last executing test programs: 3.826653926s ago: executing program 3 (id=1738): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x3}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200080f0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$packet(0x11, 0x2, 0x300) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="58ed69a2c228e5574d9931f1b78cee179692c196af7200d2eebca4660a02245a66943b56d70d8a52cf", 0x29, 0x5, &(0x7f000005ffe4)={0xa, 0x4c24, 0x0, @loopback}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a68", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$inet6_sctp(0xa, 0x1, 0x84) 3.679679072s ago: executing program 1 (id=1740): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x21, 0x3, @mcast2, 0x7}, 0x1c) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r9, 0xfffff000) write$cgroup_pid(r9, &(0x7f00000000c0)=r8, 0x12) preadv(r7, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2, 0xfa, 0xa2, 0xb, 0x81, 0x84}, 0xe) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_exit\x00', r11}, 0x18) 3.000821457s ago: executing program 0 (id=1747): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3fff, @dev}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x80000001, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x16}}, 0x5d) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="0001000016000100d3befc9d28bd7000fbdbdf25fe800000000000f7ffffffffffffffaae00000020000000000000000000000004e23000f4e23000e020020005e00d1294038ba58013a7e70ddae1e42c70000f4deedd3d18759", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000004d66c0000000a010100000000000000000000000000080000000000000000010000000000000500000000000000070000000000000000100000000000000100000000000000000000000000000000000100000000000200000000000000090000000000000003000000000000005d1900000000000009000000060000008100000025bd7000013500000a0001daec00000000000000030000002b03000008000b0008000000"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2.68494346s ago: executing program 1 (id=1750): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x80, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 2.480905954s ago: executing program 0 (id=1752): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x430, @local, 0x10000009}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x5, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRESHEX=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448c9, 0x0) sendmmsg$inet(r8, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)}}], 0x1, 0x2000c042) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYRES64=r5, @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) 2.367026062s ago: executing program 4 (id=1753): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{0x0}, {&(0x7f00000003c0)="ac", 0x1}], 0x2}}], 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) 2.164303818s ago: executing program 4 (id=1754): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4], 0x184}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x3) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x515, @mcast1, 0x9, 0x2}, 0x20) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0xb0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 1.942441648s ago: executing program 4 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r0 = socket(0x6, 0x0, 0xa7) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)) (async) r3 = gettid() (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) getuid() (async) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0)={r7}, 0x8) close(r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) (async, rerun: 64) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40048d0}, 0x48000) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) (async, rerun: 64) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000540)={0x1, {{0xa, 0x4e24, 0x859, @remote, 0x8}}, {{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x108) (rerun: 64) 1.845574358s ago: executing program 4 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4000d, 0x0, 0x6, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000040a010128bd7015ffdbdf2501000008edfb18bf08887f245fa0ec62923c43f44d77002d58d8e17b024fc68124fbe50100447f3f9f11405cb37c44234610126d1a5376bb39c13690d100e61f7f6654a5aabf8e9fe1b8a03c2f079ce1278627e0b441664672ce"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x2}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) writev(r1, &(0x7f0000003500)=[{&(0x7f00000035c0)="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", 0x1001}, {&(0x7f0000000080)="4326cf937e13", 0x6}, {0x0, 0x5c}, {&(0x7f0000001240)="d35c", 0x2}], 0x4) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) 1.728996805s ago: executing program 1 (id=1757): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r4, 0x0, 0x10000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESOCT=r4, @ANYBLOB="22a7b388fea6dd60b69248cf69440b682c2b99a307eacff15842d9a8710b2d53abf5a5f692e56c6b36c57d6847e3277c5a156842adb621fb141c18467b1a245647f194934561e093f231ba46cf25979908d1f9e0458b5edb223a39dd3fba8611f143b6c3116874810405febb0a35fbbae14dd5ae19e413fef0b5486604d474aeccc78b0fa333a1c6c2b0c4bbfec1b7ab4f94f1ef1fd4ba38b423625e86b9e0b56e1b506b6ee1fc13a9362ca8b5d71c9f88ff9141edfc73a577fc5e8862421a23dfd3c6bef3cdc8580cd07eb82e429a25139beefcb68a7440825f0f3a52abdf19650c8ff1fe9096c7a7cba5c356668b651b67062e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x44, 0x65, 0x100, 0x6, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xf, 0xfff2}, {0x5, 0xb}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1d90475c}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xac5}]}}]}, 0x44}}, 0x1c085) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) 1.664738941s ago: executing program 2 (id=1758): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf256c00000008000300", @ANYRES32=r2, @ANYBLOB="080027000100"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20048800) 1.596410925s ago: executing program 3 (id=1759): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x82}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x1, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.496420886s ago: executing program 0 (id=1760): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) (async) write(r0, &(0x7f00000002c0), 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff400000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r7, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 1.452821394s ago: executing program 2 (id=1761): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0xe4, &(0x7f0000000080)=0x800, 0x4) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x9, 0x7, 0xd}]}, 0x10) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x6, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="f79c547217ad"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000080)={{{@in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x6, 0x4e20, 0x401, 0x0, 0x120, 0x0, 0x87}, {0xf03, 0x8, 0x7, 0x1, 0x100000000, 0x8, 0x5, 0x8}, {0x1a, 0x6a, 0x4, 0x4}, 0xfffffff9, 0x6e6bb5, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d4, 0x33}, 0x2, @in=@private=0xa010100, 0x3506, 0x3, 0x2, 0x8, 0xf0, 0xfff, 0x1}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000180ffff00000000feffffff850000007b000000440001000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) socket$unix(0x1, 0x5, 0x0) socket(0x11, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01df180000000000000026cd00001400000006000000000000000100000d000000000200000001000000002e612e2000"], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) (async, rerun: 32) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) (rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) (async) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0xc11}, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x1e, 0x4, 0x0) 1.014087748s ago: executing program 3 (id=1762): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0020000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000d1b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) write$tun(r1, &(0x7f0000000540)={@void, @val={0x6, 0x1, 0xd, 0x4, 0x6, 0x4f4}, @ipv4=@generic={{0xb, 0x4, 0x1, 0x7, 0x6c, 0x67, 0x0, 0x7, 0x33, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x10, 0xc0, 0x0, 0x7, [0x1ff, 0x9, 0xc]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}, "77adf1db1c1960691567b0c66d8a01cdccd8d85aa628c369996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3da0cf3bf546796a9f5800"}}, 0x76) vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1ff}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000600)={0x0, 0x1}, &(0x7f0000000640)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.01025222s ago: executing program 4 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007cc0)=ANY=[@ANYBLOB="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"], 0x65d4}}, 0x200000d4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "99cc6a9ea03205b81c7fe5c430a5f44baa"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) 920.370013ms ago: executing program 1 (id=1764): socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000094825dd12d432f35d263000000000000000003001c000002000000020000000200000000000000000000010a000000000000000100000500000000fecfa39726296487"], 0x0, 0x5a}, 0x20) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x6a, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x114, 0x1, [@m_skbmod={0x0, 0x19, 0x0, 0x0, {{}, {}, {0x0, 0x6, "4fb8494c8db4ff9d38401349eb53a596b21fa2126f8f342b362df955abf4acb0adf350ed850a7f6f9b2e538e"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3, 0x2}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 919.343429ms ago: executing program 0 (id=1765): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @link_local}) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000810}, 0x84) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8926, 0x0, r3, 0xfffffffc, '\x00', r6, r7, 0x5, 0x1, 0x5}, 0x50) 902.333145ms ago: executing program 2 (id=1766): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x7673b5de356b81af}, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0020000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000d1b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$tun(r2, &(0x7f0000000540)={@void, @val={0x6, 0x1, 0xd, 0x4, 0x6, 0x4f4}, @ipv4=@generic={{0xb, 0x4, 0x1, 0x7, 0x6c, 0x67, 0x0, 0x7, 0x33, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x10, 0xc0, 0x0, 0x7, [0x1ff, 0x9, 0xc]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}, "77adf1db1c1960691567b0c66d8a01cdccd8d85aa628c369996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3da0cf3bf546796a9f5800"}}, 0x76) vmsplice(r2, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1ff}], 0x1, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r8 = accept4(r7, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000600)={0x0, 0x1}, &(0x7f0000000640)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 802.692692ms ago: executing program 4 (id=1767): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x80, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 774.912087ms ago: executing program 3 (id=1768): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1, 0x2, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 668.129886ms ago: executing program 2 (id=1769): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a00000063f64e9c679ab49be4d30be2b954659b274a57e7f4e5cb36f403d2c6ddae4be2d3178cee44321b98a5ba44a8f0df51ad2c07ed8150a609000000000000005d228b5c72095317df3046c21bb045a506cb17d952839822436926074d822a8a9809b8282731f32b5ac1d8525402b490cbfa7586b0d0e7634f9e83568812c2b91f2e92e00003d86cd5e47b6f4ec73c1a1838b875b49d53933bf793e77ba83a1d9561f411119fdcf594ab3ac1ac1a5a8a2d2904a89719ccb02fbe543b3e46904e05c303f1f44491c48b305822", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000b40000000011400030067656e65766530000000000000000000"], 0x50}}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35}}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x80200001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xfef, &(0x7f0000000cc0)=""/4079, 0x41100, 0x40}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000000000", @ANYRES64=0x0], 0x20) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8, 0x5, r7}]}, 0x38}}, 0x0) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0xc4, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x240000c1) (async) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 667.33833ms ago: executing program 0 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x4}]}}, 0x0, 0x26}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r4, 0x7, '\x00', 0x0, r3, 0x0, 0x3}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1ff}]}]}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2520010000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000090000000000000000000000000000001e129eedfbdfa3221e587df26700000008000000000000000000000000fffffffffffffffffcffffffffffffff0000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000010000000000000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000030200000000000900000000000000dd3acf3ba658f4daf0d7840d9876f84d6331ecf66672fdc9f4e3da9f4cc15967d1e9a15b636cd6d12f60a7186d8151e903de2dfa4b84c39e2da5af61c68a6a1659ee9275ae2289b4bd8983d0d154393ee6fc0f8c2c2565a76d8a8da1175a341bacee740e1a9d71"], 0xfc}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r11, 0x101, 0x70bc2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r11, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22004004}, 0x24004005) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x8, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x20000000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r14, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 596.301078ms ago: executing program 3 (id=1771): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf256c00000008000300", @ANYRES32=r2, @ANYBLOB="080027000100000008"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20048800) 561.273809ms ago: executing program 1 (id=1772): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r1, 0xdd, 0x5, 0xb}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r3, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$rose(r2, 0x104, 0x6, &(0x7f00000003c0)=0x4, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000ffdbdf25090000003c0003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x1a, &(0x7f0000000880)=[{&(0x7f0000000100)=""/85, 0x55}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000c40)=""/4094, 0xffe}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000080)=""/50, 0x32}, {&(0x7f0000000040)=""/7, 0x7}], 0x6}, 0x40002102) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 504.096848ms ago: executing program 2 (id=1773): r0 = socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r1, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r1, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x20, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x82, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast2, 0x5}, {@loopback, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1}) (async) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r5, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r7, r2, 0x0, &(0x7f0000000780)=[r3, r0, r3, r3, r3, r3, r3], 0x0, 0x10, 0x48}, 0x94) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x0, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2200, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) 357.899386ms ago: executing program 3 (id=1774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet_sctp(r0, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!6', 0x2}], 0x1, &(0x7f0000000780)=[@init={0x18, 0x84, 0x0, {0x99d1, 0x102, 0x0, 0x10}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x3, 0x9, 0x7fffffff}}], 0x50, 0x4}], 0x1, 0x40010) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2000400c) sendto$inet6(r2, 0x0, 0x0, 0x4c000, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$unix(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r5, 0x4008}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 332.751017ms ago: executing program 2 (id=1775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100000000000000000024e668cb00000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d26c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a0026bd70002abd700000020000"], 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x4, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x4, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000e3ff2f8900a5e53302ba", @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf2539000000080001007063690c11000200303030303a30303a31302e300000000008007300010000000ef5ff006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYRESDEC=r10, @ANYRES16=r5, @ANYBLOB="3941ecb0520c2d37a7d2ffffffffffffffd968c5a6b7774ac55c714e215ad342d9d6ec5697001fe1db3aa2ec7e4c201c6f0933e2e1528ac3e577510000000000000005cbf8e12f1ca8ec4a5aa77d66c68191988f0196a6ede4a06abcb94c", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$nci(r3, &(0x7f0000001780)=ANY=[@ANYRESDEC=r11], 0x12) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 214.802251ms ago: executing program 1 (id=1776): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000001c0), &(0x7f0000000400)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000001c0), &(0x7f0000000400)='%pI4 \x00'}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0xfffffffffffffffd, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffdf}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6f63fe4a4d3f2aa0}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x2, 0x0, 0x3}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 0 (id=1777): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): 15.111071][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 116.554102][ T6672] __nla_validate_parse: 4 callbacks suppressed [ 116.554124][ T6672] netlink: 68 bytes leftover after parsing attributes in process `syz.4.169'. [ 116.721757][ T6680] netlink: 'syz.2.172': attribute type 3 has an invalid length. [ 116.802599][ T6684] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 116.981503][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 117.814543][ T6684] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.861060][ T6689] veth3: entered promiscuous mode [ 118.071822][ T6695] netlink: 2 bytes leftover after parsing attributes in process `syz.4.174'. [ 118.110572][ T5962] IPVS: starting estimator thread 0... [ 118.126376][ T6697] tipc: Started in network mode [ 118.136479][ T6697] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.149783][ T6697] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.188807][ T6697] tipc: Enabled bearer , priority 10 [ 118.208038][ T6703] sit0: entered promiscuous mode [ 118.218901][ T6700] IPVS: using max 26 ests per chain, 62400 per kthread [ 118.257231][ T6703] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 118.289098][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.305250][ T6703] netlink: 1 bytes leftover after parsing attributes in process `syz.3.177'. [ 118.427735][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 118.428816][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.568823][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.669226][ T6722] tap0: tun_chr_ioctl cmd 1074025680 [ 118.682445][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 118.698089][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 118.713773][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.752036][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 118.770142][ T6732] netlink: 68 bytes leftover after parsing attributes in process `syz.3.185'. [ 118.785894][ T6722] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 118.829623][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 118.849260][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.890338][ T6738] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 118.890584][ T6737] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 118.988752][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.127366][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.128762][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.222234][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.256810][ T6741] tipc: Started in network mode [ 119.266046][ T6741] tipc: Node identity c6b4ea25d83b, cluster identity 4711 [ 119.273796][ T5917] tipc: Node number set to 2886997162 [ 119.277233][ T6741] tipc: Enabled bearer , priority 0 [ 119.289465][ T6746] D: renamed from syzkaller0 [ 119.323972][ T6746] tipc: Disabling bearer [ 119.408965][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.678718][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.704549][ T6771] rdma_rxe: rxe_newlink: failed to add wlan1 [ 120.488562][ T6787] wlan1 speed is unknown, defaulting to 1000 [ 121.138314][ T6826] bond0: (slave bond_slave_0): Releasing backup interface [ 121.204851][ T6826] bond0: (slave bond_slave_1): Releasing backup interface [ 121.257659][ T6826] team0: Port device team_slave_0 removed [ 121.316960][ T6826] team0: Port device team_slave_1 removed [ 121.338490][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.366090][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.391021][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.398526][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.453466][ T6815] wlan1 speed is unknown, defaulting to 1000 [ 121.873740][ T6835] __nla_validate_parse: 6 callbacks suppressed [ 121.873759][ T6835] netlink: 256 bytes leftover after parsing attributes in process `syz.3.209'. [ 121.897163][ T6835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.209'. [ 122.141524][ T6840] rdma_rxe: rxe_newlink: failed to add wlan1 [ 122.520971][ T6851] netlink: 'syz.3.211': attribute type 3 has an invalid length. [ 122.759842][ T6857] netlink: 256 bytes leftover after parsing attributes in process `syz.3.213'. [ 122.770660][ T6857] netlink: 56 bytes leftover after parsing attributes in process `syz.3.213'. [ 122.817467][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.212'. [ 123.331026][ C0] net_ratelimit: 4 callbacks suppressed [ 123.331049][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.533560][ T6876] tipc: Enabled bearer , priority 0 [ 123.577610][ T6876] syzkaller0: entered promiscuous mode [ 123.620929][ T6876] syzkaller0: entered allmulticast mode [ 123.635724][ T6880] netlink: 256 bytes leftover after parsing attributes in process `syz.0.221'. [ 123.662744][ T6878] tipc: Resetting bearer [ 123.676181][ T6875] tipc: Resetting bearer [ 123.686756][ T6880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.221'. [ 123.721391][ T6875] tipc: Disabling bearer [ 123.769067][ T6880] rdma_rxe: rxe_newlink: failed to add wlan1 [ 124.192818][ T6900] netlink: 256 bytes leftover after parsing attributes in process `syz.3.225'. [ 124.206149][ T6900] netlink: 56 bytes leftover after parsing attributes in process `syz.3.225'. [ 124.368818][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.711791][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.738702][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.761590][ T6924] tipc: Enabled bearer , priority 0 [ 124.780088][ T6924] syzkaller0: entered promiscuous mode [ 124.785616][ T6924] syzkaller0: entered allmulticast mode [ 124.818739][ T6931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.877728][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.071796][ T6923] tipc: Resetting bearer [ 125.151148][ T6923] tipc: Disabling bearer [ 125.408726][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.448820][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.123459][ T7001] lo speed is unknown, defaulting to 1000 [ 127.155110][ T7004] __nla_validate_parse: 6 callbacks suppressed [ 127.155131][ T7004] netlink: 256 bytes leftover after parsing attributes in process `syz.4.256'. [ 127.189897][ T7004] netlink: 56 bytes leftover after parsing attributes in process `syz.4.256'. [ 127.280718][ T7011] smc: removing ib device syz0 [ 127.327208][ T7001] lo speed is unknown, defaulting to 1000 [ 127.360568][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 127.376486][ T7006] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 127.397887][ T7001] lo speed is unknown, defaulting to 1000 [ 127.441365][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 127.476160][ T7001] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.488787][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.618556][ T7001] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.740443][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.4.262'. [ 127.799727][ T7001] lo speed is unknown, defaulting to 1000 [ 127.858045][ T7001] lo speed is unknown, defaulting to 1000 [ 127.863378][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 127.913777][ T7035] tipc: Enabled bearer , priority 0 [ 127.923883][ T7001] lo speed is unknown, defaulting to 1000 [ 127.971622][ T7035] syzkaller0: entered promiscuous mode [ 128.003061][ T7035] syzkaller0: entered allmulticast mode [ 128.139371][ T7035] tipc: Resetting bearer [ 128.176674][ T7001] lo speed is unknown, defaulting to 1000 [ 128.203433][ T7031] tipc: Resetting bearer [ 128.227011][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 128.257735][ T7031] tipc: Disabling bearer [ 128.297202][ T7048] Unsupported ieee802154 address type: 0 [ 128.321987][ T7043] veth1_macvtap: left promiscuous mode [ 128.528727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.687714][ T7061] netlink: 68 bytes leftover after parsing attributes in process `syz.0.269'. [ 128.717887][ T7001] lo speed is unknown, defaulting to 1000 [ 128.982032][ T7071] sctp: [Deprecated]: syz.4.270 (pid 7071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.982032][ T7071] Use struct sctp_sack_info instead [ 129.068473][ T7069] sctp: [Deprecated]: syz.4.270 (pid 7069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.068473][ T7069] Use struct sctp_sack_info instead [ 129.568789][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.971065][ T7110] netlink: 68 bytes leftover after parsing attributes in process `syz.3.278'. [ 129.982484][ T7109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.277'. [ 130.089074][ T7098] veth0_to_bridge: entered promiscuous mode [ 130.095030][ T7098] veth0_to_bridge: entered allmulticast mode [ 130.148880][ T7117] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 130.226085][ T7123] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 130.375206][ T7117] team0: Port device dummy0 added [ 130.523063][ T7123] team0: Port device dummy0 removed [ 130.608771][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 130.637631][ T7123] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.648713][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.182733][ T7164] __nla_validate_parse: 3 callbacks suppressed [ 132.182754][ T7164] netlink: 256 bytes leftover after parsing attributes in process `syz.2.291'. [ 132.292616][ T7165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.291'. [ 132.536372][ T7172] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 132.562804][ T7174] netlink: 'syz.1.295': attribute type 63 has an invalid length. [ 132.586177][ T7179] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 132.601484][ T5183] Bluetooth: hci4: link tx timeout [ 132.602815][ T7172] team0: Port device dummy0 added [ 132.606992][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.622175][ T5183] Bluetooth: hci4: link tx timeout [ 132.627333][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.638872][ T5183] Bluetooth: hci4: link tx timeout [ 132.644051][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.645918][ T7177] netlink: 6 bytes leftover after parsing attributes in process `syz.2.297'. [ 132.662411][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 132.688742][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.815538][ T7179] team0: Port device dummy0 removed [ 132.832472][ T7182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.298'. [ 132.925714][ T7189] netlink: 104 bytes leftover after parsing attributes in process `syz.1.295'. [ 132.943163][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.956630][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995114][ T7179] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 133.013929][ T7180] netlink: 'syz.1.295': attribute type 4 has an invalid length. [ 133.398044][ T7208] netlink: 'syz.0.303': attribute type 13 has an invalid length. [ 133.440155][ T7208] netlink: 'syz.0.303': attribute type 17 has an invalid length. [ 133.649113][ T7213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.728780][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.771483][ T7208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.787741][ T7208] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.814547][ T7208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.861945][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 133.883465][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 134.070924][ T7211] lo speed is unknown, defaulting to 1000 [ 134.081182][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 134.107481][ T5183] Bluetooth: hci4: link tx timeout [ 134.114400][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.160119][ T5183] Bluetooth: hci4: link tx timeout [ 134.165288][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.175959][ T5183] Bluetooth: hci4: link tx timeout [ 134.181281][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.289897][ T7230] netlink: 'syz.4.308': attribute type 11 has an invalid length. [ 134.675263][ T7251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.313'. [ 134.692450][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 134.768756][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.790469][ T5909] udevd[5909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 135.254615][ T7280] openvswitch: netlink: IP tunnel dst address not specified [ 135.334760][ T7276] can: request_module (can-proto-0) failed. [ 135.523376][ T7281] lo speed is unknown, defaulting to 1000 [ 135.524556][ T7289] ip6tnl0: entered promiscuous mode [ 135.544887][ T7289] ip6tnl0: entered allmulticast mode [ 135.593673][ T7289] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 135.808831][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.172110][ T7328] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 136.269020][ T56] IPVS: starting estimator thread 0... [ 136.289635][ T30] audit: type=1800 audit(1756793016.646:2): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.336" name="memory.events" dev="tmpfs" ino=298 res=0 errno=0 [ 136.409821][ T7334] IPVS: using max 26 ests per chain, 62400 per kthread [ 136.757363][ T7326] lo speed is unknown, defaulting to 1000 [ 136.849341][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.245618][ T7359] lo speed is unknown, defaulting to 1000 [ 137.713132][ T7376] __nla_validate_parse: 5 callbacks suppressed [ 137.713153][ T7376] netlink: 256 bytes leftover after parsing attributes in process `syz.1.345'. [ 137.740629][ T7376] netlink: 56 bytes leftover after parsing attributes in process `syz.1.345'. [ 137.888726][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.922099][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.350'. [ 138.036413][ T7389] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 138.063854][ T7389] netlink: 224 bytes leftover after parsing attributes in process `syz.3.351'. [ 138.249551][ T7393] syzkaller1: entered promiscuous mode [ 138.256812][ T7393] syzkaller1: entered allmulticast mode [ 138.273689][ T7393] openvswitch: netlink: Flow key attr not present in new flow. [ 138.345839][ T7399] lo speed is unknown, defaulting to 1000 [ 138.404309][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 138.485021][ T7408] netlink: 68 bytes leftover after parsing attributes in process `syz.4.356'. [ 138.587733][ T7412] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 138.596868][ T7412] netlink: 600 bytes leftover after parsing attributes in process `syz.1.358'. [ 138.656906][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 138.670806][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 138.681732][ T7414] netlink: 'syz.1.358': attribute type 12 has an invalid length. [ 138.696822][ T7414] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 138.928706][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.996887][ T7423] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 139.205560][ T7430] netlink: 256 bytes leftover after parsing attributes in process `syz.1.364'. [ 139.672448][ T7455] lo speed is unknown, defaulting to 1000 [ 139.871298][ T7460] lo speed is unknown, defaulting to 1000 [ 139.968905][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.092613][ T7436] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.478020][ T7488] lo speed is unknown, defaulting to 1000 [ 140.552639][ T7487] lo speed is unknown, defaulting to 1000 [ 140.810856][ T7503] sctp: [Deprecated]: syz.0.380 (pid 7503) Use of int in maxseg socket option. [ 140.810856][ T7503] Use struct sctp_assoc_value instead [ 141.008727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.099611][ T7511] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 141.107484][ T7511] netlink: 'syz.0.383': attribute type 2 has an invalid length. [ 141.115826][ T7511] netlink: 'syz.0.383': attribute type 1 has an invalid length. [ 141.231049][ T7514] tipc: Enabled bearer , priority 0 [ 141.247216][ T7514] syzkaller0: entered promiscuous mode [ 141.270975][ T7514] syzkaller0: entered allmulticast mode [ 141.375940][ T7512] tipc: Resetting bearer [ 141.431129][ T7512] tipc: Disabling bearer [ 141.521169][ T7520] tipc: Enabling of bearer rejected, failed to enable media [ 141.837950][ T7539] openvswitch: netlink: Flow actions attr not present in new flow. [ 141.857474][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.866126][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.921011][ T7542] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 142.048800][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.084395][ T7547] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.092543][ T7547] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.100532][ T7547] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.108413][ T7547] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.116928][ T7547] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.281045][ T7555] lo speed is unknown, defaulting to 1000 [ 142.450271][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 143.757852][ T7608] netlink: 'syz.3.410': attribute type 3 has an invalid length. [ 