last executing test programs: 3.412736222s ago: executing program 0 (id=4376): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0xd1383000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000006c0)={0x0, 0x100}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000780)={r5, 0x2}, &(0x7f0000001fc0)=0x8) (async) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r6 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="607be25f2e", 0x5}], 0x1}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000840)="a9", 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x644, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x614, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x164, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797eff1f589d9182fad8298a22229837e496f47b9bfa9a20dd16c573029e38e052ab929efd0a8118d6d909fe8070e"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffd3, 0x8, 0x8}, {0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x484, 0x9, 0x0, 0x1, [@m_gact={0x140, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9d, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2ca8b8d7ec1784b0, 0x2680, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1abe}}]}, {0xed, 0x6, "f2984ea5ae0b0909ca5198b5e56548da1af4efe458d68e8346a5ad6fa8d75b3efbcec03667694b23e57efb5dea177c9fec912eda500f92ad241d4a3e1eb9b05c2461a1e89e99a22f43eb3b64257b78512c9df802c3ea23ede5e978e8db3be47630f9b48cdfcee2130369da2ce7473e6324d4fc0342cb38a9e544eb6f4e0148acb294b877f68eb4b6b13e38196c311c9ebb06d7a5ee9ead5689128fa35472611715963d35fb43d3014ff74e144932866ca97f5c001aab6053dd7ce7d38a407074614c2a21063cc49a687085d3ab9d042fcc913d8377863381be46ad8fade1f71945e9d5053fd5d1123d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb4, 0x1b, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffff}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x69, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66d3b14a3b76"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x148, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xe1a3, 0x6, 0x3, 0x6}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x236}]}, {0xd9, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106eec615119eaaa73bd0bb3e2d774039d9c7e0d445019a712cc0c16707a7b8505b7c94133ceccee82"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x4c, 0x3, 0x0, 0x0, {{0xf}, {0x4}, {0x19, 0x6, "6c73dc20ec0f1f62d72faf3465d04d6e1f1e4cf9b5"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0xf8, 0xd, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "47c067ed09487b4c7b8fa31ee513842b"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x2, 0x3, 0x0, 0xd}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x5d, 0x6, "4cffe20c282aacbc38e5a4c93c03fe2a5ed582fe7e55e60134c04c817f70ad609b1542d91dfa1b302713be87c1b52844427052a22225d71f7d8f13ffe694f2e32a45de36f9b9eb02e1ee76197b8330ff1eea4b68f11fbb4793"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x3, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3a0, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x16c, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="0a1a4f3b84b2caba195ffb7bb53b45df"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x934}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x15b}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_LC={0x8, 0x5, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x6c5d}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x97}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4af}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x1}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1f0, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="03cf9bdb0def"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}]}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, @random="6aab436b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="613f5f6d632594541839b24532e9"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x1e4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fff}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x27}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xe4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xffff3646}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="64d79a972bdd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="13a0691713afbdcd86c8ac3a54db14070afa46928d84cc417280f0cb51"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x999}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6374a6ac}]}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5e8}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x4}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 2.998378685s ago: executing program 3 (id=4378): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='2']}, 0x18}}, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) (async) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x1, r5, 0x80000, r3}, 0x10) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Y', 0x1}], 0x13f}, 0x20000000}], 0x1, 0x0) 2.997646111s ago: executing program 0 (id=4380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) sendto$unix(r1, &(0x7f0000000240)="29ceb3b79cce20c21d86e1381310e096d3e0f353a4c74af5018f8beeb0d907b365c7a34929ce09876d86fced5208cef0dd50abea86ea2c05d49a5b982e82dd16085554995639eb21c680156340d415072b383791cf15bb12018be9d36c042bcdb763999fc42e547b0c29d4a0823e", 0x6e, 0x8000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) (async) unshare(0x40000000) 2.811800197s ago: executing program 3 (id=4381): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000f8ff7800000000049500000000000008c92ff7117e1b4f38dd720b28197990ad5902"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20, 0x0, 0xfffffffd}, 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r1}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r1}, 0xc) 2.647957651s ago: executing program 3 (id=4382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000200016801c00018018000c8014000100080088a8"], 0x54}}, 0x24040800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000200016801c00018018000c8014000100080088a8"], 0x54}}, 0x24040800) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) 2.362863903s ago: executing program 2 (id=4385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply}}}}, 0x0) 2.318713889s ago: executing program 3 (id=4386): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="120088f70000120000"], 0xfce) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000aedb1652fb2a702dfaf78fac1db83972e5ea13caaf7f33b01fbdeeaf382b7ad91463a1692c4d4f6834f96aa2f91af0b07b04af95920f6a11da859f162d9394964ec894486aea9102525f70cda26a400e9028e2c7ff6f00"/105, @ANYRES16=r1, @ANYBLOB="000328bd7000fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00010000000020001400128009800100766541010000"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00fcff", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf251200000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 2.290334849s ago: executing program 1 (id=4387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet6(0x10, 0x2, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r2], 0x1000f) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.094666061s ago: executing program 2 (id=4389): r0 = socket(0x1d, 0x2, 0x6) accept$inet(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) (rerun: 32) 2.091482001s ago: executing program 1 (id=4390): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) 1.978516596s ago: executing program 1 (id=4391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 1.897399772s ago: executing program 4 (id=4392): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x34, 0x0, 0x801, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b71fb5536"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4090) 1.774864349s ago: executing program 3 (id=4393): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x7fffffff}, 0xfffffffffffffdab) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x2}]}], {0xffffffffffffffb0}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="ee9bf711c883990cadd3367f0e077fcfdc0760e34196ee2dc9a72cbfd4ea8f673c93beb0c6ff5723731bbfdc6b036c5527b8fee5919d69c46dfd0b229418847c7f4c38931b18ff0097883456ff71fe50e7568cee80ee4ba4fefa1334a91db8305f3a5c3907cd6b04bdd412d509cbb1ee0eda085572a9a4c44072dc98da8273cde81c3bb92f72a3568e15702fe9c91293fb1b961cd06d9a548d4a62f05e720892b35e71ac731809ac9e0432de8a9c812a0af4ad960e561984a69960d7fc9516f22682cfdbab517c5d999a5aa551f2c3b3cfa763968c357806f4634c8f621670b03fd6102f44bd29aac02f94fc62e639474d366a5bd5c862d4"], 0x14}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x100000000000000, 0x0, 0x400000000, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x400, 0x0, 0x0, 0x2, 0x7, 0xfffffffffffffffc}, 0x0, 0x0) shutdown(r4, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000f100"/17, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x48) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20014054}, 0x4018818) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e18, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x38}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x2, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x24, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.774600259s ago: executing program 2 (id=4394): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8e}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 1.642655584s ago: executing program 4 (id=4395): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x6}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002202c911500000000000000000000001400078008001140000000000500150002000000050005000a000000050001000700797a31000000000d000300686173683a6e657400"/92], 0x5c}}, 0xd4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e9, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`'], 0x60}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r5 = socket(0x1e, 0x4, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00520f59755e27d600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b}, 0x90) (async) ppoll(&(0x7f0000000240)=[{r5, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x3261e) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x9}, {0xf}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5}]}}]}, 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.540198317s ago: executing program 2 (id=4396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00002148000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000640)=@buf={0x9e, &(0x7f0000000580)="7088c684f25e85e31b087f864167ea0801135575d01100ce76abcc91fd06437e59c2d2a400d50ddfbd9d817bc9d6fcbdeaef58a7be65ee3409d1ec71457d74c2c1525087c3b7852163527356e5b7e8bfe408fb685462b56ecd9b21ee29fe0d5e2a7dc410597a26c6d9b9ab3f6fe2967f2ff4d7eb4319cda1e7ad1e1ba964a1576a89090bca5829fd8a9687123a9ac462c11d13d956ccd37ef0cdef6f2e24"}) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0xa, 0x1, 0x8, 0x2, 0x0, 0x70bd26, 0x25dfdc01}, 0x10}}, 0x44) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1d, 0x801, 0xd8, &(0x7f0000000540)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x104a, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f0000000780)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xd, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x2, 0x3, 0xc, 0xb}, {0x0, 0x5, 0x8, 0x5}, {0x3, 0x5, 0x8, 0x8}, {0x5, 0x1, 0x10, 0x4}, {0x2, 0x1, 0x4, 0xc}], 0x10, 0x7f}, 0x94) 1.450584967s ago: executing program 1 (id=4397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003000)=ANY=[@ANYBLOB='\x00\b\x00&', @ANYRES16=r1, @ANYBLOB="010000000000000000000d000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="00046fbd7000fbdbdf25110000000800040007000000080006000700000008000500000000000800040083e20000080006005a000000200003801400060000000000000000000000000000000000060007004e2200001400028006000f000d00000008000300000000001c00028006000b000a00000005000d00000000000800070001800000"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x34, 0x0, &(0x7f00000004c0)="ae7c18bc5a99ca36edfb2a8877ed05e0ac0cf1da03b371515d915d060d67ab3b904c15ed561cc257709744dadc1b3a34e826c29c", 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010a01040000000000000000010000070900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) 1.450099s ago: executing program 4 (id=4398): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x66}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4004000) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000140)=@xdp={0x2c, 0x2, 0x0, 0x36}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)="59a01a08151086ac7048828f649a8d8cfa352ebd19", 0x15}, {&(0x7f0000000200)="d377942a2e4eb4db0e7d3225f37bade182b50c284376647eb20a", 0x1a}, {&(0x7f0000000240)="2c6c66a4809c51c0b74480aeea13e197053d7ac1dd4f0ba88a68973b858d7728b9a33b664403dbd06ccbcb45d38f9dfce061f4ce6e5f79cb9d1dc32e1e625d82e82e3df131d28b1fc5fd", 0x4a}, {&(0x7f00000002c0)="7043bdac8562929d6191acc35b8935e3fb40257a068b3cb1d504b40e1969a95930e7a5d620d6896e4a8edb61c01e919b4f1a6f4fcfc161b1bbbd8c0914ab5f3437e610e81788860888c870cfb57c6c7daed56d5a4a8a470eca6ea2cfcdb7ff06c1c254df1d2f2c8eb5f8c3ffc37fbb95c3c2364817060acdd568158c05d4a0206acf8749127890619d", 0x89}], 0x4}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x6, 0x4, 0x2, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000000440)="5304c0073182f092c63b2e1138556684a6ac8753176c8d31615c814c27c031c9246cda14b466b8f9186611598083d841689d71a7cccc4a3463d3a3ebcb5f860e45c6c0a11ab039b3b7289df18b7bdaf02e5b41ceed5164b9f8bbec2815e7ecf7e9bdcfb1", 0x64, 0x8080, &(0x7f00000004c0)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000500)={0xe62}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000540)=""/159, &(0x7f0000000600)=0x9f) sendto$inet(r0, &(0x7f0000000640)="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", 0x1000, 0x20020004, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x7, &(0x7f0000001640)) bind$alg(r0, &(0x7f0000001680)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) socketpair(0x11, 0xa, 0x9, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x4, 0x6, 0x104, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001880), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000018c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), r5) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000001c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x168, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7db3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa, @local, 0xf}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x8002) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}}, 0x804) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x800}}, 0x80, 0xe3ed, 0xb, 0x1, 0x3, 0x200, 0x1}, &(0x7f0000001e40)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001e80)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}}, &(0x7f0000001f40)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001f80)={r12, 0x9, 0x8, 0x2, 0xfffb, 0x2, 0x3, 0x4, {r13, @in6={{0xa, 0x4e23, 0x6, @mcast1, 0xfffffffc}}, 0x3, 0x6, 0x40, 0x0, 0xc}}, &(0x7f0000002040)=0xb0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000020c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x3c, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000021c0)={r14, 0x10, 0x2, [0xfff9, 0x800]}, &(0x7f0000002200)=0xc) 1.395231914s ago: executing program 2 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000480)='/', 0x1}, {&(0x7f0000000940)="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", 0x1000}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000300)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0xfffe, 0x0, @remote, 0x10000}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xffffdffd}}}, 0x108) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r9, @ANYBLOB="40007a800c000300a79c32ffb9fbee541400020020bb7bcad0230550ca1bb4b60de42fec140001"], 0x5c}}, 0x4000840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0x78, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x438e, 0x7b}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x33}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x46}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x7a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9db2, 0x53}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000e}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004084}, 0x844) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000880)={0x7, 0x5, 0xa2c, 0x200}, 0x10) r12 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x28, r1, 0x601, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x28}}, 0x4804) 1.315829635s ago: executing program 4 (id=4400): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) 1.220957855s ago: executing program 0 (id=4401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0xf5) 1.09899063s ago: executing program 0 (id=4402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c041}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) 1.098158626s ago: executing program 1 (id=4403): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 939.343953ms ago: executing program 4 (id=4404): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x140f, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$netlink(r0, &(0x7f00000001c0), 0x0) r4 = socket$inet(0x2, 0xa, 0x4a00) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x1b5, 0x2]}, &(0x7f0000000080)=0x44) 880.624702ms ago: executing program 0 (id=4405): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@deltfilter={0x4c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x1b, 0x7}, {0x9}, {0x8, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1b, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xffffff71}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x4c}}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd2d, 0xfff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, 0x0, 0x7ea1d383782c730b) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 826.955502ms ago: executing program 1 (id=4406): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x3c, r0, 