.340517][T13563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.340535][T13563] ? __fget_files+0x2a/0x410 [ 297.340559][T13563] ? __fget_files+0x2a/0x410 [ 297.340586][T13563] __sys_sendmsg+0x269/0x350 [ 297.340606][T13563] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.340641][T13563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.340665][T13563] ? do_syscall_64+0x100/0x230 [ 297.340687][T13563] ? do_syscall_64+0xb6/0x230 [ 297.340709][T13563] do_syscall_64+0xf3/0x230 [ 297.340730][T13563] ? clear_bhb_loop+0x35/0x90 [ 297.340754][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.340775][T13563] RIP: 0033:0x7f0acb98d169 [ 297.340790][T13563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.340804][T13563] RSP: 002b:00007f0acc82d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.340820][T13563] RAX: ffffffffffffffda RBX: 00007f0acbba5fa0 RCX: 00007f0acb98d169 [ 297.340832][T13563] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000008 [ 297.340843][T13563] RBP: 00007f0acba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 297.340853][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.340862][T13563] R13: 0000000000000000 R14: 00007f0acbba5fa0 R15: 00007fff6dbbb7a8 [ 297.340879][T13563] [ 297.922758][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.939910][T13563] bond0: entered promiscuous mode [ 297.945064][T13563] bond_slave_0: entered promiscuous mode [ 297.951823][T13563] bond_slave_1: entered promiscuous mode [ 297.958003][T13563] team0: entered promiscuous mode [ 297.963122][T13563] team_slave_0: entered promiscuous mode [ 297.968953][T13563] team_slave_1: entered promiscuous mode [ 298.026914][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 298.075186][T13574] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 298.084903][T13574] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 299.006175][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.046155][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.076214][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.116279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.156272][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.196257][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.236317][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.276213][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available