143.786059][ T7608] __nla_validate_parse: 64 callbacks suppressed [ 143.786078][ T7608] netlink: 666 bytes leftover after parsing attributes in process `syz.3.410'. [ 143.972380][ T7609] bridge0: port 3(veth0_to_team) entered blocking state [ 143.999820][ T7609] bridge0: port 3(veth0_to_team) entered disabled state [ 144.027714][ T7609] veth0_to_team: entered allmulticast mode [ 144.061350][ T7609] veth0_to_team: entered promiscuous mode [ 144.128694][ C0] net_ratelimit: 51 callbacks suppressed [ 144.128713][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.196617][ T7624] tipc: Enabling of bearer rejected, failed to enable media [ 144.700251][ T7646] netlink: 'syz.3.420': attribute type 3 has an invalid length. [ 144.725934][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 145.100094][ T7658] netlink: 256 bytes leftover after parsing attributes in process `syz.3.425'. [ 145.118611][ T7658] netlink: 48 bytes leftover after parsing attributes in process `syz.3.425'. [ 145.168709][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.195006][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 145.211961][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 145.239920][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 145.279492][ T7666] netlink: 44 bytes leftover after parsing attributes in process `syz.2.426'. [ 145.669862][ T7684] netlink: 92 bytes leftover after parsing attributes in process `syz.1.431'. [ 145.715364][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 145.725748][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 145.797393][ T7663] infiniband syz0: set down [ 145.802090][ T7663] infiniband syz0: added wlan1 [ 145.850877][ T7663] RDS/IB: syz0: added [ 145.855093][ T7663] smc: adding ib device syz0 with port count 1 [ 145.863793][ T7663] smc: ib device syz0 port 1 has pnetid [ 145.876545][ T5962] wlan1 speed is unknown, defaulting to 1000 [ 145.898016][ T5962] wlan1 speed is unknown, defaulting to 1000 [ 145.964572][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 146.202696][ T7705] netlink: 248 bytes leftover after parsing attributes in process `syz.1.434'. [ 146.211945][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.380805][ T7711] Bluetooth: MGMT ver 1.23 [ 147.206589][ T7728] lo speed is unknown, defaulting to 1000 [ 147.236495][ T7733] tipc: Enabled bearer , priority 0 [ 147.248697][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.251087][ T7733] syzkaller0: entered promiscuous mode [ 147.318876][ T7733] syzkaller0: entered allmulticast mode [ 147.334463][ T7730] lo speed is unknown, defaulting to 1000 [ 147.349596][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 147.744782][ T7722] tipc: Resetting bearer [ 147.765040][ T7722] tipc: Disabling bearer [ 147.910688][ T7728] wlan1 speed is unknown, defaulting to 1000 [ 148.179798][ T7730] wlan1 speed is unknown, defaulting to 1000 [ 148.289099][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.472181][ T7769] tipc: Can't bind to reserved service type 0 [ 148.626596][ T7772] netlink: 428 bytes leftover after parsing attributes in process `syz.4.445'. [ 148.978234][ T7779] syz_tun: entered allmulticast mode [ 149.017232][ T7779] dvmrp1: entered allmulticast mode [ 149.100334][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 149.147136][ T7778] syz_tun: left allmulticast mode [ 149.328728][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.978746][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 150.158233][ T7811] __nla_validate_parse: 1 callbacks suppressed [ 150.158255][ T7811] netlink: 100 bytes leftover after parsing attributes in process `syz.2.454'. [ 150.177082][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 150.368718][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.422034][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 150.543868][ T7819] "syz.2.456" (7819) uses obsolete ecb(arc4) skcipher [ 150.670344][ T7663] wlan1 speed is unknown, defaulting to 1000 [ 150.868825][ T7769] lo speed is unknown, defaulting to 1000 [ 151.038525][ T7830] netlink: 208 bytes leftover after parsing attributes in process `syz.3.459'. [ 151.057004][ T7830] netlink: 56 bytes leftover after parsing attributes in process `syz.3.459'. [ 151.341772][ T7835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.461'. [ 151.408704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 151.526561][ T7845] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.462'. [ 151.767627][ T7852] tc_dump_action: action bad kind [ 151.853487][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 152.173711][ T7866] netlink: 256 bytes leftover after parsing attributes in process `syz.3.468'. [ 152.197092][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.468'. [ 152.349478][ T7869] syz0: rxe_newlink: already configured on wlan1 [ 152.425534][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.433492][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.448828][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.707177][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.726058][ T7865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.007060][ T7867] geneve2: entered promiscuous mode [ 153.012610][ T5970] lo speed is unknown, defaulting to 1000 [ 153.019217][ T7867] geneve2: entered allmulticast mode [ 153.024721][ T5970] syz2: Port: 1 Link DOWN [ 153.167797][ T7900] netlink: 'syz.2.475': attribute type 2 has an invalid length. [ 153.184462][ T7900] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 153.218604][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.280632][ T60] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 153.338051][ T7905] netlink: 48 bytes leftover after parsing attributes in process `syz.4.476'. [ 153.472437][ T7901] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.488799][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.516242][ T7901] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 153.547886][ T7901] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 153.628059][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.666183][ T60] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 153.690549][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.703758][ T60] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 154.022832][ T7908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.056422][ T7928] tipc: Trying to set illegal importance in message [ 154.085571][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.108582][ T60] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 154.275163][ T7908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.352314][ T7923] 8021q: VLANs not supported on ip6tnl0 [ 154.374657][ T7920] lo speed is unknown, defaulting to 1000 [ 154.377874][ T7928] syzkaller1: entered promiscuous mode [ 154.397096][ T7928] syzkaller1: entered allmulticast mode [ 154.481932][ T7941] syz0: rxe_newlink: already configured on wlan1 [ 154.511667][ T7908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.528856][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.545670][ T7920] wlan1 speed is unknown, defaulting to 1000 [ 154.627877][ T7908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.889699][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.918336][ T7950] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.934101][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.993562][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.040382][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.564984][ T7971] __nla_validate_parse: 6 callbacks suppressed [ 155.565006][ T7971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.491'. [ 155.568724][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.600447][ T7974] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 155.761976][ T7985] netlink: 256 bytes leftover after parsing attributes in process `syz.3.494'. [ 155.772490][ T7985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.494'. [ 155.883845][ T7974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.032407][ T7993] netlink: 256 bytes leftover after parsing attributes in process `syz.3.495'. [ 156.066265][ T7993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.495'. [ 156.090991][ T7999] netlink: 128 bytes leftover after parsing attributes in process `syz.2.497'. [ 156.110060][ T8003] sctp: [Deprecated]: syz.4.498 (pid 8003) Use of int in max_burst socket option deprecated. [ 156.110060][ T8003] Use struct sctp_assoc_value instead [ 156.146090][ T8001] syz0: rxe_newlink: already configured on wlan1 [ 156.205055][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 156.475680][ T8018] netlink: 'syz.3.502': attribute type 21 has an invalid length. [ 156.491770][ T8018] netlink: 'syz.3.502': attribute type 22 has an invalid length. [ 156.511516][ T8018] netlink: 'syz.3.502': attribute type 23 has an invalid length. [ 156.550629][ T8018] netlink: 136 bytes leftover after parsing attributes in process `syz.3.502'. [ 156.609218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.706989][ T8025] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 156.716680][ T8027] netlink: 'syz.1.503': attribute type 13 has an invalid length. [ 156.742574][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.749554][ T8027] netlink: 'syz.1.503': attribute type 17 has an invalid length. [ 156.757369][ T8028] netlink: 256 bytes leftover after parsing attributes in process `syz.0.505'. [ 156.764466][ T8025] bond0: (slave team0): Enslaving as an active interface with an up link [ 156.805269][ T8028] netlink: 56 bytes leftover after parsing attributes in process `syz.0.505'. [ 156.866405][ T8027] ip6tnl0: left promiscuous mode [ 156.874154][ T8027] ip6tnl0: left allmulticast mode [ 156.984315][ T8027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.077433][ T8030] lo speed is unknown, defaulting to 1000 [ 157.124568][ T8030] wlan1 speed is unknown, defaulting to 1000 [ 157.267329][ T8046] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 157.362387][ T8046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.387799][ T8048] bond1: (slave ip6gretap1): making interface the new active one [ 157.400763][ T8048] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 157.502264][ T8043] erspan0: entered allmulticast mode [ 157.538247][ T8043] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 157.648874][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.055111][ T8058] rdma_rxe: rxe_newlink: failed to add wlan1 [ 158.688799][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.884142][ T8109] netlink: 'syz.3.522': attribute type 11 has an invalid length. [ 159.033456][ T195] nci: nci_rx_work: unknown MT 0x1 [ 159.089262][ T8119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.375746][ T8134] lo speed is unknown, defaulting to 1000 [ 159.425643][ T8134] wlan1 speed is unknown, defaulting to 1000 [ 159.728707][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.044698][ T8160] lo speed is unknown, defaulting to 1000 [ 160.584458][ T8160] wlan1 speed is unknown, defaulting to 1000 [ 160.768701][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.014137][ T8182] __nla_validate_parse: 19 callbacks suppressed [ 161.014160][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.539'. [ 161.085366][ T8183] openvswitch: netlink: IP tunnel dst address not specified [ 161.207912][ T8185] can: request_module (can-proto-0) failed. [ 161.525720][ T8192] lo speed is unknown, defaulting to 1000 [ 161.546100][ T8205] netlink: 256 bytes leftover after parsing attributes in process `syz.2.544'. [ 161.580564][ T8205] netlink: 48 bytes leftover after parsing attributes in process `syz.2.544'. [ 161.672860][ T8192] wlan1 speed is unknown, defaulting to 1000 [ 161.808784][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.999858][ T8220] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 162.017283][ T8220] dvmrp1: linktype set to 769 [ 162.044305][ T8220] netlink: 'syz.4.547': attribute type 83 has an invalid length. [ 162.254636][ T8227] tipc: Started in network mode [ 162.267167][ T8227] tipc: Node identity c6b68872583, cluster identity 4711 [ 162.288594][ T8227] tipc: Enabled bearer , priority 0 [ 162.312264][ T8227] syzkaller0: entered promiscuous mode [ 162.328371][ T8227] syzkaller0: entered allmulticast mode [ 162.391712][ T8227] tipc: Resetting bearer [ 162.407416][ T8210] rdma_rxe: rxe_newlink: failed to add wlan1 [ 162.596846][ T8225] tipc: Resetting bearer [ 162.692229][ T8225] tipc: Disabling bearer [ 162.848801][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.133524][ T8253] netlink: 'syz.2.555': attribute type 39 has an invalid length. [ 163.172310][ T8254] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 163.182172][ T8249] IPVS: stopping backup sync thread 8254 ... [ 163.480192][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.557'. [ 163.665414][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 163.888872][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.897906][ T8273] lo speed is unknown, defaulting to 1000 [ 163.906378][ T8273] wlan1 speed is unknown, defaulting to 1000 [ 164.490106][ T8284] netlink: 256 bytes leftover after parsing attributes in process `syz.3.563'. [ 164.519978][ T8284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.563'. [ 164.753850][ T8291] bond0: (slave dummy0): Releasing backup interface [ 164.845943][ T8291] batman_adv: batadv0: Adding interface: dummy0 [ 164.883920][ T8291] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.902950][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 164.929711][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.954881][ T8291] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 165.085401][ T8316] netlink: 'syz.2.569': attribute type 21 has an invalid length. [ 165.211003][ T8316] netlink: 156 bytes leftover after parsing attributes in process `syz.2.569'. [ 165.497091][ T8305] lo speed is unknown, defaulting to 1000 [ 165.511607][ T8305] wlan1 speed is unknown, defaulting to 1000 [ 165.512332][ T8321] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 165.581764][ T8320] bond1: (slave erspan0): Releasing active interface [ 165.629360][ T8320] ip6gretap1: entered promiscuous mode [ 165.675358][ T8320] bond0: (slave dummy0): Releasing backup interface [ 165.698329][ T8320] bridge_slave_0: left allmulticast mode [ 165.706557][ T8320] bridge_slave_0: left promiscuous mode [ 165.716522][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.732058][ T8320] bridge_slave_1: left allmulticast mode [ 165.742702][ T8320] bridge_slave_1: left promiscuous mode [ 165.748723][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.768509][ T8320] bond0: (slave bond_slave_0): Releasing backup interface [ 165.793978][ T8320] bond0: (slave bond_slave_1): Releasing backup interface [ 165.832552][ T8320] team0: Port device team_slave_0 removed [ 165.862631][ T8320] team0: Port device team_slave_1 removed [ 165.880864][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.897212][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.921080][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.928753][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.947416][ T8320] bond1: (slave ip6gretap1): Releasing active interface [ 165.955870][ T8320] ip6gretap1: left promiscuous mode [ 165.966621][ T195] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.975779][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.997823][ T195] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.019363][ T8308] lo speed is unknown, defaulting to 1000 [ 166.026021][ T3477] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.095100][ T8334] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 166.122429][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 166.173091][ T3477] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.199175][ T8308] wlan1 speed is unknown, defaulting to 1000 [ 166.309859][ T8343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.576'. [ 166.316550][ T8346] netlink: 256 bytes leftover after parsing attributes in process `syz.4.577'. [ 166.352924][ T8346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.577'. [ 167.008737][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.413509][ T8387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.589'. [ 167.853464][ T8393] netlink: 68 bytes leftover after parsing attributes in process `syz.0.591'. [ 167.877304][ T8395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.592'. [ 167.973211][ T8400] netlink: 256 bytes leftover after parsing attributes in process `syz.4.593'. [ 167.982661][ T8400] netlink: 48 bytes leftover after parsing attributes in process `syz.4.593'. [ 168.048720][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.059261][ T8407] rdma_rxe: rxe_newlink: failed to add wlan1 [ 168.101487][ T8406] netlink: 256 bytes leftover after parsing attributes in process `syz.1.594'. [ 168.769466][ T8428] lo speed is unknown, defaulting to 1000 [ 168.777575][ T8428] wlan1 speed is unknown, defaulting to 1000 [ 169.088732][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.859587][ T8453] rdma_rxe: rxe_newlink: failed to add wlan1 [ 170.109457][ T8472] lo speed is unknown, defaulting to 1000 [ 170.128814][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.153684][ T8472] wlan1 speed is unknown, defaulting to 1000 [ 170.588268][ T8492] lo speed is