0x801, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b71fb5536"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x90) 738.201876ms ago: executing program 3 (id=4407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 655.426724ms ago: executing program 4 (id=4408): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) socket$inet(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async) 480.09429ms ago: executing program 0 (id=4409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000029bd7000fedbdf257a0000000c00990007000000000800002d002a007206030303030303831f000400ffffffffffff06000000ffffff7f02000000ffffffffffffff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4044004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r10, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}}, 0x10) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 2 (id=4410): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010873797a3000000000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r0, 0x9, 0x1ff, 0x9}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xc, 0x6, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x1, 0xe, 0x30a}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x24, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x9a}, @alu={0x4, 0x0, 0xc, 0x1, 0x8, 0x10, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000300)='GPL\x00', 0x4c, 0x7d, &(0x7f0000000340)=""/125, 0x41000, 0x9, '\x00', r6, @fallback=0xb, r7, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x40, 0xfff}, 0x10, r9, 0xffffffffffffffff, 0x7, &(0x7f0000000500), &(0x7f0000000540)=[{0x0, 0x3, 0x8, 0xb}, {0x1, 0x4, 0x6, 0xeb705fe35f3c6017}, {0x2, 0x4, 0xf, 0xb}, {0x0, 0x2, 0xf, 0x3}, {0x5, 0x2, 0xc, 0x4}, {0x2, 0x3, 0xc, 0x5}, {0x5, 0x3, 0xf, 0x2}], 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) kernel console output (not intermixed with test programs): 6 callbacks suppressed [ 394.802928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.842800][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 396.107492][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.142918][T16605] bond5: (slave ip6gretap1): Removing an active aggregator [ 396.155765][T16605] bond5: (slave ip6gretap1): Releasing backup interface [ 396.163335][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.206330][T16605] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 76:44:24:45:a0:ff - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 396.254558][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.288499][T16605] bond5: (slave veth19): Releasing backup interface [ 396.346411][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.375189][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.393911][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.413245][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.458179][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.490534][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.502245][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.533205][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.565212][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.610810][T16615] netlink: 'syz.3.2825': attribute type 3 has an invalid length. [ 396.650019][T16625] sit0: entered promiscuous mode [ 396.882797][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.097203][T16648] netlink: 'syz.4.2834': attribute type 11 has an invalid length. [ 397.828909][T16679] __nla_validate_parse: 5 callbacks suppressed [ 397.828931][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'. [ 397.922818][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 398.266295][T16687] syzkaller0: entered promiscuous mode [ 398.272333][T16687] syzkaller0: entered allmulticast mode [ 398.746330][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.757998][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.768481][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.784328][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.794185][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.962807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 399.046190][T16726] : entered promiscuous mode [ 399.067808][T16717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2851'. [ 399.266111][T16735] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 400.002807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 400.408011][T16714] vxcan1 speed is unknown, defaulting to 1000 [ 400.420188][T16780] syzkaller1: entered promiscuous mode [ 400.471039][T16780] syzkaller1: entered allmulticast mode [ 400.539362][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2868'. [ 400.885159][ T5842] Bluetooth: hci5: command tx timeout [ 401.042798][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 401.405181][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2876'. [ 402.082806][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 402.102398][T16714] chnl_net:caif_netlink_parms(): no params data found [ 402.382035][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2886'. [ 402.406520][T16867] sctp: [Deprecated]: syz.0.2887 (pid 16867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.406520][T16867] Use struct sctp_sack_info instead [ 402.417610][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2886'. [ 402.439414][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.448071][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.456635][T16714] bridge_slave_0: entered allmulticast mode [ 402.468453][T16714] bridge_slave_0: entered promiscuous mode [ 402.496182][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.508676][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.521301][T16714] bridge_slave_1: entered allmulticast mode [ 402.536603][T16714] bridge_slave_1: entered promiscuous mode [ 402.548292][T16866] veth0: entered promiscuous mode [ 402.584280][T16863] veth0: left promiscuous mode [ 402.687528][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.750023][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.816822][T16878] validate_nla: 26 callbacks suppressed [ 402.816843][T16878] netlink: 'syz.1.2889': attribute type 9 has an invalid length. [ 402.966487][ T5842] Bluetooth: hci5: command tx timeout [ 403.122945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 403.157352][T16714] team0: Port device team_slave_0 added [ 403.199957][T16714] team0: Port device team_slave_1 added [ 403.242090][T16894] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20001 [ 403.466158][T16859] vxcan1 speed is unknown, defaulting to 1000 [ 403.468222][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.502108][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.592796][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.649523][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.663215][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.740591][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.894125][T16916] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2903'. [ 403.945678][T16922] bridge0: port 1(batadv2) entered blocking state [ 403.959544][T16922] bridge0: port 1(batadv2) entered disabled state [ 403.967775][T16922] batadv2: entered allmulticast mode [ 403.976805][T16922] batadv2: entered promiscuous mode [ 404.005276][T16714] hsr_slave_0: entered promiscuous mode [ 404.070839][T16714] hsr_slave_1: entered promiscuous mode [ 404.087359][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 404.101301][T16714] Cannot create hsr debugfs directory [ 404.162810][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 404.442899][ T77] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 404.453643][ T77] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 404.563514][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.043836][ T5842] Bluetooth: hci5: command tx timeout [ 405.049719][T16714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.085672][T16714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.112045][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2915'. [ 405.139141][T16958] tipc: Enabling of bearer rejected, failed to enable media [ 405.203625][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 405.356304][T16714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.395664][T16714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.544868][T16974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2917'. [ 405.614133][T16974] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2917'. [ 405.663273][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 405.710182][T16974] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2917'. [ 405.730151][T16974] openvswitch: netlink: Actions may not be safe on all matching packets [ 405.740871][T16714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.780131][T16714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.818687][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 406.141826][T16714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.192989][T16714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.242821][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 406.703596][T16714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.729116][T17007] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2922'. [ 406.853584][T16714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.038457][T17012] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20004 [ 407.123113][ T5842] Bluetooth: hci5: command tx timeout [ 407.273697][T17018] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2926'. [ 407.283704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 407.430605][T17007]  (unregistering): Released all slaves [ 407.613801][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2929'. [ 407.662848][T16714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.726674][T16714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.323133][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 408.390558][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.544613][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.728384][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.735764][T11039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.782343][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.790292][T11039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.976956][T17084] __nla_validate_parse: 2 callbacks suppressed [ 408.976976][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 409.058592][T17088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2940'. [ 409.071585][T17088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'. [ 409.362912][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 409.710597][T17109] netlink: 'syz.2.2944': attribute type 1 has an invalid length. [ 409.937473][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.071985][T16714] veth0_vlan: entered promiscuous mode [ 410.120931][T17126] delete_channel: no stack [ 410.128913][T16714] veth1_vlan: entered promiscuous mode [ 410.309821][T16714] veth0_macvtap: entered promiscuous mode [ 410.348398][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2949'. [ 410.362454][T16714] veth1_macvtap: entered promiscuous mode [ 410.371749][T17130] sctp: [Deprecated]: syz.1.2950 (pid 17130) Use of int in max_burst socket option deprecated. [ 410.371749][T17130] Use struct sctp_assoc_value instead [ 410.403097][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 410.489371][T17147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2950'. [ 410.501972][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.576329][T17149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2950'. [ 410.581527][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.709879][ T3743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.759779][ T3743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.846825][T11039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.889990][T11039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.094913][T17163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2956'. [ 411.177948][T17163] bridge_slave_0: entered promiscuous mode [ 411.200718][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'. [ 411.243438][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'. [ 411.279896][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.322879][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.436959][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.445611][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 411.467455][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.601300][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 411.651374][T17174] team1: entered promiscuous mode [ 411.658209][T17174] team1: entered allmulticast mode [ 412.141256][T17206] netlink: 'syz.0.2970': attribute type 1 has an invalid length. [ 412.482901][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 412.818221][ T30] audit: type=1800 audit(1753986060.481:6): pid=17245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2977" name="memory.events" dev="tmpfs" ino=3043 res=0 errno=0 [ 412.897497][ T30] audit: type=1804 audit(1753986060.481:7): pid=17245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2977" name="/newroot/593/memory.events" dev="tmpfs" ino=3043 res=1 errno=0 [ 413.522822][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.102152][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.118472][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.127530][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.137500][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.149728][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.150418][T17287] __nla_validate_parse: 4 callbacks suppressed [ 414.150438][T17287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2990'. [ 414.252044][T17285] tipc: Enabled bearer , priority 0 [ 414.299392][T17285] syzkaller0: entered promiscuous mode [ 414.352897][T17285] syzkaller0: entered allmulticast mode [ 414.543959][T17285] tipc: Resetting bearer [ 414.562801][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 414.593053][T17281] tipc: Resetting bearer [ 414.694905][T17281] tipc: Disabling bearer [ 414.974079][T17313] !: renamed from dummy0 [ 415.503209][T17325] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 415.570887][T17283] vxcan1 speed is unknown, defaulting to 1000 [ 415.602811][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 415.620452][T17331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 415.642179][T17332] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 415.854904][T17343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3000'. [ 415.899535][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 415.950040][T17347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 415.964207][T17343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3000'. [ 416.045888][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 416.252946][ T51] Bluetooth: hci0: command tx timeout [ 416.388558][T17365] IPVS: ip_vs_add_dest(): server weight less than zero [ 416.477449][T17361] IPVS: ip_vs_add_dest(): server weight less than zero [ 416.642794][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 416.820765][T17385] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 416.868857][T17385] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3013'. [ 417.158925][T17402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3016'. [ 417.314125][T17283] chnl_net:caif_netlink_parms(): no params data found [ 417.682791][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 417.940993][T17439] ieee802154 phy1 wpan1: encryption failed: -22 [ 418.005926][ T55] block nbd1: Possible stuck request ffff888025620000: control (read@0,4096B). Runtime 30 seconds [ 418.036704][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.088575][T17283] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.109061][T17283] bridge_slave_0: entered allmulticast mode [ 418.120248][T17283] bridge_slave_0: entered promiscuous mode [ 418.152319][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.186381][T17283] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.213363][T17283] bridge_slave_1: entered allmulticast mode [ 418.221501][T17283] bridge_slave_1: entered promiscuous mode [ 418.268230][T17451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3026'. [ 418.324615][ T51] Bluetooth: hci0: command tx timeout [ 418.345381][T17455] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3028'. [ 418.581792][T17465] netlink: 'syz.0.3031': attribute type 9 has an invalid length. [ 418.637227][T17283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.682184][T17283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.722793][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 419.044542][T17283] team0: Port device team_slave_0 added [ 419.078027][T17283] team0: Port device team_slave_1 added [ 419.264214][T17489] __nla_validate_parse: 1 callbacks suppressed [ 419.264233][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3034'. [ 419.325917][T17283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.338090][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.376474][T17486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3034'. [ 419.391408][T17283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.409674][T17283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.419810][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.448217][T17283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.471817][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 419.577471][T17283] hsr_slave_0: entered promiscuous mode [ 419.589247][T17283] hsr_slave_1: entered promiscuous mode [ 419.596840][T17283] debugfs: 'hsr0' already exists in 'hsr' [ 419.603611][T17283] Cannot create hsr debugfs directory [ 419.638481][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3039'. [ 419.648279][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3039'. [ 419.665132][T17509] gretap1: entered promiscuous mode [ 419.670491][T17509] gretap1: entered allmulticast mode [ 