unknown, defaulting to 1000 [ 170.614699][ T8489] lo speed is unknown, defaulting to 1000 [ 170.624355][ T8492] wlan1 speed is unknown, defaulting to 1000 [ 170.976808][ T8489] wlan1 speed is unknown, defaulting to 1000 [ 171.009629][ T36] wlan0: Trigger new scan to find an IBSS to join [ 171.168802][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.709672][ T8519] __nla_validate_parse: 10 callbacks suppressed [ 171.709693][ T8519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.625'. [ 171.939263][ T8526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.626'. [ 171.986042][ T8526] netlink: 48 bytes leftover after parsing attributes in process `syz.1.626'. [ 172.117516][ T8527] rdma_rxe: rxe_newlink: failed to add wlan1 [ 172.209836][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.472433][ T8538] netlink: 56 bytes leftover after parsing attributes in process `syz.1.630'. [ 172.486733][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 173.154283][ T8565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.639'. [ 173.248839][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.583149][ T8575] netlink: 256 bytes leftover after parsing attributes in process `syz.1.641'. [ 173.592933][ T8575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.641'. [ 173.710814][ T8577] rdma_rxe: rxe_newlink: failed to add wlan1 [ 173.820496][ T8580] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 173.846950][ T8584] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 173.871084][ T8584] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 173.956792][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 173.960843][ T8580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.049412][ T8591] netlink: 48 bytes leftover after parsing attributes in process `syz.0.645'. [ 174.288831][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.332187][ T8606] vlan0: entered promiscuous mode [ 174.821601][ T8636] rdma_rxe: rxe_newlink: failed to add wlan1 [ 175.328716][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.455243][ T8665] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 175.615551][ T8665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.759368][ T8668] veth3: entered promiscuous mode [ 175.790849][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.832619][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.969782][ T4607] wlan0: Trigger new scan to find an IBSS to join [ 175.992401][ T8684] rdma_rxe: rxe_newlink: failed to add wlan1 [ 176.368704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.076785][ T8745] Bluetooth: MGMT ver 1.23 [ 177.080965][ T8743] bond0: option xmit_hash_policy: invalid value (8) [ 177.129230][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.163458][ T8746] __nla_validate_parse: 13 callbacks suppressed [ 177.163480][ T8746] netlink: 256 bytes leftover after parsing attributes in process `syz.4.691'. [ 177.210754][ T8746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.691'. [ 177.312377][ T8754] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 177.334935][ T8744] syz.0.692 (8744) used greatest stack depth: 17304 bytes left [ 177.343180][ T8751] rdma_rxe: rxe_newlink: failed to add wlan1 [ 177.408702][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.694382][ T8771] netlink: 56 bytes leftover after parsing attributes in process `syz.4.701'. [ 177.900643][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.703'. [ 177.911035][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 177.941837][ T8780] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 178.039567][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.703'. [ 178.424762][ T8803] sctp: [Deprecated]: syz.3.708 (pid 8803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.424762][ T8803] Use struct sctp_sack_info instead [ 178.448727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.472850][ T8803] sctp: [Deprecated]: syz.3.708 (pid 8803) Use of int in maxseg socket option. [ 178.472850][ T8803] Use struct sctp_assoc_value instead [ 178.496105][ T8804] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20001 [ 178.650813][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.709'. [ 178.750592][ T8815] tipc: Enabled bearer , priority 0 [ 178.836408][ T8815] syzkaller0: entered promiscuous mode [ 178.848578][ T8815] syzkaller0: entered allmulticast mode [ 178.919910][ T8815] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 178.976889][ T8815] tipc: Resetting bearer [ 179.043041][ T8814] tipc: Resetting bearer [ 179.082149][ T8821] netlink: 256 bytes leftover after parsing attributes in process `syz.0.711'. [ 179.114626][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz.0.711'. [ 179.135182][ T8814] tipc: Disabling bearer [ 179.196280][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.712'. [ 179.214347][ T8824] rdma_rxe: rxe_newlink: failed to add wlan1 [ 179.488819][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.136533][ T8868] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 180.382408][ T8878] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 180.528808][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.751723][ T8898] nbd0: detected capacity change from 0 to 549764202496 [ 180.791440][ T51] block nbd0: Receive control failed (result -32) [ 180.812878][ T5909] block nbd0: Dead connection, failed to find a fallback [ 180.857525][ T5909] block nbd0: shutting down sockets [ 180.889634][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.929371][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 180.981204][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.996082][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.014800][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.041942][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.077913][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.101447][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.127409][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.222625][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.255360][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.287659][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.337807][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.361672][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.389365][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.419370][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.427300][ T5909] ldm_validate_partition_table(): Disk read failed. [ 181.473897][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.496040][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.558900][ T5909] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.568704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.612514][ T5909] Buffer I/O error on dev nbd0, logical block 0, async page read [ 181.644201][ T5909] Dev nbd0: unable to read RDB block 0 [ 181.665194][ T5909] nbd0: unable to read partition table [ 181.705194][ T8928] tipc: Enabled bearer , priority 0 [ 181.711061][ T8931] netlink: 'syz.1.743': attribute type 39 has an invalid length. [ 181.731836][ T8928] syzkaller0: entered promiscuous mode [ 181.737641][ T8928] syzkaller0: entered allmulticast mode [ 181.840988][ T5909] ldm_validate_partition_table(): Disk read failed. [ 181.880328][ T5909] Dev nbd0: unable to read RDB block 0 [ 181.886620][ T5909] nbd0: unable to read partition table [ 182.181743][ T8942] tipc: Resetting bearer [ 182.413658][ T8922] tipc: Resetting bearer [ 182.515755][ T8922] tipc: Disabling bearer [ 182.553910][ T8950] __nla_validate_parse: 8 callbacks suppressed [ 182.553931][ T8950] netlink: 56 bytes leftover after parsing attributes in process `syz.1.746'. [ 182.608812][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.375474][ T51] Bluetooth: hci4: link tx timeout [ 183.383408][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.392563][ T51] Bluetooth: hci4: link tx timeout [ 183.397795][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.408296][ T51] Bluetooth: hci4: link tx timeout [ 183.415615][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.584669][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 183.648692][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.815463][ T8981] netlink: 68 bytes leftover after parsing attributes in process `syz.3.758'. [ 184.198816][ T8995] openvswitch: netlink: IP tunnel TTL not specified. [ 184.602601][ T9004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.766'. [ 184.643227][ T51] Bluetooth: hci4: link tx timeout [ 184.649302][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.657007][ T51] Bluetooth: hci4: link tx timeout [ 184.662345][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.670710][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 184.688820][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.696829][ T9004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.766'. [ 184.749002][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.768'. [ 185.109687][ T9014] netlink: 256 bytes leftover after parsing attributes in process `syz.4.771'. [ 185.131131][ T9014] netlink: 48 bytes leftover after parsing attributes in process `syz.4.771'. [ 185.132283][ T9011] netlink: 64 bytes leftover after parsing attributes in process `syz.1.769'. [ 185.232141][ T9023] rdma_rxe: rxe_newlink: failed to add wlan1 [ 185.427028][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 185.728809][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.371014][ T9049] netlink: 'syz.3.779': attribute type 8 has an invalid length. [ 186.643104][ T9052] 8021q: VLANs not supported on xfrm0 [ 186.704167][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.768718][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.815428][ T9068] netlink: 'syz.0.784': attribute type 3 has an invalid length. [ 186.824320][ T9068] netlink: 'syz.0.784': attribute type 3 has an invalid length. [ 186.946939][ T9073] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.966538][ T9075] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.359039][ T9085] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 187.808776][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.848772][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.656302][ T9085] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 189.674926][ T9089] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 189.685562][ T9089] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 189.730477][ T9089] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 189.752175][ T9100] __nla_validate_parse: 5 callbacks suppressed [ 189.752195][ T9100] netlink: 48 bytes leftover after parsing attributes in process `syz.3.792'. [ 189.840236][ T9096] lo speed is unknown, defaulting to 1000 [ 189.883442][ T9096] wlan1 speed is unknown, defaulting to 1000 [ 189.890273][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.162976][ T9119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.530033][ T9135] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 190.620149][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'. [ 190.621382][ T9139] netlink: 56 bytes leftover after parsing attributes in process `syz.4.806'. [ 190.644959][ T9141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.928696][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.103980][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.810'. [ 191.122716][ T9161] Bluetooth: MGMT ver 1.23 [ 191.136520][ T9164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.812'. [ 191.156336][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 191.246133][ T9161] geneve2: entered promiscuous mode [ 191.272009][ T3507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.294265][ T3507] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.331643][ T3507] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.356749][ T3507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.789507][ T9187] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 191.812435][ T1157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.838740][ T1157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.863690][ T1157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.879489][ T1157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.968726][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.190634][ T9199] netlink: 'syz.3.823': attribute type 10 has an invalid length. [ 192.206302][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.219347][ T9199] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 192.272292][ T9199] netlink: 'syz.3.823': attribute type 10 has an invalid length. [ 192.296969][ T9199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.823'. [ 192.335132][ T9199] batadv0: entered promiscuous mode [ 192.355460][ T9199] batadv0: entered allmulticast mode [ 192.373245][ T9199] bond0: (slave batadv0): Releasing backup interface [ 192.396564][ T9199] bridge0: port 1(batadv0) entered blocking state [ 192.413515][ T9199] bridge0: port 1(batadv0) entered disabled state [ 192.467046][ T1157] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 192.476964][ T1157] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 192.843520][ T9213] lo speed is unknown, defaulting to 1000 [ 192.883514][ T9213] wlan1 speed is unknown, defaulting to 1000 [ 193.008689][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.271677][ T9223] vxcan3: entered allmulticast mode [ 193.894385][ T9250] netlink: 'syz.0.837': attribute type 28 has an invalid length. [ 193.983634][ T9254] netlink: 'syz.1.838': attribute type 5 has an invalid length. [ 194.048738][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.372382][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.926674][ T9279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.846'. [ 195.088696][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.037360][ T9308] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 196.128702][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.181788][ T9317] netlink: 5040 bytes leftover after parsing attributes in process `syz.0.857'. [ 196.191445][ T9317] openvswitch: netlink: Flow key attr not present in new flow. [ 196.192002][ T9313] can: request_module (can-proto-0) failed. [ 196.206841][ T9315] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 196.225020][ T9315] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 196.321652][ T9308] gretap1: entered promiscuous mode [ 196.355681][ T9308] bond4: (slave gretap1): making interface the new active one [ 196.415042][ T9308] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 196.481764][ T9329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.859'. [ 197.067960][ T9351] netlink: 248 bytes leftover after parsing attributes in process `syz.4.865'. [ 197.077343][ T9351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.865'. [ 197.080965][ T9352] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 197.113304][ T9352] TC_ACT_REPEAT abuse ? [ 197.134460][ T9352] TC_ACT_REPEAT abuse ? [ 197.152928][ T9352] TC_ACT_REPEAT abuse ? [ 197.168712][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.169467][ T9354] rdma_rxe: rxe_newlink: failed to add wlan1 [ 197.198724][ T9349] TC_ACT_REPEAT abuse ? [ 197.217594][ T9349] TC_ACT_REPEAT abuse ? [ 197.308585][ T9360] netlink: 'syz.0.868': attribute type 12 has an invalid length. [ 197.329467][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.868'. [ 197.526579][ T9368] syzkaller0: entered promiscuous mode [ 197.542841][ T9368] syzkaller0: entered allmulticast mode [ 197.679127][ T9375] netlink: 52 bytes leftover after parsing attributes in process `syz.0.873'. [ 197.697289][ T9375] netlink: 52 bytes leftover after parsing attributes in process `syz.0.873'. [ 198.042497][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 198.061224][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 198.208796][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 198.672679][ T9412] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 198.694095][ T9415] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 198.732447][ T9415] netlink: 'syz.3.886': attribute type 4 has an invalid length. [ 198.844464][ T9415] vlan1: entered allmulticast mode [ 198.855207][ T9415] macvlan0: entered allmulticast mode [ 198.865048][ T9415] veth1_vlan: entered allmulticast mode [ 199.095206][ T9433] tipc: Enabling of bearer rejected, failed to enable media [ 199.139005][ T9429] tipc: Enabled bearer , priority 0 [ 199.179453][ T9429] syzkaller0: entered promiscuous mode [ 199.184986][ T9429] syzkaller0: entered allmulticast mode [ 199.238530][ T9429] tipc: Resetting bearer [ 199.248688][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.303111][ T5909] udevd[5909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 199.316015][ T9441] pimreg: entered allmulticast mode [ 199.338213][ T9428] tipc: Resetting bearer [ 199.355021][ T9428] tipc: Disabling bearer [ 199.511688][ T9448] netlink: 'syz.2.896': attribute type 83 has an invalid length. [ 199.541647][ T9451] netlink: 'syz.0.897': attribute type 11 has an invalid length. [ 199.554978][ T9451] netlink: 'syz.0.897': attribute type 9 has an invalid length. [ 199.652495][ T9460] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 200.041693][ T9474] __nla_validate_parse: 17 callbacks suppressed [ 200.041708][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 200.111153][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 200.159963][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 200.363381][ T5909] udevd[5909]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 200.568274][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 200.580585][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 200.600019][ T9490] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 200.717986][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 200.823568][ T9502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.911'. [ 200.844294][ T9490] bond5: entered promiscuous mode [ 200.849160][ T9504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.912'. [ 200.861925][ T9490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.883064][ T9492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.891635][ T9492] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 200.903169][ T9492] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 200.919117][ T9492] bond5: (slave wireguard0): making interface the new active one [ 200.927000][ T9492] wireguard0: entered promiscuous mode [ 200.941132][ T9492] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 200.988278][ T9512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 201.001774][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 201.276226][ T9523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.295550][ T9523] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.328797][ C0] net_ratelimit: 1 callbacks suppressed [ 201.328817][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.351997][ T9523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.421292][ T9533] lo speed is unknown, defaulting to 1000 [ 201.430624][ T9533] wlan1 speed is unknown, defaulting to 1000 [ 201.914176][ T9546] lo speed is unknown, defaulting to 1000 [ 201.946795][ T9546] wlan1 speed is unknown, defaulting to 1000 [ 202.049547][ T5962] TC_ACT_REPEAT abuse ? [ 202.063843][ T56] TC_ACT_REPEAT abuse ? [ 202.368681][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.676014][ T9563] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595) [ 202.706073][ T9563] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 202.719980][ T9564] lo speed is unknown, defaulting to 1000 [ 202.807214][ T5937] IPVS: starting estimator thread 0... [ 202.817605][ T9564] wlan1 speed is unknown, defaulting to 1000 [ 202.921858][ T9573] IPVS: using max 25 ests per chain, 60000 per kthread [ 203.408694][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.547044][ T9580] lo speed is unknown, defaulting to 1000 [ 203.686795][ T9580] wlan1 speed is unknown, defaulting to 1000 [ 204.074408][ T9598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.114869][ T9607] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 204.234961][ T9598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.418553][ T9598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.448714][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.519375][ T9598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.789947][ T1157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.934734][ T4607] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.967598][ T4607] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.078249][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.198409][ T9632] __nla_validate_parse: 5 callbacks suppressed [ 205.198428][ T9632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.945'. [ 205.366695][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 205.488694][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.555584][ T9646] lo speed is unknown, defaulting to 1000 [ 205.571199][ T9646] wlan1 speed is unknown, defaulting to 1000 [ 205.572863][ T9645] lo speed is unknown, defaulting to 1000 [ 205.785471][ T9663] atomic_op ffff8880310d0998 conn xmit_atomic 0000000000000000 [ 205.796811][ T9663] netlink: 256 bytes leftover after parsing attributes in process `syz.3.955'. [ 205.819270][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.955'. [ 205.912848][ T9667] syz0: rxe_newlink: already configured on wlan1 [ 205.998559][ T9670] IPVS: stopping backup sync thread 9460 ... [ 206.103497][ T9645] wlan1 speed is unknown, defaulting to 1000 [ 206.164918][ T9674] netlink: 248 bytes leftover after parsing attributes in process `syz.3.958'. [ 206.191894][ T9674] netlink: 48 bytes leftover after parsing attributes in process `syz.3.958'. [ 206.256330][ T9678] netlink: 6 bytes leftover after parsing attributes in process `syz.4.960'. [ 206.294915][ T9682] syz0: rxe_newlink: already configured on wlan1 [ 206.454858][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 206.528789][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.680795][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 206.805126][ T9696] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 206.832814][ T9696] syz_tun: entered promiscuous mode [ 206.861024][ T9698] netlink: 72 bytes leftover after parsing attributes in process `syz.3.963'. [ 206.910246][ T9703] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 207.251303][ T9720] atomic_op ffff88807a195198 conn xmit_atomic 0000000000000000 [ 207.337338][ T9722] rdma_rxe: rxe_newlink: failed to add wlan1 [ 207.568805][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.608714][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.712403][ T9749] bond0: (slave gretap0): Opening slave failed [ 208.889151][ T9751] 8021q: VLANs not supported on vxcan1 [ 209.183686][ T9767] netlink: 'syz.0.978': attribute type 13 has an invalid length. [ 209.207744][ T9767] netlink: 'syz.0.978': attribute type 17 has an invalid length. [ 209.265191][ T9767] batman_adv: batadv0: Interface activated: dummy0 [ 209.361955][ T9767] batadv0: mtu less than device minimum [ 209.369484][ T9767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.381856][ T9767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.393961][ T9767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.406034][ T9767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.418021][ T9767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.430040][ T9767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 209.587224][ T9770] lo speed is unknown, defaulting to 1000 [ 209.613752][ T9770] wlan1 speed is unknown, defaulting to 1000 [ 209.651447][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.688337][ T9761] lo speed is unknown, defaulting to 1000 [ 209.773047][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.144616][ T9761] wlan1 speed is unknown, defaulting to 1000 [ 210.907141][ T9813] __nla_validate_parse: 9 callbacks suppressed [ 210.907161][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 211.112669][ T9813] hsr_slave_1 (unregistering): left promiscuous mode [ 211.247863][ T9823] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 211.268223][ T9823] netlink: 224 bytes leftover after parsing attributes in process `syz.1.992'. [ 211.306126][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 211.368724][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'. [ 211.649347][ T10] net_ratelimit: 17 callbacks suppressed [ 211.649366][ T10] TC_ACT_REPEAT abuse ? [ 211.728775][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.813818][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.821755][ T9786] Bluetooth: hci3: command 0x0406 tx timeout [ 211.822883][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.554253][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 212.604692][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 212.631339][ T9882] netlink: 'syz.4.1003': attribute type 12 has an invalid length. [ 212.648561][ T9882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1003'. [ 212.684667][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 212.768675][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.846301][ T9889] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 212.938837][ T9889] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1005'. [ 213.357586][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 213.412469][ T9899] tipc: Enabled bearer , priority 0 [ 213.444801][ T9906] bridge_slave_1: left allmulticast mode [ 213.473626][ T9906] bridge_slave_1: left promiscuous mode [ 213.480076][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.497493][ T9906] bridge_slave_0: left allmulticast mode [ 213.512716][ T9906] bridge_slave_0: left promiscuous mode [ 213.519559][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.749686][ T9926] tipc: Resetting bearer [ 213.756250][ T9904] syzkaller1: entered promiscuous mode [ 213.765206][ T9904] syzkaller1: entered allmulticast mode [ 213.796499][ T9898] tipc: Disabling bearer [ 213.808834][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 213.885899][ T9907] lo speed is unknown, defaulting to 1000 [ 213.901768][ T9907] wlan1 speed is unknown, defaulting to 1000 [ 214.528548][ T9950] lo speed is unknown, defaulting to 1000 [ 214.559101][ T9950] wlan1 speed is unknown, defaulting to 1000 [ 214.849540][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.945865][ T9932] rdma_rxe: rxe_newlink: failed to add wlan1 [ 215.115434][ T9966] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 215.888679][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 216.048421][ T9988] __nla_validate_parse: 6 callbacks suppressed [ 216.048441][ T9988] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1027'. [ 216.831450][T10007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.913108][T10010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.928680][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 216.946415][T10010] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 216.994903][T10011] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.021948][T10011] batman_adv: batadv0: Removing interface: dummy0 [ 217.043049][T10011] bridge_slave_0: left allmulticast mode [ 217.049812][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 217.073571][T10011] bridge_slave_0: left promiscuous mode [ 217.085562][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.105622][T10011] bridge_slave_1: left allmulticast mode [ 217.116360][T10011] bridge_slave_1: left promiscuous mode [ 217.135648][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.170296][T10011] bond0: (slave bond_slave_0): Releasing backup interface [ 217.170743][ T3507] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 217.197286][T10011] bond0: (slave bond_slave_1): Releasing backup interface [ 217.211773][T10011] veth0_to_team: left allmulticast mode [ 217.217521][T10011] veth0_to_team: left promiscuous mode [ 217.226613][T10011] bridge0: port 3(veth0_to_team) entered disabled state [ 217.286020][T10011] team0: Port device team_slave_0 removed [ 217.295055][T10011] team0: Port device team_slave_1 removed [ 217.301728][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.310442][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.322342][T10011] bond2: (slave macvlan2): Removing an active aggregator [ 217.331139][T10011] bond2: (slave macvlan2): Releasing backup interface [ 217.620597][T10033] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1035'. [ 217.694241][T10047] team0: Device macvlan2 is already an upper device of the team interface [ 217.968876][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.976113][ T5877] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 218.042342][T10062] netlink: 'syz.3.1042': attribute type 6 has an invalid length. [ 218.044971][T10063] TC_ACT_REPEAT abuse ? [ 218.092718][T10067] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 218.114994][T10067] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1043'. [ 218.125082][T10071] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 218.125144][T10071] netlink: 'syz.1.1044': attribute type 2 has an invalid length. [ 218.491865][T10085] geneve2: left allmulticast mode [ 218.612448][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.633259][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.649142][T10092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.814774][T10097] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 218.824339][T10095] bond0: entered promiscuous mode [ 218.860634][T10095] bond_slave_0: entered promiscuous mode [ 218.869134][T10097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1051'. [ 218.889009][T10095] bond_slave_1: entered promiscuous mode [ 218.915650][T10095] team0: entered promiscuous mode [ 218.938230][T10095] team_slave_0: entered promiscuous mode [ 218.954933][T10095] team_slave_1: entered promiscuous mode [ 219.001054][T10095] bond0: left promiscuous mode [ 219.008792][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.019717][T10095] bond_slave_0: left promiscuous mode [ 219.025460][T10095] bond_slave_1: left promiscuous mode [ 219.032129][T10095] team0: left promiscuous mode [ 219.037121][T10095] team_slave_0: left promiscuous mode [ 219.048808][T10095] team_slave_1: left promiscuous mode [ 219.079541][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 219.154554][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 219.309639][ T5183] TC_ACT_REPEAT abuse ? [ 219.314266][T10121] TC_ACT_REPEAT abuse ? [ 219.319111][T10121] TC_ACT_REPEAT abuse ? [ 219.597035][T10123] tipc: Enabled bearer , priority 0 [ 219.715795][T10129] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 219.786021][T10129] bridge1: entered allmulticast mode [ 219.802302][T10125] syzkaller0: entered promiscuous mode [ 219.818772][T10125] syzkaller0: entered allmulticast mode [ 219.857619][T10142] rdma_rxe: rxe_newlink: failed to add wlan1 [ 219.933085][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 219.954361][T10138] tipc: Resetting bearer [ 220.055241][T10122] tipc: Resetting bearer [ 220.124009][T10122] tipc: Disabling bearer [ 220.215444][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 220.220276][T10150] vxcan1: entered allmulticast mode [ 220.282354][T10158] netlink: 'syz.0.1065': attribute type 39 has an invalid length. [ 220.321221][T10160] !: renamed from dummy0 [ 220.356787][T10162] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1068'. [ 220.397542][T10162] 0ªX¹¦À: renamed from caif0 [ 220.419285][T10162] 0ªX¹¦À: entered allmulticast mode [ 220.681879][T10171] lo speed is unknown, defaulting to 1000 [ 220.686603][T10173] tipc: New replicast peer: 208.253.78.183 [ 220.713343][T10173] tipc: Enabled bearer , priority 10 [ 220.727937][T10171] wlan1 speed is unknown, defaulting to 1000 [ 220.932048][T10188] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1074'. [ 221.218395][T10204] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 221.258701][T10204] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1077'. [ 221.812810][T10182] macvtap0: entered allmulticast mode [ 221.829019][ T10] tipc: Node number set to 2659616882 [ 221.940947][T10182] dvmrp8: entered allmulticast mode [ 221.957056][T10215] lo speed is unknown, defaulting to 1000 [ 222.047825][T10215] wlan1 speed is unknown, defaulting to 1000 [ 222.128873][ C0] net_ratelimit: 10 callbacks suppressed [ 222.128894][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.170656][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1082'. [ 222.292655][T10169] macvtap0: left allmulticast mode [ 222.297938][T10169] dvmrp8: left allmulticast mode [ 222.462404][T10199] rdma_rxe: rxe_newlink: failed to add wlan1 [ 222.633203][T10182] lo speed is unknown, defaulting to 1000 [ 222.753347][T10182] wlan1 speed is unknown, defaulting to 1000 [ 223.168703][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.202016][T10248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1088'. [ 223.461504][T10254] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 223.491335][T10254] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1089'. [ 223.746240][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'. [ 224.208865][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.282858][T10272] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 224.989783][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.013390][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.051752][T10302] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 225.066436][T10302] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1101'. [ 225.094786][ T3507] TC_ACT_REPEAT abuse ? [ 225.248805][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.456109][T10313] lo speed is unknown, defaulting to 1000 [ 225.473583][T10321] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1105'. [ 225.506948][T10313] wlan1 speed is unknown, defaulting to 1000 [ 225.574609][T10321] geneve2: entered promiscuous mode [ 225.616087][T10321] geneve2: entered allmulticast mode [ 225.723546][T10328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 225.846292][ T60] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41059 - 0 [ 225.886771][ T60] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 54877 - 0 [ 225.890337][T10347] openvswitch: netlink: Missing key (keys=40, expected=80) [ 226.014131][ T56] IPVS: starting estimator thread 0... [ 226.074277][T10328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 226.118837][T10354] IPVS: using max 33 ests per chain, 79200 per kthread [ 226.134408][ T60] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41059 - 0 [ 226.172200][ T60] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 54877 - 0 [ 226.200125][ T60] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41059 - 0 [ 226.219417][ T60] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 54877 - 0 [ 226.237436][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'. [ 226.272319][T10345] lo speed is unknown, defaulting to 1000 [ 226.284751][T10358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1110'. [ 226.288842][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.333326][T10328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 226.396802][ T60] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41059 - 0 [ 226.412324][ T60] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 54877 - 0 [ 226.447331][T10345] wlan1 speed is unknown, defaulting to 1000 [ 226.517711][T10328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 226.976373][T10388] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1115'. [ 227.006333][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 227.067721][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 227.176031][T10391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.185018][T10391] bridge0: port 2(bond7) entered blocking state [ 227.191962][T10391] bridge0: port 2(bond7) entered disabled state [ 227.198518][T10391] bond7: entered allmulticast mode [ 227.206727][T10391] bond7: entered promiscuous mode [ 227.212792][T10391] bridge0: port 2(bond7) entered blocking state [ 227.220321][T10391] bridge0: port 2(bond7) entered forwarding state [ 227.238522][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 227.263969][T10381] tipc: Enabled bearer , priority 0 [ 227.283796][T10388] syzkaller0: entered promiscuous mode [ 227.295881][T10388] syzkaller0: entered allmulticast mode [ 227.328779][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.342285][ T4607] bridge0: port 2(bond7) entered disabled state [ 227.552770][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 227.574287][T10402] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1120'. [ 227.655484][T10380] tipc: Resetting bearer [ 227.750062][T10380] tipc: Disabling bearer [ 227.770523][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 228.019712][T10414] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 228.035605][T10414] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 228.368721][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 228.457762][T10435] lo speed is unknown, defaulting to 1000 [ 228.490776][T10435] wlan1 speed is unknown, defaulting to 1000 [ 228.821802][T10450] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.956706][T10450] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.025093][T10450] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.027584][T10457] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 229.132766][T10450] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.408821][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 229.468467][ T3477] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.517640][ T3477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.561175][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.570472][ T10] TC_ACT_REPEAT abuse ? [ 229.655060][ T4607] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.667733][T10478] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 229.694851][T10478] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 229.717149][T10478] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 230.082602][T10490] netlink: 'syz.4.1145': attribute type 13 has an invalid length. [ 230.118974][T10490] netlink: 'syz.4.1145': attribute type 17 has an invalid length. [ 230.145398][ T36] TC_ACT_REPEAT abuse ? [ 230.159629][T10487] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1144'. [ 230.172675][T10498] 8021q: VLANs not supported on nlmon0 [ 230.210103][ C1] TC_ACT_REPEAT abuse ? [ 230.407160][T10490] syz_tun: left promiscuous mode [ 230.448789][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 230.456486][T10490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.530891][T10502] lo speed is unknown, defaulting to 1000 [ 230.560900][T10502] wlan1 speed is unknown, defaulting to 1000 [ 230.750597][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 230.828236][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 231.161435][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 231.474418][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 231.488863][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 231.516220][T10551] sctp: [Deprecated]: syz.0.1162 (pid 10551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.516220][T10551] Use struct sctp_sack_info instead [ 231.729343][ C0] TC_ACT_REPEAT abuse ? [ 232.291597][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1166'. [ 232.406493][T10570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1166'. [ 232.528734][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 233.568685][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 234.218984][ C1] TC_ACT_REPEAT abuse ? [ 234.608693][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.184268][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'. [ 235.345627][ T12] TC_ACT_REPEAT abuse ? [ 235.350185][ T3507] TC_ACT_REPEAT abuse ? [ 235.648685][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 235.698309][T10610] lo speed is unknown, defaulting to 1000 [ 235.836600][T10610] wlan1 speed is unknown, defaulting to 1000 [ 236.688670][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 237.285528][T10670] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 237.298748][T10670] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1186'. [ 237.511658][T10648] lo speed is unknown, defaulting to 1000 [ 237.545974][T10648] wlan1 speed is unknown, defaulting to 1000 [ 237.728664][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 237.767906][T10676] erspan0: left allmulticast mode [ 237.792842][T10676] sit0: left promiscuous mode [ 238.004003][T10635] rdma_rxe: rxe_newlink: failed to add wlan1 [ 238.218387][T10699] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1190'. [ 238.323312][T10676] vlan0: left promiscuous mode [ 238.338356][T10676] veth0_vlan: left promiscuous mode [ 238.357478][T10676] veth1_vlan: left allmulticast mode [ 238.768666][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 238.776515][T10715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.785737][T10676] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 238.857241][T10676] gretap1: left promiscuous mode [ 238.867159][T10676] bond5: left promiscuous mode [ 238.874820][T10676] wireguard0: left promiscuous mode [ 238.887055][T10676] geneve2: left promiscuous mode [ 238.893033][T10676] geneve2: left allmulticast mode [ 239.033176][T10705] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1192'. [ 239.051667][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.061897][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 41059 - 0 [ 239.075078][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 54877 - 0 [ 239.088095][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.097658][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 41059 - 0 [ 239.107203][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 54877 - 0 [ 239.159398][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.178525][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 41059 - 0 [ 239.238722][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 54877 - 0 [ 239.295441][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.307385][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 41059 - 0 [ 239.316877][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 54877 - 0 [ 239.596367][T10728] netlink: 'syz.4.1198': attribute type 1 has an invalid length. [ 239.605270][T10728] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1198'. [ 239.808830][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 239.994602][T10740] tc_dump_action: action bad kind [ 240.021128][T10740] lo speed is unknown, defaulting to 1000 [ 240.028238][T10740] wlan1 speed is unknown, defaulting to 1000 [ 240.340781][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 240.432218][T10747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1203'. [ 240.617651][T10754] lo speed is unknown, defaulting to 1000 [ 240.627899][T10754] wlan1 speed is unknown, defaulting to 1000 [ 240.848747][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.003983][T10765] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 241.269241][T10783] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1206'. [ 241.275851][T10776] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 241.387877][T10776] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 241.425625][T10776] bond9: (slave vti0): making interface the new active one [ 241.441636][T10789] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 241.451178][T10776] bond9: (slave vti0): Enslaving as an active interface with an up link [ 241.465889][T10789] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1211'. [ 241.813211][T10792] lo speed is unknown, defaulting to 1000 [ 241.888733][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.899312][T10807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1215'. [ 241.924826][T10802] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.952479][T10792] wlan1 speed is unknown, defaulting to 1000 [ 241.993340][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 242.018286][T10802] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.058799][T10807] bond7: left allmulticast mode [ 242.063917][T10807] bond7: left promiscuous mode [ 242.077852][T10807] bridge0: port 2(bond7) entered disabled state [ 242.115189][T10807] batadv0: left allmulticast mode [ 242.160384][T10807] batadv0: left promiscuous mode [ 242.187464][T10807] bridge0: port 1(batadv0) entered disabled state [ 242.398438][T10802] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.551714][T10802] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.911788][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.928701][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.172525][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.222241][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.415717][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1220'. [ 243.447805][T10846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1220'. [ 243.468893][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.968688][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.988375][T10862] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 244.028930][T10862] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1224'. [ 244.128412][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.156217][T10874] openvswitch: netlink: IP tunnel dst address not specified [ 244.157351][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.223008][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.298940][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.333845][T10871] can: request_module (can-proto-0) failed. [ 244.349084][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.399003][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.414492][T10882] syzkaller0: entered promiscuous mode [ 244.422876][T10882] syzkaller0: entered allmulticast mode [ 244.433037][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.456128][T10882] tipc: Enabled bearer , priority 0 [ 244.486534][T10882] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 244.495742][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.528235][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.544752][T10881] tipc: Resetting bearer [ 244.566010][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.575963][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.590476][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.599000][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.615657][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.624596][T10881] tipc: Disabling bearer [ 244.662829][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.677713][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.737955][T10884] lo speed is unknown, defaulting to 1000 [ 244.739283][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.795151][T10884] wlan1 speed is unknown, defaulting to 1000 [ 244.831940][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 244.850322][T10898] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 244.884929][T10870] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 245.008797][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 245.234031][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 245.355001][T10914] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1236'. [ 245.579685][T10928] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 245.600428][T10928] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1239'. [ 245.974483][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 246.048773][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 246.374550][T10954] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 246.391263][T10954] macvtap1: entered allmulticast mode [ 246.415921][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 246.432789][T10954] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 246.552655][T10954] batman_adv: batadv0: Adding interface: macvtap1 [ 246.565088][T10954] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 246.615042][T10954] batman_adv: batadv0: Interface activated: macvtap1 [ 246.646734][T10959] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 246.655527][T10959] netlink: 'syz.1.1244': attribute type 2 has an invalid length. [ 246.683505][T10970] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 246.875619][T10984] ip6erspan0: entered promiscuous mode [ 247.088805][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 247.207049][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1252'. [ 247.251525][T10994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1252'. [ 247.560771][T11007] syzkaller0: entered promiscuous mode [ 247.601956][T11007] syzkaller0: entered allmulticast mode [ 248.128844][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.366937][T11044] tipc: Enabled bearer , priority 0 [ 248.375660][T11044] syzkaller0: entered promiscuous mode [ 248.388369][T11044] syzkaller0: entered allmulticast mode [ 248.443916][T11044] tipc: Resetting bearer [ 248.456318][T11042] tipc: Resetting bearer [ 248.491965][T11042] tipc: Disabling bearer [ 248.700402][T11058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.831834][T11060] __nla_validate_parse: 3 callbacks suppressed [ 248.831855][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 248.865800][T11063] lo speed is unknown, defaulting to 1000 [ 248.885972][T11068] netlink: 'syz.1.1269': attribute type 13 has an invalid length. [ 248.943900][T11072] netlink: 'syz.3.1271': attribute type 9 has an invalid length. [ 248.959632][T11068] netlink: 'syz.1.1269': attribute type 17 has an invalid length. [ 249.044237][T11063] wlan1 speed is unknown, defaulting to 1000 [ 249.123056][T11069] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 249.158290][T11069] macvtap1: entered allmulticast mode [ 249.168705][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.188937][T11069] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 249.201932][T11069] batman_adv: batadv0: Adding interface: macvtap1 [ 249.208398][T11069] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.283131][T11069] batman_adv: batadv0: Interface activated: macvtap1 [ 249.335453][T11068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.492942][T11090] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1273'. [ 249.947562][T11107] netlink: 'syz.3.1279': attribute type 7 has an invalid length. [ 249.956600][T11107] netlink: 'syz.3.1279': attribute type 8 has an invalid length. [ 249.966206][T11107] netlink: 'syz.3.1279': attribute type 4 has an invalid length. [ 249.985457][T11107] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1279'. [ 250.208656][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 250.453810][T11128] syzkaller0: entered promiscuous mode [ 250.466763][T11128] syzkaller0: entered allmulticast mode [ 250.558997][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1284'. [ 251.075260][T11158] netlink: 'syz.3.1291': attribute type 12 has an invalid length. [ 251.103156][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 251.135763][T11162] tipc: Enabled bearer , priority 18 [ 251.185902][T11164] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1294'. [ 251.248812][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.474867][T11176] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 251.522957][T11179] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 251.735955][T11200] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1302'. [ 251.988280][T11209] netlink: 'syz.4.1305': attribute type 12 has an invalid length. [ 252.033996][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 252.233656][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 252.288808][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 252.301652][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 252.819933][T11255] rdma_rxe: rxe_newlink: failed to add wlan1 [ 253.064522][T11267] netlink: 