419.762803][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 420.197067][T17283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.201794][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 420.228013][T17283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.266265][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 420.326383][T17533] 8021q: VLANs not supported on ip6gre0 [ 420.374232][T17541] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3048'. [ 420.404628][ T51] Bluetooth: hci0: command tx timeout [ 420.486474][T17283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.512463][T17283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.562954][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 420.802902][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 420.966314][T17283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.993083][T17283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.125147][T17283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.141589][T17283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.469636][T17584] batadv_slave_1: entered promiscuous mode [ 421.507879][T17585] veth5: entered allmulticast mode [ 421.525289][T17584] batadv_slave_1: left promiscuous mode [ 421.844119][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 421.928665][T17283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.941105][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3061'. [ 421.983459][T17283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.070345][T17283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.145833][T17283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.298558][T17613] tipc: Enabled bearer , priority 0 [ 422.435028][T17613] syzkaller0: entered promiscuous mode [ 422.441350][T17613] syzkaller0: entered allmulticast mode [ 422.487133][ T51] Bluetooth: hci0: command tx timeout [ 422.699549][T17624] tipc: Resetting bearer [ 422.777323][T17632] tipc: Enabling of bearer rejected, already enabled [ 422.797929][T17611] tipc: Resetting bearer [ 422.882899][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 422.903124][T17637] netlink: 'syz.3.3069': attribute type 21 has an invalid length. [ 422.947817][T17639] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3070'. [ 423.074638][T17637] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 423.383127][T14418] tipc: Node number set to 3750967216 [ 423.925214][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 424.962810][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 425.220863][T17611] tipc: Disabling bearer [ 425.237988][T17640] netlink: 'syz.3.3069': attribute type 12 has an invalid length. [ 425.248827][T17640] netlink: 'syz.3.3069': attribute type 29 has an invalid length. [ 425.284651][T17640] __nla_validate_parse: 2 callbacks suppressed [ 425.284678][T17640] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3069'. [ 425.323799][T17640] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3069'. [ 425.338771][T17656] netlink: 'syz.2.3076': attribute type 11 has an invalid length. [ 425.401824][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3076'. [ 425.542204][T17662] netlink: 'syz.3.3078': attribute type 1 has an invalid length. [ 425.625501][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.743444][T17283] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.789486][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.797232][T11039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.861853][T17675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3081'. [ 425.914704][T17672] dvmrp1: entered allmulticast mode [ 425.982147][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.990870][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.002793][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 426.197570][T17687] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 426.250068][T17689] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3084'. [ 426.431586][T17687] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3083'. [ 426.487962][T17687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3083'. [ 426.800169][T17711] Bluetooth: MGMT ver 1.23 [ 427.042796][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 427.099813][T17283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.402143][T17744] tipc: Enabling of bearer rejected, failed to enable media [ 427.496051][T17745] tipc: Enabling of bearer rejected, failed to enable media [ 427.555826][T17741] tipc: Enabled bearer , priority 0 [ 427.568456][T17741] syzkaller0: entered promiscuous mode [ 427.588309][T17741] syzkaller0: entered allmulticast mode [ 427.726457][T17741] tipc: Resetting bearer [ 427.749836][T17738] tipc: Resetting bearer [ 427.795645][T17738] tipc: Disabling bearer [ 428.082850][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 428.190608][T17283] veth0_vlan: entered promiscuous mode [ 428.214938][T17283] veth1_vlan: entered promiscuous mode [ 428.258249][T17283] veth0_macvtap: entered promiscuous mode [ 428.309918][T17283] veth1_macvtap: entered promiscuous mode [ 428.375383][T17283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.400507][T17283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.427909][ T3743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.445406][T17781] TCP: TCP_TX_DELAY enabled [ 428.451159][ T3743] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.481902][ T3743] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.515925][ T3743] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.776057][T11044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.787161][T11044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.870903][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.897143][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.938891][T17793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3110'. [ 429.122868][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 429.126937][T17804] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 429.193924][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.202080][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.347913][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.356613][T17804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.364747][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.373026][T17804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.436871][T17804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 429.482958][T17815] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3114'. [ 430.125171][T17832] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3121'. [ 430.163342][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 430.243495][T17835] netlink: 'syz.2.3124': attribute type 29 has an invalid length. [ 430.265070][T17836] netlink: 'syz.2.3124': attribute type 29 has an invalid length. [ 430.283303][T17830] syz.3.3121: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 430.310805][T17835] netlink: 'syz.2.3124': attribute type 29 has an invalid length. [ 430.333899][T17830] CPU: 0 UID: 0 PID: 17830 Comm: syz.3.3121 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 430.333933][T17830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.333952][T17830] Call Trace: [ 430.333961][T17830] [ 430.333974][T17830] dump_stack_lvl+0x189/0x250 [ 430.334008][T17830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.334031][T17830] ? __pfx__printk+0x10/0x10 [ 430.334058][T17830] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 430.334083][T17830] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 430.334110][T17830] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 430.334138][T17830] warn_alloc+0x214/0x310 [ 430.334168][T17830] ? __pfx_warn_alloc+0x10/0x10 [ 430.334202][T17830] ? __get_vm_area_node+0x28f/0x300 [ 430.334235][T17830] ? nf_tables_newset+0x132b/0x2530 [ 430.334265][T17830] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 430.334314][T17830] ? nft_hash_estimate+0x102/0x260 [ 430.334357][T17830] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 430.334384][T17830] ? rcu_is_watching+0x15/0xb0 [ 430.334419][T17830] ? nf_tables_newset+0x132b/0x2530 [ 430.334441][T17830] ? nf_tables_newset+0x132b/0x2530 [ 430.334461][T17830] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 430.334495][T17830] ? nf_tables_newset+0x132b/0x2530 [ 430.334518][T17830] ? nft_table_lookup+0x211/0x230 [ 430.334541][T17830] ? nft_set_lookup+0x128/0x150 [ 430.334572][T17830] ? nft_hash_privsize+0x8f/0xf0 [ 430.334607][T17830] nf_tables_newset+0x132b/0x2530 [ 430.334647][T17830] ? __pfx_nf_tables_newset+0x10/0x10 [ 430.334696][T17830] ? __nla_parse+0x40/0x60 [ 430.334726][T17830] nfnetlink_rcv+0x112f/0x2520 [ 430.334792][T17830] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 430.334839][T17830] ? ref_tracker_free+0x63a/0x7d0 [ 430.334894][T17830] ? __netlink_deliver_tap+0x807/0x850 [ 430.334926][T17830] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.334979][T17830] netlink_unicast+0x82c/0x9e0 [ 430.335018][T17830] ? __pfx_netlink_unicast+0x10/0x10 [ 430.335049][T17830] ? netlink_sendmsg+0x642/0xb30 [ 430.335079][T17830] ? skb_put+0x11b/0x210 [ 430.335104][T17830] netlink_sendmsg+0x805/0xb30 [ 430.335147][T17830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.335184][T17830] ? aa_sock_msg_perm+0x94/0x160 [ 430.335214][T17830] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.335239][T17830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.335273][T17830] __sock_sendmsg+0x21c/0x270 [ 430.335305][T17830] ____sys_sendmsg+0x505/0x830 [ 430.335335][T17830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.335376][T17830] ? import_iovec+0x74/0xa0 [ 430.335410][T17830] ___sys_sendmsg+0x21f/0x2a0 [ 430.335436][T17830] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.335501][T17830] ? __fget_files+0x2a/0x420 [ 430.335520][T17830] ? __fget_files+0x3a0/0x420 [ 430.335554][T17830] __x64_sys_sendmsg+0x19b/0x260 [ 430.335580][T17830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.335615][T17830] ? rcu_is_watching+0x15/0xb0 [ 430.335655][T17830] ? do_syscall_64+0xbe/0x3b0 [ 430.335693][T17830] do_syscall_64+0xfa/0x3b0 [ 430.335722][T17830] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.335752][T17830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.335773][T17830] ? clear_bhb_loop+0x60/0xb0 [ 430.335799][T17830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.335820][T17830] RIP: 0033:0x7ff5a018eb69 [ 430.335840][T17830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.335858][T17830] RSP: 002b:00007ff5a10b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.335882][T17830] RAX: ffffffffffffffda RBX: 00007ff5a03b6080 RCX: 00007ff5a018eb69 [ 430.335898][T17830] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 430.335912][T17830] RBP: 00007ff5a0211df1 R08: 0000000000000000 R09: 0000000000000000 [ 430.335925][T17830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.335938][T17830] R13: 0000000000000000 R14: 00007ff5a03b6080 R15: 00007fff581c37b8 [ 430.335972][T17830] [ 430.335986][T17830] Mem-Info: [ 430.352933][T17835] netlink: 'syz.2.3124': attribute type 29 has an invalid length. [ 430.450679][T17830] active_anon:5704 inactive_anon:0 isolated_anon:0 [ 430.450679][T17830] active_file:1510 inactive_file:39985 isolated_file:0 [ 430.450679][T17830] unevictable:768 dirty:81 writeback:0 [ 430.450679][T17830] slab_reclaimable:11964 slab_unreclaimable:119418 [ 430.450679][T17830] mapped:27319 shmem:1393 pagetables:1135 [ 430.450679][T17830] sec_pagetables:0 bounce:0 [ 430.450679][T17830] kernel_misc_reclaimable:0 [ 430.450679][T17830] free:1301012 free_pcp:15176 free_cma:0 [ 430.566411][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.569162][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.601208][T17830] Node 0 active_anon:22816kB inactive_anon:0kB active_file:6040kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117376kB dirty:324kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14252kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 430.608428][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.656576][T17830] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 430.666182][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.712932][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3126'. [ 430.723351][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 430.752980][T17830] Node 0 [ 431.058179][T17850] nbd: must specify a size in bytes for the device [ 431.078926][T17830] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.198851][T17830] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 431.205561][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 431.298343][T17830] Node 0 DMA32 free:1293836kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22892kB inactive_anon:0kB active_file:6040kB inactive_file:157916kB unevictable:1536kB writepending:336kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:36832kB local_pcp:16192kB free_cma:0kB [ 431.356425][T17830] lowmem_reserve[]: 0 0 1 1 1 [ 431.361766][T17830] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 431.424008][T17830] lowmem_reserve[]: 0 0 0 0 0 [ 431.429306][T17830] Node 1 Normal free:3894468kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22244kB local_pcp:11584kB free_cma:0kB [ 431.527500][T11044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.547049][T17830] lowmem_reserve[]: 0 0 0 0 0 [ 431.560725][T17830] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 431.586094][T17830] Node 0 DMA32: 947*4kB (ME) 372*8kB (ME) 37*16kB (M) 17*32kB (UM) 77*64kB (UME) 242*128kB (UME) 94*256kB (UM) 40*512kB (UM) 27*1024kB (UM) 9*2048kB (UM) 283*4096kB (UM) = 1293596kB [ 431.637676][T17868] tipc: Enabled bearer , priority 0 [ 431.654561][T17841] vxcan1 speed is unknown, defaulting to 1000 [ 431.662417][T17830] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 431.703880][T17830] Node 1 Normal: 189*4kB (UE) 50*8kB (UME) 50*16kB (UME) 85*32kB (UME) 20*64kB (UME) 5*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3894468kB [ 431.752978][T17830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.766404][T11044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.792261][T17830] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.815583][T17830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.816873][ T30] audit: type=1804 audit(1753986079.471:8): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3135" name="/newroot/606/cgroup.controllers" dev="tmpfs" ino=3094 res=1 errno=0 [ 431.842831][T17830] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.862493][ T30] audit: type=1800 audit(1753986079.521:9): pid=17874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3135" name="cgroup.controllers" dev="tmpfs" ino=3094 res=0 errno=0 [ 431.872873][T17830] 42886 total pagecache pages [ 431.898964][T17830] 0 pages in swap cache [ 431.904628][T17830] Free swap = 124996kB [ 431.909413][T17830] Total swap = 124996kB [ 431.915274][T17868] tipc: Disabling bearer [ 431.928913][T17830] 2097051 pages RAM [ 431.935946][T17830] 0 pages HighMem/MovableOnly [ 431.976115][T17830] 424872 pages reserved [ 431.981394][T17830] 0 pages cma reserved [ 431.990651][T11044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.242814][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 432.553647][T17877] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 432.633635][T11044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.668635][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 432.671519][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 432.807006][ T5842] Bluetooth: hci2: command tx timeout [ 433.153935][T17922] netlink: 'syz.3.3142': attribute type 10 has an invalid length. [ 433.187272][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.204528][T17922] bridge_slave_1: left allmulticast mode [ 433.211272][T17922] bridge_slave_1: left promiscuous mode [ 433.218745][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.245259][T17922] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 433.282792][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 433.536997][T11044] team0: left allmulticast mode [ 433.543858][T11044] bridge0: port 1(team0) entered disabled state [ 433.722888][T17936] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 433.743366][T17936] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3147'. [ 434.212051][T11044] dvmrp1 (unregistering): left allmulticast mode [ 434.264429][T11044] geneve0 (unregistering): left promiscuous mode [ 434.272570][T11044] team0: Port device geneve0 removed [ 434.322804][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 434.719992][T11044] bond0 (unregistering): Released all slaves [ 434.739381][T11044] bond1 (unregistering): Released all slaves [ 434.883182][ T5842] Bluetooth: hci2: command tx timeout [ 434.895912][T11044] bond2 (unregistering): Released all slaves [ 434.915510][T11044] bond3 (unregistering): Released all slaves [ 435.061406][T11044] bond4 (unregistering): (slave veth3): Releasing active interface [ 435.072088][T11044] bond4 (unregistering): Released all slaves [ 435.210222][T11044] bond5 (unregistering): Released all slaves [ 435.227148][T11044] bond6 (unregistering): Released all slaves [ 435.240986][T17841] chnl_net:caif_netlink_parms(): no params data found [ 435.290282][T17943] macvlan3: entered promiscuous mode [ 435.311409][T17943] macvlan3: entered allmulticast mode [ 435.362791][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 435.402517][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 435.445763][T17956] openvswitch: netlink: IP tunnel TTL not specified. [ 435.693088][T17966] sctp: [Deprecated]: syz.4.3154 (pid 17966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.693088][T17966] Use struct sctp_sack_info instead [ 435.713136][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 436.037305][T17985] tipc: Started in network mode [ 436.055613][T17985] tipc: Node identity 0e44a42c5ec9, cluster identity 4711 [ 436.066828][T17985] tipc: Enabled bearer , priority 0 [ 