'syz.3.1319': attribute type 3 has an invalid length. [ 253.114411][T11269] !: renamed from dummy0 [ 253.142876][T11268] netlink: 'syz.0.1323': attribute type 26 has an invalid length. [ 253.328805][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 253.992987][T11324] __nla_validate_parse: 5 callbacks suppressed [ 253.993007][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 254.085369][T11331] netlink: 'syz.0.1332': attribute type 178 has an invalid length. [ 254.368802][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.447761][T11333] syzkaller1: entered promiscuous mode [ 254.467699][T11333] syzkaller1: entered allmulticast mode [ 254.540611][T11352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1335'. [ 255.408775][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.520285][T11388] netlink: 'syz.3.1347': attribute type 3 has an invalid length. [ 255.568502][T11388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1347'. [ 255.640951][T11399] netlink: 'syz.4.1351': attribute type 15 has an invalid length. [ 255.690707][T11399] netlink: 'syz.4.1351': attribute type 10 has an invalid length. [ 255.711323][T11399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1351'. [ 255.735495][T11399] dummy0: entered promiscuous mode [ 255.755719][T11399] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 255.853881][T11404] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 256.171177][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 256.220251][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 256.253856][T11420] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 256.275091][T11404] batadv_slave_0: entered promiscuous mode [ 256.375575][T11425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1355'. [ 256.448789][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.477935][T11422] bond11: (slave geneve3): making interface the new active one [ 256.546522][T11422] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 256.555949][T11288] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 256.656471][T11425] 8021q: adding VLAN 0 to HW filter on device bond11 [ 256.695206][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.731305][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.757419][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.782869][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.803253][T11435] syzkaller0: entered promiscuous mode [ 256.810599][T11435] syzkaller0: entered allmulticast mode [ 256.839687][T11443] dvmrp1: entered allmulticast mode [ 256.878040][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 257.188082][T11455] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 257.221677][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 257.285769][T11455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.304097][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 257.330904][T11468] pim6reg: entered allmulticast mode [ 257.434405][T11450] bond4: entered promiscuous mode [ 257.444102][T11450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.488770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.664882][T11450] bond4 (unregistering): Released all slaves [ 257.693423][T11468] pim6reg: left allmulticast mode [ 257.752959][T11480] tipc: Enabling of bearer rejected, failed to enable media [ 258.099975][T11523] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 258.528951][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 258.603288][T11549] IPVS: set_ctl: invalid protocol: 8 172.30.0.2:20000 [ 258.626131][T11553] syz0: rxe_newlink: already configured on wlan1 [ 259.072450][T11566] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 259.109383][T11566] __nla_validate_parse: 2 callbacks suppressed [ 259.109402][T11566] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1391'. [ 259.232736][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 259.568747][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.657400][T11598] rdma_rxe: rxe_newlink: failed to add wlan1 [ 259.810892][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 259.870228][T11601] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 259.932570][T11603] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 260.101490][T11609] lo speed is unknown, defaulting to 1000 [ 260.135951][T11609] wlan1 speed is unknown, defaulting to 1000 [ 260.278376][T11617] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1403'. [ 260.301063][T11619] lo speed is unknown, defaulting to 1000 [ 260.608811][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.447299][T11638] lo speed is unknown, defaulting to 1000 [ 261.648738][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.092073][T11619] wlan1 speed is unknown, defaulting to 1000 [ 262.316756][T11657] netlink: 'syz.2.1407': attribute type 2 has an invalid length. [ 262.688736][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.987471][T11638] wlan1 speed is unknown, defaulting to 1000 [ 263.481112][T11695] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1416'. [ 263.530886][T11695] gretap0: entered promiscuous mode [ 263.650301][T11671] rdma_rxe: rxe_newlink: failed to add wlan1 [ 263.728844][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.759215][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1419'. [ 264.498531][T10800] udevd[10800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 264.645981][T11730] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1422'. [ 264.755567][T11740] netlink: 'syz.0.1423': attribute type 5 has an invalid length. [ 264.768668][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.432949][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 265.786906][T11768] rdma_rxe: rxe_newlink: failed to add wlan1 [ 265.808663][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.686268][T11803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 266.848878][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.582307][T11853] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1452'. [ 267.888669][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.144447][T11879] rdma_rxe: rxe_newlink: failed to add wlan1 [ 268.385939][T11888] bond0: entered promiscuous mode [ 268.452187][T11888] bond0: left promiscuous mode [ 268.470545][T11895] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 268.617168][T11899] bond6: (slave geneve3): making interface the new active one [ 268.625952][T11899] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 268.648238][T11305] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 268.691459][T11305] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 268.703213][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1470'. [ 268.712479][T11305] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 268.723862][T11305] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 268.928735][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.992113][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1473'. [ 269.004903][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 269.160921][T11920] lo speed is unknown, defaulting to 1000 [ 269.384971][T11920] wlan1 speed is unknown, defaulting to 1000 [ 269.657457][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'. [ 269.720112][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 269.844944][T11954] netlink: 'syz.0.1482': attribute type 9 has an invalid length. [ 269.968704][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 270.165253][T11972] tipc: Enabling of bearer rejected, failed to enable media [ 270.182863][T11972] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1489'. [ 270.689190][T11990] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1495'. [ 270.739622][T11993] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 270.799222][T11992] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 271.008956][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.361072][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 271.375356][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 271.386579][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 271.414722][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 271.442541][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 271.471461][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 271.600276][T12027] netlink: 'syz.3.1503': attribute type 58 has an invalid length. [ 271.675959][T12029] bond0: entered promiscuous mode [ 271.708678][T12029] bond_slave_0: entered promiscuous mode [ 271.724132][T12029] bond_slave_1: entered promiscuous mode [ 271.736073][T12029] team0: entered promiscuous mode [ 271.741642][T12029] team_slave_0: entered promiscuous mode [ 271.747762][T12029] team_slave_1: entered promiscuous mode [ 271.759162][T12029] bond0: left promiscuous mode [ 271.763985][T12029] bond_slave_0: left promiscuous mode [ 271.787331][T12029] bond_slave_1: left promiscuous mode [ 271.801903][T12029] team0: left promiscuous mode [ 271.818992][T12029] team_slave_0: left promiscuous mode [ 271.824947][T12029] team_slave_1: left promiscuous mode [ 272.048787][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 273.088767][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.128659][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.644396][T12157] FAULT_INJECTION: forcing a failure. [ 274.644396][T12157] name failslab, interval 1, probability 0, space 0, times 1 [ 274.657820][T12157] CPU: 1 UID: 0 PID: 12157 Comm: syz.4.1556 Not tainted syzkaller #0 PREEMPT(full) [ 274.657846][T12157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.657865][T12157] Call Trace: [ 274.657871][T12157] [ 274.657878][T12157] dump_stack_lvl+0x189/0x250 [ 274.657900][T12157] ? __pfx____ratelimit+0x10/0x10 [ 274.657916][T12157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.657934][T12157] ? __pfx__printk+0x10/0x10 [ 274.657955][T12157] ? __lock_acquire+0xab9/0xd20 [ 274.657983][T12157] should_fail_ex+0x414/0x560 [ 274.658007][T12157] should_failslab+0xa8/0x100 [ 274.658029][T12157] kmem_cache_alloc_noprof+0x73/0x3c0 [ 274.658048][T12157] ? skb_clone+0x212/0x3a0 [ 274.658069][T12157] skb_clone+0x212/0x3a0 [ 274.658089][T12157] __netlink_deliver_tap+0x404/0x850 [ 274.658113][T12157] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.658128][T12157] netlink_deliver_tap+0x19c/0x1b0 [ 274.658143][T12157] netlink_unicast+0x7fa/0x9e0 [ 274.658171][T12157] ? __pfx_netlink_unicast+0x10/0x10 [ 274.658204][T12157] ? netlink_sendmsg+0x642/0xb30 [ 274.658223][T12157] ? skb_put+0x11b/0x210 [ 274.658248][T12157] netlink_sendmsg+0x805/0xb30 [ 274.658281][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.658299][T12157] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.658315][T12157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.658330][T12157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.658345][T12157] __sock_sendmsg+0x21c/0x270 [ 274.658369][T12157] ____sys_sendmsg+0x505/0x830 [ 274.658390][T12157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.658425][T12157] ? import_iovec+0x74/0xa0 [ 274.658453][T12157] ___sys_sendmsg+0x21f/0x2a0 [ 274.658480][T12157] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.658529][T12157] ? __fget_files+0x2a/0x420 [ 274.658542][T12157] ? __fget_files+0x3a0/0x420 [ 274.658572][T12157] __x64_sys_sendmsg+0x19b/0x260 [ 274.658597][T12157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.658639][T12157] ? __pfx_ksys_write+0x10/0x10 [ 274.658664][T12157] ? rcu_is_watching+0x15/0xb0 [ 274.658691][T12157] ? do_syscall_64+0xbe/0x3b0 [ 274.658717][T12157] do_syscall_64+0xfa/0x3b0 [ 274.658737][T12157] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.658757][T12157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.658777][T12157] ? clear_bhb_loop+0x60/0xb0 [ 274.658803][T12157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.658822][T12157] RIP: 0033:0x7f5188b8ebe9 [ 274.658848][T12157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.658865][T12157] RSP: 002b:00007f51899ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.658892][T12157] RAX: ffffffffffffffda RBX: 00007f5188dc5fa0 RCX: 00007f5188b8ebe9 [ 274.658907][T12157] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 274.658920][T12157] RBP: 00007f51899ff090 R08: 0000000000000000 R09: 0000000000000000 [ 274.658932][T12157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.658943][T12157] R13: 00007f5188dc6038 R14: 00007f5188dc5fa0 R15: 00007fff4b464f78 [ 274.658976][T12157] [ 275.168796][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 275.481014][T12084] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 275.487253][T12084] syzkaller0: linktype set to 768 [ 275.676329][T12165] __nla_validate_parse: 4 callbacks suppressed [ 275.676349][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'. [ 275.741518][T12164] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 275.775323][T12164] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 275.899258][T12164] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 275.921902][T12164] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 276.098473][T12164] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.124120][T12164] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 276.131825][T12188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1565'. [ 276.158309][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1565'. [ 276.172515][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 276.208810][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 276.230307][T12164] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.242596][T12164] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 276.279287][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'. [ 276.300746][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 276.397858][T11288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.424408][T11288] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.467318][T11288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.494939][T11288] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.580688][T11288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.633238][T11288] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.676208][T11288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 276.713622][T11288] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.780495][T12211] geneve4: entered promiscuous mode [ 276.832286][T12211] geneve4: entered allmulticast mode [ 277.064577][T12208] lo speed is unknown, defaulting to 1000 [ 277.227090][T12208] wlan1 speed is unknown, defaulting to 1000 [ 277.248907][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.323422][T12236] tipc: Started in network mode [ 277.328482][T12236] tipc: Node identity 6e259617af9c, cluster identity 4711 [ 277.342311][T12236] tipc: Enabled bearer , priority 0 [ 277.359976][T12236] syzkaller0: entered promiscuous mode [ 277.377416][T12236] syzkaller0: entered allmulticast mode [ 277.520358][T12247] tipc: Resetting bearer [ 278.135663][T12235] tipc: Resetting bearer [ 278.181582][T12235] tipc: Disabling bearer [ 278.288658][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.901304][T12307] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 278.921546][T12307] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1597'. [ 279.044292][T12304] syzkaller0: entered promiscuous mode [ 279.047134][T12315] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 279.061969][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 279.084763][T12304] syzkaller0: entered allmulticast mode [ 279.120181][T12315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1599'. [ 279.328658][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 279.646985][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 280.372081][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.409119][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.435588][T12363] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 281.443651][T12363] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1611'. [ 281.454762][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 281.515064][T12370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1612'. [ 281.955667][T12394] sit0: entered promiscuous mode [ 281.996949][T12394] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 282.031110][T12400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1619'. [ 282.036823][T12394] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1616'. [ 282.314407][T12399] netlink: 'syz.3.1618': attribute type 16 has an invalid length. [ 282.358398][T12409] wlan1 speed is unknown, defaulting to 1000 [ 282.378874][T12399] netlink: 'syz.3.1618': attribute type 17 has an invalid length. [ 282.448904][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 282.510545][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 282.543876][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 282.579603][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 282.606250][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 282.795927][T12439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1626'. [ 282.832148][T12434] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 282.979571][T12434] bond2 (unregistering): Released all slaves [ 283.178441][T12456] netlink: 'syz.1.1627': attribute type 7 has an invalid length. [ 283.183303][T12453] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 