436.079343][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.088037][T17841] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.099591][T17841] bridge_slave_0: entered allmulticast mode [ 436.117607][T17841] bridge_slave_0: entered promiscuous mode [ 436.177551][T17976] syzkaller0: entered promiscuous mode [ 436.203420][T17976] syzkaller0: entered allmulticast mode [ 436.228447][T17841] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.267838][T17841] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.281291][T17841] bridge_slave_1: entered allmulticast mode [ 436.294156][T17841] bridge_slave_1: entered promiscuous mode [ 436.300763][T17998] netlink: 'syz.3.3162': attribute type 21 has an invalid length. [ 436.366644][T18002] netlink: 'syz.3.3162': attribute type 9 has an invalid length. [ 436.388014][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3162'. [ 436.402804][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 436.430286][T17994] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 436.487612][T17981] tipc: Resetting bearer [ 436.577083][T17975] tipc: Resetting bearer [ 436.599136][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 436.666595][T17975] tipc: Disabling bearer [ 436.710243][T17841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.744558][T17841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.930454][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'. [ 436.973822][ T5842] Bluetooth: hci2: command tx timeout [ 437.087835][T17841] team0: Port device team_slave_0 added [ 437.126428][T11044] : left promiscuous mode [ 437.256264][T17841] team0: Port device team_slave_1 added [ 437.370372][T11044] tipc: Disabling bearer [ 437.419064][T11044] tipc: Disabling bearer [ 437.438783][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.441023][T11044] tipc: Left network mode [ 437.448122][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 437.465831][T18047] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 437.476790][T18048] netlink: 'syz.2.3174': attribute type 1 has an invalid length. [ 437.487465][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 437.547033][T17841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.558432][T17841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.622832][T17841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.655098][T17841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.682473][T17841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.691778][T18055] openvswitch: netlink: IP tunnel dst address not specified [ 437.713690][T17841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.036628][T18069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3178'. [ 438.076080][T18068] netlink: 'syz.1.3177': attribute type 29 has an invalid length. [ 438.147184][T18062] netlink: 'syz.1.3177': attribute type 29 has an invalid length. [ 438.192643][T18062] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3177'. [ 438.248917][T18072] sctp: [Deprecated]: syz.3.3178 (pid 18072) Use of int in maxseg socket option. [ 438.248917][T18072] Use struct sctp_assoc_value instead [ 438.444894][T17841] hsr_slave_0: entered promiscuous mode [ 438.479014][T17841] hsr_slave_1: entered promiscuous mode [ 438.486238][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 438.521790][T17841] debugfs: 'hsr0' already exists in 'hsr' [ 438.553441][T17841] Cannot create hsr debugfs directory [ 438.779547][T18100] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 438.787786][T18100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3188'. [ 438.854216][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'. [ 438.896911][T18100] dummy0: entered promiscuous mode [ 438.904479][T18100] bridge0: port 2(dummy0) entered blocking state [ 438.915328][T18106] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3189'. [ 438.924864][T18100] bridge0: port 2(dummy0) entered disabled state [ 438.932931][T18100] dummy0: entered allmulticast mode [ 439.043528][ T51] Bluetooth: hci2: command tx timeout [ 439.505830][T18121] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 439.522798][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 439.523060][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 439.533243][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 439.929134][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3200'. [ 440.187634][T11044] veth0_vlan: left promiscuous mode [ 440.339496][T18155] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20003 [ 440.562802][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 441.602810][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 441.925734][T11044] IPVS: stop unused estimator thread 0... [ 442.083945][T18194] macvlan0: entered allmulticast mode [ 442.089661][T18194] veth1_vlan: entered allmulticast mode [ 442.114854][T17841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 442.178609][T17841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.214722][T17841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.264538][T17841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.393119][T18217] netlink: 'syz.2.3220': attribute type 83 has an invalid length. [ 442.643004][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 442.715365][T18236] dvmrp0: left allmulticast mode [ 442.827695][T17841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.915737][T17841] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.961883][T18248] __nla_validate_parse: 1 callbacks suppressed [ 442.961904][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 443.006082][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.014393][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.075117][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.082411][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.139684][T18256] netlink: 'syz.4.3229': attribute type 21 has an invalid length. [ 443.233786][T18255] nbd2: detected capacity change from 0 to 63 [ 443.257024][T18260] block nbd2: NBD_DISCONNECT [ 443.271656][T18260] block nbd2: Disconnected due to user request. [ 443.282024][T18260] block nbd2: shutting down sockets [ 443.308452][T18248] veth1_vlan (unregistering): left allmulticast mode [ 443.342857][T18248] macvlan0 (unregistering): left allmulticast mode [ 443.410902][T18256] netlink: 'syz.4.3229': attribute type 1 has an invalid length. [ 443.430873][T18264] veth0_to_team: entered promiscuous mode [ 443.474452][T18264] veth0_to_team: entered allmulticast mode [ 443.478097][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3229'. [ 443.499442][T18267] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 443.518094][T18267] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 443.682780][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 443.723974][T18275] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3234'. [ 444.308727][T17841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.362666][T18302] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3241'. [ 444.422058][T18302] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 444.480004][T18302] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3241'. [ 444.536554][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 444.560001][T17841] veth0_vlan: entered promiscuous mode [ 444.616826][T17841] veth1_vlan: entered promiscuous mode [ 444.721319][T17841] veth0_macvtap: entered promiscuous mode [ 444.722883][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 444.784997][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 444.804796][T17841] veth1_macvtap: entered promiscuous mode [ 444.831949][T18315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3245'. [ 444.886646][T18315] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 444.921726][T17841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.977367][T17841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.011543][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.041475][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.083484][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 445.119937][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.195475][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.222634][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 445.255167][T18274] vxcan1 speed is unknown, defaulting to 1000 [ 445.371434][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.393598][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.510582][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.531288][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.531506][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.762772][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 446.559572][T18359] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 446.802898][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 447.021594][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.033395][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.062197][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.080765][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.099734][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.825512][T18406] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 447.842811][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 447.876586][T18406] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.948054][T18406] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.955596][T18406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.009691][T18406] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 448.049968][T18378] vxcan1 speed is unknown, defaulting to 1000 [ 448.095577][ T55] block nbd1: Possible stuck request ffff888025620000: control (read@0,4096B). Runtime 60 seconds [ 448.588810][T18433] __nla_validate_parse: 5 callbacks suppressed [ 448.588831][T18433] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3280'. [ 448.882825][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 449.093728][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 449.137720][T18456] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 449.163281][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 449.203386][ T5842] Bluetooth: hci1: command tx timeout [ 449.259101][T18378] chnl_net:caif_netlink_parms(): no params data found [ 449.560882][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3291'. [ 449.590261][T18378] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.629015][T18378] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.660041][T18378] bridge_slave_0: entered allmulticast mode [ 449.672261][T18378] bridge_slave_0: entered promiscuous mode [ 449.675822][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3294'. [ 449.691327][T18378] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.716394][T18378] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.721822][T18477] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 449.731138][T18378] bridge_slave_1: entered allmulticast mode [ 449.744122][T18378] bridge_slave_1: entered promiscuous mode [ 449.818339][T18477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.844329][T18484] netlink: 'syz.4.3295': attribute type 11 has an invalid length. [ 449.861750][T18484] netlink: 'syz.4.3295': attribute type 11 has an invalid length. [ 449.871947][T18484] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3295'. [ 449.922790][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 449.928269][T18378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.953945][T18486] netlink: 'syz.1.3296': attribute type 2 has an invalid length. [ 449.977713][T18378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.089517][T18488] IPVS: Scheduler module ip_vs_sip not found [ 450.115406][T18378] team0: Port device team_slave_0 added [ 450.132071][T18378] team0: Port device team_slave_1 added [ 450.160554][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3298'. [ 450.195651][T18492] netlink: 'syz.3.3298': attribute type 11 has an invalid length. [ 450.281395][T18378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.310648][T18378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.342134][ T30] audit: type=1800 audit(1753986097.971:10): pid=18493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3298" name="memory.events" dev="tmpfs" ino=481 res=0 errno=0 [ 450.365701][T18378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.383774][T18378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.401856][T18378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.462424][T18378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.593482][T18378] hsr_slave_0: entered promiscuous mode [ 450.607647][T18378] hsr_slave_1: entered promiscuous mode [ 450.620659][T18378] debugfs: 'hsr0' already exists in 'hsr' [ 450.643980][T18378] Cannot create hsr debugfs directory [ 450.962770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 451.065893][T18515] netlink: 'syz.3.3304': attribute type 1 has an invalid length. [ 451.184816][T18522] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 451.220412][T18522] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 451.236860][T18378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.247740][T18522] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 451.250310][T18522] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 451.283155][T18378] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.295403][ T51] Bluetooth: hci1: command tx timeout [ 451.306692][T18522] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 451.333394][T18522] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 451.508930][T18378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.520896][T18378] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.714921][T18378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.739195][T18378] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.886107][T18378] bond0: (slave netdevsim0): Releasing backup interface [ 451.926041][T18378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.964269][T18378] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.002300][T18550] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3315'. [ 452.002807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 452.297062][T18567] syzkaller0: entered promiscuous mode [ 452.303511][T18567] syzkaller0: entered allmulticast mode [ 452.314369][T18562] tipc: Started in network mode [ 452.319648][T18562] tipc: Node identity 96ce02363c11, cluster identity 4711 [ 452.339834][T18562] tipc: Enabled bearer , priority 0 [ 452.380095][T18562] tipc: Resetting bearer [ 452.440712][T18562] tipc: Disabling bearer [ 452.525400][T18378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.560247][T18378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.615097][T18378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.634565][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 452.650099][T18378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.691329][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 452.961506][T18378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.042783][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 453.065139][T18378] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.110839][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.118880][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.161030][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.169337][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.363145][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 453.624261][T18629] validate_nla: 27 callbacks suppressed [ 453.624282][T18629] netlink: 'syz.3.3339': attribute type 10 has an invalid length. [ 453.843304][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 454.018435][T18378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.082772][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 454.172523][T18378] veth0_vlan: entered promiscuous mode [ 454.192980][T18646] __nla_validate_parse: 3 callbacks suppressed [ 454.193001][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 454.219955][T18378] veth1_vlan: entered promiscuous mode [ 454.318646][T18378] veth0_macvtap: entered promiscuous mode [ 454.360751][T18378] veth1_macvtap: entered promiscuous mode [ 454.441854][T18378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.488775][T18378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.535044][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.572370][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.657627][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.677737][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.900329][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 455.065594][T18677] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 455.085939][T18677] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 455.124400][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 455.224277][T18640] vxcan1 speed is unknown, defaulting to 1000 [ 455.273523][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'. [ 455.327711][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.357786][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.437038][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.447247][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 455.466406][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.773222][T18700] netlink: 'syz.4.3357': attribute type 33 has an invalid length. [ 455.880690][T18699] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 456.162774][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 456.241336][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 456.293065][T18712] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3362'. [ 456.510903][T18724] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 456.660412][T18730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3367'. [ 457.087790][T18743] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3373'. [ 457.097668][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3373'. [ 457.129130][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3373'. [ 457.185786][T18743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 457.202820][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 457.371676][T18755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.397945][T18755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.454000][T18755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.472778][T18755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.530473][ T5842] Bluetooth: hci1: command 0x040f tx timeout [ 457.622385][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.634557][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.659788][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.671614][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.693436][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.178695][T18764] vxcan1 speed is unknown, defaulting to 1000 [ 458.242841][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 458.821332][T18764] chnl_net:caif_netlink_parms(): no params data found [ 459.203778][T18821] __nla_validate_parse: 12 callbacks suppressed [ 459.203807][T18821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3390'. [ 459.282848][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 459.297083][T18764] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.321254][T18764] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.329291][T18764] bridge_slave_0: entered allmulticast mode [ 459.343473][T18764] bridge_slave_0: entered promiscuous mode [ 459.353197][T18764] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.361315][T18764] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.370550][T18764] bridge_slave_1: entered allmulticast mode [ 459.379018][T18764] bridge_slave_1: entered promiscuous mode [ 459.527894][T18764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.581122][T18764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.610165][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 459.687748][T18764] team0: Port device team_slave_0 added [ 459.707163][T18764] team0: Port device team_slave_1 added [ 459.765445][ T51] Bluetooth: hci4: command tx timeout [ 459.877066][T18764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.906204][T18764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.990830][T18764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.016606][T18854] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.025962][T18854] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.044298][T18854] bridge0: entered allmulticast mode [ 460.081803][T18764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.122094][T18764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.123686][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 460.187492][T18764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.253527][T18862] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3402'. [ 460.322811][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 460.559189][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 460.767661][T18862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.792401][T18862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.812265][T18862] bond0 (unregistering): Released all slaves [ 461.070237][T18764] hsr_slave_0: entered promiscuous mode [ 461.099865][T18764] hsr_slave_1: entered promiscuous mode [ 461.132625][T18764] debugfs: 'hsr0' already exists in 'hsr' [ 461.157432][T18764] Cannot create hsr debugfs directory [ 461.362767][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 461.843196][ T51] Bluetooth: hci4: command tx timeout [ 462.406098][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 463.442800][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 463.923388][ T51] Bluetooth: hci4: command tx timeout [ 464.056596][T18927] dvmrp0: entered allmulticast mode [ 464.273706][T18938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3424'. [ 464.482784][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 464.541061][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 464.569185][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 464.813339][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'. [ 465.522847][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 465.552426][T19002] syzkaller0: entered promiscuous mode [ 465.559503][T19000] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3443'. [ 465.561151][T19002] syzkaller0: entered allmulticast mode [ 465.579367][T19000] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 465.757156][T18764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 465.845025][T18764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 465.905562][T19012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.942888][T18764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.007034][ T51] Bluetooth: hci4: command tx timeout [ 466.073128][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3448'. [ 466.086229][T18764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.133769][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'. [ 466.157506][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3448'. [ 466.345163][T19037] tipc: Started in network mode [ 466.350207][T19037] tipc: Node identity fe6c1feaaa89, cluster identity 4711 [ 466.370518][T19037] tipc: Enabled bearer , priority 0 [ 466.399075][T19037] syzkaller0: entered promiscuous mode [ 466.413727][T19037] syzkaller0: entered allmulticast mode [ 466.430670][T19044] sit0: entered promiscuous mode [ 466.465498][T19044] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 466.502589][T19044] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3453'. [ 466.562825][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 466.623269][T19058] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 466.667241][T19059] tipc: Resetting bearer [ 466.725062][T19035] tipc: Resetting bearer [ 466.774280][T19035] tipc: Disabling bearer [ 466.795986][T19067] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 466.916393][T18764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.934798][T19071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3458'. [ 467.016647][T18764] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.030895][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.038609][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.111228][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.118893][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.212329][T19092] ipvlan0: entered promiscuous mode [ 467.240269][T19092] ipvlan0: entered allmulticast mode [ 467.250865][T19092] veth0_vlan: entered allmulticast mode [ 467.602865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 467.625754][T18764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.699141][T18764] veth0_vlan: entered promiscuous mode [ 467.718772][T18764] veth1_vlan: entered promiscuous mode [ 467.789175][T18764] veth0_macvtap: entered promiscuous mode [ 467.835266][T18764] veth1_macvtap: entered promiscuous mode [ 467.931460][T18764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.005560][T18764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.086517][ T3743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.117914][ T3743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.161946][ T3743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.218028][ T3743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.400017][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.428880][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.552329][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.610182][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.642997][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 468.919202][T19157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.328556][T19180] __nla_validate_parse: 3 callbacks suppressed [ 469.328579][T19180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3485'. [ 469.440617][T19190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3489'. [ 469.469647][T19193] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3489'. [ 469.682814][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 469.737694][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3493'. [ 470.507133][T19240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3503'. [ 470.722782][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 470.782898][T19252] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 471.347469][T19270] tipc: Enabled bearer , priority 0 [ 471.366695][T19270] syzkaller0: entered promiscuous mode [ 471.388619][T19270] syzkaller0: entered allmulticast mode [ 471.411504][T19270] tipc: Resetting bearer [ 471.449445][T19269] tipc: Resetting bearer [ 471.491117][T19269] tipc: Disabling bearer [ 471.578937][T19277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.721926][T19291] unknown channel width for channel at 909000KHz? [ 471.761419][T19291] unknown channel width for channel at 909000KHz? [ 471.765394][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 471.931804][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 471.961469][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 472.016472][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 472.027048][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 472.038371][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 472.059243][T19311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 472.072372][T19311] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.081378][T19311] gretap1: entered promiscuous mode [ 472.087625][T19311] gretap1: entered allmulticast mode [ 472.802770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 472.849716][T19345] dvmrp1: entered allmulticast mode [ 473.025341][T19359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.605606][T19377] IPVS: Scheduler module ip_vs_sip not found [ 473.691638][T19387] netlink: 'syz.4.3547': attribute type 11 has an invalid length. [ 473.842818][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 474.048306][T19410] netlink: 'syz.1.3556': attribute type 5 has an invalid length. [ 474.099989][T19411] netlink: 'syz.0.3554': attribute type 5 has an invalid length. [ 474.391629][T19428] __nla_validate_parse: 69 callbacks suppressed [ 474.391651][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3560'. [ 474.507114][T19435] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3558'. [ 474.516855][T19434] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3561'. [ 474.590168][T19438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3563'. [ 474.882798][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 475.033430][T19458] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 475.058566][T19458] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 475.078684][T19459] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3570'. [ 475.088876][T19459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3570'. [ 475.382230][T19475] pim6reg: entered allmulticast mode [ 475.385970][T19481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3578'. [ 475.406017][T19477] pim6reg: left allmulticast mode [ 475.418556][ T5960] hid (null): global environment stack underflow [ 475.428393][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3575'. [ 475.438469][ T5960] hid (null): unknown global tag 0xe [ 475.457797][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 475.466109][ T5960] hid-generic 0005:0B57:000F.0003: reserved main item tag 0xe [ 475.475485][ T5960] hid-generic 0005:0B57:000F.0003: global environment stack underflow [ 475.484942][ T5960] hid-generic 0005:0B57:000F.0003: item 0 1 1 11 parsing failed [ 475.495898][ T5960] hid-generic 0005:0B57:000F.0003: probe with driver hid-generic failed with error -22 [ 475.534567][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 475.838446][T19501] netlink: 'syz.4.3583': attribute type 11 has an invalid length. [ 475.922759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 476.251338][T19521] openvswitch: netlink: Key type 16366 is out of range max 32 [ 476.778262][T19539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.795432][T19539] bond0: (slave bond2): Enslaving as an active interface with an up link [ 476.906840][T19550] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 476.962846][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 477.267429][T19564] netlink: 'syz.1.3598': attribute type 39 has an invalid length. [ 477.661492][T19574] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 478.002881][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 478.023872][T19574] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 478.032422][T19574] gretap1: entered promiscuous mode [ 478.081605][T19574] gretap1: entered allmulticast mode [ 478.127489][T19505] vxcan1 speed is unknown, defaulting to 1000 [ 478.182741][T19606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 478.191330][ T55] block nbd1: Possible stuck request ffff888025620000: control (read@0,4096B). Runtime 90 seconds [ 478.501294][T19617] syzkaller1: entered promiscuous mode [ 478.512477][T19617] syzkaller1: entered allmulticast mode [ 478.528933][T19620] net veth1_virt_wifi .: renamed from virt_wifi0 [ 478.536941][T19617] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 479.042797][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 479.421518][T11039] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.442471][ T2940] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.463372][ T2940] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.503727][ T2940] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.780867][T19662] netlink: 'syz.3.3624': attribute type 12 has an invalid length. [ 479.794366][T19662] netlink: 'syz.3.3624': attribute type 29 has an invalid length. [ 479.810400][T19662] __nla_validate_parse: 10 callbacks suppressed [ 479.810421][T19662] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3624'. [ 479.829321][T19662] netlink: 'syz.3.3624': attribute type 2 has an invalid length. [ 479.840906][T19662] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3624'. [ 480.083512][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 480.099776][T19675] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 480.143519][T19676] vti0: entered allmulticast mode [ 480.261403][T19684] þÿÿÿ: renamed from bridge_slave_0 (while UP) [ 480.282519][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3631'. [ 480.355295][T19689] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3632'. [ 480.355295][T19688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3632'. [ 481.082215][T19730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'. [ 481.108919][T19725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3644'. [ 481.122877][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 481.414552][T19741] netlink: 'syz.0.3649': attribute type 3 has an invalid length. [ 481.448025][T19741] netlink: 155684 bytes leftover after parsing attributes in process `syz.0.3649'. [ 481.448234][T19746] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3650'. [ 481.511338][T19748] : entered promiscuous mode [ 481.550627][T19753] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3653'. [ 481.560351][T19746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.652577][T19750] chnl_net:caif_netlink_parms(): no params data found [ 482.021961][T19778] lo: entered allmulticast mode [ 482.162763][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 482.322244][T19788] netlink: 'syz.3.3664': attribute type 2 has an invalid length. [ 482.935967][T19813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.157529][T19824] tipc: Enabling of bearer rejected, failed to enable media [ 483.203009][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 483.321379][T19827] sctp: [Deprecated]: syz.3.3677 (pid 19827) Use of int in maxseg socket option. [ 483.321379][T19827] Use struct sctp_assoc_value instead [ 483.610205][T19844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.759445][T19848] delete_channel: no stack [ 483.980012][T19852] hsr_slave_1 (unregistering): left promiscuous mode [ 484.242813][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 484.625733][T19895] team_slave_0: entered promiscuous mode [ 484.632593][T19895] team_slave_1: entered promiscuous mode [ 484.656905][T19895] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 484.674054][T19895] team0: Device macvtap1 is already an upper device of the team interface [ 484.707087][T19895] team_slave_0: left promiscuous mode [ 484.712649][T19895] team_slave_1: left promiscuous mode [ 485.027109][T19920] __nla_validate_parse: 9 callbacks suppressed [ 485.027130][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 485.060329][T19917] netlink: 'syz.2.3705': attribute type 30 has an invalid length. [ 485.073558][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 485.282948][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 485.565864][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 485.589402][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3710'. [ 486.006686][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3715'. [ 486.168386][T19958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 486.170748][T19955] netlink: 'syz.1.3716': attribute type 10 has an invalid length. [ 486.194021][T19955] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.202367][T19955] bridge_slave_1: left allmulticast mode [ 486.216813][T19955] bridge_slave_1: left promiscuous mode [ 486.240107][T19955] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.257224][T19955] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 486.288518][T19958] gtp0: entered promiscuous mode [ 486.298113][T19958] gtp0: entered allmulticast mode [ 486.322874][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 486.458946][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 487.000694][T20003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.362888][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 