283.194267][T12453] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1629'. [ 283.261493][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 283.475240][T12457] wlan1 speed is unknown, defaulting to 1000 [ 283.488669][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 284.486358][T12499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1639'. [ 284.528655][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 284.733387][T12515] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 284.758788][T12515] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1640'. [ 285.568813][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.577773][T12584] __nla_validate_parse: 3 callbacks suppressed [ 286.577796][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 286.608648][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.632348][T12583] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1654'. [ 287.543858][T12612] atomic_op ffff888032473198 conn xmit_atomic 0000000000000000 [ 287.648659][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 287.824843][T12621] _ÐZ`Ô€@S: entered promiscuous mode [ 288.090616][T12641] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1668'. [ 288.126603][T12635] netem: change failed [ 288.404733][T12656] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1669'. [ 288.444955][T12656] netlink: 245 bytes leftover after parsing attributes in process `syz.1.1669'. [ 288.474588][T12663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1669'. [ 288.688787][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.915835][T12669] wlan1 speed is unknown, defaulting to 1000 [ 289.014762][T12690] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 289.271815][T12698] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 289.282960][T12698] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1677'. [ 289.607977][T12710] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 289.619844][T12701] wlan1 speed is unknown, defaulting to 1000 [ 289.728806][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 290.044063][T12714] dvmrp1: entered allmulticast mode [ 290.082613][T12728] bpq0: entered promiscuous mode [ 290.294933][T12733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1685'. [ 290.761195][T12745] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 290.769109][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 290.811291][T12745] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1690'. [ 291.755161][T12784] tap0: tun_chr_ioctl cmd 1074812118 [ 291.775157][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 291.808688][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.828222][T12784] vlan3: entered promiscuous mode [ 291.839019][T12784] macvtap0: entered promiscuous mode [ 291.941764][T12789] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 291.958104][T12792] rdma_rxe: rxe_newlink: failed to add wlan1 [ 291.966666][T12789] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1703'. [ 292.145685][T12799] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1706'. [ 292.780100][T12828] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 292.848745][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 292.915769][T12834] rdma_rxe: rxe_newlink: failed to add wlan1 [ 293.074540][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 293.272155][T12844] netlink: 'syz.1.1719': attribute type 13 has an invalid length. [ 293.303110][T12844] netlink: 'syz.1.1719': attribute type 17 has an invalid length. [ 293.324689][T12844] gretap0: left promiscuous mode [ 293.372570][T12844] sit0: left promiscuous mode [ 293.509616][T12844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.812137][T12868] tipc: Enabled bearer , priority 0 [ 293.888648][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 293.902634][T12868] syzkaller0: entered promiscuous mode [ 293.908271][T12868] syzkaller0: entered allmulticast mode [ 293.961334][T12879] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 293.977990][T12879] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1732'. [ 293.980196][T12868] tipc: Resetting bearer [ 293.997301][T12880] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 294.043863][T12863] tipc: Resetting bearer [ 294.049934][T12880] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1732'. [ 294.096850][T12863] tipc: Disabling bearer [ 294.261446][T12891] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 294.314556][T12894] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1736'. [ 294.741826][T12909] wlan1 speed is unknown, defaulting to 1000 [ 294.928787][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.979213][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'. [ 295.156813][T12925] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1744'. [ 295.664228][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 295.968800][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 296.319124][T12971] rdma_rxe: rxe_newlink: failed to add wlan1 [ 296.781427][T12963] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 297.008692][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.217683][T12980] dummy0: left promiscuous mode [ 297.243389][T12980] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 297.257213][T12980] geneve2: left promiscuous mode [ 297.559592][T13011] __nla_validate_parse: 1 callbacks suppressed [ 297.559613][T13011] netlink: 86 bytes leftover after parsing attributes in process `syz.1.1764'. [ 297.729226][T13023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1769'. [ 297.786854][T13028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1770'. [ 297.892571][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 297.920218][T13036] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 297.935871][T13036] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1772'. [ 297.990016][T13036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1772'. [ 298.048727][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 298.156347][T13047] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1775'. [ 298.369280][ C1] [ 298.371660][ C1] ================================ [ 298.376780][ C1] WARNING: inconsistent lock state [ 298.381943][ C1] syzkaller #0 Not tainted [ 298.386371][ C1] -------------------------------- [ 298.391483][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 298.398326][ C1] syz-executor/5860 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 298.404833][ C1] ffff88805a4c20a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 298.413295][ C1] {SOFTIRQ-ON-W} state was registered at: [ 298.419007][ C1] lock_acquire+0x120/0x360 [ 298.423620][ C1] _raw_spin_lock+0x2e/0x40 [ 298.428220][ C1] tunnel_key_init+0xd10/0x14d0 [ 298.433162][ C1] tcf_action_init_1+0x460/0x6d0 [ 298.438201][ C1] tcf_action_init+0x2cf/0xab0 [ 298.443051][ C1] tc_ctl_action+0x430/0xbd0 [ 298.447733][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 298.452753][ C1] netlink_rcv_skb+0x205/0x470 [ 298.457604][ C1] netlink_unicast+0x82c/0x9e0 [ 298.462553][ C1] netlink_sendmsg+0x805/0xb30 [ 298.467405][ C1] __sock_sendmsg+0x21c/0x270 [ 298.472174][ C1] ____sys_sendmsg+0x505/0x830 [ 298.477110][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 298.481877][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 298.486904][ C1] do_syscall_64+0xfa/0x3b0 [ 298.491493][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.497490][ C1] irq event stamp: 1231614 [ 298.501922][ C1] hardirqs last enabled at (1231614): [] irqentry_exit+0x74/0x90 [ 298.511953][ C1] hardirqs last disabled at (1231613): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 298.522576][ C1] softirqs last enabled at (1231606): [] __irq_exit_rcu+0xca/0x1f0 [ 298.532328][ C1] softirqs last disabled at (1231609): [] __irq_exit_rcu+0xca/0x1f0 [ 298.541930][ C1] [ 298.541930][ C1] other info that might help us debug this: [ 298.550011][ C1] Possible unsafe locking scenario: [ 298.550011][ C1] [ 298.557484][ C1] CPU0 [ 298.560801][ C1] ---- [ 298.564084][ C1] lock(&p->tcfa_lock); [ 298.568336][ C1] [ 298.571792][ C1] lock(&p->tcfa_lock); [ 298.576235][ C1] [ 298.576235][ C1] *** DEADLOCK *** [ 298.576235][ C1] [ 298.584397][ C1] 2 locks held by syz-executor/5860: [ 298.589700][ C1] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: path_init+0x13f/0x1350 [ 298.598856][ C1] #1: ffffc90000a08be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 298.608215][ C1] [ 298.608215][ C1] stack backtrace: [ 298.614113][ C1] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 298.614134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.614145][ C1] Call Trace: [ 298.614151][ C1] [ 298.614163][ C1] dump_stack_lvl+0x189/0x250 [ 298.614186][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.614206][ C1] ? __pfx__printk+0x10/0x10 [ 298.614229][ C1] ? print_lock_name+0xde/0x100 [ 298.614253][ C1] print_usage_bug+0x297/0x2e0 [ 298.614270][ C1] valid_state+0xc3/0xf0 [ 298.614285][ C1] mark_lock_irq+0x36/0x390 [ 298.614298][ C1] ? sched_clock_cpu+0x74/0x430 [ 298.614324][ C1] ? clockevents_program_event+0x24d/0x360 [ 298.614349][ C1] mark_lock+0x11b/0x190 [ 298.614364][ C1] __lock_acquire+0x680/0xd20 [ 298.614391][ C1] ? est_timer+0xd4/0x9f0 [ 298.614415][ C1] lock_acquire+0x120/0x360 [ 298.614437][ C1] ? est_timer+0xd4/0x9f0 [ 298.614461][ C1] ? irqentry_exit+0x74/0x90 [ 298.614481][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.614498][ C1] _raw_spin_lock+0x2e/0x40 [ 298.614522][ C1] ? est_timer+0xd4/0x9f0 [ 298.614543][ C1] est_timer+0xd4/0x9f0 [ 298.614569][ C1] ? lock_acquire+0x175/0x360 [ 298.614593][ C1] ? __pfx_est_timer+0x10/0x10 [ 298.614620][ C1] call_timer_fn+0x17e/0x5f0 [ 298.614642][ C1] ? __pfx_est_timer+0x10/0x10 [ 298.614664][ C1] ? call_timer_fn+0xbe/0x5f0 [ 298.614686][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 298.614712][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.614736][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.614750][ C1] ? __pfx_est_timer+0x10/0x10 [ 298.614773][ C1] __run_timer_base+0x61a/0x860 [ 298.614793][ C1] ? raise_softirq_irqoff+0x5c/0x100 [ 298.614816][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 298.614836][ C1] ? skb_xmit_done+0x109/0x280 [ 298.614855][ C1] ? __lock_acquire+0xab9/0xd20 [ 298.614880][ C1] run_timer_softirq+0xb7/0x180 [ 298.614902][ C1] handle_softirqs+0x283/0x870 [ 298.614919][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 298.614937][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 298.614955][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 298.614976][ C1] __irq_exit_rcu+0xca/0x1f0 [ 298.614991][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 298.615006][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 298.615027][ C1] ? __common_interrupt+0x161/0x1f0 [ 298.615053][ C1] irq_exit_rcu+0x9/0x30 [ 298.615066][ C1] common_interrupt+0xbb/0xe0 [ 298.615087][ C1] [ 298.615093][ C1] [ 298.615099][ C1] asm_common_interrupt+0x26/0x40 [ 298.615115][ C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150 [ 298.615132][ C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 1b 89 14 f6 e8 b6 e2 4b f6 fb bf 01 00 00 00 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 298.615147][ C1] RSP: 0018:ffffc9000405f6e0 EFLAGS: 00000282 [ 298.615178][ C1] RAX: 09c6c775f9268200 RBX: 0000000000000000 RCX: 09c6c775f9268200 [ 298.615190][ C1] RDX: 0000000000000000 RSI: ffffffff8d9b95f7 RDI: 0000000000000001 [ 298.615200][ C1] RBP: ffffc9000405f780 R08: ffffffff8fa38c37 R09: 1ffffffff1f47186 [ 298.615213][ C1] R10: dffffc0000000000 R11: fffffbfff1f47187 R12: 0000000000000000 [ 298.615224][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200080bedc [ 298.615244][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 298.615262][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 298.615280][ C1] irqentry_exit+0x6f/0x90 [ 298.615295][ C1] asm_common_interrupt+0x26/0x40 [ 298.615310][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17d/0x1c0 [ 298.615327][ C1] Code: ff 4d 85 ed 75 16 e8 92 48 87 ff eb 15 e8 8b 48 87 ff e8 16 e5 41 09 4d 85 ed 74 ea e8 7c 48 87 ff fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 66 43 c7 44 27 09 00 00 43 c6 44 27 0b 00 [ 298.615341][ C1] RSP: 0018:ffffc9000405f840 EFLAGS: 00000293 [ 298.615354][ C1] RAX: ffffffff82386314 RBX: 0000000000000000 RCX: ffff88807bc35a00 [ 298.615365][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.615374][ C1] RBP: ffffc9000405f8f8 R08: ffffffff8fa38c37 R09: 1ffffffff1f47186 [ 298.615386][ C1] R10: dffffc0000000000 R11: fffffbfff1f47187 R12: dffffc0000000000 [ 298.615398][ C1] R13: 0000000000000200 R14: ffffffff82383d59 R15: 1ffff9200080bf08 [ 298.615411][ C1] ? path_init+0x749/0x1350 [ 298.615427][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 298.615447][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 298.615462][ C1] ? path_init+0x13f/0x1350 [ 298.615476][ C1] ? __kernel_text_address+0xd/0x40 [ 298.615499][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.615521][ C1] path_init+0x749/0x1350 [ 298.615541][ C1] path_lookupat+0x27/0x430 [ 298.615561][ C1] filename_lookup+0x212/0x570 [ 298.615576][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 298.615597][ C1] ? getname_flags+0xb8/0x540 [ 298.615614][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 298.615642][ C1] ? __might_fault+0xb0/0x130 [ 298.615668][ C1] vfs_statx+0xf8/0x550 [ 298.615685][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 298.615699][ C1] ? strncpy_from_user+0x150/0x290 [ 298.615721][ C1] ? getname_flags+0x1e5/0x540 [ 298.615737][ C1] vfs_fstatat+0x118/0x170 [ 298.615753][ C1] __x64_sys_newfstatat+0x116/0x190 [ 298.615771][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 298.615796][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 298.615820][ C1] ? do_syscall_64+0xbe/0x3b0 [ 298.615838][ C1] do_syscall_64+0xfa/0x3b0 [ 298.615854][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.615869][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.615885][ C1] ? clear_bhb_loop+0x60/0xb0 [ 298.615902][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.615918][ C1] RIP: 0033:0x7f745e18d3fa [ 298.615932][ C1] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 298.615946][ C1] RSP: 002b:00007ffe31dc6bf8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 298.615961][ C1] RAX: ffffffffffffffda RBX: 00007f745e211c05 RCX: 00007f745e18d3fa [ 298.615972][ C1] RDX: 00007ffe31dc6c20 RSI: 00007ffe31dc6cb0 RDI: 00000000ffffff9c [ 298.615984][ C1] RBP: 00007ffe31dc6cb0 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=352 sent=0 n=-1 (errno 32: Broken pipe) [ 298.615994][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffe31dc7d40 [ 298.616004][ C1] R13: 00007f745e211c05 R14: 0000000000048cc3 R15: 00007ffe31dc7d80 [ 298.616022][ C1] [ 299.088633][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.796199][T11290] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.818902][T11290] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 299.894034][T11290] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.904767][T11290] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 300.002697][T11290] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 300.013028][T11290] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 300.081891][T11290] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 300.091762][T11290] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 300.128776][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 300.310674][T11290] bond6 (unregistering): (slave geneve3): Releasing active interface [ 300.507087][T11290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.517345][T11290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.533777][T11290] bond0 (unregistering): (slave team0): Releasing backup interface [ 300.546195][T11290] bond0 (unregistering): Released all slaves [ 300.559623][T11290] bond1 (unregistering): Released all slaves [ 300.572346][T11290] bond2 (unregistering): Released all slaves [ 300.666953][T11290] bond3 (unregistering): Released all slaves [ 300.677053][T11290] bond4 (unregistering): Released all slaves [ 300.763726][T11290] bond5 (unregistering): Released all slaves [ 300.773992][T11290] bond6 (unregistering): Released all slaves [ 300.867032][T11290] tipc: Disabling bearer [ 300.873403][T11290] tipc: Disabling bearer [ 300.888059][T11290] tipc: Left network mode [ 301.165088][T11290] hsr_slave_0: left promiscuous mode [ 301.171250][T11290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.189148][T11290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.204610][T11290] pimreg (unregistering): left allmulticast mode [ 301.424195][T11290] team0 (unregistering): Port device team_slave_1 removed [ 301.458374][T11290] team0 (unregistering): Port device team_slave_0 removed [ 301.946750][T11290] IPVS: stop unused estimator thread 0... [ 302.377404][T11290] dvmrp1 (unregistering): left allmulticast mode [ 302.520817][T11290] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 302.530552][T11290] bond0 (unregistering): Released all slaves [ 302.542159][T11290] bond1 (unregistering): Released all slaves [ 302.591524][T11290] tipc: Left network mode [ 302.880319][T11290] hsr_slave_0: left promiscuous mode [ 302.886161][T11290] hsr_slave_1: left promiscuous mode [ 303.652347][T11290] IPVS: stop unused estimator thread 0...