487.483966][T20031] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 487.520921][T20031] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 487.792068][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 487.826498][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3746'. [ 487.884396][T20052] tipc: Started in network mode [ 487.896728][T20052] tipc: Node identity 9ed472e7c739, cluster identity 4711 [ 487.924159][T20052] tipc: Enabled bearer , priority 0 [ 488.059088][T20070] lo: entered allmulticast mode [ 488.093148][T11039] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.122119][T11039] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.132052][T11039] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.296757][T20047] tipc: Disabling bearer [ 488.341456][T11039] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.384314][T20084] lo: left allmulticast mode [ 488.403791][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 488.926180][T20124] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3760'. [ 489.235567][T20140] netlink: 'syz.0.3768': attribute type 23 has an invalid length. [ 489.268603][T20143] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 489.301180][T20144] sctp: [Deprecated]: syz.4.3769 (pid 20144) Use of int in maxseg socket option. [ 489.301180][T20144] Use struct sctp_assoc_value instead [ 489.442928][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 489.677755][T20162] veth0: entered promiscuous mode [ 489.820435][T20162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.210438][T20162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.371602][T20162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.419437][T20188] __nla_validate_parse: 4 callbacks suppressed [ 490.419460][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 490.458289][T20188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3782'. [ 490.482784][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 490.547940][T20162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.725073][T11039] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.729484][T20200] netlink: 'syz.0.3786': attribute type 13 has an invalid length. [ 490.762838][T20200] lo: entered promiscuous mode [ 490.787788][T20200] tunl0: entered promiscuous mode [ 490.810927][T20200] tunl0: entered allmulticast mode [ 490.828817][T20200] gre0: entered promiscuous mode [ 490.834207][T20200] gre0: entered allmulticast mode [ 490.851794][T20200] gretap0: entered promiscuous mode [ 490.859888][T20200] gretap0: entered allmulticast mode [ 490.876920][T20206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.888140][T20200] erspan0: entered promiscuous mode [ 490.902407][T20200] erspan0: entered allmulticast mode [ 490.918394][T20200] erspan0: refused to change device tx_queue_len [ 490.925883][T20200] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 490.996789][ T1146] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.079573][T11039] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.129876][T11039] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.365869][T20228] team0: Device ip6gre1 is of different type [ 491.485101][T20233] netlink: 'syz.0.3796': attribute type 29 has an invalid length. [ 491.513414][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 491.523639][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.554156][T20233] netlink: 'syz.0.3796': attribute type 29 has an invalid length. [ 491.562595][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 491.952349][T20250] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 491.961763][ T5958] IPVS: starting estimator thread 0... [ 492.062928][T20253] IPVS: using max 25 ests per chain, 60000 per kthread [ 492.562976][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 492.829435][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'. [ 493.312017][T20318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3827'. [ 493.603098][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 493.888445][T20333] netlink: 'syz.2.3832': attribute type 1 has an invalid length. [ 494.013440][T20339] netlink: 'syz.0.3835': attribute type 10 has an invalid length. [ 494.054493][T20342] netlink: 'syz.3.3836': attribute type 10 has an invalid length. [ 494.063039][T20339] bridge0: left allmulticast mode [ 494.070122][T20339] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.077512][T20339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.085434][T20339] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.093462][T20339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.115228][T20341] netlink: 'syz.3.3836': attribute type 10 has an invalid length. [ 494.176348][T20339] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 494.263148][T20354] netlink: 'syz.1.3841': attribute type 1 has an invalid length. [ 494.358262][T20354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.424139][T20362] bond2: (slave geneve2): making interface the new active one [ 494.437081][T20362] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 494.490978][T20354] bond2: entered promiscuous mode [ 494.542942][T20374] netlink: 'syz.3.3845': attribute type 2 has an invalid length. [ 494.544578][T20354] geneve2: entered promiscuous mode [ 494.561888][T20375] netlink: 'syz.3.3845': attribute type 2 has an invalid length. [ 494.585208][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 494.612121][T20375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 494.642851][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 494.828107][T20392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3851'. [ 494.864105][T20392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3851'. [ 495.539230][T20428] __nla_validate_parse: 3 callbacks suppressed [ 495.539273][T20428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3863'. [ 495.548930][T20425] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 495.616190][T20432] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3865'. [ 495.682890][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 495.825079][T20435] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3866'. [ 496.003027][T20448] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 496.053973][T20448] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 496.104480][T20448] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 496.122214][T20453] pim6reg1: entered promiscuous mode [ 496.148237][T20453] pim6reg1: entered allmulticast mode [ 496.263412][T20426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3860'. [ 496.528379][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 496.567575][T20469] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 496.599158][T20469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.724625][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 496.740607][T20476] validate_nla: 2 callbacks suppressed [ 496.740630][T20476] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 496.755652][T20476] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 496.764902][T20477] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 496.780788][T20477] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 496.794448][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 496.823607][T20482] netlink: 'syz.3.3882': attribute type 1 has an invalid length. [ 496.842020][T20481] netlink: 'syz.3.3882': attribute type 1 has an invalid length. [ 497.018626][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 497.035248][T20489] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.077545][T20493] netlink: 'syz.3.3887': attribute type 10 has an invalid length. [ 497.094707][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 497.116559][T20489] bridge_slave_1 (unregistering): left allmulticast mode [ 497.132819][T20489] bridge_slave_1 (unregistering): left promiscuous mode [ 497.141731][T20489] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.226062][T20502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3889'. [ 497.639312][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3898'. [ 497.762935][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 497.973451][T20541] netlink: 'syz.3.3903': attribute type 75 has an invalid length. [ 498.803081][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 498.975330][T20580] syz.0.3916 (20580) used greatest stack depth: 17864 bytes left [ 499.193945][T20598] sctp: [Deprecated]: syz.2.3921 (pid 20598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.193945][T20598] Use struct sctp_sack_info instead [ 499.416684][T20608] tipc: Started in network mode [ 499.431489][T20608] tipc: Node identity dae131155219, cluster identity 4711 [ 499.452277][T20608] tipc: Enabled bearer , priority 0 [ 499.519474][T20608] syzkaller0: entered promiscuous mode [ 499.525577][T20608] syzkaller0: entered allmulticast mode [ 499.532769][T20608] tipc: Resetting bearer [ 499.560372][T20607] tipc: Resetting bearer [ 499.842897][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 500.543340][ T5960] tipc: Node number set to 2297966869 [ 500.882986][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 501.922866][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 502.341219][T20607] tipc: Disabling bearer [ 502.611070][T20648] __nla_validate_parse: 13 callbacks suppressed [ 502.611093][T20648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3935'. [ 502.630612][T20648] netlink: 'syz.3.3935': attribute type 2 has an invalid length. [ 502.639308][T20648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3935'. [ 502.788117][T20651] netlink: 'syz.0.3936': attribute type 2 has an invalid length. [ 502.812039][T20653] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3937'. [ 502.962879][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 503.513560][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 503.685122][T20697] netlink: 'syz.3.3954': attribute type 12 has an invalid length. [ 503.722258][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'. [ 503.775305][T20697] netlink: 'syz.3.3954': attribute type 12 has an invalid length. [ 503.784904][T20697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'. [ 503.824558][T20702] FAULT_INJECTION: forcing a failure. [ 503.824558][T20702] name failslab, interval 1, probability 0, space 0, times 0 [ 503.847052][T20702] CPU: 0 UID: 0 PID: 20702 Comm: syz.2.3956 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 503.847086][T20702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.847100][T20702] Call Trace: [ 503.847109][T20702] [ 503.847119][T20702] dump_stack_lvl+0x189/0x250 [ 503.847148][T20702] ? __pfx____ratelimit+0x10/0x10 [ 503.847179][T20702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.847201][T20702] ? __pfx__printk+0x10/0x10 [ 503.847231][T20702] ? __pfx___might_resched+0x10/0x10 [ 503.847265][T20702] ? fs_reclaim_acquire+0x7d/0x100 [ 503.847294][T20702] should_fail_ex+0x414/0x560 [ 503.847334][T20702] should_failslab+0xa8/0x100 [ 503.847357][T20702] __kmalloc_noprof+0xcb/0x4f0 [ 503.847388][T20702] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 503.847430][T20702] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 503.847465][T20702] genl_family_rcv_msg_doit+0xb8/0x300 [ 503.847499][T20702] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 503.847527][T20702] ? rcu_is_watching+0x15/0xb0 [ 503.847565][T20702] ? apparmor_capable+0x137/0x1b0 [ 503.847589][T20702] ? bpf_lsm_capable+0x9/0x20 [ 503.847619][T20702] ? security_capable+0x7e/0x2e0 [ 503.847657][T20702] genl_rcv_msg+0x60e/0x790 [ 503.847690][T20702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.847712][T20702] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 503.847739][T20702] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 503.847771][T20702] ? __pfx_nl802154_post_doit+0x10/0x10 [ 503.847818][T20702] netlink_rcv_skb+0x208/0x470 [ 503.847847][T20702] ? __lock_acquire+0xab9/0xd20 [ 503.847878][T20702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.847904][T20702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.847959][T20702] ? down_read+0x1ad/0x2e0 [ 503.847983][T20702] genl_rcv+0x28/0x40 [ 503.848004][T20702] netlink_unicast+0x82c/0x9e0 [ 503.848044][T20702] ? __pfx_netlink_unicast+0x10/0x10 [ 503.848076][T20702] ? netlink_sendmsg+0x642/0xb30 [ 503.848105][T20702] ? skb_put+0x11b/0x210 [ 503.848131][T20702] netlink_sendmsg+0x805/0xb30 [ 503.848175][T20702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.848212][T20702] ? aa_sock_msg_perm+0x94/0x160 [ 503.848242][T20702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.848266][T20702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.848299][T20702] __sock_sendmsg+0x21c/0x270 [ 503.848333][T20702] ____sys_sendmsg+0x505/0x830 [ 503.848363][T20702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.848403][T20702] ? import_iovec+0x74/0xa0 [ 503.848438][T20702] ___sys_sendmsg+0x21f/0x2a0 [ 503.848464][T20702] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.848531][T20702] ? __fget_files+0x2a/0x420 [ 503.848551][T20702] ? __fget_files+0x3a0/0x420 [ 503.848584][T20702] __x64_sys_sendmsg+0x19b/0x260 [ 503.848611][T20702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.848645][T20702] ? __pfx_ksys_write+0x10/0x10 [ 503.848674][T20702] ? rcu_is_watching+0x15/0xb0 [ 503.848713][T20702] ? do_syscall_64+0xbe/0x3b0 [ 503.848750][T20702] do_syscall_64+0xfa/0x3b0 [ 503.848780][T20702] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.848809][T20702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.848830][T20702] ? clear_bhb_loop+0x60/0xb0 [ 503.848856][T20702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.848877][T20702] RIP: 0033:0x7f18baf8eb69 [ 503.848896][T20702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.848915][T20702] RSP: 002b:00007f18bbeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.848938][T20702] RAX: ffffffffffffffda RBX: 00007f18bb1b5fa0 RCX: 00007f18baf8eb69 [ 503.848954][T20702] RDX: 0000000020000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 503.848968][T20702] RBP: 00007f18bbeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 503.848981][T20702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.848994][T20702] R13: 0000000000000000 R14: 00007f18bb1b5fa0 R15: 00007ffe109de158 [ 503.849029][T20702] [ 504.260547][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 504.294102][T20707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3957'. [ 504.304298][T20707] sctp_getsockopt_maxburst: 23 callbacks suppressed [ 504.304320][T20707] sctp: [Deprecated]: syz.4.3957 (pid 20707) Use of int in max_burst socket option. [ 504.304320][T20707] Use struct sctp_assoc_value instead [ 504.445068][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 504.536548][ T24] IPVS: starting estimator thread 0... [ 504.546874][T20714] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 504.608776][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3961'. [ 504.618721][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3961'. [ 504.646626][T20719] IPVS: using max 23 ests per chain, 55200 per kthread [ 504.683851][T20712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.731456][T20718] macvlan4: entered promiscuous mode [ 504.750227][T20718] macvlan4: entered allmulticast mode [ 504.757927][T20718] bond2: (slave macvlan4): Opening slave failed [ 505.283205][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 506.324733][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 506.349848][T20816] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4 [ 506.418433][T20822] netlink: 'syz.3.3989': attribute type 1 has an invalid length. [ 506.430383][T20822] netlink: 'syz.3.3989': attribute type 1 has an invalid length. [ 506.443398][T20822] netlink: 'syz.3.3989': attribute type 1 has an invalid length. [ 506.459930][T20822] netlink: 'syz.3.3989': attribute type 2 has an invalid length. [ 506.972994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.170431][T20863] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 507.362956][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 507.504258][T20871] sctp: [Deprecated]: syz.4.4006 (pid 20871) Use of int in maxseg socket option. [ 507.504258][T20871] Use struct sctp_assoc_value instead [ 507.652228][T20877] FAULT_INJECTION: forcing a failure. [ 507.652228][T20877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 507.673489][T20877] CPU: 0 UID: 0 PID: 20877 Comm: syz.1.4009 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 507.673524][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.673537][T20877] Call Trace: [ 507.673545][T20877] [ 507.673555][T20877] dump_stack_lvl+0x189/0x250 [ 507.673582][T20877] ? __pfx____ratelimit+0x10/0x10 [ 507.673613][T20877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.673636][T20877] ? __pfx__printk+0x10/0x10 [ 507.673675][T20877] should_fail_ex+0x414/0x560 [ 507.673714][T20877] _copy_to_user+0x31/0xb0 [ 507.673747][T20877] simple_read_from_buffer+0xe1/0x170 [ 507.673786][T20877] proc_fail_nth_read+0x1b3/0x220 [ 507.673817][T20877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.673847][T20877] ? rw_verify_area+0x258/0x650 [ 507.673876][T20877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 507.673904][T20877] vfs_read+0x1fd/0x980 [ 507.673940][T20877] ? fdget_pos+0x247/0x320 [ 507.673966][T20877] ? __pfx___mutex_lock+0x10/0x10 [ 507.673999][T20877] ? __pfx_vfs_read+0x10/0x10 [ 507.674031][T20877] ? __fget_files+0x2a/0x420 [ 507.674057][T20877] ? __fget_files+0x3a0/0x420 [ 507.674076][T20877] ? __fget_files+0x2a/0x420 [ 507.674106][T20877] ksys_read+0x145/0x250 [ 507.674140][T20877] ? __pfx_ksys_read+0x10/0x10 [ 507.674166][T20877] ? rcu_is_watching+0x15/0xb0 [ 507.674208][T20877] ? do_syscall_64+0xbe/0x3b0 [ 507.674244][T20877] do_syscall_64+0xfa/0x3b0 [ 507.674275][T20877] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.674306][T20877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.674327][T20877] ? clear_bhb_loop+0x60/0xb0 [ 507.674354][T20877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.674375][T20877] RIP: 0033:0x7fe3e918d57c [ 507.674404][T20877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 507.674423][T20877] RSP: 002b:00007fe3ea0c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.674448][T20877] RAX: ffffffffffffffda RBX: 00007fe3e93b5fa0 RCX: 00007fe3e918d57c [ 507.674464][T20877] RDX: 000000000000000f RSI: 00007fe3ea0c00a0 RDI: 0000000000000003 [ 507.674478][T20877] RBP: 00007fe3ea0c0090 R08: 0000000000000000 R09: 0000000000000000 [ 507.674491][T20877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.674504][T20877] R13: 0000000000000000 R14: 00007fe3e93b5fa0 R15: 00007fff36f9c468 [ 507.674539][T20877] [ 507.957876][T20879] __nla_validate_parse: 9 callbacks suppressed [ 507.957896][T20879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4010'. [ 507.984802][T20879] vlan1: entered allmulticast mode [ 507.990510][T20879] veth0_vlan: entered allmulticast mode [ 508.233636][T20887] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 508.256887][ T55] block nbd1: Possible stuck request ffff888025620000: control (read@0,4096B). Runtime 120 seconds [ 508.399268][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4016'. [ 508.409277][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 508.549364][T20903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.571214][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4018'. [ 508.591702][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4020'. [ 508.609525][T20911] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 508.632542][T20911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.070507][T20934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4028'. [ 509.191410][T20938] netlink: 'syz.3.4029': attribute type 21 has an invalid length. [ 509.221285][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4030'. [ 509.245450][T20945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4031'. [ 509.439079][T20952] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 509.447378][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 509.463389][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'. [ 509.671476][T20965] netlink: 'syz.1.4036': attribute type 8 has an invalid length. [ 509.758077][T20979] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4037'. [ 509.883876][T20983] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 510.482854][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 511.508394][T21022] netlink: 'syz.2.4052': attribute type 23 has an invalid length. [ 511.523269][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 511.555667][T21035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4053'. [ 512.011446][T21053] dvmrp0: entered allmulticast mode [ 512.308340][T21078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.521081][T11039] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.559302][T11039] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.572839][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 512.579524][T11039] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.606559][T11039] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.058624][T21112] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 513.094599][T21112] __nla_validate_parse: 6 callbacks suppressed [ 513.094620][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'. [ 513.513995][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4082'. [ 513.546180][T21132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4082'. [ 513.602850][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 513.669953][T21132] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.704599][T21145] openvswitch: netlink: Actions may not be safe on all matching packets [ 513.716445][T21132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4082'. [ 513.726918][T21145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4086'. [ 513.751269][T21145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4086'. [ 513.919770][T21153] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4089'. [ 514.216883][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4094'. [ 514.380177][T21179] netlink: 'syz.0.4100': attribute type 2 has an invalid length. [ 514.392126][T21179] netlink: 'syz.0.4100': attribute type 8 has an invalid length. [ 514.408312][T21179] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.4100'. [ 514.584584][T21190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 514.643644][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 514.659159][T21192] netlink: 'syz.4.4104': attribute type 7 has an invalid length. [ 515.357688][T21215] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 515.401039][T21223] syzkaller1: entered promiscuous mode [ 515.462885][T21223] syzkaller1: entered allmulticast mode [ 515.682932][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 516.207907][T21257] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 516.431936][T21268] tipc: Enabled bearer , priority 0 [ 516.569925][T21278] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 516.628498][T21278] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 516.722887][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 517.027701][T21268] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 517.036163][T21268] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 517.044934][T21268] tipc: Resetting bearer [ 517.051888][T11048] tipc: Resetting bearer [ 517.119676][T21301] tipc: Resetting bearer [ 517.202894][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.243269][T21300] syzkaller0: entered promiscuous mode [ 517.249198][T21300] syzkaller0: entered allmulticast mode [ 517.361233][T21311] netlink: 'syz.1.4141': attribute type 83 has an invalid length. [ 517.542897][T14409] tipc: Node number set to 1351459884 [ 517.762909][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 517.998309][T21326] netlink: 'syz.1.4146': attribute type 28 has an invalid length. [ 518.008228][T21326] netlink: 'syz.1.4146': attribute type 3 has an invalid length. [ 518.461914][T21319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 518.803277][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 519.769124][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 519.845835][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 520.118482][T21285] vxcan1 speed is unknown, defaulting to 1000 [ 520.143085][T21337] lo: entered allmulticast mode [ 520.303754][T21342] __nla_validate_parse: 13 callbacks suppressed [ 520.303777][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4152'. [ 520.329369][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 520.339830][T21341] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 520.357886][T21341] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 520.399397][T21348] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4154'. [ 520.459244][T21342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.508805][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 520.518688][T21352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4155'. [ 520.559272][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 520.610061][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4152'. [ 520.744281][T21364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4157'. [ 520.820004][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 520.847015][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 520.860284][T21369] sctp: [Deprecated]: syz.3.4158 (pid 21369) Use of int in max_burst socket option deprecated. [ 520.860284][T21369] Use struct sctp_assoc_value instead [ 520.869796][T21366] netlink: 'syz.0.4157': attribute type 3 has an invalid length. [ 520.886262][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 521.054527][T21379] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 521.113784][T21379] netlink: 'syz.0.4161': attribute type 10 has an invalid length. [ 521.188245][T21379] veth0_macvtap: left promiscuous mode [ 521.922863][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 522.177547][T21427] netlink: 'syz.0.4176': attribute type 64 has an invalid length. [ 522.831675][T21464] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 522.963479][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 523.839548][T21510] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 523.852990][T21514] netlink: 'syz.3.4200': attribute type 8 has an invalid length. [ 523.864079][T21513] sctp: [Deprecated]: syz.4.4202 (pid 21513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.864079][T21513] Use struct sctp_sack_info instead [ 524.002834][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 524.232842][T21522] delete_channel: no stack [ 524.976454][T21570] netlink: 'syz.2.4219': attribute type 1 has an invalid length. [ 525.042873][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 525.063318][T21573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.359772][T21588] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 525.447878][T21592] __nla_validate_parse: 15 callbacks suppressed [ 525.447899][T21592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4229'. [ 525.526326][T21588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.624292][T21588] veth5: entered promiscuous mode [ 525.642928][T21588] bond4: (slave veth5): Enslaving as an active interface with a down link [ 525.758213][T21599] vlan0: entered allmulticast mode [ 525.775755][T21599] bond4: entered allmulticast mode [ 525.783712][T21599] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 525.834985][T21606] smc: net device erspan0 applied user defined pnetid SYZ0 [ 525.843378][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'. [ 526.082812][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 526.369169][T21638] netlink: 'syz.4.4239': attribute type 83 has an invalid length. [ 526.384649][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4244'. [ 526.408427][T21639] netlink: 'syz.3.4244': attribute type 7 has an invalid length. [ 526.499381][T21622] netlink: 'syz.4.4239': attribute type 2 has an invalid length. [ 526.521308][T21639] : entered promiscuous mode [ 526.547846][T21642] gre1: entered promiscuous mode [ 526.573396][T21642] gre1: entered allmulticast mode [ 526.910578][T21660] sctp: [Deprecated]: syz.0.4251 (pid 21660) Use of int in maxseg socket option. [ 526.910578][T21660] Use struct sctp_assoc_value instead [ 527.037088][T21664] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.4252'. [ 527.099837][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 527.110001][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4253'. [ 527.121376][T21665] netlink: 'syz.4.4250': attribute type 10 has an invalid length. [ 527.130255][T21665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4250'. [ 527.132893][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 527.142972][T21665] dummy0: entered promiscuous mode [ 527.154997][T21665] bridge0: port 3(dummy0) entered blocking state [ 527.161926][T21665] bridge0: port 3(dummy0) entered disabled state [ 527.169529][T21665] dummy0: entered allmulticast mode [ 527.178689][T21669] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 527.186085][T21665] bridge0: port 3(dummy0) entered blocking state [ 527.193314][T21665] bridge0: port 3(dummy0) entered forwarding state [ 527.206140][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4254'. [ 527.218450][T21669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.227143][T21669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.236160][T21669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.251441][T21669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.327686][T21673] veth0: entered promiscuous mode [ 527.334783][T21672] veth0: left promiscuous mode [ 527.580328][T21680] netlink: 'syz.3.4258': attribute type 1 has an invalid length. [ 527.658985][T21688] netlink: 'syz.2.4259': attribute type 1 has an invalid length. [ 527.698106][T21680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.706318][T21688] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4259'. [ 527.727002][T21688] netlink: 'syz.2.4259': attribute type 1 has an invalid length. [ 527.772501][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 528.058759][T21710] netlink: 'syz.0.4266': attribute type 5 has an invalid length. [ 528.165154][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 528.881292][T21749] team0: Device xfrm1 is of different type [ 529.166662][T21757] chnl_net:caif_netlink_parms(): no params data found [ 529.202851][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 529.258131][T21764] netlink: 'syz.0.4284': attribute type 9 has an invalid length. [ 529.258131][T21765] netlink: 'syz.0.4284': attribute type 9 has an invalid length. [ 529.523473][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 529.915953][T21787] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.024944][T21786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.045935][T21786] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 530.059102][T21786] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 530.242888][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.268301][T21850] __nla_validate_parse: 10 callbacks suppressed [ 531.268323][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 531.284232][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 531.925458][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4317'. [ 532.089288][T21877] validate_nla: 1 callbacks suppressed [ 532.089307][T21877] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 532.225921][T21877] bond3 (unregistering): Released all slaves [ 532.270422][T21879] ip6tnl3: entered promiscuous mode [ 532.284316][T21879] ip6tnl3: entered allmulticast mode [ 532.322841][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.341339][T21869] vxcan1 speed is unknown, defaulting to 1000 [ 532.852457][T21901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.025306][T21901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.066788][T21910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4331'. [ 533.362918][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 533.475138][T21931] netlink: 'syz.3.4337': attribute type 1 has an invalid length. [ 533.498904][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4337'. [ 533.680021][T21931] bond3 (unregistering): Released all slaves [ 533.908512][T21933] ip6tnl3: entered promiscuous mode [ 533.935654][T21933] ip6tnl3: entered allmulticast mode [ 534.129527][T21945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4340'. [ 534.140299][T21945] team0: Cannot enslave team device to itself [ 534.402846][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 534.631543][T21970] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 534.761029][T21960] syzkaller0: entered promiscuous mode [ 534.782777][T21960] syzkaller0: entered allmulticast mode [ 534.940154][T21983] netlink: 'syz.0.4355': attribute type 83 has an invalid length. [ 535.050876][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4356'. [ 535.080846][T21991] netlink: 'syz.1.4358': attribute type 1 has an invalid length. [ 535.366097][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 535.454781][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.500046][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 537.522843][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 537.865352][T22017] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 538.115393][T22038] sctp: [Deprecated]: syz.0.4372 (pid 22038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.115393][T22038] Use struct sctp_sack_info instead [ 538.342945][ T55] block nbd1: Possible stuck request ffff888025620000: control (read@0,4096B). Runtime 150 seconds [ 538.556543][T22058] sctp: [Deprecated]: syz.4.4375 (pid 22058) Use of int in max_burst socket option. [ 538.556543][T22058] Use struct sctp_assoc_value instead [ 538.572844][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 538.617708][T22059] sctp: [Deprecated]: syz.4.4375 (pid 22059) Use of int in max_burst socket option. [ 538.617708][T22059] Use struct sctp_assoc_value instead [ 538.647101][T22058] netlink: 'syz.4.4375': attribute type 1 has an invalid length. [ 538.664353][T22058] netlink: 'syz.4.4375': attribute type 1 has an invalid length. [ 538.767081][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.787922][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.829480][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.837604][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.864836][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.890475][T22074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4378'. [ 538.895140][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.933261][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.944721][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.959943][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.980018][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 538.995690][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.012441][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.033949][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.075170][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.097533][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.105105][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.113724][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.121177][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.136671][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.144345][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.151651][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.159024][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.183297][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.202066][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.220321][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.248637][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.268880][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.288175][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.312571][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.321785][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 539.335047][T22086] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4383'. [ 539.362573][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.384662][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.392395][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.437606][T22064] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000 [ 539.603133][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 539.642177][T22099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4386'. [ 539.663482][T22099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4386'. [ 539.764091][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 539.887164][T22071] vxcan1 speed is unknown, defaulting to 1000 [ 540.642742][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 541.286316][T22175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4407'. [ 541.814980][ C0] hrtimer: interrupt took 467848522 ns [ 541.821525][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 636.990903][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.054715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.203601][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.962654][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 646.971092][ C1] rcu: 0-....: (1 GPs behind) idle=2b9c/1/0x4000000000000000 softirq=107876/107883 fqs=2 [ 646.982946][ C1] rcu: hardirqs softirqs csw/system [ 646.989646][ C1] rcu: number: 3 0 0 [ 646.996354][ C1] rcu: cputime: 0 99 0 ==> 9970(ms) [ 647.004273][ C1] rcu: (detected by 1, t=10502 jiffies, g=88933, q=1485 ncpus=2) [ 647.012119][ C1] Sending NMI from CPU 1 to CPUs 0: [ 647.012161][ C0] NMI backtrace for cpu 0 [ 647.012177][ C0] CPU: 0 UID: 0 PID: 22174 Comm: modprobe Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 647.012199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.012210][ C0] RIP: 0010:lock_release+0x29a/0x3e0 [ 647.012241][ C0] Code: c7 8b 5e b6 8d e8 f6 5f d2 09 b8 ff ff ff ff 65 0f c1 05 99 bc fc 10 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b [ 647.012257][ C0] RSP: 0018:ffffc90000006ae8 EFLAGS: 00000046 [ 647.012274][ C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 2cdd99978a544a00 [ 647.012287][ C0] RDX: 0000000000000004 RSI: ffffffff8db65e8b RDI: ffffffff8be30a00 [ 647.012299][ C0] RBP: ffff888027638b90 R08: ffff88805272915f R09: 1ffff1100a4e522b [ 647.012313][ C0] R10: dffffc0000000000 R11: ffffed100a4e522c R12: 0000000000000004 [ 647.012325][ C0] R13: 0000000000000004 R14: ffffffff8e13c4e0 R15: ffff888027638000 [ 647.012338][ C0] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 647.012352][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.012364][ C0] CR2: 00007f8c722a4e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 647.012381][ C0] Call Trace: [ 647.012390][ C0] [ 647.012400][ C0] ? advance_sched+0x9f8/0xc90 [ 647.012419][ C0] ? advance_sched+0x9f8/0xc90 [ 647.012436][ C0] advance_sched+0xb23/0xc90 [ 647.012461][ C0] ? __pfx_advance_sched+0x10/0x10 [ 647.012478][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 647.012517][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 647.012543][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 647.012572][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 647.012615][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 647.012636][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 647.012662][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 647.012682][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 647.012706][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 5b 7c fc 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 647.012721][ C0] RSP: 0018:ffffc90000006f90 EFLAGS: 00000206 [ 647.012736][ C0] RAX: 2cdd99978a544a00 RBX: 0000000000000202 RCX: 2cdd99978a544a00 [ 647.012749][ C0] RDX: 0000000000000004 RSI: ffffffff8db65e8b RDI: ffffffff8be30a00 [ 647.012761][ C0] RBP: ffff888027638b90 R08: ffffc90000007e30 R09: 0000000000000000 [ 647.012773][ C0] R10: ffffc90000007118 R11: fffff52000000e25 R12: 0000000000000004 [ 647.012786][ C0] R13: 0000000000000004 R14: ffffffff8e13c4e0 R15: ffff888027638000 [ 647.012810][ C0] ? unwind_next_frame+0xa5/0x2390 [ 647.012830][ C0] ? unwind_next_frame+0xa5/0x2390 [ 647.012847][ C0] unwind_next_frame+0x19a9/0x2390 [ 647.012868][ C0] ? unwind_next_frame+0xa5/0x2390 [ 647.012887][ C0] ? run_timer_softirq+0xb7/0x180 [ 647.012912][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.012933][ C0] arch_stack_walk+0x11c/0x150 [ 647.012955][ C0] ? handle_softirqs+0x283/0x870 [ 647.012985][ C0] stack_trace_save+0x9c/0xe0 [ 647.013004][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 647.013025][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 647.013056][ C0] kasan_save_track+0x3e/0x80 [ 647.013081][ C0] ? kasan_save_track+0x3e/0x80 [ 647.013104][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 647.013136][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 647.013161][ C0] ? fill_pool+0x100/0x570 [ 647.013187][ C0] ? __debug_object_init+0x318/0x3c0 [ 647.013212][ C0] ? timer_init_key+0x41/0x2d0 [ 647.013229][ C0] ? ___neigh_create+0x9f2/0x2260 [ 647.013252][ C0] ? ip6_finish_output2+0xb4d/0x16a0 [ 647.013277][ C0] ? ndisc_send_skb+0xb54/0x1440 [ 647.013303][ C0] ? addrconf_rs_timer+0x369/0x670 [ 647.013326][ C0] ? call_timer_fn+0x17e/0x5f0 [ 647.013349][ C0] ? __run_timer_base+0x61a/0x860 [ 647.013369][ C0] ? run_timer_softirq+0xb7/0x180 [ 647.013413][ C0] ? __run_timer_base+0x61a/0x860 [ 647.013436][ C0] __kasan_slab_alloc+0x6c/0x80 [ 647.013464][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 647.013489][ C0] ? fill_pool+0x100/0x570 [ 647.013518][ C0] fill_pool+0x100/0x570 [ 647.013544][ C0] ? __debug_object_init+0x2ef/0x3c0 [ 647.013571][ C0] ? __debug_object_init+0x2ef/0x3c0 [ 647.013596][ C0] ? __pfx_fill_pool+0x10/0x10 [ 647.013628][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 647.013645][ C0] ? __debug_object_init+0x2ef/0x3c0 [ 647.013670][ C0] __debug_object_init+0x318/0x3c0 [ 647.013700][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 647.013718][ C0] timer_init_key+0x41/0x2d0 [ 647.013739][ C0] ___neigh_create+0x9f2/0x2260 [ 647.013768][ C0] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 647.013800][ C0] ip6_finish_output2+0xb4d/0x16a0 [ 647.013826][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 647.013852][ C0] ? ip6_mtu+0x7d/0x3f0 [ 647.013873][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 647.013898][ C0] ? ip6_mtu+0x7d/0x3f0 [ 647.013917][ C0] ? ip6_mtu+0x321/0x3f0 [ 647.013938][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 647.013962][ C0] ndisc_send_skb+0xb54/0x1440 [ 647.013992][ C0] ? ndisc_send_skb+0x20c/0x1440 [ 647.014025][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 647.014053][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 647.014084][ C0] addrconf_rs_timer+0x369/0x670 [ 647.014112][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 647.014148][ C0] call_timer_fn+0x17e/0x5f0 [ 647.014172][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 647.014197][ C0] ? call_timer_fn+0xbe/0x5f0 [ 647.014221][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 647.014250][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.014274][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.014297][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 647.014322][ C0] __run_timer_base+0x61a/0x860 [ 647.014343][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 647.014373][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 647.014404][ C0] run_timer_softirq+0xb7/0x180 [ 647.014428][ C0] handle_softirqs+0x283/0x870 [ 647.014457][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 647.014488][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 647.014521][ C0] __irq_exit_rcu+0xca/0x1f0 [ 647.014547][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 647.014580][ C0] irq_exit_rcu+0x9/0x30 [ 647.014604][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 647.014629][ C0] [ 647.014635][ C0] [ 647.014642][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 647.014661][ C0] RIP: 0010:kernel_text_address+0x8c/0xe0 [ 647.014685][ C0] Code: 18 48 81 fb 00 60 05 91 0f 93 c0 48 81 fb 10 a9 1b 91 0f 92 c1 84 c8 75 b6 e8 a0 d4 19 00 41 89 c6 84 c0 75 05 e8 14 4d e3 09 <48> 89 df e8 1c 24 1e 00 bd 01 00 00 00 84 c0 75 0b 48 89 df e8 eb [ 647.014699][ C0] RSP: 0018:ffffc90003367798 EFLAGS: 00000202 [ 647.014714][ C0] RAX: 0000000000000001 RBX: 00007f8c724036c5 RCX: 2cdd99978a544a00 [ 647.014726][ C0] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 647.014739][ C0] RBP: 0000000000000001 R08: 0000000000000022 R09: ffffffff8172cd05 [ 647.014750][ C0] R10: ffffc90003367838 R11: ffffffff81ac3450 R12: ffff888027638000 [ 647.014763][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff9200066cf06 [ 647.014778][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.014798][ C0] ? unwind_next_frame+0xa5/0x2390 [ 647.014820][ C0] ? kernel_text_address+0x80/0xe0 [ 647.014844][ C0] __kernel_text_address+0xd/0x40 [ 647.014866][ C0] unwind_get_return_address+0x4d/0x90 [ 647.014885][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 647.014906][ C0] arch_stack_walk+0xfc/0x150 [ 647.014932][ C0] stack_trace_save+0x9c/0xe0 [ 647.014951][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 647.014969][ C0] ? do_exit+0x6b5/0x22e0 [ 647.014992][ C0] ? __lock_acquire+0xab9/0xd20 [ 647.015023][ C0] kasan_save_track+0x3e/0x80 [ 647.015046][ C0] ? kasan_save_track+0x3e/0x80 [ 647.015069][ C0] ? kasan_save_free_info+0x46/0x50 [ 647.015088][ C0] ? __kasan_slab_free+0x62/0x70 [ 647.015122][ C0] ? kmem_cache_free+0x18f/0x400 [ 647.015147][ C0] ? __fput+0x6c2/0xa70 [ 647.015166][ C0] ? task_work_run+0x1d4/0x260 [ 647.015186][ C0] ? do_exit+0x6b5/0x22e0 [ 647.015205][ C0] ? do_group_exit+0x21c/0x2d0 [ 647.015224][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 647.015244][ C0] ? x64_sys_call+0x21f7/0x2200 [ 647.015265][ C0] ? do_syscall_64+0xfa/0x3b0 [ 647.015290][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.015333][ C0] ? __fput+0x6c2/0xa70 [ 647.015352][ C0] kasan_save_free_info+0x46/0x50 [ 647.015372][ C0] __kasan_slab_free+0x62/0x70 [ 647.015397][ C0] kmem_cache_free+0x18f/0x400 [ 647.015427][ C0] __fput+0x6c2/0xa70 [ 647.015453][ C0] task_work_run+0x1d4/0x260 [ 647.015477][ C0] ? __pfx_task_work_run+0x10/0x10 [ 647.015505][ C0] do_exit+0x6b5/0x22e0 [ 647.015529][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 647.015551][ C0] ? __pfx_do_exit+0x10/0x10 [ 647.015576][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.015599][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.015625][ C0] do_group_exit+0x21c/0x2d0 [ 647.015650][ C0] __x64_sys_exit_group+0x3f/0x40 [ 647.015671][ C0] x64_sys_call+0x21f7/0x2200 [ 647.015692][ C0] do_syscall_64+0xfa/0x3b0 [ 647.015718][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.015742][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.015760][ C0] ? clear_bhb_loop+0x60/0xb0 [ 647.015780][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.015798][ C0] RIP: 0033:0x7f8c724036c5 [ 647.015813][ C0] Code: Unable to access opcode bytes at 0x7f8c7240369b. [ 647.015822][ C0] RSP: 002b:00007ffc2d6cb678 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 647.015839][ C0] RAX: ffffffffffffffda RBX: 00007f8c72504fe8 RCX: 00007f8c724036c5 [ 647.015852][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 647.015863][ C0] RBP: 0000000000000001 R08: 00007ffc2d6cb608 R09: 0000000000000000 [ 647.015876][ C0] R10: 00007ffc2d6cb4a0 R11: 0000000000000206 R12: 0000000000000000 [ 647.015887][ C0] R13: 0000000000000001 R14: 00007f8c72503680 R15: 00007f8c72505000 [ 647.015909][ C0] [ 647.016151][ C1] rcu: rcu_preempt kthread starved for 997 jiffies! g88933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 648.056546][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 648.066824][ C1] rcu: RCU grace-period kthread stack dump: [ 648.073078][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 648.087503][ C1] Call Trace: [ 648.090985][ C1] [ 648.094220][ C1] __schedule+0x1737/0x4d30 [ 648.098952][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 648.104242][ C1] ? schedule+0x165/0x360 [ 648.109064][ C1] ? __lock_acquire+0xab9/0xd20 [ 648.114387][ C1] ? __pfx___schedule+0x10/0x10 [ 648.119650][ C1] ? schedule+0x91/0x360 [ 648.124218][ C1] schedule+0x165/0x360 [ 648.128605][ C1] schedule_timeout+0x12b/0x270 [ 648.133662][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 648.139341][ C1] ? __pfx_process_timeout+0x10/0x10 [ 648.145178][ C1] ? prepare_to_swait_event+0x341/0x380 [ 648.151372][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 648.156604][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 648.163149][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 648.168811][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 648.174320][ C1] ? finish_swait+0xcd/0x1f0 [ 648.179147][ C1] rcu_gp_kthread+0x99/0x390 [ 648.183933][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 648.189701][ C1] ? __kthread_parkme+0x7b/0x200 [ 648.194884][ C1] ? __kthread_parkme+0x1a1/0x200 [ 648.200128][ C1] kthread+0x70e/0x8a0 [ 648.204407][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 648.209987][ C1] ? __pfx_kthread+0x10/0x10 [ 648.214615][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.220498][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.225930][ C1] ? __pfx_kthread+0x10/0x10 [ 648.230643][ C1] ret_from_fork+0x3fc/0x770 [ 648.235652][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 648.240893][ C1] ? __switch_to_asm+0x39/0x70 [ 648.245947][ C1] ? __switch_to_asm+0x33/0x70 [ 648.251005][ C1] ? __pfx_kthread+0x10/0x10 [ 648.255920][ C1] ret_from_fork_asm+0x1a/0x30 [ 648.261056][ C1] [ 648.264271][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 648.270974][ C1] CPU: 1 UID: 0 PID: 22182 Comm: syz.0.4409 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 648.284278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.295364][ C1] RIP: 0010:smp_call_function_many_cond+0xd44/0x12d0 [ 648.302259][ C1] Code: 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 b1 6b 0b 00 eb 38 f3 90 42 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 <74> 1e e8 95 6b 0b 00 eb e4 44 89 e1 80 e1 07 80 c1 03 38 c1 7c e2 [ 648.323042][ C1] RSP: 0018:ffffc9000489f340 EFLAGS: 00000202 [ 648.329495][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8385 RCX: ffff88802a4cda00 [ 648.338445][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 648.347066][ C1] RBP: ffffc9000489f4c0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 648.355499][ C1] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffff8880b8641c28 [ 648.364100][ C1] R13: dffffc0000000000 R14: ffff8880b873b180 R15: 0000000000000000 [ 648.372885][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 648.382314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.389211][ C1] CR2: 00007f52172e95ed CR3: 000000000df38000 CR4: 00000000003526f0 [ 648.398095][ C1] Call Trace: [ 648.401746][ C1] [ 648.404775][ C1] ? __lock_acquire+0xab9/0xd20 [ 648.410114][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 648.415718][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 648.422534][ C1] ? rcu_is_watching+0x15/0xb0 [ 648.427615][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 648.433637][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 648.439323][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 648.445013][ C1] ? free_pgd_range+0x144b/0x14c0 [ 648.450517][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 648.456321][ C1] tlb_flush_mmu+0x1a7/0x680 [ 648.461355][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 648.466171][ C1] ? free_pgd_range+0x144b/0x14c0 [ 648.471321][ C1] free_ldt_pgtables+0x17b/0x320 [ 648.476557][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 648.482421][ C1] ? down_read+0x1ad/0x2e0 [ 648.487567][ C1] exit_mmap+0x17c/0xb50 [ 648.492290][ C1] ? uprobe_clear_state+0x20f/0x290 [ 648.497880][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 648.502950][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 648.508804][ C1] ? __pfx_exit_aio+0x10/0x10 [ 648.513712][ C1] ? uprobe_clear_state+0x274/0x290 [ 648.519044][ C1] __mmput+0x118/0x420 [ 648.523245][ C1] exit_mm+0x1da/0x2c0 [ 648.527529][ C1] ? __pfx_exit_mm+0x10/0x10 [ 648.532152][ C1] ? rcu_is_watching+0x15/0xb0 [ 648.537067][ C1] do_exit+0x648/0x22e0 [ 648.541372][ C1] ? do_raw_spin_lock+0x121/0x290 [ 648.546433][ C1] ? __pfx_do_exit+0x10/0x10 [ 648.551139][ C1] ? cgroup_freezing+0x20/0x350 [ 648.556387][ C1] do_group_exit+0x21c/0x2d0 [ 648.561266][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.566513][ C1] get_signal+0x1286/0x1340 [ 648.571257][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 648.576842][ C1] ? read_tsc+0x9/0x20 [ 648.581206][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 648.587928][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 648.593887][ C1] exit_to_user_mode_loop+0x75/0x110 [ 648.599571][ C1] do_syscall_64+0x2bd/0x3b0 [ 648.604387][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.609724][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.615914][ C1] ? clear_bhb_loop+0x60/0xb0 [ 648.620804][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.626851][ C1] RIP: 0033:0x7f3700f8eb69 [ 648.631899][ C1] Code: Unable to access opcode bytes at 0x7f3700f8eb3f. [ 648.640000][ C1] RSP: 002b:00007ffcb1583d08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 648.648984][ C1] RAX: ffffffffffffff92 RBX: 000000000008447a RCX: 00007f3700f8eb69 [ 648.657512][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37011b5fac [ 648.665606][ C1] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 00000004b1583fff [ 648.673883][ C1] R10: 00007ffcb1583e00 R11: 0000000000000246 R12: 00007f37011b5fac [ 648.681973][ C1] R13: 00007ffcb1583e00 R14: 00000000000844ac R15: 00007ffcb1583e20 [ 648.690102][ C1]